Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-35055 State: PUBLISHED Published: 2025-10-09T20:20:56.432Z Last Updated: 2025-10-10T19:35:18.647Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Newforma Products: Project Center Problem Types: CWE-22, CWE-434 Description: Newforma Info Exchange (NIX) '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrary file to any location writable by the NIX application. An attacker can upload and run a web shell or other content executable by the web server. An attacker can also delete directories. In Newforma before 2023.1, anonymous access is enabled by default (CVE-2025-35062), allowing an otherwise unauthenticate
In Newforma before 2023.1, anonymous access is enabled by default (CVE-2025-35062), allowing an otherwise unauthenticated attacker to effectively authenticate as 'anonymous' and exploit this file upload vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cve.org/CVERecord?id=CVE-2025-35062 - https://www.cve.org/CVERecord?id=CVE-2025-35055 - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json
CVE ID: CVE-2025-35056 State: PUBLISHED Published: 2025-10-09T20:21:10.405Z Last Updated: 2025-10-15T16:15:37.325Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Newforma Products: Project Center Problem Types: CWE-22 Description: Newforma Info Exchange (NIX) '/UserWeb/Common/MarkupServices.ashx' 'StreamStampImage' accepts an encrypted file path and returns an image of the specified file. An authenticated attacker can read arbitrary files subject to the privileges of NIX, typically 'NT AUTHORITY\NetworkService', and the ability of StreamStampImage to process the file. The encrypted file path can be generated using the shared, hard-coded secret key described i
pImage to process the file. The encrypted file path can be generated using the shared, hard-coded secret key described in CVE-2025-35052. This vulnerability cannot be exploited as an 'anonymous' user as described in CVE-2025-35062. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cve.org/CVERecord?id=CVE-2025-35062 - https://www.cve.org/CVERecord?id=CVE-2025-35056 - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json
CVE ID: CVE-2025-35057 State: PUBLISHED Published: 2025-10-09T20:21:29.071Z Last Updated: 2025-10-10T19:33:12.786Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Newforma Products: Project Center Problem Types: CWE-294 Description: Newforma Info Exchange (NIX) '/RemoteWeb/IntegrationServices.ashx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the NIX service account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json - https://www.cve.o
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json - https://www.cve.org/CVERecord?id=CVE-2025-35057
CVE ID: CVE-2025-35058 State: PUBLISHED Published: 2025-10-09T20:21:43.176Z Last Updated: 2025-10-10T19:32:49.847Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Newforma Products: Project Center Problem Types: CWE-294 Description: Newforma Info Exchange (NIX) '/UserWeb/Common/MarkupServices.ashx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the customer-configured NIX service account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json
ichment: References: - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json - https://www.cve.org/CVERecord?id=CVE-2025-35058
CVE ID: CVE-2025-35059 State: PUBLISHED Published: 2025-10-09T20:21:56.759Z Last Updated: 2025-10-10T19:32:28.888Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Newforma Products: Project Center Problem Types: CWE-601 Description: Newforma Info Exchange (NIX) '/DownloadWeb/hyperlinkredirect.aspx' provides an unauthenticated URL redirect via the 'nhl' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json - https://www.cve.org/CVERecord?id=CVE-2025-35059
CVE ID: CVE-2025-35060 State: PUBLISHED Published: 2025-10-09T20:22:10.025Z Last Updated: 2025-10-10T19:30:43.021Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Newforma Products: Project Center Problem Types: CWE-79 Description: Newforma Info Exchange (NIX) provides a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files that contain JavaScript or other content that may be executed or rendered by a web browser using a mobile user agent. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json - https://www.cve
s: - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json - https://www.cve.org/CVERecord?id=CVE-2025-35060
CVE ID: CVE-2025-35061 State: PUBLISHED Published: 2025-10-09T20:22:37.069Z Last Updated: 2025-10-10T19:25:07.187Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Newforma Products: Project Center Problem Types: CWE-294 Description: Newforma Info Exchange (NIX) '/NPCSRemoteWeb/LegacyIntegrationServices.asmx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the user-configured NIX service account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-0
Vulnrichment: References: - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json - https://www.cve.org/CVERecord?id=CVE-2025-35061
CVE ID: CVE-2025-35062 State: PUBLISHED Published: 2025-10-09T20:22:23.136Z Last Updated: 2025-10-10T19:30:03.326Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Newforma Products: Project Center Problem Types: CWE-276 Description: Newforma Info Exchange (NIX) before version 2023.1 by default allows anonymous authentication which allows an unauthenticated attacker to exploit additional vulnerabilities that require authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json - https://www.cve.org/CVERecord?id=CVE-2025-35062
CVE ID: CVE-2025-35112 State: PUBLISHED Published: 2025-08-26T22:19:20.235Z Last Updated: 2025-08-29T18:26:12.502Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: Agiloft Products: Agiloft Problem Types: CWE-611 Description: Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.agiloft.com/display/HELP/What%27s+New%3A+CVE+Resolution - https://raw.githubusercontent.com/c
References: - https://wiki.agiloft.com/display/HELP/What%27s+New%3A+CVE+Resolution - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-239-01.json - https://www.cve.org/CVERecord?id=CVE-2025-35112
CVE ID: CVE-2025-35113 State: PUBLISHED Published: 2025-08-26T22:17:50.086Z Last Updated: 2025-08-29T18:29:40.398Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Agiloft Products: Agiloft Problem Types: CWE-1336 Description: Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a specially crafted payload. Users should upgrade to Agiloft Release 31. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.agiloft.com/display/HELP/What%27s+New%3A+CVE+Resolution - https://raw.githubusercontent.com/cisagov/CSAF/develop/
//wiki.agiloft.com/display/HELP/What%27s+New%3A+CVE+Resolution - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-239-01.json - https://www.cve.org/CVERecord?id=CVE-2025-35113
CVE ID: CVE-2025-35114 State: PUBLISHED Published: 2025-08-26T22:18:12.127Z Last Updated: 2025-08-29T18:29:07.509Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Agiloft Products: Agiloft Problem Types: CWE-1392 Description: Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one of the accounts and the credentials could be cracked offline. Users should upgrade to Agiloft Release 30. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.agiloft.com/display/HELP/What%27s+New%3A+CVE+Resolution - https://raw.githubusercontent.com/cisagov
nces: - https://wiki.agiloft.com/display/HELP/What%27s+New%3A+CVE+Resolution - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-239-01.json - https://www.cve.org/CVERecord?id=CVE-2025-35114
CVE ID: CVE-2025-35115 State: PUBLISHED Published: 2025-08-26T22:18:30.538Z Last Updated: 2025-08-29T18:27:45.417Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Agiloft Products: Agiloft Problem Types: CWE-494 Description: Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the contents of the download URL. Users should upgrade to Agiloft Release 30. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.agiloft.com/display/HELP/What%27s+New%3A+CVE+Resolution - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/whit
/display/HELP/What%27s+New%3A+CVE+Resolution - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-239-01.json - https://www.cve.org/CVERecord?id=CVE-2025-35115
CVE ID: CVE-2025-35430 State: PUBLISHED Published: 2025-09-17T16:51:52.544Z Last Updated: 2025-09-30T15:26:55.208Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: CISA Products: Thorium Problem Types: CWE-22 Description: CISA Thorium does not adequately validate the paths of downloaded files via 'download_ephemeral' and 'download_children'. A remote, authenticated attacker could access arbitrary files subject to file system permissions. Fixed in 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cisagov/thorium/releases/tag/1.1.2 - https://github.com/cisagov/thorium/blob/main/api/src/utils/bounder.rs#L120-L158 - https://
/thorium/releases/tag/1.1.2 - https://github.com/cisagov/thorium/blob/main/api/src/utils/bounder.rs#L120-L158 - https://www.cve.org/CVERecord?id=CVE-2025-35430 - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-259-01.json
CVE ID: CVE-2025-35431 State: PUBLISHED Published: 2025-09-17T16:52:16.293Z Last Updated: 2025-09-30T15:27:33.517Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: CISA Products: Thorium Problem Types: CWE-90 Description: CISA Thorium does not escape user controlled strings used in LDAP queries. An authenticated remote attacker can modify LDAP authorization data such as group memberships. Fixed in 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cisagov/thorium/releases/tag/1.1.1 - https://github.com/cisagov/thorium/commit/7c94a0b9bc2dc55e0c307360452f348bac06820c#diff-45e1e58dfb6faacf9efe778c31ead287d8e13ae07c5dad084c
/cisagov/thorium/commit/7c94a0b9bc2dc55e0c307360452f348bac06820c#diff-45e1e58dfb6faacf9efe778c31ead287d8e13ae07c5dad084c792bc4a0605a68R1007-R1008 - https://www.cve.org/CVERecord?id=CVE-2025-35431 - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-259-01.json
CVE ID: CVE-2025-35432 State: PUBLISHED Published: 2025-09-17T16:52:34.949Z Last Updated: 2025-09-30T16:27:11.928Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: CISA Products: Thorium Problem Types: CWE-400 Description: CISA Thorium does not rate limit requests to send account verification email messages. A remote unauthenticated attacker can send unlimited messages to a user who is pending verification. Fixed in 1.1.1 by adding a rate limit set by default to 10 minutes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cisagov/thorium/releases/tag/1.1.1 - https://github.com/cisagov/thorium/commit/7c94a0b9bc2dc55e0c3073604
ps://github.com/cisagov/thorium/releases/tag/1.1.1 - https://github.com/cisagov/thorium/commit/7c94a0b9bc2dc55e0c307360452f348bac06820c#diff-bf9baa11b76cd169902a976bd17a5a6ee95a4098b2d3d150ba7d8f85b7e21dc9R281-R334 - https://www.cve.org/CVERecord?id=CVE-2025-35432 - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-259-01.json
CVE ID: CVE-2025-35433 State: PUBLISHED Published: 2025-09-17T16:52:53.048Z Last Updated: 2025-09-30T16:29:21.231Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: CISA Products: Thorium Problem Types: CWE-613 Description: CISA Thorium does not properly invalidate previously used tokens when resetting passwords. An attacker that possesses a previously used token could still log in after a password reset. Fixed in 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cisagov/thorium/releases/tag/1.1.1 - https://github.com/cisagov/thorium/commit/7c94a0b9bc2dc55e0c307360452f348bac06820c#diff-57a8b13962b268bcc3690df0f6c0d6ddeca7
s://github.com/cisagov/thorium/commit/7c94a0b9bc2dc55e0c307360452f348bac06820c#diff-57a8b13962b268bcc3690df0f6c0d6ddeca7cbc7b05c3c20903cb07e659330eaR844-R849 - https://www.cve.org/CVERecord?id=CVE-2025-35433 - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-259-01.json
CVE ID: CVE-2025-35434 State: PUBLISHED Published: 2025-09-17T16:53:08.899Z Last Updated: 2025-09-30T16:32:05.835Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: CISA Products: Thorium Problem Types: CWE-295 Description: CISA Thorium does not validate TLS certificates when connecting to Elasticsearch. An unauthenticated attacker with access to a Thorium cluster could impersonate the Elasticsearch service. Fixed in 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cisagov/thorium/releases/tag/1.1.2 - https://github.com/cisagov/thorium/blob/main/api/src/models/backends/setup/elastic_setup.rs#L36-L43 - https://www.cve.o
https://github.com/cisagov/thorium/blob/main/api/src/models/backends/setup/elastic_setup.rs#L36-L43 - https://www.cve.org/CVERecord?id=CVE-2025-35434 - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-259-01.json
CVE ID: CVE-2025-35435 State: PUBLISHED Published: 2025-09-17T16:53:22.388Z Last Updated: 2025-09-30T16:35:00.970Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: CISA Products: Thorium Problem Types: CWE-369 Description: CISA Thorium accepts a stream split size of zero then divides by this value. A remote, authenticated attacker could cause the service to crash. Fixed in commit 89101a6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cisagov/thorium/commit/7c94a0b9bc2dc55e0c307360452f348bac06820c - https://www.cve.org/CVERecord?id=CVE-2025-CVE-2025-35435 - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/
://www.cve.org/CVERecord?id=CVE-2025-CVE-2025-35435 - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-259-01.json
CVE ID: CVE-2025-35436 State: PUBLISHED Published: 2025-09-17T16:53:47.289Z Last Updated: 2025-09-30T16:36:16.594Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: CISA Products: Thorium Problem Types: CWE-248 Description: CISA Thorium uses '.unwrap()' to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially crafted email address or response. Fixed in commit 6a65a27. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mjcarson/thorium/commit/6a65a2711fb2387e8c3eacebc774053741bf5aeb - https://www.cve.org/CVERecord?id=CVE-2025-35436 - https://
son/thorium/commit/6a65a2711fb2387e8c3eacebc774053741bf5aeb - https://www.cve.org/CVERecord?id=CVE-2025-35436 - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-259-01.json
CVE ID: CVE-2025-35451 State: PUBLISHED Published: 2025-09-05T17:43:53.108Z Last Updated: 2025-09-08T18:08:29.882Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: PTZOptics, SMTAV, multiCAM Systems, ValueHD Products: PT12X-SE-xx-G3, PT12X-LINK-4K-xx, PT20X-SE-xx-G3, PT20X-LINK-4K-xx, PT-STUDIOPRO, PT30X-SE-xx-G3, PT30X-LINK-4K-xx, PT12X-STUDIO-4K-xx-G3, PT20X-STUDIO-4K-xx-G3, PT12X-SDI/NDI-xx, PT12X-USB-xx, PT20X-SDI/NDI-xx, Pan-Tilt-Zoom Cameras, PT30X-SDI/NDI-xx, VL Fixed Camera/NDI Fixed Camera, 12x Fixed Camera/NDI Fixed Camera, 20x Fixed Camera/NDI Fixed Camera, EPTZ Fixed Camera/NDI Fixed Camera, HC-EPTZ-NDI, PT12X-4K-xx-G3, PT20X-4K-xx-G3, PT20X-USB
ixed Camera/NDI Fixed Camera, EPTZ Fixed Camera/NDI Fixed Camera, HC-EPTZ-NDI, PT12X-4K-xx-G3, PT20X-4K-xx-G3, PT20X-USB-xx, PT30X-4K-xx-G3 Problem Types: CWE-798 Description: PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa
v/news-events/ics-advisories/icsa-25-162-10 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json - https://www.cve.org/CVERecord?id=CVE-2025-35451 - https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/ - https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai
CVE ID: CVE-2025-35452 State: PUBLISHED Published: 2025-09-05T17:49:02.755Z Last Updated: 2025-09-08T18:07:29.985Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: PTZOptics, SMTAV, multiCAM Systems, ValueHD Products: PT12X-SE-xx-G3, PT12X-LINK-4K-xx, PT20X-SE-xx-G3, PT20X-LINK-4K-xx, PT30X-SE-xx-G3, PT30X-LINK-4K-xx, PT-STUDIOPRO, PT12X-STUDIO-4K-xx-G3, PT20X-STUDIO-4K-xx-G3, PT12X-SDI/NDI-xx, PT12X-USB-xx, PT20X-SDI/NDI-xx, Pan-Tilt-Zoom Cameras, PT30X-SDI/NDI-xx, VL Fixed Camera/NDI Fixed Camera, 12x Fixed Camera/NDI Fixed Camera, 20x Fixed Camera/NDI Fixed Camera, EPTZ Fixed Camera/NDI Fixed Camera, HC-EPTZ-NDI, PT12X-4K-xx-G3, PT20X-4K-xx-G3, PT30X-4K-
ixed Camera/NDI Fixed Camera, EPTZ Fixed Camera/NDI Fixed Camera, HC-EPTZ-NDI, PT12X-4K-xx-G3, PT20X-4K-xx-G3, PT30X-4K-xx-G3, PT20X-USB-xx Problem Types: CWE-798, CWE-1392 Description: PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-162-10.json - https://www.cve.org/CVERecord?id=CVE-2025-35452 - https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/ - https://www.greynoise.io/blog/greynoise
2025-35452 - https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/ - https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai
CVE ID: CVE-2025-35471 State: PUBLISHED Published: 2025-05-13T01:13:14.639Z Last Updated: 2025-05-22T19:32:45.353Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: conda-forge Products: openssl-feedstock, miniforge Problem Types: CWE-427 Description: conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users. By writing a specially crafted openssl.cnf file in OPENSSLDIR, a non-privileged local user can execute arbitrary code with the privileges of the user or process loading openssl-feedstock DLLs. Miniforge before 24.5.0 is also affected.
ode with the privileges of the user or process loading openssl-feedstock DLLs. Miniforge before 24.5.0 is also affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/conda-forge/openssl-feedstock/commit/066e83c5226bafe90a9c0575b077ce30cd5f5921 - https://github.com/conda-forge/openssl-feedstock/issues/201
CVE ID: CVE-2025-35939 State: PUBLISHED Published: 2025-05-07T22:41:29.728Z Last Updated: 2025-10-21T22:55:16.971Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Craft Products: CMS Problem Types: CWE-472 Description: Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and generates a session file on the server at '/var/lib/php/sessions'. Such session files are named 'sess_[session_value]', where '[session_value]' is provided to the client in a 'Set-Cookie' res
session files are named 'sess_[session_value]', where '[session_value]' is provided to the client in a 'Set-Cookie' response header. Craft CMS stores the return URL requested by the client without sanitizing parameters. Consequently, an unauthenticated client can introduce arbitrary values, such as PHP code, to a known local file location on the server. Craft CMS versions 5.7.5 and 4.15.3 have been released to address this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/craftcms/cms/pull/17220 - https://github.com/craftcms/cms/releases/tag/4.15.3 - https://github.com/craftcms/cms/releases/tag/5.7.5 - https://www.cve.org/CVERecord?id=CVE-2025-35939
eases/tag/4.15.3 - https://github.com/craftcms/cms/releases/tag/5.7.5 - https://www.cve.org/CVERecord?id=CVE-2025-35939 - https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-147-01.json
CVE ID: CVE-2025-35940 State: PUBLISHED Published: 2025-06-10T20:27:51.562Z Last Updated: 2025-06-11T14:03:33.168Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: GFI Products: Archiver Problem Types: CWE-798 Description: The ArchiverSpaApi ASP.NET application uses a hard-coded JWT signing key. An unauthenticated remote attacker can generate and use a verifiable JWT token to access protected ArchiverSpaApi URL endpoints. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2025-17