Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
complies with the Cybersecurity Law of the People's Republic of China, and is normally disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-013_en.pdf - https://jvn.jp/vu/JVNVU97846038/ - https://www.cisa.gov/news-events/ics-advisories/icsa-25-266-02
CVE ID: CVE-2025-8532 State: PUBLISHED Published: 2025-09-19T14:12:21.442Z Last Updated: 2025-09-30T13:18:19.705Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N) Vendors: Bimser Solution Software Trade Inc. Products: eBA Document and Workflow Management System Problem Types: CWE-639, CWE-285 Description: Authorization Bypass Through User-Controlled Key, Improper Authorization vulnerability in Bimser Solution Software Trade Inc. EBA Document and Workflow Management System allows Forceful Browsing.This issue affects eBA Document and Workflow Management System: from 6.7.164 before 6.7.166. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom
t System: from 6.7.164 before 6.7.166. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0280
CVE ID: CVE-2025-8533 State: PUBLISHED Published: 2025-08-07T09:59:12.324Z Last Updated: 2025-08-07T13:27:42.989Z Vendors: Flexibits Products: Fantastical Problem Types: CWE-863 Description: A vulnerability was identified in the XPC services of Fantastical. The services failed to implement proper client authorization checks in its listener:shouldAcceptNewConnection method, unconditionally accepting requests from any local process. As a result, any local, unprivileged process could connect to the XPC service and access its methods. This issue has been resolved in version 4.0.16. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/08/CVE-2025-8533 - h
.16. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/08/CVE-2025-8533 - https://flexibits.com/fantastical
CVE ID: CVE-2025-8534 State: PUBLISHED Published: 2025-08-04T23:32:08.491Z Last Updated: 2025-08-05T15:26:03.566Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: libtiff Problem Types: CWE-476, CWE-404 Description: A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PS_Lvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be u
tack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 6ba36f159fd396ad11bf6b7874554197736ecc8b. It is recommended to apply a patch to fix this issue. One of the maintainers explains, that "[t]his error only occurs if DEFER_STRILE_LOAD (defer-strile-load:BOOL=ON) or TIFFOpen( .. "rD") option is used." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318664 - https://vuldb.com/?ctiid.318664 - https://vuldb.com/?submit.617831 - https://gitlab.com/libtiff/libtiff/-/issues/718 - https://gitlab.com/libtiff/libtiff/-/merge_requests/746 - https://drive.google.com/file
m/libtiff/libtiff/-/issues/718 - https://gitlab.com/libtiff/libtiff/-/merge_requests/746 - https://drive.google.com/file/d/15JPA3kLYiYD-nRNJ8y8HmnYjhv9NE7k6/view?usp=drive_link - https://gitlab.com/libtiff/libtiff/-/commit/6ba36f159fd396ad11bf6b7874554197736ecc8b - http://www.libtiff.org/
CVE ID: CVE-2025-8535 State: PUBLISHED Published: 2025-08-05T00:02:06.159Z Last Updated: 2025-08-05T14:57:12.269Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: cronoh Products: NanoVault Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in cronoh NanoVault up to 1.2.1. This issue affects the function executeJavaScript of the file /main.js of the component xrb URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
osed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318665 - https://vuldb.com/?ctiid.318665 - https://vuldb.com/?submit.619142 - https://gist.github.com/jackfromeast/1e2e206813887a470e00b8474c616567 - https://drive.google.com/file/d/1Hil-UQiLweGe9q1aCiiyQoiW9wOJsY7-/view?usp=drive_link
CVE ID: CVE-2025-8536 State: PUBLISHED Published: 2025-10-24T14:18:20.189Z Last Updated: 2025-10-24T14:40:35.098Z Vendors: Studio Fabryka Products: DobryCMS Problem Types: CWE-89 Description: A SQL injection vulnerability has been identified in DobryCMS. Improper neutralization of input provided by user into language functionality allows for SQL Injection attacks. This issue affects older branches of this software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/posts/2025/10/CVE-2025-8536 - https://studiofabryka.pl/systemy_cms.html
CVE ID: CVE-2025-8537 State: PUBLISHED Published: 2025-08-05T00:32:06.097Z Last Updated: 2025-08-05T13:46:44.809Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R) Vendors: Axiomatic Products: Bento4 Problem Types: CWE-770, CWE-400 Description: A vulnerability, which was classified as problematic, was found in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_DataBuffer::SetDataSize of the file Mp4Decrypt.cpp of the component mp4decrypt. The manipulation leads to allocation of resources. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been discl
tely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318666 - https://vuldb.com/?ctiid.318666 - https://vuldb.com/?submit.619602 - https://github.com/axiomatic-systems/Bento4/issues/1037 - https://drive.google.com/file/d/1AkRpx3wcMy3Ic9tQeQyRJybBipK72aQO/view?usp=drive_link
CVE ID: CVE-2025-8538 State: PUBLISHED Published: 2025-08-05T01:04:26.271Z Last Updated: 2025-08-07T14:51:22.809Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in Portabilis i-Educar 2.10 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /usuarios/tipos/novo. The manipulation of the argument name/description leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respon
as been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318667 - https://vuldb.com/?ctiid.318667 - https://vuldb.com/?submit.620451 - https://karinagante.github.io/cve-2025-8538/
CVE ID: CVE-2025-8539 State: PUBLISHED Published: 2025-08-05T01:32:05.492Z Last Updated: 2025-08-07T06:34:08.694Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Portabilis i-Educar 2.10 and classified as problematic. Affected by this issue is some unknown functionality of the file /intranet/public_distrito_cad.php. The manipulation of the argument nome leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any w
sclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318668 - https://vuldb.com/?ctiid.318668 - https://vuldb.com/?submit.620453 - https://karinagante.github.io/cve-2025-8539/
CVE ID: CVE-2025-8540 State: PUBLISHED Published: 2025-08-05T02:02:05.837Z Last Updated: 2025-08-07T06:34:15.335Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Portabilis i-Educar 2.10. It has been classified as problematic. This affects an unknown part of the file /intranet/public_municipio_cad.php. The manipulation of the argument nome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
osed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318669 - https://vuldb.com/?ctiid.318669 - https://vuldb.com/?submit.620456 - https://karinagante.github.io/cve-2025-8540/
CVE ID: CVE-2025-8541 State: PUBLISHED Published: 2025-08-05T02:32:05.288Z Last Updated: 2025-08-07T06:34:22.075Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. This vulnerability affects unknown code of the file /intranet/public_uf_cad.php. The manipulation of the argument nome leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additio
the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318670 - https://vuldb.com/?ctiid.318670 - https://vuldb.com/?submit.620458 - https://karinagante.github.io/cve-2025-8541/
CVE ID: CVE-2025-8542 State: PUBLISHED Published: 2025-08-05T03:02:04.978Z Last Updated: 2025-08-07T06:34:32.115Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Portabilis i-Educar 2.10. It has been rated as problematic. This issue affects some unknown processing of the file /intranet/empresas_cad.php. The manipulation of the argument fantasia/razao_social leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in
en disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318671 - https://vuldb.com/?ctiid.318671 - https://vuldb.com/?submit.620466 - https://karinagante.github.io/cve-2025-8542/
CVE ID: CVE-2025-8543 State: PUBLISHED Published: 2025-08-05T03:32:05.099Z Last Updated: 2025-08-07T06:34:40.688Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in Portabilis i-Educar 2.10. Affected is an unknown function of the file /intranet/educar_raca_cad.php. The manipulation of the argument nm_raca leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Addition
he public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318672 - https://vuldb.com/?ctiid.318672 - https://vuldb.com/?submit.620476 - https://karinagante.github.io/cve-2025-8543/
CVE ID: CVE-2025-8544 State: PUBLISHED Published: 2025-08-05T04:02:04.715Z Last Updated: 2025-08-07T06:34:47.493Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in Portabilis i-Educar 2.10. Affected by this vulnerability is an unknown functionality of the file /module/RegraAvaliacao/edit. The manipulation of the argument nome leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
sed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318673 - https://vuldb.com/?ctiid.318673 - https://vuldb.com/?submit.620480 - https://karinagante.github.io/cve-2025-8544/
CVE ID: CVE-2025-8545 State: PUBLISHED Published: 2025-08-05T04:32:04.977Z Last Updated: 2025-08-07T06:34:53.913Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /intranet/educar_motivo_afastamento_cad.php. The manipulation of the argument nm_motivo leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure
ely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318674 - https://vuldb.com/?ctiid.318674 - https://vuldb.com/?submit.620481 - https://karinagante.github.io/cve-2025-8545/
CVE ID: CVE-2025-8546 State: PUBLISHED Published: 2025-08-05T05:02:06.125Z Last Updated: 2025-08-05T16:17:39.853Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: atjiu Products: pybbs Problem Types: CWE-804, CWE-287 Description: A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. This affects the function adminlogin/login of the component Verification Code Handler. The manipulation leads to guessable captcha. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The patch is named ecaf8d46944fd03e3c4ea05698f8acf0aaa570cf. It is recommended to apply a
to the public and may be used. The patch is named ecaf8d46944fd03e3c4ea05698f8acf0aaa570cf. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318675 - https://vuldb.com/?ctiid.318675 - https://vuldb.com/?submit.622179 - https://github.com/atjiu/pybbs/issues/199 - https://github.com/atjiu/pybbs/issues/199#issuecomment-3134573731 - https://github.com/atjiu/pybbs/issues/199#issue-3256276118 - https://github.com/atjiu/pybbs/commit/ecaf8d46944fd03e3c4ea05698f8acf0aaa570cf
CVE ID: CVE-2025-8547 State: PUBLISHED Published: 2025-08-05T05:32:06.564Z Last Updated: 2025-08-05T16:16:15.788Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C) Vendors: atjiu Products: pybbs Problem Types: CWE-285, CWE-266 Description: A vulnerability has been found in atjiu pybbs up to 6.0.0 and classified as critical. This vulnerability affects unknown code of the component Email Verification Handler. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 044f22893bee254dc2bb0d30f614913fab3c22c2. It is recommended to apply a patch
and may be used. The name of the patch is 044f22893bee254dc2bb0d30f614913fab3c22c2. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318676 - https://vuldb.com/?ctiid.318676 - https://vuldb.com/?submit.622180 - https://github.com/atjiu/pybbs/issues/200 - https://github.com/atjiu/pybbs/issues/200#issuecomment-3134710486 - https://github.com/atjiu/pybbs/issues/200#issue-3256283647 - https://github.com/atjiu/pybbs/commit/044f22893bee254dc2bb0d30f614913fab3c22c2
CVE ID: CVE-2025-8548 State: PUBLISHED Published: 2025-08-05T06:02:06.431Z Last Updated: 2025-08-05T13:35:50.719Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: atjiu Products: pybbs Problem Types: CWE-209, CWE-200 Description: A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function sendEmailCode of the file src/main/java/co/yiiu/pybbs/controller/api/SettingsApiController.java of the component Registered Email Handler. The manipulation of the argument email leads to information exposure through error message. The attack may be initiated remotely. The complexity of an attack is rather hig
ormation exposure through error message. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 234197c4f8fc7ce24bdcff5430cd42492f28936a. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318677 - https://vuldb.com/?ctiid.318677 - https://vuldb.com/?submit.622186 - https://github.com/atjiu/pybbs/issues/202 - https://github.com/atjiu/pybbs/issues/202#issuecomment-3134602615 - https://github.com/atjiu/pybbs/issues/202#issue-3256293499 - https:/
om/atjiu/pybbs/issues/202#issuecomment-3134602615 - https://github.com/atjiu/pybbs/issues/202#issue-3256293499 - https://github.com/atjiu/pybbs/commit/234197c4f8fc7ce24bdcff5430cd42492f28936a
CVE ID: CVE-2025-8549 State: PUBLISHED Published: 2025-08-05T06:32:06.410Z Last Updated: 2025-08-05T13:25:53.601Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: atjiu Products: pybbs Problem Types: CWE-521 Description: A vulnerability was found in atjiu pybbs up to 6.0.0. It has been classified as critical. Affected is the function update of the file src/main/java/co/yiiu/pybbs/controller/admin/UserAdminController.java. The manipulation leads to weak password requirements. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the publ
xity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as d09cb19a8e7d7e5151282926ada54080244d499f. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318678 - https://vuldb.com/?ctiid.318678 - https://vuldb.com/?submit.622187 - https://github.com/atjiu/pybbs/issues/201 - https://github.com/atjiu/pybbs/issues/201#issuecomment-3134733216 - https://github.com/atjiu/pybbs/issues/201#issue-3256288016 - https://github.com/atjiu/pybbs/commit/d09cb19a8e7d7e5151282926ada54080244d499f
CVE ID: CVE-2025-8550 State: PUBLISHED Published: 2025-08-05T07:02:06.813Z Last Updated: 2025-08-05T15:54:25.005Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:OF/RC:C) Vendors: atjiu Products: pybbs Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in atjiu pybbs up to 6.0.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/topic/list. The manipulation of the argument Username leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22. It is recommended to apply a
o the public and may be used. The patch is named 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318679 - https://vuldb.com/?ctiid.318679 - https://vuldb.com/?submit.622194 - https://github.com/atjiu/pybbs/issues/203 - https://github.com/atjiu/pybbs/issues/203#issuecomment-3134774288 - https://github.com/atjiu/pybbs/issues/203#issue-3256392964 - https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22
CVE ID: CVE-2025-8551 State: PUBLISHED Published: 2025-08-05T07:32:05.984Z Last Updated: 2025-08-05T14:30:27.997Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C) Vendors: atjiu Products: pybbs Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in atjiu pybbs up to 6.0.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/comment/list. The manipulation of the argument Username leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22. It is recommended to apply a pat
lic and may be used. The name of the patch is 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318680 - https://vuldb.com/?ctiid.318680 - https://vuldb.com/?submit.622195 - https://github.com/atjiu/pybbs/issues/204 - https://github.com/atjiu/pybbs/issues/204#issuecomment-3134774122 - https://github.com/atjiu/pybbs/issues/204#issue-3256412774 - https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22
CVE ID: CVE-2025-8552 State: PUBLISHED Published: 2025-08-05T08:02:05.841Z Last Updated: 2025-08-05T13:45:35.823Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:OF/RC:C) Vendors: atjiu Products: pybbs Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in atjiu pybbs up to 6.0.0. This affects an unknown part of the file /admin/tag/list. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22. It is recommended to apply a patch to fix this i
he identifier of the patch is 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.318681 - https://vuldb.com/?ctiid.318681 - https://vuldb.com/?submit.622196 - https://github.com/atjiu/pybbs/issues/205 - https://github.com/atjiu/pybbs/issues/205#issuecomment-3134773883 - https://github.com/atjiu/pybbs/issues/205#issue-3256416772 - https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22