Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
he attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319350 - https://vuldb.com/?ctiid.319350 - https://vuldb.com/?submit.626680 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_50/50.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_50/50.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8817 State: PUBLISHED Published: 2025-08-10T22:02:06.497Z Last Updated: 2025-08-12T15:19:17.584Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this vulnerability is the function setLan of the file /goform/setLan. The manipulation of the argument lan2enabled leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted ea
tack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319351 - https://vuldb.com/?ctiid.319351 - https://vuldb.com/?submit.626681 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_51/51.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_51/51.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8818 State: PUBLISHED Published: 2025-08-10T22:32:07.499Z Last Updated: 2025-08-12T15:18:23.965Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-78, CWE-77 Description: A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this issue is the function setDFSSetting of the file /goform/setLan. The manipulation of the argument lanNetmask/lanIp leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early
k may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319352 - https://vuldb.com/?ctiid.319352 - https://vuldb.com/?submit.626682 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_52/52.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_52/52.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8819 State: PUBLISHED Published: 2025-08-10T23:02:06.792Z Last Updated: 2025-08-12T14:19:32.163Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This affects the function setWan of the file /goform/setWan. The manipulation of the argument staticIp leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this dis
ck remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319353 - https://vuldb.com/?ctiid.319353 - https://vuldb.com/?submit.626683 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_53/53.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_53/53.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8820 State: PUBLISHED Published: 2025-08-10T23:32:06.061Z Last Updated: 2025-08-12T14:15:00.474Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This vulnerability affects the function wirelessBasic of the file /goform/wirelessBasic. The manipulation of the argument submit_SSID1 leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was con
. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319354 - https://vuldb.com/?ctiid.319354 - https://vuldb.com/?submit.626684 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_54/54.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_54/54.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8821 State: PUBLISHED Published: 2025-08-11T00:02:06.241Z Last Updated: 2025-08-12T14:12:17.881Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-78, CWE-77 Description: A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This issue affects the function RP_setBasic of the file /goform/RP_setBasic. The manipulation of the argument bssid leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this di
ted remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319355 - https://vuldb.com/?ctiid.319355 - https://vuldb.com/?submit.626685 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_55/55.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_55/55.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8822 State: PUBLISHED Published: 2025-08-11T00:32:06.033Z Last Updated: 2025-08-12T15:14:50.392Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected is the function algDisable of the file /goform/setOpMode. The manipulation of the argument opMode leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about t
he attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319356 - https://vuldb.com/?ctiid.319356 - https://vuldb.com/?submit.626686 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_56/56.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_56/56.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8823 State: PUBLISHED Published: 2025-08-11T01:05:04.129Z Last Updated: 2025-08-12T15:08:13.288Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-78, CWE-77 Description: A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this vulnerability is the function setDeviceName of the file /goform/setDeviceName. The manipulation of the argument DeviceName leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted e
ttack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319357 - https://vuldb.com/?ctiid.319357 - https://vuldb.com/?submit.626687 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_57/57.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_57/57.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8824 State: PUBLISHED Published: 2025-08-11T01:32:06.863Z Last Updated: 2025-08-12T14:35:49.267Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this issue is the function setRIP of the file /goform/setRIP. The manipulation of the argument RIPmode/RIPpasswd leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted earl
ck may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319358 - https://vuldb.com/?ctiid.319358 - https://vuldb.com/?submit.626689 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_40/40.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_40/40.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8825 State: PUBLISHED Published: 2025-08-11T02:02:06.384Z Last Updated: 2025-08-12T14:35:01.896Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-78, CWE-77 Description: A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This affects the function RP_setBasicAuto of the file /goform/RP_setBasicAuto. The manipulation of the argument staticIp/staticNetmask leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was
possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319359 - https://vuldb.com/?ctiid.319359 - https://vuldb.com/?submit.626690 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_41/41.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_41/41.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8826 State: PUBLISHED Published: 2025-08-11T02:32:06.791Z Last Updated: 2025-08-12T14:30:49.050Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This vulnerability affects the function um_rp_autochannel of the file /goform/RP_setBasicAuto. The manipulation of the argument apcli_AuthMode_2G/apcli_AuthMode_5G leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and ma
o stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319360 - https://vuldb.com/?ctiid.319360 - https://vuldb.com/?submit.626691 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_42/42.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_42/42.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8827 State: PUBLISHED Published: 2025-08-11T03:02:06.170Z Last Updated: 2025-08-12T14:21:14.853Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-78, CWE-77 Description: A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This issue affects the function um_inspect_cross_band of the file /goform/RP_setBasicAuto. The manipulation of the argument staticGateway leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted ea
ack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319361 - https://vuldb.com/?ctiid.319361 - https://vuldb.com/?submit.626692 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_43/43.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_43/43.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8828 State: PUBLISHED Published: 2025-08-11T03:32:05.882Z Last Updated: 2025-08-12T14:09:29.950Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-78, CWE-77 Description: A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected is the function ipv6cmd of the file /goform/setIpv6. The manipulation of the argument Ipv6PriDns/Ipv6SecDns/Ipv6StaticGateway/LanIpv6Addr/LanPrefixLen/pppoeUser/pppoePass/pppoeIdleTime/pppoeRedialPeriod/Ipv6in4_PrefixLen/LocalIpv6/RemoteIpv4/LanIPv6_Prefix/LanPrefixLen/ipv6to4Relay
ppoePass/pppoeIdleTime/pppoeRedialPeriod/Ipv6in4_PrefixLen/LocalIpv6/RemoteIpv4/LanIPv6_Prefix/LanPrefixLen/ipv6to4Relay/ipv6rdRelay/tunrd_PrefixLen/wan_UseLinkLocal/Ipv6StaticIp/Ipv6PrefixLen leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319362 - https://vuldb.com/?ctiid.319362 - https://vuldb.com/?submit.626693 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_44/44.md - https://github.com/wudipjq/my_vuln/blob/main/Lin
- https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_44/44.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_44/44.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8829 State: PUBLISHED Published: 2025-08-11T04:02:05.689Z Last Updated: 2025-08-12T14:08:05.435Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-78, CWE-77 Description: A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this vulnerability is the function um_red of the file /goform/RP_setBasicAuto. The manipulation of the argument hname leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early
can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319363 - https://vuldb.com/?ctiid.319363 - https://vuldb.com/?submit.626694 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_45/45.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_45/45.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8830 State: PUBLISHED Published: 2025-08-11T04:32:06.147Z Last Updated: 2025-08-11T20:29:35.103Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-78, CWE-77 Description: A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this issue is the function sub_3517C of the file /goform/setWan. The manipulation of the argument Hostname leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this
nched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319364 - https://vuldb.com/?ctiid.319364 - https://vuldb.com/?submit.626695 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_46/46.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_46/46.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8831 State: PUBLISHED Published: 2025-08-11T05:02:06.522Z Last Updated: 2025-08-11T20:14:17.067Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This affects the function remoteManagement of the file /goform/remoteManagement. The manipulation of the argument portNumber leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacte
e to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319365 - https://vuldb.com/?ctiid.319365 - https://vuldb.com/?submit.626696 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_47/47.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_47/47.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8832 State: PUBLISHED Published: 2025-08-11T05:32:06.427Z Last Updated: 2025-08-11T20:11:06.369Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This vulnerability affects the function setDMZ of the file /goform/setDMZ. The manipulation of the argument DMZIPAddress leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early a
an be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319366 - https://vuldb.com/?ctiid.319366 - https://vuldb.com/?submit.626697 - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_48/48.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_48/48.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8833 State: PUBLISHED Published: 2025-08-11T06:02:06.045Z Last Updated: 2025-08-11T20:10:10.133Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This issue affects the function langSwitchBack of the file /goform/langSwitchBack. The manipulation of the argument langSelectionOnly leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was cont
The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319367 - https://vuldb.com/?ctiid.319367 - https://vuldb.com/?submit.626698 - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_38/38.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_38/38.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-8834 State: PUBLISHED Published: 2025-08-11T06:32:06.665Z Last Updated: 2025-08-12T14:19:31.832Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: JCG Products: Link-net LW-N915R Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in JCG Link-net LW-N915R 17s.20.001.908. Affected is an unknown function of the file /wireless/basic.asp of the component Wireless Basic Settings Page. The manipulation of the argument Network Name leads to cross site scripting. It is possible to launch the attack remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319368 - https://vuldb.com/?ctiid.31936
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319368 - https://vuldb.com/?ctiid.319368 - https://vuldb.com/?submit.627228
CVE ID: CVE-2025-8835 State: PUBLISHED Published: 2025-08-11T07:02:07.422Z Last Updated: 2025-08-12T13:46:19.331Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: JasPer Problem Types: CWE-476, CWE-404 Description: A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is bb7d62bd0a2a8e
local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319369 - https://vuldb.com/?ctiid.319369 - https://vuldb.com/?submit.622408 - https://github.com/jasper-software/jasper/issues/400 - https://github.com/jasper-software/jasper/issues/400#issuecomment-3134702772 - https://drive.google.com/file/d/1E754R-FsFkNJp9OYtu6Dqjv47uGSVP18/view?usp=sharing - https://github.com/jasper-software/jasper/commit/bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52
CVE ID: CVE-2025-8836 State: PUBLISHED Published: 2025-08-11T07:32:08.430Z Last Updated: 2025-08-12T13:44:11.473Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: JasPer Problem Types: CWE-617 Description: A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc_enc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as 79185d32d7a444abae441935b20ae4676b3513d4. It is recommended to apply a patc