Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
nts under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:10630 - https://access.redhat.com/errata/RHSA-2025:10698 - https://access.redhat.com/errata/RHSA-2025:10699 - https://access.redhat.com/errata/RHSA-2025:11580 - https://access.redhat.com/errata/RHSA-2025:12098 - https://access.redhat.com/errata/RHSA-2025:12099 - https://access.redha
tps://access.redhat.com/errata/RHSA-2025:12098 - https://access.redhat.com/errata/RHSA-2025:12099 - https://access.redhat.com/errata/RHSA-2025:12199 - https://access.redhat.com/errata/RHSA-2025:12237 - https://access.redhat.com/errata/RHSA-2025:12239 - https://access.redhat.com/errata/RHSA-2025:12240 - https://access.redhat.com/errata/RHSA-2025:12241 - https://access.redhat.com/errata/RHSA-2025:13335 - https://access.redhat.com/errata/RHSA-2025:15397 - https://access.redhat.com/errata/RHSA-2025:15827 - https://access.redhat.com/errata/RHSA-2025:15828 - https://access.redhat.com/errata/RHSA-2025:18217 - https://access.redhat.com/errata/RHSA-2025:18218 - https://access.redhat.com/errata/RHSA-2
.com/errata/RHSA-2025:18217 - https://access.redhat.com/errata/RHSA-2025:18218 - https://access.redhat.com/errata/RHSA-2025:18219 - https://access.redhat.com/errata/RHSA-2025:18240 - https://access.redhat.com/errata/RHSA-2025:19020 - https://access.redhat.com/errata/RHSA-2025:19041 - https://access.redhat.com/errata/RHSA-2025:19046 - https://access.redhat.com/errata/RHSA-2025:19894 - https://access.redhat.com/errata/RHSA-2025:21913 - https://access.redhat.com/security/cve/CVE-2025-49794 - https://bugzilla.redhat.com/show_bug.cgi?id=2372373
CVE ID: CVE-2025-49795 State: PUBLISHED Published: 2025-06-16T15:19:29.871Z Last Updated: 2025-11-07T18:35:42.943Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat JBoss Core Services 2.4.62.SP2, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-825 Description: A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
XML input to libxml2, leading to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:10630 - https://access.redhat.com/errata/RHSA-2025:19020 - https://access.redhat.com/security/cve/CVE-2025-49795 - https://bugzilla.redhat.com/show_bug.cgi?id=2372379
CVE ID: CVE-2025-49796 State: PUBLISHED Published: 2025-06-16T15:14:28.251Z Last Updated: 2025-11-22T03:01:12.387Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Serv
ft Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Container Platform 4.18, Red Hat OpenShift Container Platform 4.19, Red Hat OpenShift Container Platform 4.20, Red Hat Web Terminal 1.11 on RHEL 9, Red Hat Web Terminal 1.12 on RHEL 9, cert-manager operator for Red Hat OpenShift 1.16, File Integrity Operator 1, Red Hat Discovery 2, Red Hat Insights proxy 1.5, Red Hat Enterprise Linux 6 Problem Types: CWE-125 Description: A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML in
from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:10630 - https://access.redhat.com/errata/RHSA-2025:10698 - https://access.redhat.com/errata/RHSA-2025:10699 - https://access.redhat.com/errata/RHSA-2025:11580 - https://access.redhat.com/errata/RHSA-2025:12098 - https://access.redhat.com/errata/RHSA-2025:12099 - https://access.redhat.com
/access.redhat.com/errata/RHSA-2025:12098 - https://access.redhat.com/errata/RHSA-2025:12099 - https://access.redhat.com/errata/RHSA-2025:12199 - https://access.redhat.com/errata/RHSA-2025:12237 - https://access.redhat.com/errata/RHSA-2025:12239 - https://access.redhat.com/errata/RHSA-2025:12240 - https://access.redhat.com/errata/RHSA-2025:12241 - https://access.redhat.com/errata/RHSA-2025:13267 - https://access.redhat.com/errata/RHSA-2025:13335 - https://access.redhat.com/errata/RHSA-2025:15397 - https://access.redhat.com/errata/RHSA-2025:15827 - https://access.redhat.com/errata/RHSA-2025:15828 - https://access.redhat.com/errata/RHSA-2025:18217 - https://access.redhat.com/errata/RHSA-2025:1
errata/RHSA-2025:15828 - https://access.redhat.com/errata/RHSA-2025:18217 - https://access.redhat.com/errata/RHSA-2025:18218 - https://access.redhat.com/errata/RHSA-2025:18219 - https://access.redhat.com/errata/RHSA-2025:18240 - https://access.redhat.com/errata/RHSA-2025:19020 - https://access.redhat.com/errata/RHSA-2025:19041 - https://access.redhat.com/errata/RHSA-2025:19046 - https://access.redhat.com/errata/RHSA-2025:19894 - https://access.redhat.com/errata/RHSA-2025:21913 - https://access.redhat.com/security/cve/CVE-2025-49796 - https://bugzilla.redhat.com/show_bug.cgi?id=2372385
CVE ID: CVE-2025-49797 State: PUBLISHED Published: 2025-06-25T09:25:53.381Z Last Updated: 2025-08-19T06:48:21.242Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: BROTHER INDUSTRIES, LTD., Toshiba Tec Corporation, Ricoh Company, Ltd. Products: Multiple driver installers for Windows Problem Types: CWE-552 Description: Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. If exploited, an arbitrary program may be executed with the administrative privilege. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]. Addition
l numbers, and versions, refer to the information provided by the respective vendors listed under [References]. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.brother.com/g/s/security/ - https://www.toshibatec.com/information/20250625_01.html - https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000009 - https://jvn.jp/en/vu/JVNVU91819309/
CVE ID: CVE-2025-49809 State: PUBLISHED Published: 2025-07-04T00:00:00.000Z Last Updated: 2025-07-08T14:30:08.475Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: mtr Products: mtr Problem Types: CWE-829 Description: mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Homebrew/homebrew-core/issues/35085 - https://github.com/traviscross/mtr/blob/master/SECURITY - https://github.com/t
com/Homebrew/homebrew-core/issues/35085 - https://github.com/traviscross/mtr/blob/master/SECURITY - https://github.com/traviscross/mtr/commit/5226f105f087c29d3cfad9f28000e7536af91ac6
CVE ID: CVE-2025-49810 State: PUBLISHED Published: 2025-08-21T07:15:27.928Z Last Updated: 2025-08-21T13:49:24.983Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-863 Description: Mattermost versions 10.5.x <= 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-49812 State: PUBLISHED Published: 2025-07-10T16:58:23.943Z Last Updated: 2025-11-04T21:11:18.699Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-287 Description: In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade. Only configurations using "SSLEngine optional" to enable TLS upgrades are affected. Users are recommended to upgrade to version 2.4.64, which removes support for TLS upgrade. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://httpd.apache.org
rade. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html
CVE ID: CVE-2025-49813 State: PUBLISHED Published: 2025-08-12T18:59:19.468Z Last Updated: 2025-08-13T15:04:31.061Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:C) Vendors: Fortinet Products: FortiADC Problem Types: CWE-78 Description: An improper neutralization of special elements used in an OS Command ("OS Command Injection") vulnerability [CWE-78] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a remote and authenticated attacker with low privilege to execute unauthorized code via specifically crafted HTTP parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-25-501
CVE ID: CVE-2025-49814 State: REJECTED Published: N/A Last Updated: 2025-06-12T02:55:09.164Z Description: No description available.
CVE ID: CVE-2025-49815 State: REJECTED Published: N/A Last Updated: 2025-06-12T02:55:08.708Z Description: No description available.
CVE ID: CVE-2025-49816 State: REJECTED Published: N/A Last Updated: 2025-06-12T02:55:08.257Z Description: No description available.
CVE ID: CVE-2025-49817 State: REJECTED Published: N/A Last Updated: 2025-06-12T02:55:07.737Z Description: No description available.
CVE ID: CVE-2025-49818 State: REJECTED Published: N/A Last Updated: 2025-06-12T02:55:07.246Z Description: No description available.
CVE ID: CVE-2025-49819 State: REJECTED Published: N/A Last Updated: 2025-06-12T02:55:06.727Z Description: No description available.
CVE ID: CVE-2025-49820 State: REJECTED Published: N/A Last Updated: 2025-06-12T02:55:06.268Z Description: No description available.
CVE ID: CVE-2025-49821 State: REJECTED Published: N/A Last Updated: 2025-06-12T02:55:05.802Z Description: No description available.
CVE ID: CVE-2025-49822 State: REJECTED Published: N/A Last Updated: 2025-06-12T02:55:05.304Z Description: No description available.
CVE ID: CVE-2025-49823 State: PUBLISHED Published: 2025-06-17T02:21:17.496Z Last Updated: 2025-06-17T15:52:25.295Z Severity: NONE (CVSS N/A CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:N) Vendors: conda Products: constructor Problem Types: CWE-77 Description: (conda) Constructor is a tool which allows constructing an installer for a collection of conda packages. Prior to version 3.11.3, shell installer scripts process the installation prefix (user_prefix) using an eval statement, which executes unsanitized user input as shell code. Although the script runs with user privileges (not root), an attacker could exploit this by injecting arbitrary commands through a malicious path during installatio
s (not root), an attacker could exploit this by injecting arbitrary commands through a malicious path during installation. Exploitation requires explicit user action. This issue has been patched in version 3.11.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/conda/constructor/security/advisories/GHSA-44q9-rg2q-5g99 - https://github.com/conda/constructor/commit/ce4c2d58cfcde2f62d038fb8aba013176c77a0b1
CVE ID: CVE-2025-49824 State: PUBLISHED Published: 2025-06-17T20:40:02.477Z Last Updated: 2025-06-18T15:46:26.019Z Vendors: conda-forge Products: conda-smithy Problem Types: CWE-200 Description: conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository. Prior to version 3.47.1, the travis_encrypt_binstar_token implementation in the conda-smithy package has been identified as vulnerable to an Oracle Padding Attack. This vulnerability results from the use of an outdated and insecure padding scheme during RSA encryption. A malicious actor with access to an oracle system can exploit this flaw by iteratively submittin
during RSA encryption. A malicious actor with access to an oracle system can exploit this flaw by iteratively submitting modified ciphertexts and analyzing responses to infer the plaintext without possessing the private key. This issue has been patched in version 3.47.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/conda-forge/conda-smithy/security/advisories/GHSA-2xf4-hg9q-m58q - https://github.com/conda-forge/conda-smithy/commit/24cc0a55a363479e797c825be3a7f2603ef374a1 - https://github.com/conda-forge/conda-smithy/blob/46a06524eeeb7f59e0969c3967ce5f700643d322/conda_smithy/ci_register.py#L447
CVE ID: CVE-2025-49825 State: PUBLISHED Published: 2025-06-17T21:43:18.288Z Last Updated: 2025-06-18T13:40:25.413Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: gravitational Products: teleport Problem Types: CWE-863 Description: Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gravitational/teleport/security/advisories/GHSA-8cqv-pj7f-pwpc
CVE ID: CVE-2025-49826 State: PUBLISHED Published: 2025-07-03T21:03:24.346Z Last Updated: 2025-07-08T14:33:21.671Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: vercel Products: next.js Problem Types: CWE-444 Description: Next.js is a React framework for building full-stack web applications. From versions 15.0.4-canary.51 to before 15.1.8, a cache poisoning bug leading to a Denial of Service (DoS) condition was found in Next.js. This issue does not impact customers hosted on Vercel. Under certain conditions, this issue may allow a HTTP 204 response to be cached for static pages, leading to the 204 response being served to all users attempting to access the p
response to be cached for static pages, leading to the 204 response being served to all users attempting to access the page. This issue has been addressed in version 15.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vercel/next.js/security/advisories/GHSA-67rr-84xm-4c7r - https://github.com/vercel/next.js/commit/a15b974ed707d63ad4da5b74c1441f5b7b120e93 - https://github.com/vercel/next.js/releases/tag/v15.1.8 - https://vercel.com/changelog/cve-2025-49826
CVE ID: CVE-2025-49827 State: PUBLISHED Published: 2025-07-15T19:26:06.451Z Last Updated: 2025-11-04T21:11:21.326Z Vendors: cyberark Products: conjur Problem Types: CWE-807 Description: Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.22.0 and Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1 through 13.5 and 13.6 are vulnerable to bypass of the IAM authenticator. An attacker who can manipulate the headers signed by AWS can take advantage of a malformed regular expression to redirect the authentication validation request that Secrets Manager, Self-Hosted sends to AWS to a malicious server controlled by
he authentication validation request that Secrets Manager, Self-Hosted sends to AWS to a malicious server controlled by the attacker. This redirection could result in a bypass of the Secrets Manager, Self-Hosted IAM Authenticator, granting the attacker the permissions granted to the client whose request was manipulated. This issue affects both Secrets Manager, Self-Hosted (formerly Conjur Enterprise) and Conjur OSS. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cyberark/conjur/security/advisories/GHSA-gmc5-9mpc-xg75 - https://gith
ogram Container: References: - https://github.com/cyberark/conjur/security/advisories/GHSA-gmc5-9mpc-xg75 - https://github.com/cyberark/conjur/releases/tag/v1.22.1
CVE ID: CVE-2025-49828 State: PUBLISHED Published: 2025-07-15T19:35:33.147Z Last Updated: 2025-11-04T21:11:23.944Z Vendors: cyberark Products: conjur Problem Types: CWE-1336 Description: Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.21.1 and Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1 through 13.4.1 are vulnerable to remote code execution An authenticated attacker who can inject secrets or templates into the Secrets Manager, Self-Hosted database could take advantage of an exposed API endpoint to execute arbitrary Ruby code within the Secrets Manager process. This issue affects both Secrets Mana
sed API endpoint to execute arbitrary Ruby code within the Secrets Manager process. This issue affects both Secrets Manager, Self-Hosted (formerly Conjur Enterprise) and Conjur OSS. Conjur OSS version 1.21.2 and Secrets Manager, Self-Hosted version 13.5 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cyberark/conjur/security/advisories/GHSA-93hx-v9pv-qrm4 - https://github.com/cyberark/conjur/releases/tag/v1.21.2
CVE ID: CVE-2025-49829 State: PUBLISHED Published: 2025-07-15T19:47:59.612Z Last Updated: 2025-11-04T21:11:26.614Z Vendors: cyberark Products: conjur Problem Types: CWE-862 Description: Conjur provides secrets management and application identity for infrastructure. Missing validations in Secrets Manager, Self-Hosted allows authenticated attackers to inject resources into the database and to bypass permission checks. This issue affects Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue. Additional Analyst Notes:
OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cyberark/conjur/security/advisories/GHSA-9w76-m74g-4c2r - https://github.com/cyberark/conjur/releases/tag/v1.22.1
CVE ID: CVE-2025-49830 State: PUBLISHED Published: 2025-07-15T20:04:13.380Z Last Updated: 2025-11-04T21:11:29.226Z Vendors: cyberark Products: conjur Problem Types: CWE-22 Description: Conjur provides secrets management and application identity for infrastructure. An authenticated attacker who is able to load policy can use the policy yaml parser to reference files on the Secrets Manager, Self-Hosted server. These references may be used as reconnaissance to better understand the folder structure of the Secrets Manager/Conjur server or to have the yaml parser include files on the server in the yaml that is processed as the policy loads. This issue affects Secrets Manager, Self-Hosted (formerl
n the server in the yaml that is processed as the policy loads. This issue affects Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cyberark/conjur/security/advisories/GHSA-7m6h-fqrm-m9c5 - https://github.com/cyberark/conjur/releases/tag/v1.22.1
CVE ID: CVE-2025-49831 State: PUBLISHED Published: 2025-07-15T20:10:35.367Z Last Updated: 2025-11-04T21:11:31.855Z Vendors: cyberark Products: conjur Problem Types: CWE-287 Description: An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requests to a malicious server under the attacker’s control. CyberArk believes there to be very few installations where this issue can be actively exploited, though Secrets Manager, Self-Hosted (formerly Conjur Enterprise) prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1 may be affected. Conjur OSS version 1.22.1 an
prior to versions 13.5.1 and 13.6.1 and Conjur OSS prior to version 1.22.1 may be affected. Conjur OSS version 1.22.1 and Secrets Manager, Self-Hosted versions 13.5.1 and 13.6.1 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cyberark/conjur/security/advisories/GHSA-952q-mjrf-wp5j - https://github.com/cyberark/conjur/releases/tag/v1.22.1
CVE ID: CVE-2025-49832 State: PUBLISHED Published: 2025-08-01T17:57:29.933Z Last Updated: 2025-08-01T18:29:18.330Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: asterisk Products: asterisk Problem Types: CWE-476 Description: Asterisk is an open source private branch exchange and telephony toolkit. In versions up to and including 18.26.2, between 20.00.0 and 20.15.0, 20.7-cert6, 21.00.0, 22.00.0 through 22.5.0, there is a remote DoS and possible RCE condition in `asterisk/res/res_stir_shaken /verification.c` that can be exploited when an attacker can set an arbitrary Identity header, or STIR/SHAKEN is enabled, with verification set in the SIP profile associ
ttacker can set an arbitrary Identity header, or STIR/SHAKEN is enabled, with verification set in the SIP profile associated with the endpoint to be attacked. This is fixed in versions 18.26.3, 20.7-cert6, 20.15.1, 21.10.1 and 22.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/asterisk/asterisk/security/advisories/GHSA-mrq5-74j5-f5cr
CVE ID: CVE-2025-49833 State: PUBLISHED Published: 2025-07-15T20:22:49.525Z Last Updated: 2025-07-16T14:02:23.577Z Vendors: RVC-Boss Products: GPT-SoVITS Problem Types: CWE-77 Description: GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in the webui.py open_slice function. slice_opt_root and slice-inp-path takes user input, which is passed to the open_slice function, which concatenates the user input into a command and runs it on the server, leading to arbitrary command execution. At time of publication, no known patched versions are available. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe