Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-0984 State: PUBLISHED Published: 2025-05-06T11:24:44.539Z Last Updated: 2025-05-06T13:30:47.522Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:L) Vendors: Netoloji Software Products: E-Flow Problem Types: CWE-434, CWE-79 Description: Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Netoloji Software E-Flow allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS, File Content Injection.This issue affects E-Flow: before 3.23.00. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://netoloji.com/yazilim-surum-n
w: before 3.23.00. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://netoloji.com/yazilim-surum-notlari/ - https://www.usom.gov.tr/bildirim/tr-25-0102
CVE ID: CVE-2025-0985 State: PUBLISHED Published: 2025-02-28T16:21:35.830Z Last Updated: 2025-08-26T19:48:05.547Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: MQ Problem Types: CWE-526 Description: IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that could be obtained by a local user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7184453
CVE ID: CVE-2025-0986 State: PUBLISHED Published: 2025-03-28T13:21:05.341Z Last Updated: 2025-09-01T01:00:47.318Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L) Vendors: IBM Products: PowerVM Hypervisor Problem Types: CWE-409 Description: IBM PowerVM Hypervisor FW1050.00 through FW1050.30 and FW1060.00 through FW1060.20 could allow a local user, under certain Linux processor combability mode configurations, to cause undetected data loss or errors when performing gzip compression using HW acceleration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7229349
CVE ID: CVE-2025-0987 State: PUBLISHED Published: 2025-11-03T11:51:14.209Z Last Updated: 2025-11-03T13:29:13.791Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L) Vendors: CB Project Ltd. Co. Products: CVLand Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in CB Project Ltd. Co. CVLand allows Parameter Injection.This issue affects CVLand: from 2.1.0 through 20251103. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0371
CVE ID: CVE-2025-0989 State: REJECTED Published: N/A Last Updated: 2025-02-11T20:38:06.371Z Description: No description available.
CVE ID: CVE-2025-0990 State: PUBLISHED Published: 2025-03-05T08:21:54.857Z Last Updated: 2025-03-05T14:25:54.680Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: webtroniclabs Products: I Am Gloria Problem Types: CWE-352 Description: The I Am Gloria plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.4. This is due to missing or incorrect nonce validation on the iamgloria23_gloria_settings_page function. This makes it possible for unauthenticated attackers to reset the tenant ID via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Addition
orged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/33fd44dc-b4f8-4429-8dcd-5161602bb318?source=cve - https://wordpress.org/plugins/gloria-assistant-by-webtronic-labs/
CVE ID: CVE-2025-0993 State: PUBLISHED Published: 2025-05-22T14:31:34.239Z Last Updated: 2025-05-22T14:46:54.356Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-770 Description: An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. This could allow an authenticated attacker to cause a denial of service condition by exhausting server resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/516927 - https://hackerone.com/reports/2967771
CVE ID: CVE-2025-0994 State: PUBLISHED Published: 2025-02-06T16:01:20.000Z Last Updated: 2025-10-21T22:55:30.136Z Vendors: Trimble Products: Cityworks, Cityworks (with office companion) Problem Types: CWE-502 Description: Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer’s Microsoft Internet Information Services (IIS) web server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-04 - https://learn.assetlifecycle.trimb
hment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-04 - https://learn.assetlifecycle.trimble.com/i/1532182-cityworks-customer-communication-2025-02-05-docx/0?
CVE ID: CVE-2025-0995 State: PUBLISHED Published: 2025-02-15T01:17:24.705Z Last Updated: 2025-02-19T14:15:18.869Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_12.html - https://issues.chromium.org/issues/391907159
CVE ID: CVE-2025-0996 State: PUBLISHED Published: 2025-02-15T01:17:25.209Z Last Updated: 2025-02-19T14:14:48.477Z Vendors: Google Products: Chrome Problem Types: CWE-1007 Description: Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_12.html - https://issues.chromium.org/issues/391788835
CVE ID: CVE-2025-0997 State: PUBLISHED Published: 2025-02-15T01:17:25.637Z Last Updated: 2025-02-19T14:13:52.695Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Navigation in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_12.html - https://issues.chromium.org/issues/391666328
CVE ID: CVE-2025-0998 State: REJECTED Published: 2025-02-15T01:17:26.235Z Last Updated: 2025-04-04T15:20:31.501Z Description: No description available.
CVE ID: CVE-2025-0999 State: PUBLISHED Published: 2025-02-19T16:55:30.675Z Last Updated: 2025-02-19T20:08:12.953Z Vendors: Google Products: Chrome Problem Types: CWE-122 Description: Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_18.html - https://issues.chromium.org/issues/394350433
CVE ID: CVE-2025-10000 State: PUBLISHED Published: 2025-09-30T03:35:26.344Z Last Updated: 2025-09-30T13:18:11.965Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: patrickposner Products: Qyrr – simply and modern QR-Code creation Problem Types: CWE-434 Description: The Qyrr – simply and modern QR-Code creation plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the blob_to_file() function in all versions up to, and including, 2.0.7. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execut
ibutor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3ff54694-64c4-4112-b126-aabd3e09144b?source=cve - https://plugins.trac.wordpress.org/browser/qyrr-code/trunk/inc/class-qyrr-rest.php#L94
CVE ID: CVE-2025-10001 State: PUBLISHED Published: 2025-09-10T06:38:50.376Z Last Updated: 2025-09-10T15:43:14.465Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: wpallimport Products: Import any XML, CSV or Excel File to WordPress Problem Types: CWE-434 Description: The Import any XML, CSV or Excel File to WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import functionality in all versions up to, and including, 3.9.3. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload unsafe files like .phar files on the affected site's server which may make
ministrator-level access and above, to upload unsafe files like .phar files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bb03aeb8-32ab-4962-bc95-b10fb7bd7fcf?source=cve - https://plugins.trac.wordpress.org/changeset/3358208/wp-all-import/trunk/classes/upload.php
CVE ID: CVE-2025-10002 State: PUBLISHED Published: 2025-09-20T04:27:56.228Z Last Updated: 2025-09-22T15:06:52.297Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: clickwhale Products: ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages Problem Types: CWE-89 Description: The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to SQL Injection via the export_csv() function in all versions up to, and including, 2.5.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make
fficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This may be exploitable by lower level users if access to the plugin is granted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d6eba6da-ac14-4914-a807-6e234b80ee71?source=cve - https://plugins.trac.wordpress.org/changeset/3361848/clickwhale/trunk/includes/admin/Clickwhale_Ajax.php
CVE ID: CVE-2025-10003 State: PUBLISHED Published: 2025-09-06T02:24:19.345Z Last Updated: 2025-09-08T20:15:58.372Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: stiofansisland Products: UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP Problem Types: CWE-89 Description: The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘upload_file_remove’ function and 'htmlvar' parameter in all versions up to, and including, 1.2.44 due to insufficient escaping on the user supplied parameter and la
arameter in all versions up to, and including, 1.2.44 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/df5ddcc0-7bc2-4895-a07f-0b373802bf36?source=cve - https://github.com/AyeCode/userswp/pull/850/commits/9d7c694b950b23eda8194c54aeff2f70ab517c3a#diff-33415cffa33da6d2d0a692f7bae398b9cda70959235316b0ffb99d5ce7a5dea5R155
mmits/9d7c694b950b23eda8194c54aeff2f70ab517c3a#diff-33415cffa33da6d2d0a692f7bae398b9cda70959235316b0ffb99d5ce7a5dea5R155 - https://plugins.trac.wordpress.org/log/userswp/
CVE ID: CVE-2025-10004 State: PUBLISHED Published: 2025-10-09T12:04:30.109Z Last Updated: 2025-10-09T13:16:38.980Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-770 Description: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.12 to 18.2.8, 18.3 to 18.3.4, and 18.4 to 18.4.2 that could make the GitLab instance unresponsive or severely degraded by sending crafted GraphQL queries requesting large repository blobs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/10/08/patch-release-gitlab-18-4-2-released/ - https://gitlab.com/gitlab-or
ces: - https://about.gitlab.com/releases/2025/10/08/patch-release-gitlab-18-4-2-released/ - https://gitlab.com/gitlab-org/gitlab/-/issues/568121 - https://hackerone.com/reports/3026555
CVE ID: CVE-2025-10006 State: PUBLISHED Published: 2025-10-18T06:42:45.649Z Last Updated: 2025-10-20T18:54:49.608Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpbakery Products: WPBakery Page Builder Problem Types: CWE-79 Description: The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rev_slider_vc' shortcode in all versions up to, and including, 8.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a
ttackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable when RevSlider is also installed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4d7b12e5-0de7-45f4-84e0-083818912623?source=cve - https://kb.wpbakery.com/docs/preface/release-notes/
CVE ID: CVE-2025-10008 State: PUBLISHED Published: 2025-10-30T05:28:27.857Z Last Updated: 2025-10-30T14:01:45.215Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: remyb92 Products: Translate WordPress and go Multilingual – Weglot Problem Types: CWE-862 Description: The Translate WordPress and go Multilingual – Weglot plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'clean_options' function in all versions up to, and including, 5.1. This makes it possible for unauthenticated attackers to delete limited transients that contain cached plugin options. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
o delete limited transients that contain cached plugin options. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bb2a8a6f-fe97-4588-a084-64f502a40c51?source=cve - https://plugins.trac.wordpress.org/browser/weglot/trunk/src/actions/front/class-clean-options.php#L33 - https://plugins.trac.wordpress.org/changeset/3383165/
CVE ID: CVE-2025-10009 State: PUBLISHED Published: 2025-09-22T09:20:03.168Z Last Updated: 2025-09-22T13:09:03.098Z Vendors: Invoice Ninja Products: Invoice Ninja 5 Problem Types: CWE-434 Description: Incorrect handling of uploaded files in the admin "Restore" function in Invoice Ninja <= 5.11.72 allows attackers with admin credentials to execute arbitrary code on the server via uploaded .php files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/invoiceninja/invoiceninja/commit/02151b570b226b4584a8e61b06b10be9366da3de
CVE ID: CVE-2025-10011 State: PUBLISHED Published: 2025-09-05T14:02:06.020Z Last Updated: 2025-09-09T15:18:56.331Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /module/TabelaArredondamento/edit. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322736 -
and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322736 - https://vuldb.com/?ctiid.322736 - https://vuldb.com/?submit.643544 - https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10011.md - https://github.com/marcelomulder/CVE/blob/main/i-educar/SQL%20Injection%20(Blind%20Time-Based)%20Vulnerability%20in%20%60id%60%20Parameter%20on%20%60.module.TabelaArredondamento.edit%60%20Endpoint.md
CVE ID: CVE-2025-10012 State: PUBLISHED Published: 2025-09-05T14:32:05.213Z Last Updated: 2025-09-05T19:33:11.362Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file educar_historico_escolar_lst.php. Such manipulation of the argument ref_cod_aluno leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322737 - htt
cly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322737 - https://vuldb.com/?ctiid.322737 - https://vuldb.com/?submit.643549 - https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10012.md - https://github.com/marcelomulder/CVE/blob/main/i-educar/SQL%20Injection%20(Blind%20Time-Based)%20Vulnerability%20in%20ref_cod_aluno%20Parameter%20on%20educar_historico_escolar_lst.php%20Endpoint.md
CVE ID: CVE-2025-10013 State: PUBLISHED Published: 2025-09-05T15:32:05.124Z Last Updated: 2025-09-05T19:33:23.464Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-284, CWE-266 Description: A vulnerability was detected in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /exportacao-para-o-seb. Performing manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322738 - https://vuldb.com/?ctiid.322738 - https://vuldb
s: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322738 - https://vuldb.com/?ctiid.322738 - https://vuldb.com/?submit.643567 - https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10013.md - https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Access%20Control%20Vulnerability%20%20in%20%60exportacao-para-o-seb%60%20Endpoint.md
CVE ID: CVE-2025-10014 State: PUBLISHED Published: 2025-09-05T17:32:07.024Z Last Updated: 2025-09-05T17:41:45.247Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: elunez Products: eladmin Problem Types: CWE-285, CWE-266 Description: A flaw has been found in elunez eladmin up to 2.7. This impacts the function updateUserEmail of the file /api/users/updateEmail/ of the component Email Address Handler. Executing manipulation of the argument id/email can lead to improper authorization. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is said to be difficult. The exploit has been published and may be
of this nature are highly complex. The exploitability is said to be difficult. The exploit has been published and may be used. It is required to know the RSA-encrypted password of the attacked user account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322739 - https://vuldb.com/?ctiid.322739 - https://vuldb.com/?submit.643840 - https://www.cnblogs.com/aibot/p/19063332
CVE ID: CVE-2025-10015 State: PUBLISHED Published: 2025-09-16T10:03:22.903Z Last Updated: 2025-09-16T19:26:58.684Z Vendors: Sparkle Project Products: Sparkle Problem Types: CWE-863 Description: The Sparkle framework includes an XPC service Downloader.xpc, by default this service is private to the application its bundled with. A local unprivileged attacker can register this XPC service globally which will inherit TCC permissions of the application. Lack of validation of connecting client allows the attacker to copy TCC-protected files to an arbitrary location. Access to other resources beyond granted-permissions requires user interaction with a system prompt asking for permission. This issue
r resources beyond granted-permissions requires user interaction with a system prompt asking for permission. This issue was fixed in version 2.7.2 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/09/CVE-2025-10015 - https://github.com/sparkle-project/Sparkle - https://github.com/sparkle-project/Sparkle/discussions/2764
CVE ID: CVE-2025-10016 State: PUBLISHED Published: 2025-09-16T10:03:28.701Z Last Updated: 2025-09-16T19:27:29.447Z Vendors: Sparkle Project Products: Sparkle Problem Types: CWE-863 Description: The Sparkle framework includes a helper tool Autoupdate. Due to lack of authentication of connecting clients a local unprivileged attacker can request installation of crafted malicious PKG file by racing to connect to the daemon when other app spawns it as root. This results in local privilege escalation to root privileges. It is worth noting that it is possible to spawn Autopudate manually via Installer XPC service. However this requires the victim to enter credentials upon system authorization dialo
anually via Installer XPC service. However this requires the victim to enter credentials upon system authorization dialog creation that can be modified by the attacker. This issue was fixed in version 2.7.2 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/09/CVE-2025-10015 - https://github.com/sparkle-project/Sparkle - https://github.com/sparkle-project/Sparkle/discussions/2764
CVE ID: CVE-2025-10018 State: PUBLISHED Published: 2025-11-14T13:22:19.173Z Last Updated: 2025-11-14T15:45:02.839Z Vendors: OpenSolution Products: QuickCMS Problem Types: CWE-79 Description: QuickCMS is vulnerable to multiple Stored XSS in language editor functionality (languages). Malicious attacker with admin privileges can inject arbitrary HTML and JS into website, which will be rendered/executed on every page. By default admin user is not able to add JavaScript into the website. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions we
of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/posts/2025/11/CVE-2025-9982 - https://opensolution.org/cms-system-quick-cms.html