Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
commended to apply a patch to fix this issue. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317591 - https://vuldb.com/?ctiid.317591 - https://vuldb.com/?submit.621797 - https://gitlab.com/libtiff/libtiff/-/issues/715 - https://gitlab.com/libtiff/libtiff/-/merge_requests/737 - https://gitlab.com/libtiff/libtiff/-/commit/e8c9d6c616b19438695fd829e58ae4fde5bfbc22 - http://www.libtiff.org/
CVE ID: CVE-2025-8178 State: PUBLISHED Published: 2025-07-26T04:32:10.022Z Last Updated: 2025-07-28T16:06:16.879Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC10 Problem Types: CWE-122, CWE-119 Description: A vulnerability classified as critical has been found in Tenda AC10 16.03.10.13. Affected is an unknown function of the file /goform/RequestsProcessLaid. The manipulation of the argument device1D leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317592 - https:
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317592 - https://vuldb.com/?ctiid.317592 - https://vuldb.com/?submit.621811 - https://www.yuque.com/ba1ma0-an29k/nnxoap/qkixf5578145igdt - https://www.tenda.com.cn/
CVE ID: CVE-2025-8179 State: PUBLISHED Published: 2025-07-26T05:02:07.168Z Last Updated: 2025-07-28T16:05:17.872Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Local Services Search Engine Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Note
e attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317593 - https://vuldb.com/?ctiid.317593 - https://vuldb.com/?submit.621933 - https://github.com/yuan-max11/mycve/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-8180 State: PUBLISHED Published: 2025-07-26T06:32:06.867Z Last Updated: 2025-07-28T15:53:59.950Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: CH22 Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formdeleteUserName of the file /goform/deleteUserName. The manipulation of the argument old_account leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317594 - https://vuldb.com/?ctiid.317594 - https://vuldb.com/?submit.621964 - https://github.com/zhu-haiqin/cve/issues/1 - https://www.tenda.com.cn/
CVE ID: CVE-2025-8181 State: PUBLISHED Published: 2025-07-26T07:02:07.845Z Last Updated: 2025-07-28T15:05:51.551Z Severity: N/A (CVSS 8.3 AV:N/AC:L/Au:M/C:C/I:C/A:C/E:ND/RL:ND/RC:UR) Vendors: TOTOLINK Products: N600R, X2000R Problem Types: CWE-272, CWE-266 Description: A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1. This affects an unknown part of the file vsftpd.conf of the component FTP Service. The manipulation leads to least privilege violation. It is possible to initiate the attack remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317595 - https://vuldb.com/?ctiid.317595 - https://vuldb.com
CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317595 - https://vuldb.com/?ctiid.317595 - https://vuldb.com/?submit.621966 - https://vuldb.com/?submit.621968 - https://www.notion.so/23a54a1113e780c08f3acca6a746d732 - https://www.totolink.net/
CVE ID: CVE-2025-8182 State: PUBLISHED Published: 2025-07-26T08:32:09.147Z Last Updated: 2025-07-28T15:11:45.124Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: Tenda Products: AC18 Problem Types: CWE-521 Description: A vulnerability has been found in Tenda AC18 15.03.05.19 and classified as problematic. This vulnerability affects unknown code of the file /etc_ro/smb.conf of the component Samba. The manipulation leads to weak password requirements. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Additional A
gh. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317596 - https://vuldb.com/?ctiid.317596 - https://vuldb.com/?submit.621977 - https://www.notion.so/23a54a1113e7802abfabf1275a555f48 - https://www.tenda.com.cn/
CVE ID: CVE-2025-8183 State: PUBLISHED Published: 2025-07-25T09:33:41.854Z Last Updated: 2025-07-25T12:41:43.798Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: D3TN GmbH Products: µD3TN Problem Types: CWE-476 Description: NULL Pointer Dereference in µD3TN via non-singleton destination Endpoint Identifier allows remote attacker to reliably cause DoS Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/d3tn/ud3tn/-/issues/255
CVE ID: CVE-2025-8184 State: PUBLISHED Published: 2025-07-26T09:02:06.117Z Last Updated: 2025-07-28T15:13:02.604Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-513 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in D-Link DIR-513 up to 1.10 and classified as critical. This issue affects the function formSetWanL2TPcallback of the file /goform/formSetWanL2TPtriggers of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer
he exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317597 - https://vuldb.com/?ctiid.317597 - https://vuldb.com/?submit.622222 - https://github.com/InfiniteLin/Lin-s-CVEdb/blob/main/DIR-513/formSetWanPPTP.md - https://www.dlink.com/
CVE ID: CVE-2025-8185 State: PUBLISHED Published: 2025-07-26T09:32:05.559Z Last Updated: 2025-07-28T15:14:04.584Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: 1000 Projects Products: ABC Courier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in 1000 Projects ABC Courier Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /getbyid.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317598 - https://vuldb.com/?ctiid.317598 - https://vuldb.com/?submit.622261 - https://github.com/XiaoJiesecqwq/CVE/issues/1 - https://1000projects.org/
CVE ID: CVE-2025-8186 State: PUBLISHED Published: 2025-07-26T11:02:06.140Z Last Updated: 2025-07-28T15:40:22.003Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Courier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edit_branch.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317599 - https://vuldb.com/?ctiid.317599 - https://vuldb.com/?submit.622280 - https://github.com/XiaoJiesecqwq/CVE/issues/7 - https://www.campcodes.com/
CVE ID: CVE-2025-8187 State: PUBLISHED Published: 2025-07-26T11:32:06.161Z Last Updated: 2025-07-28T15:39:39.568Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Courier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Courier Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /edit_parcel.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317600 - https://vuldb.com/?ctiid.317600 - https://vuldb.com/?submit.622288 - https://github.com/XiaoJiesecqwq/CVE/issues/8 - https://www.campcodes.com/
CVE ID: CVE-2025-8188 State: PUBLISHED Published: 2025-07-26T12:02:06.455Z Last Updated: 2025-07-28T15:37:35.729Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Courier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0. This affects an unknown part of the file /edit_staff.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.31760
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317601 - https://vuldb.com/?ctiid.317601 - https://vuldb.com/?submit.622292 - https://github.com/XiaoJiesecqwq/CVE/issues/9 - https://www.campcodes.com/
CVE ID: CVE-2025-8189 State: PUBLISHED Published: 2025-07-26T12:32:07.944Z Last Updated: 2025-07-28T15:33:08.933Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Courier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /edit_user.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317602 - h
ublic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317602 - https://vuldb.com/?ctiid.317602 - https://vuldb.com/?submit.622296 - https://github.com/XiaoJiesecqwq/CVE/issues/10 - https://www.campcodes.com/
CVE ID: CVE-2025-8190 State: PUBLISHED Published: 2025-07-26T13:02:06.109Z Last Updated: 2025-07-28T15:22:08.857Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Courier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in Campcodes Courier Management System 1.0. This issue affects some unknown processing of the file /print_pdets.php. The manipulation of the argument ids leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317603 - https://vuldb.com/?ctiid.317603 - https://vuldb.com/?submit.622313 - https://github.com/XiaoJiesecqwq/CVE/issues/11 - https://www.campcodes.com/
CVE ID: CVE-2025-8191 State: PUBLISHED Published: 2025-07-26T13:32:05.276Z Last Updated: 2025-07-28T16:03:57.109Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: macrozheng Products: mall Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1.0.3. Affected is an unknown function of the file /swagger-ui/index.html of the component Swagger UI. The manipulation of the argument configUrl leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor deleted the GitHub issue for this vulnerability without
oit has been disclosed to the public and may be used. The vendor deleted the GitHub issue for this vulnerability without any explanation. Afterwards the vendor was contacted early about this disclosure via email but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317604 - https://vuldb.com/?ctiid.317604 - https://vuldb.com/?submit.615731 - https://github.com/zast-ai/vulnerability-reports/blob/main/mall/DOM_XSS.md - https://github.com/macrozheng/mall/issues/919
CVE ID: CVE-2025-8192 State: PUBLISHED Published: 2025-07-31T08:24:26.612Z Last Updated: 2025-07-31T13:20:16.832Z Vendors: Android Products: TV Problem Types: CWE-367 Description: There exists a TOCTOU race condition in TvSettings AppRestrictionsFragment.java that lead to start of attacker supplied activity in Settings’ context, i.e. system-uid context, thus lead to launchAnyWhere. The core idea is to utilize the time window between the check of Intent and the use to Intent to change the target component’s state, thus bypass the original security sanitize function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://defcon.org/html/defcon-33/dc-33-speakers.html#content_6
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://defcon.org/html/defcon-33/dc-33-speakers.html#content_60309
CVE ID: CVE-2025-8193 State: REJECTED Published: N/A Last Updated: 2025-08-22T22:19:26.418Z Description: No description available.
CVE ID: CVE-2025-8194 State: PUBLISHED Published: 2025-07-28T18:42:44.847Z Last Updated: 2025-11-04T22:06:48.390Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Python Software Foundation Products: CPython Problem Types: CWE-835 Description: There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives. This vulnerability can be mitigated by including the following patch after importing the “tarfile” module: https://gist.github
ulnerability can be mitigated by including the following patch after importing the “tarfile” module: https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/python/cpython/issues/130577 - https://github.com/python/cpython/pull/137027 - https://mail.python.org/archives/list/security-announce@python.org/thread/ZULLF3IZ726XP5EY7XJ7YIN3K5MDYR2D/ - https://github.com/python/cpython/commit/7040aa54f14676938970e10c5f74ea93cd56aa38 - https://github.com/python/cpython/commit/cdae923ffe187d6ef916c0f665a31249619193fe - https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b
ython/commit/cdae923ffe187d6ef916c0f665a31249619193fe - https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1 - https://github.com/python/cpython/commit/c9d9f78feb1467e73fd29356c040bde1c104f29f - https://github.com/python/cpython/commit/fbc2a0ca9ac8aff6887f8ddf79b87b4510277227 - https://github.com/python/cpython/commit/57f5981d6260ed21266e0c26951b8564cc252bc2 - https://github.com/python/cpython/commit/73f03e4808206f71eb6b92c579505a220942ef19 - https://github.com/python/cpython/commit/b4ec17488eedec36d3c05fec127df71c0071f6cb
CVE ID: CVE-2025-8196 State: PUBLISHED Published: 2025-07-29T09:23:45.630Z Last Updated: 2025-07-29T13:45:16.579Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: nalam-1 Products: Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) Problem Types: CWE-79 Description: The Magical Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Custom Attributes in all versions up to, and including, 1.3.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level ac
tput escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/58854b23-e679-4349-aa7c-4edf4008c92a?source=cve - https://wordpress.org/plugins/magical-addons-for-elementor/#developers - https://plugins.trac.wordpress.org/changeset/3334530/
CVE ID: CVE-2025-8197 State: REJECTED Published: 2025-07-25T19:19:08.251Z Last Updated: 2025-08-14T02:15:08.062Z Description: No description available.
CVE ID: CVE-2025-8198 State: PUBLISHED Published: 2025-07-26T05:45:53.219Z Last Updated: 2025-07-28T15:57:21.080Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: ThemeMove Products: MinimogWP – The High Converting eCommerce WordPress Theme Problem Types: CWE-472 Description: The MinimogWP – The High Converting eCommerce WordPress Theme theme for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.9.0. This is due to an insufficient check on quantity values when changing quantities in the cart. This makes it possible for unauthenticated attackers to add items to the cart and adjust the quantity to a fractional amount, causing t
ossible for unauthenticated attackers to add items to the cart and adjust the quantity to a fractional amount, causing the price to change based on the fractional amount. The vulnerability cannot be exploited if WooCommerce version 9.8.2+ is installed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cfea0427-78dc-4151-864a-63b6761fc294?source=cve - https://changelog.thememove.com/minimog-wp/
CVE ID: CVE-2025-8200 State: PUBLISHED Published: 2025-09-26T01:47:27.118Z Last Updated: 2025-09-26T19:23:55.802Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: kraftplugins Products: Mega Elements – Addons for Elementor Problem Types: CWE-79 Description: The Mega Elements – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown Timer widget in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pa
it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a8c676a0-287f-479c-aaa1-ba638b340e11?source=cve - https://wordpress.org/plugins/mega-elements-addons-for-elementor/#developers - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3362890%40mega-elements-addons-for-elementor&new=3362890%40mega-elements-addons-for-elementor&sfp_email=&sfph_mail=
CVE ID: CVE-2025-8203 State: PUBLISHED Published: 2025-07-26T14:32:05.549Z Last Updated: 2025-07-28T16:03:14.159Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Jingmen Zeyou Products: Large File Upload Control Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Jingmen Zeyou Large File Upload Control up to 6.3. Affected is an unknown function of the file /index.jsp. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any wa
closed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317772 - https://vuldb.com/?ctiid.317772 - https://vuldb.com/?submit.614507 - https://github.com/William-xin/CVEs/issues/4
CVE ID: CVE-2025-8204 State: PUBLISHED Published: 2025-07-26T15:32:05.723Z Last Updated: 2025-07-28T16:02:30.834Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: Comodo Products: Dragon Problem Types: CWE-358 Description: A vulnerability classified as problematic was found in Comodo Dragon up to 134.0.6998.179. Affected by this vulnerability is an unknown functionality of the component HSTS Handler. The manipulation leads to security check for standard. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor w
gh. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317773 - https://vuldb.com/?ctiid.317773 - https://vuldb.com/?submit.615647 - https://news.fmisec.com/comodo-dragon-vulnerability
CVE ID: CVE-2025-8205 State: PUBLISHED Published: 2025-07-26T18:32:05.635Z Last Updated: 2025-07-28T16:01:54.787Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: Comodo Products: Dragon Problem Types: CWE-319, CWE-310 Description: A vulnerability, which was classified as problematic, has been found in Comodo Dragon up to 134.0.6998.179. Affected by this issue is some unknown functionality of the component IP DNS Leakage Detector. The manipulation leads to cleartext transmission of sensitive information. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been d
remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317774 - https://vuldb.com/?ctiid.317774 - https://news.fmisec.com/comodo-dragon-vulnerability