Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-3219 State: PUBLISHED Published: 2025-04-04T07:31:05.135Z Last Updated: 2025-04-04T13:14:34.983Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: CodeCanyon Products: Perfex CRM Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown function of the file /perfex/clients/project/2 of the component Project Discussions Module. The manipulation of the argument description leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303180 - https://vuldb.com/?ctiid.303180 - https://vuldb.com/?submit.546171 - https://github.com/bytium/vulnerability-research/blob/main/stored-xss-perfex-crm-3.2.1.md
CVE ID: CVE-2025-3220 State: PUBLISHED Published: 2025-04-04T08:00:16.245Z Last Updated: 2025-04-04T13:13:53.242Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: e-Diary Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard.php. The manipulation of the argument Category leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303181 - https://vuldb.com/?ctiid.303181 - https://vuldb.com/?submit.546176 - https://github.com/JunGu-W/cve/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-3221 State: PUBLISHED Published: 2025-06-21T12:44:26.622Z Last Updated: 2025-08-24T11:44:57.166Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-770 Description: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7235496
CVE ID: CVE-2025-3222 State: PUBLISHED Published: 2025-11-07T16:28:45.217Z Last Updated: 2025-11-13T17:16:35.591Z Vendors: GE Vernova Products: Smallworld Problem Types: CWE-287 Description: Improper Authentication vulnerability in GE Vernova Smallworld on Windows, Linux allows Authentication Abuse.This issue affects Smallworld: 5.3.3 and prior versions for Linux, and 5.3.4. and prior versions for Windows. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gevernova.com/content/dam/cyber_security/global/en_US/pdfs/SecurityAdvisory_ImproperAuthentication_SWMFS.pdf
CVE ID: CVE-2025-3223 State: PUBLISHED Published: 2025-05-19T21:03:32.078Z Last Updated: 2025-05-20T13:00:02.792Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: GE Vernova Products: WorkstationST Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova WorkstationST on Windows (EGD Configuration Server modules) allows Path Traversal.This issue affects WorkstationST: WorkstationST V07.10.10C and earlier. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gevernova.com/content/dam/cyber_security/global/en_US/pdfs/2024-09-24_EGD_Config_Server_File_Ove
ferences: - https://www.gevernova.com/content/dam/cyber_security/global/en_US/pdfs/2024-09-24_EGD_Config_Server_File_Overwrite.pdf
CVE ID: CVE-2025-3224 State: PUBLISHED Published: 2025-04-28T19:21:15.851Z Last Updated: 2025-04-28T19:43:24.060Z Vendors: Docker Products: Docker Desktop Problem Types: CWE-269, CWE-59 Description: A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to escalate privileges to SYSTEM. During an update, Docker Desktop attempts to delete files and subdirectories under the path C:\ProgramData\Docker\config with high privileges. However, this directory often does not exist by default, and C:\ProgramData\ allows normal users to create new directories. By creating a malicious Docker\config folder structure at this
ogramData\ allows normal users to create new directories. By creating a malicious Docker\config folder structure at this location, an attacker can force the privileged update process to delete or manipulate arbitrary system files, leading to Elevation of Privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/blog/2022/3/16/abusing-arbitrary-file-deletes-to-escalate-privilege-and-other-great-tricks
CVE ID: CVE-2025-3225 State: PUBLISHED Published: 2025-07-07T09:54:06.033Z Last Updated: 2025-07-07T14:59:26.842Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: run-llama Products: run-llama/llama_index Problem Types: CWE-776 Description: An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llama_index repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service (DoS) by exhausting system memory and potentially causing a system crash. The issue is resolved in version v0.12.29. Additional Analy
usting system memory and potentially causing a system crash. The issue is resolved in version v0.12.29. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/e33c0699-e9a2-49aa-837b-5363205637a2 - https://github.com/run-llama/llama_index/commit/4f6ee062b19212106a2632af9c9521fc7f0a3584
CVE ID: CVE-2025-3227 State: PUBLISHED Published: 2025-06-20T14:31:48.644Z Last Updated: 2025-06-23T20:44:50.189Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-863 Description: Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly enforce channel member management permissions in playbook runs, allowing authenticated users without the 'Manage Channel Members' permission to add or remove users from public and private channels by manipulating playbook run participants when the run is linked to a channel. Additional Analyst Notes: - CISA
hannels by manipulating playbook run participants when the run is linked to a channel. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-3228 State: PUBLISHED Published: 2025-06-20T14:31:49.162Z Last Updated: 2025-06-23T20:45:21.017Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-863 Description: Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly retrieve requestorInfo from playbooks handler for guest users which allows an attacker access to the playbook run. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-3229 State: PUBLISHED Published: 2025-04-04T08:31:06.056Z Last Updated: 2025-04-04T13:13:00.757Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: PHPGurukul Products: Restaurant Table Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /edit-subadmin.php. The manipulation of the argument fullname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP
isclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303244 - https://vuldb.com/?ctiid.303244 - https://vuldb.com/?submit.546178 - https://github.com/D4mps/CVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-3230 State: PUBLISHED Published: 2025-05-30T14:22:09.392Z Last Updated: 2025-05-30T14:42:40.557Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-303 Description: Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fails to properly invalidate personal access tokens upon user deactivation, allowing deactivated users to maintain full system access by exploiting access token validation flaws via continued usage of previously issued tokens. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-3231 State: PUBLISHED Published: 2025-04-04T09:00:15.873Z Last Updated: 2025-06-05T04:34:56.296Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Zoo Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. This issue affects some unknown processing of the file /aboutus.php. The manipulation of the argument pagetitle/pagedes leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303245 - h
ublic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303245 - https://vuldb.com/?ctiid.303245 - https://vuldb.com/?submit.546180 - https://github.com/81a2in9/cve/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-3234 State: PUBLISHED Published: 2025-06-14T05:32:01.040Z Last Updated: 2025-06-17T18:40:09.553Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: ninjateam Products: File Manager Pro – Filester Problem Types: CWE-434 Description: The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.8.8. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Administrators have the ability to extend file man
affected site's server which may make remote code execution possible. Administrators have the ability to extend file manager usage privileges to lower-level users including subscribers, which would make this vulnerability more severe on such sites. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/00df02cd-b4d3-477a-86ee-aa2f9b5216e8?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3310066%40filester%2Ftrunk&old=3294389%40filester%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2025-3235 State: PUBLISHED Published: 2025-04-04T09:31:06.607Z Last Updated: 2025-04-27T19:19:35.498Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Old Age Home Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/profile.php. The manipulation of the argument adminname/contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303261 - https://vuldb.com/?ctiid.303261 - https://vuldb.com/?submit.546223 - https://github.com/Gxxianzhong123/CVE1/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-3236 State: PUBLISHED Published: 2025-04-04T09:31:13.572Z Last Updated: 2025-04-04T14:27:44.061Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Tenda Products: FH1202 Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects unknown code of the file /goform/VirSerDMZ of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303262 - https://vuldb.com/?ctiid.303262 - https://vuldb.com/?submit.546367 - https://lavender-bicycle-a5a.notion.site/Tenda-FH1202-VirSerDMZ-1bc53a41781f809b9e6cdd60fe4e428c?pvs=4 - https://www.tenda.com.cn/
CVE ID: CVE-2025-3237 State: PUBLISHED Published: 2025-04-04T10:00:15.289Z Last Updated: 2025-04-04T12:51:04.521Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Tenda Products: FH1202 Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. This issue affects some unknown processing of the file /goform/wrlwpsset. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303263 - https://vuldb.com/?ctiid.3
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303263 - https://vuldb.com/?ctiid.303263 - https://vuldb.com/?submit.546368 - https://lavender-bicycle-a5a.notion.site/Tenda-FH1202-wrlwpsset-1bc53a41781f80aeb9a6de676fe25e6d?pvs=4 - https://www.tenda.com.cn/
CVE ID: CVE-2025-3238 State: PUBLISHED Published: 2025-04-04T10:00:18.453Z Last Updated: 2025-04-04T12:46:47.203Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Fire Reporting System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of the file /search-request.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.30
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303264 - https://vuldb.com/?ctiid.303264 - https://vuldb.com/?submit.546415 - https://github.com/JunGu-W/cve/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-3239 State: PUBLISHED Published: 2025-04-04T10:31:05.711Z Last Updated: 2025-04-04T12:03:04.261Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Fire Reporting System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. Affected by this vulnerability is an unknown functionality of the file /admin/edit-guard-detail.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303265 - https://vuldb.com/?ctiid.303265 - https://vuldb.com/?submit.546598 - https://github.com/JunGu-W/cve/issues/4 - https://phpgurukul.com/
CVE ID: CVE-2025-3240 State: PUBLISHED Published: 2025-04-04T10:31:08.632Z Last Updated: 2025-04-04T12:01:28.550Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Fire Reporting System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Online Fire Reporting System 1.2. Affected by this issue is some unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303266 - https://vuldb.com/?ctiid.303266 - https://vuldb.com/?submit.546615 - https://github.com/JunGu-W/cve/issues/5 - https://phpgurukul.com/
CVE ID: CVE-2025-3241 State: PUBLISHED Published: 2025-04-04T11:00:11.294Z Last Updated: 2025-04-04T11:56:07.928Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zhangyanbo2007 Products: youkefu Problem Types: CWE-611, CWE-610 Description: A vulnerability, which was classified as problematic, was found in zhangyanbo2007 youkefu up to 4.2.0. This affects an unknown part of the file src/main/java/com/ukefu/webim/web/handler/admin/callcenter/CallCenterRouterController.java of the component XML Document Handler. The manipulation of the argument routercontent leads to xml external entity reference. It is possible to initiate the attack remotely. The exploit has been disclosed to the
to xml external entity reference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303267 - https://vuldb.com/?ctiid.303267 - https://vuldb.com/?submit.547585 - https://github.com/askqiu/cve/blob/main/README.md
CVE ID: CVE-2025-3242 State: PUBLISHED Published: 2025-04-04T11:00:14.598Z Last Updated: 2025-05-15T14:15:34.069Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: e-Diary Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul e-Diary Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /search-result.php. The manipulation of the argument id/searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.30
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303268 - https://vuldb.com/?ctiid.303268 - https://vuldb.com/?submit.547719 - https://github.com/lkncdy/cve/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-3243 State: PUBLISHED Published: 2025-04-04T11:31:05.226Z Last Updated: 2025-05-01T13:14:10.057Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dental_form.php. The manipulation of the argument itr_no/dental_no leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303269 - https://vuldb.com/?ctiid.303269 - https://vuldb.com/?submit.547882 - https://github.com/BinBall/cve/blob/master/README.md - https://code-projects.org/
CVE ID: CVE-2025-3244 State: PUBLISHED Published: 2025-04-04T11:31:07.662Z Last Updated: 2025-04-04T20:36:41.483Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Web-based Pharmacy Product Management System Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add-admin.php of the component Create User Page. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may b
eads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303271 - https://vuldb.com/?ctiid.303271 - https://vuldb.com/?submit.547916 - https://github.com/6s6-630/CVE/blob/main/yaofang.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3245 State: PUBLISHED Published: 2025-04-04T12:00:12.695Z Last Updated: 2025-04-04T13:04:46.915Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Library Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Library Management System 1.0. It has been rated as critical. Affected by this issue is the function Search of the file library_management/src/Library_Management/Forgot.java. The manipulation of the argument txtuname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
otely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303272 - https://vuldb.com/?ctiid.303272 - https://vuldb.com/?submit.548087 - https://github.com/wlingze/IRify_scan/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-3246 State: PUBLISHED Published: 2025-04-17T22:50:22.215Z Last Updated: 2025-04-18T12:01:53.671Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-79 Description: An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed cross-site scripting in GitHub Markdown that used `$$..$$` math blocks. Exploitation required access to the target GitHub Enterprise Server instance and privileged user interaction with the malicious elements. This vulnerability affected version 3.16.1 of GitHub Enterprise Server and was fixed in version 3.16.2. This vulnerability was reported via the GitHub Bug Bounty program. Additional An
Server and was fixed in version 3.16.2. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server@3.16/admin/release-notes#3.16.2
CVE ID: CVE-2025-3247 State: PUBLISHED Published: 2025-04-16T05:23:00.706Z Last Updated: 2025-04-16T13:23:45.320Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: takayukister Products: Contact Form 7 Problem Types: CWE-354 Description: The Contact Form 7 plugin for WordPress is vulnerable to Order Replay in all versions up to, and including, 6.0.5 via the 'wpcf7_stripe_skip_spam_check' function due to insufficient validation on a user controlled key. This makes it possible for unauthenticated attackers to reuse a single Stripe PaymentIntent for multiple transactions. Only the first transaction is processed via Stripe, but the plugin sends a successful email