Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
eferences: - https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000004 - https://jvn.jp/en/jp/JVN27937557/
CVE ID: CVE-2025-36512 State: PUBLISHED Published: 2025-07-22T15:26:29.880Z Last Updated: 2025-11-03T19:54:05.440Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Bloomberg Products: Comdb2 Problem Types: CWE-617 Description: A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligen
ility. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2200
CVE ID: CVE-2025-36513 State: PUBLISHED Published: 2025-06-06T04:29:36.521Z Last Updated: 2025-06-06T14:07:38.803Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: i-PRO Co., Ltd. Products: Surveillance cameras provided by i-PRO Co., Ltd. Problem Types: CWE-352 Description: Cross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co., Ltd.. If a user views a crafted page while logged in to the affected product, unintended operations may be performed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://i-pro.com/products_and_solutions/en/surveillance/solutions/technologies/cyber-security/psirt/security-advi
es: - https://i-pro.com/products_and_solutions/en/surveillance/solutions/technologies/cyber-security/psirt/security-advisories - https://jvn.jp/en/jp/JVN10964289/
CVE ID: CVE-2025-36519 State: PUBLISHED Published: 2025-06-24T04:36:57.179Z Last Updated: 2025-06-25T12:42:58.499Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: ELECOM CO.,LTD. Products: WRC-2533GST2, WRC-1167GST2 Problem Types: CWE-434 Description: Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2 and WRC-1167GST2. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20250624-01/ - https://jvn.jp/en/jp/JVN39435597/
CVE ID: CVE-2025-36520 State: PUBLISHED Published: 2025-07-22T15:26:34.557Z Last Updated: 2025-11-03T19:54:06.828Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Bloomberg Products: Comdb2 Problem Types: CWE-476 Description: A null pointer dereference vulnerability exists in the net_connectmsg Protocol Buffer Message functionality of Bloomberg Comdb2 8.1. A specially crafted network packets can lead to a denial of service. An attacker can send packets to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2197
CVE ID: CVE-2025-36521 State: PUBLISHED Published: 2025-05-01T18:27:17.689Z Last Updated: 2025-05-01T18:46:08.699Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: MicroDicom Products: DICOM Viewer Problem Types: CWE-125 Description: MicroDicom DICOM Viewer is vulnerable to an out-of-bounds read which may allow an attacker to cause memory corruption within the application. The user must open a malicious DCM file for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-121-01 - https://www.microdicom.com/downloads.html
CVE ID: CVE-2025-36525 State: PUBLISHED Published: 2025-05-07T22:04:10.220Z Last Updated: 2025-05-08T13:05:01.013Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-120 Description: When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000150598
CVE ID: CVE-2025-36527 State: PUBLISHED Published: 2025-05-23T10:28:24.153Z Last Updated: 2025-05-23T12:05:28.836Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Problem Types: CWE-89 Description: Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/active-directory-audit/cve-2025-36527.html
CVE ID: CVE-2025-36528 State: PUBLISHED Published: 2025-06-09T11:12:14.531Z Last Updated: 2025-06-09T13:05:48.597Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Problem Types: CWE-89 Description: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/active-directory-audit/cve-2025-36528.html
CVE ID: CVE-2025-36529 State: PUBLISHED Published: 2025-06-27T05:23:27.330Z Last Updated: 2025-06-30T18:47:15.964Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: TB-eye Ltd. Products: XRN-410SN/TE, XRN-810SN/TE, XRN-1610SN/TE, PRN-4011N/TE, HRX-421FN/TE, HRX-821/TE, HRX-1621/TE, HRX-435FN/TE, HRX-835/TE, HRX-1635/TE, XRN-425SFN/TE, XRN-426S, XRN-820S/TE, XRN-1620S/TE, XRN-3210R/TE, XRN-6410R/TE, XRN-6410DR/TE Problem Types: CWE-78 Description: An OS command injection issue exists in multiple versions of TB-eye network recorders and AHD recorders. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who is logging in to th
ders. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who is logging in to the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tbeye.com/topics/ahd/ - https://jvn.jp/en/vu/JVNVU93396297/
CVE ID: CVE-2025-36530 State: PUBLISHED Published: 2025-08-21T07:11:43.241Z Last Updated: 2025-08-21T13:50:42.949Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-22 Description: Mattermost versions 10.9.x <= 10.9.1, 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate file paths during plugin import operations which allows restricted admin users to install unauthorized custom plugins via path traversal in the import functionality, bypassing plugin signature enforcement and marketplace restrictions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost
cement and marketplace restrictions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-36535 State: PUBLISHED Published: 2025-05-21T19:52:13.068Z Last Updated: 2025-05-22T18:49:49.738Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: AutomationDirect Products: MB-Gateway Problem Types: CWE-306 Description: The embedded web server lacks authentication and access controls, allowing unrestricted remote access. This could lead to configuration changes, operational disruption, or arbitrary code execution depending on the environment and exposed functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-09 - https://www.automationdirect.com/adc/shopping
rences: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-09 - https://www.automationdirect.com/adc/shopping/catalog/communications/protocol_gateways/modbus_gateways/eki-1221-ce
CVE ID: CVE-2025-36537 State: PUBLISHED Published: 2025-06-24T14:24:08.394Z Last Updated: 2025-06-24T15:31:17.734Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: TeamViewer Products: Full Client, Host, Full Client (Win7/8), Host (Win7/8) Problem Types: Incorrect Permission Assignment for Critical Resource in TeamViewer Remote Management Description: Incorrect Permission Assignment for Critical Resource in the TeamViewer Client (Full and Host) of TeamViewer Remote and Tensor prior Version 15.67 on Windows allows a local unprivileged user to trigger arbitrary file deletion with SYSTEM privileges via leveraging the MSI rollback mechanism. The vulnerability only ap
gger arbitrary file deletion with SYSTEM privileges via leveraging the MSI rollback mechanism. The vulnerability only applies to the Remote Management features: Backup, Monitoring, and Patch Management. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1002/
CVE ID: CVE-2025-36539 State: PUBLISHED Published: 2025-06-12T19:56:33.320Z Last Updated: 2025-06-12T20:04:23.575Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: AVEVA Products: PI Data Archive, PI Server Problem Types: CWE-248 Description: AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-07 - https://www.aveva.com/en/support-and-success/cyber-security-updates/
CVE ID: CVE-2025-36546 State: PUBLISHED Published: 2025-05-07T22:04:08.040Z Last Updated: 2025-05-08T13:00:27.327Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: F5OS - Appliance, F5OS - Chassis Problem Types: CWE-863 Description: On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-based authentication is still allowed. For an attacker to exploit this vulnerability they must obtain the root user's SSH private key. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst N
key. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000140574
CVE ID: CVE-2025-36548 State: PUBLISHED Published: 2025-07-24T15:11:01.847Z Last Updated: 2025-11-03T19:54:08.214Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: WWBN Products: AVideo Problem Types: CWE-79 Description: A cross-site scripting (xss) vulnerability exists in the LoginWordPress loginForm cancelUri parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulner
onal Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2208
CVE ID: CVE-2025-36553 State: PUBLISHED Published: 2025-11-17T22:26:32.197Z Last Updated: 2025-11-19T04:55:31.854Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Broadcom, Dell Products: BCM5820X, ControlVault3, ControlVault3 Plus Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the CvManager functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.
is vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000326061/dsa-2025-228 - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2189
CVE ID: CVE-2025-36557 State: PUBLISHED Published: 2025-05-07T22:04:07.655Z Last Updated: 2025-05-19T22:39:58.170Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP, BIG-IP Next SPK, BIG-IP Next CNF Problem Types: CWE-120 Description: When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000139571
CVE ID: CVE-2025-36558 State: PUBLISHED Published: 2025-05-01T18:44:22.051Z Last Updated: 2025-05-02T12:48:13.762Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: KUNBUS GmbH Products: Revolution Pi PiCtory Problem Types: CWE-97 Description: KUNBUS PiCtory version 2.11.1 and earlier are vulnerable to a cross-site-scripting attack via the sso_token used for authentication. If an attacker provides the user with a PiCtory URL containing an HTML script as an sso_token, that script will reply to the user and be executed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-121-01 - http://package
: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-121-01 - http://packages.revolutionpi.de/pool/main/p/pictory/
CVE ID: CVE-2025-36560 State: PUBLISHED Published: 2025-05-19T08:08:00.732Z Last Updated: 2025-05-19T15:45:37.691Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: appleple inc. Products: a-blog cms Problem Types: CWE-918 Description: Server-side request forgery vulnerability exists in a-blog cms multiple versions. If this vulnerability is exploited, a remote unauthenticated attacker may gain access to sensitive information by sending a specially crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://developer.a-blogcms.jp/blog/news/JVNVU-90760614.html - https://jvn.jp/en/vu/JVNVU90760614/
CVE ID: CVE-2025-36563 State: PUBLISHED Published: 2025-07-31T07:25:44.979Z Last Updated: 2025-07-31T13:24:12.574Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Alfasado Inc. Products: PowerCMS Problem Types: CWE-79 Description: Reflected cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product administrator accesses a crafted URL, an arbitrary script may be executed on the browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.powercms.jp/news/release-powercms-671-531-461.html - https://jvn.jp/en/vu/JVNVU93412964/
CVE ID: CVE-2025-36564 State: PUBLISHED Published: 2025-06-03T14:41:03.795Z Last Updated: 2025-06-04T03:56:03.538Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Encryption Admin Utilities Problem Types: CWE-61 Description: Dell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link Resolution vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000325203/dsa-2025-224
CVE ID: CVE-2025-36565 State: PUBLISHED Published: 2025-10-07T19:49:08.381Z Last Updated: 2025-10-08T03:55:29.839Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 Problem Types: CWE-88 Description: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 t
ions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution. Exploitation may allow privilege escalation to root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
CVE ID: CVE-2025-36566 State: PUBLISHED Published: 2025-10-07T19:44:11.728Z Last Updated: 2025-10-08T03:55:27.636Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 Problem Types: CWE-78 Description: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 t
ions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution. Exploitation may allow privilege escalation to root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
CVE ID: CVE-2025-36567 State: PUBLISHED Published: 2025-10-07T19:32:05.000Z Last Updated: 2025-10-08T03:55:25.268Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 Problem Types: CWE-78 Description: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 t
CVE ID: CVE-2025-36569 State: PUBLISHED Published: 2025-10-07T19:38:31.998Z Last Updated: 2025-10-08T03:55:26.431Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 Problem Types: CWE-78 Description: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 t
ions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
CVE ID: CVE-2025-36572 State: PUBLISHED Published: 2025-05-28T16:14:20.913Z Last Updated: 2025-05-28T16:26:34.111Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: PowerStore Problem Types: CWE-798 Description: Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded Credentials vulnerability in the PowerStore image file. A low privileged attacker with remote access, with the knowledge of the hard-coded credentials, could potentially exploit this vulnerability to gain unauthorized access based on the hardcoded account's privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en
unt's privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000325205/dsa-2025-223-dell-powerstore-t-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2025-36573 State: PUBLISHED Published: 2025-06-12T15:18:00.863Z Last Updated: 2025-06-12T15:35:26.976Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Dell Products: Smart Dock Problem Types: CWE-532 Description: Dell Smart Dock Firmware, versions prior to 01.00.08.01, contain an Insertion of Sensitive Information into Log File vulnerability. A user with local access could potentially exploit this vulnerability, leading to Information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000323183/dsa-2025-218
CVE ID: CVE-2025-36574 State: PUBLISHED Published: 2025-06-10T17:27:04.321Z Last Updated: 2025-06-10T17:46:47.698Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-36 Description: Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000325679/dsa-2025-226
CVE ID: CVE-2025-36575 State: PUBLISHED Published: 2025-06-10T17:19:35.548Z Last Updated: 2025-06-10T17:51:13.983Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-202 Description: Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000325679/dsa-2025-226
CVE ID: CVE-2025-36576 State: PUBLISHED Published: 2025-06-10T17:48:17.477Z Last Updated: 2025-06-10T18:21:32.737Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-352 Description: Dell Wyse Management Suite, versions prior to WMS 5.2, contain a Cross-Site Request Forgery (CSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000325679/dsa-2025-226