Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ore 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T394693 - https://gerrit.wikimedia.org/r/q/I159e14543912cb3bc7f4a00c3090c0285b154786
CVE ID: CVE-2025-53480 State: PUBLISHED Published: 2025-07-08T14:58:37.544Z Last Updated: 2025-07-08T20:44:54.968Z Vendors: Wikimedia Foundation Products: Mediawiki - CheckUser extension Problem Types: CWE-79 Description: The CheckUser extension’s Special:Investigate page has a vulnerability in the Account information tab, where specific internationalized messages are rendered without proper escaping. Attackers can exploit this by appending ?uselang=x-xss to the URL, causing reflected XSS when the UI renders affected message keys. This issue affects Mediawiki - CheckUser extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - C
tension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T394700 - https://gerrit.wikimedia.org/r/q/I777fc55fef15c3b00df0db268af2b64cb2d6e381
CVE ID: CVE-2025-53481 State: PUBLISHED Published: 2025-07-04T15:47:46.299Z Last Updated: 2025-07-08T17:38:27.242Z Vendors: Wikimedia Foundation Products: Mediawiki - IPInfo Extension Problem Types: CWE-400 Description: Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - IPInfo Extension allows Excessive Allocation.This issue affects Mediawiki - IPInfo Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T392976 - https://gerrit.wikimedia.org/r/q/I474b7a1b3bc1e7597fee0826a18a0cf042359f0f - https://gerrit.wikimedia.org/r/q/I
392976 - https://gerrit.wikimedia.org/r/q/I474b7a1b3bc1e7597fee0826a18a0cf042359f0f - https://gerrit.wikimedia.org/r/q/I08a7154f8fa08bb6f0940e522075bdc2a3d4433f
CVE ID: CVE-2025-53482 State: PUBLISHED Published: 2025-07-04T16:01:46.252Z Last Updated: 2025-07-08T17:38:20.332Z Vendors: Wikimedia Foundation Products: Mediawiki - IPInfo Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - IPInfo Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - IPInfo Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T394393 - https://gerrit.wikimedia.org/r/q/I66221bae94cf22
Vulnrichment: References: - https://phabricator.wikimedia.org/T394393 - https://gerrit.wikimedia.org/r/q/I66221bae94cf222531a7dc5622b2d43e01f7f8eb
CVE ID: CVE-2025-53483 State: PUBLISHED Published: 2025-07-04T17:28:40.374Z Last Updated: 2025-07-08T17:38:14.909Z Vendors: Wikimedia Foundation Products: Mediawiki - SecurePoll extension Problem Types: CWE-352 Description: ArchivePage.php, UnarchivePage.php, and VoterEligibilityPage#executeClear() do not validate request methods or CSRF tokens, allowing attackers to trigger sensitive actions if an admin visits a malicious site. This issue affects Mediawiki - SecurePoll extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T392341 - https://gerrit.wikimedi
nalyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T392341 - https://gerrit.wikimedia.org/r/1149618 - https://gerrit.wikimedia.org/r/1149664
CVE ID: CVE-2025-53484 State: PUBLISHED Published: 2025-07-04T17:34:24.470Z Last Updated: 2025-07-08T17:38:09.511Z Vendors: Wikimedia Foundation Products: Mediawiki - SecurePoll extension Problem Types: CWE-79 Description: User-controlled inputs are improperly escaped in: * VotePage.php (poll option input) * ResultPage::getPagesTab() and getErrorsTab() (user-controllable page names) This allows attackers to inject JavaScript and compromise user sessions under certain conditions. This issue affects Mediawiki - SecurePoll extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabrica
ore 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T392341 - https://gerrit.wikimedia.org/r/1149669 - https://gerrit.wikimedia.org/r/1149655
CVE ID: CVE-2025-53485 State: PUBLISHED Published: 2025-07-04T17:39:36.272Z Last Updated: 2025-07-08T17:38:04.023Z Vendors: Wikimedia Foundation Products: Mediawiki - SecurePoll extension Problem Types: CWE-862 Description: SetTranslationHandler.php does not validate that the user is an election admin, allowing any (even unauthenticated) user to change election-related translation text. While partially broken in newer MediaWiki versions, the check is still missing. This issue affects Mediawiki - SecurePoll extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.
om 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T392341 - https://gerrit.wikimedia.org/r/149668
CVE ID: CVE-2025-53486 State: PUBLISHED Published: 2025-07-07T15:07:44.875Z Last Updated: 2025-07-07T19:15:02.740Z Vendors: Wikimedia Foundation Products: Mediawiki - WikiCategoryTagCloud extension Problem Types: CWE-79 Description: The WikiCategoryTagCloud extension is vulnerable to reflected XSS via the linkstyle attribute, which is improperly concatenated into inline HTML without escaping. An attacker can inject JavaScript event handlers such as onmouseenter using carefully crafted input via the {{#tag:tagcloud}} parser function, resulting in arbitrary JavaScript execution when a victim hovers over a link in the category cloud. The vulnerability exists because the linkstyle parameter is o
on when a victim hovers over a link in the category cloud. The vulnerability exists because the linkstyle parameter is only passed through Sanitizer::checkCss() (which does not escape HTML) and is then directly inserted into a style attribute using string concatenation instead of Html::element or Html::openElement. This issue affects Mediawiki - WikiCategoryTagCloud extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T394590 - https://gerrit.wikimedia.org/r/q/Idd68cf2372aedd916687d30b1bd09ebb48fcfd17
CVE ID: CVE-2025-53487 State: PUBLISHED Published: 2025-07-07T15:13:38.574Z Last Updated: 2025-07-07T19:16:14.015Z Vendors: Wikimedia Foundation Products: Mediawiki - ApprovedRevs extension Problem Types: CWE-79 Description: The ApprovedRevs extension for MediaWiki is vulnerable to stored XSS in multiple locations where system messages are inserted into raw HTML without proper escaping. Attackers can exploit this by injecting JavaScript payloads via the uselang=x-xss language override, which causes crafted message keys to be rendered unescaped. This issue affects Mediawiki - ApprovedRevs extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional A
- ApprovedRevs extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T394383 - https://gerrit.wikimedia.org/r/q/Ifcab085111e7898da485a5e2ae287fee4e6d167b
CVE ID: CVE-2025-53488 State: PUBLISHED Published: 2025-07-07T18:44:40.031Z Last Updated: 2025-07-10T23:34:04.537Z Vendors: Wikimedia Foundation Products: Mediawiki - WikiHiero Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiHiero Extension allows Stored XSS.This issue affects Mediawiki - WikiHiero Extension: from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T396524 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/wikihiero/+/1166018
CVE ID: CVE-2025-53489 State: PUBLISHED Published: 2025-07-03T16:06:46.491Z Last Updated: 2025-07-10T23:33:42.049Z Vendors: Wikimedia Foundation Products: Mediawiki - GoogleDocs4MW Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - GoogleDocs4MW Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - GoogleDocs4MW Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T395949 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/G
hment: References: - https://phabricator.wikimedia.org/T395949 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/GoogleDocs4MW/+/1155269
CVE ID: CVE-2025-53490 State: PUBLISHED Published: 2025-07-03T16:04:05.491Z Last Updated: 2025-07-10T23:33:01.924Z Vendors: Wikimedia Foundation Products: Mediawiki - CampaignEvents Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - CampaignEvents Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - CampaignEvents Extension: from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T395622 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CampaignEvents/+/1165949
CVE ID: CVE-2025-53491 State: PUBLISHED Published: 2025-07-07T16:17:29.771Z Last Updated: 2025-07-10T23:32:35.484Z Vendors: Wikimedia Foundation Products: Mediawiki - FlaggedRevs Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - FlaggedRevs Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - FlaggedRevs Extension: from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T394397 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/FlaggedRevs/+/1165929
CVE ID: CVE-2025-53492 State: PUBLISHED Published: 2025-07-02T14:41:52.046Z Last Updated: 2025-07-10T23:32:08.878Z Vendors: Wikimedia Foundation Products: Mediawiki - MintyDocs Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - MintyDocs Extension allows Stored XSS.This issue affects Mediawiki - MintyDocs Extension: from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T395737 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MintyDocs/+/1152771
CVE ID: CVE-2025-53493 State: PUBLISHED Published: 2025-07-02T14:38:07.470Z Last Updated: 2025-07-10T23:31:41.432Z Vendors: Wikimedia Foundation Products: Mediawiki - MintyDocs Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - MintyDocs Extension allows Stored XSS.This issue affects Mediawiki - MintyDocs Extension: from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T395376 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MintyDocs/+/1151800
CVE ID: CVE-2025-53494 State: PUBLISHED Published: 2025-07-02T14:24:54.021Z Last Updated: 2025-07-10T23:31:13.659Z Vendors: Wikimedia Foundation Products: Mediawiki - TwoColConflict Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - TwoColConflict Extension allows Stored XSS.This issue affects Mediawiki - TwoColConflict Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T394938 - https://gerrit.wikimedia.org/r/c/mediawi
ISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T394938 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/TwoColConflict/+/1150011
CVE ID: CVE-2025-53495 State: PUBLISHED Published: 2025-07-07T18:30:31.465Z Last Updated: 2025-07-08T20:06:40.733Z Vendors: Wikimedia Foundation Products: Mediawiki - AbuseFilter Extension Problem Types: CWE-862 Description: Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Unauthorized Access.This issue affects Mediawiki - AbuseFilter Extension: from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T396750 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1166040
CVE ID: CVE-2025-53496 State: PUBLISHED Published: 2025-07-07T19:12:46.564Z Last Updated: 2025-07-31T17:28:53.814Z Vendors: Wikimedia Foundation Products: Mediawiki - MediaSearch Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - MediaSearch Extension allows Stored XSS.This issue affects Mediawiki - MediaSearch Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T396946 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MediaSearch/+/1166030
CVE ID: CVE-2025-53497 State: PUBLISHED Published: 2025-07-07T16:28:49.827Z Last Updated: 2025-07-10T23:30:32.976Z Vendors: Wikimedia Foundation Products: Mediawiki - RelatedArticles Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - RelatedArticles Extension allows Stored XSS.This issue affects Mediawiki - RelatedArticles Extension: from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T396413 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/RelatedArticles/+/1166024
CVE ID: CVE-2025-53498 State: PUBLISHED Published: 2025-07-07T18:35:48.826Z Last Updated: 2025-07-08T20:07:39.308Z Vendors: Wikimedia Foundation Products: Mediawiki - AbuseFilter Extension Problem Types: CWE-778 Description: Insufficient Logging vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Data Leakage Attacks.This issue affects Mediawiki - AbuseFilter Extension: from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T397221 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1166844
CVE ID: CVE-2025-53499 State: PUBLISHED Published: 2025-07-07T18:33:12.173Z Last Updated: 2025-07-08T20:07:07.442Z Vendors: Wikimedia Foundation Products: Mediawiki - AbuseFilter Extension Problem Types: CWE-862 Description: Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Unauthorized Access.This issue affects Mediawiki - AbuseFilter Extension: from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T397196 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1166045
CVE ID: CVE-2025-53500 State: PUBLISHED Published: 2025-07-03T16:17:38.293Z Last Updated: 2025-07-10T23:29:42.412Z Vendors: Wikimedia Foundation Products: Mediawiki - MassEditRegex Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - MassEditRegex Extension allows Stored XSS.This issue affects Mediawiki - MassEditRegex Extension: from 1.39.X before 1.39.12, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T397334 - https://gerrit.wikimedia.org/r/c/mediawiki/
ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T397334 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MassEditRegex/+/1163878/
CVE ID: CVE-2025-53501 State: PUBLISHED Published: 2025-07-03T16:15:52.588Z Last Updated: 2025-07-10T23:37:33.152Z Vendors: Wikimedia Foundation Products: Mediawiki - Scribunto Extension Problem Types: CWE-284 Description: Improper Access Control vulnerability in Wikimedia Foundation Mediawiki - Scribunto Extension allows : Accessing Functionality Not Properly Constrained by Authorization.This issue affects Mediawiki - Scribunto Extension: from 1.39.X before 1.39.12, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T397524 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Scribunto/+
erences: - https://phabricator.wikimedia.org/T397524 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Scribunto/+/1164541
CVE ID: CVE-2025-53502 State: PUBLISHED Published: 2025-07-03T16:11:07.054Z Last Updated: 2025-07-10T23:37:56.408Z Vendors: Wikimedia Foundation Products: Mediawiki - FeaturedFeeds Extension Problem Types: CWE-20 Description: Improper Input Validation vulnerability in Wikimedia Foundation Mediawiki - FeaturedFeeds Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - FeaturedFeeds Extension: 1.39.X, 1.42.X, 1.43.X. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T392279 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/FeaturedFeeds/+/1149742
CVE ID: CVE-2025-53503 State: PUBLISHED Published: 2025-07-10T18:59:17.266Z Last Updated: 2025-07-10T19:05:44.495Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Cleaner One Pro Problem Types: CWE-64 Description: Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpcenter.trendmicro.com/en-us/article/tmka-12951
CVE ID: CVE-2025-53504 State: PUBLISHED Published: 2025-08-21T04:29:14.292Z Last Updated: 2025-08-21T15:47:02.814Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Intermesh BV Products: Group-Office Problem Types: CWE-79 Description: Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.group-office.com/ - https://jvn.jp/en/jp/JVN72111431/
CVE ID: CVE-2025-53505 State: PUBLISHED Published: 2025-08-21T04:29:44.539Z Last Updated: 2025-08-21T15:46:36.058Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Intermesh BV Products: Group-Office Problem Types: CWE-22 Description: Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal vulnerability. If this vulnerability is exploited, information on the server hosting the product may be exposed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.group-office.com/ - https://jvn.jp/en/jp/JVN72111431/
CVE ID: CVE-2025-53506 State: PUBLISHED Published: 2025-07-10T19:14:23.249Z Last Updated: 2025-11-04T21:11:48.893Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: CWE-400 Description: Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that reduces the maximum permitted concurrent streams. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42, from 9.0.0.M1 through 9.0.106. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other EOL versions may also be affected. Users are recomm
s created but are known to be affected: 8.5.0 through 8.5.100. Other EOL versions may also be affected. Users are recommended to upgrade to version 11.0.9, 10.1.43 or 9.0.107, which fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/p09775q0rd185m6zz98krg0fp45j8kr0
CVE ID: CVE-2025-53507 State: PUBLISHED Published: 2025-08-29T04:13:58.310Z Last Updated: 2025-08-29T12:05:32.544Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: iND Co.,Ltd Products: HL330-DLS (for module MC7700), HL330-DLS (for module MC7330), HL320-DLS (for module MC7700), HL320-DLS (for module MC7330), LM-100, LM-200 (for module AMP570), LM-200 (for module EC25-J), L2X Assist, L2X Assist-RS-A, L2X Assist-RS-E, F2L Assist-SS-A, F2L Assist-SS-E Problem Types: CWE-922 Description: Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploited, configuration information, such as admin password, may
ure storage of sensitive information vulnerability. If exploited, configuration information, such as admin password, may be disclosed. As for the details of affected product names and versions, refer to the information under [Product Status]. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.i-netd.co.jp/vulnerability/dceid-2025-001/ - https://jvn.jp/en/jp/JVN50585992/
CVE ID: CVE-2025-53508 State: PUBLISHED Published: 2025-08-29T04:14:39.074Z Last Updated: 2025-08-29T12:04:32.453Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: iND Co.,Ltd Products: HL330-DLS (for module MC7700), HL330-DLS (for module MC7330), HL320-DLS (for module MC7700), HL320-DLS (for module MC7330), LM-100, LM-200 (for module AMP570), LM-200 (for module EC25-J), L2X Assist, L2X Assist-RS-A, L2X Assist-RS-E, F2L Assist-SS-A, F2L Assist-SS-E Problem Types: CWE-78 Description: Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed and sensitive information may be obtai
nd injection vulnerability. If exploited, an arbitrary OS command may be executed and sensitive information may be obtained. As for the details of affected product names and versions, refer to the information under [Product Status]. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.i-netd.co.jp/vulnerability/dceid-2025-001/ - https://jvn.jp/en/jp/JVN50585992/
CVE ID: CVE-2025-53509 State: PUBLISHED Published: 2025-07-10T23:29:10.103Z Last Updated: 2025-07-11T13:29:37.165Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Advantech Products: iView Problem Types: CWE-88 Description: A vulnerability exists in Advantech iView that allows for argument injection in the NetworkServlet.restoreDatabase(). This issue requires an authenticated attacker with at least user-level privileges. An input parameter can be used directly in a command without proper sanitization, allowing arbitrary arguments to be injected. This can result in information disclosure, including sensitive database credentials. Additional Analyst Notes: - C