Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-0504 State: PUBLISHED Published: 2025-11-21T21:30:53.934Z Last Updated: 2025-11-21T21:57:07.355Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Black Duck Products: Black Duck SCA Problem Types: CWE-266 Description: Black Duck SCA versions prior to 2025.10.0 had user role permissions configured in an overly broad manner. Users with the scoped Project Manager user role with the Global User Read access permission enabled access to certain Project Administrator functionalities which should have be inaccessible. Exploitation does not grant full system control, but it may enable unauthorized changes to project configurations or access to system
oes not grant full system control, but it may enable unauthorized changes to project configurations or access to system sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.blackduck.com/s/article/Black-Duck-Product-Security-Advisory-CVE-2025-0504
CVE ID: CVE-2025-0505 State: PUBLISHED Published: 2025-05-08T18:37:13.981Z Last Updated: 2025-05-08T18:56:19.850Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: Arista Networks Products: CloudVision Portal Problem Types: CWE-269 Description: On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necessary, which can be used to query or manipulate system state for devices under management. Note that CloudVision as-a-Service is not affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.arista.
ision as-a-Service is not affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/21315-security-advisory-0115
CVE ID: CVE-2025-0506 State: PUBLISHED Published: 2025-02-12T09:22:48.315Z Last Updated: 2025-02-18T17:37:45.609Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: eaglethemes Products: Rise Blocks – A Complete Gutenberg Page Builder Problem Types: CWE-79 Description: The Rise Blocks – A Complete Gutenberg Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the titleTag parameter in all versions up to, and including, 3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute
nticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2ec012e7-b997-466e-8676-8e9467473eae?source=cve - https://plugins.trac.wordpress.org/browser/rise-blocks/tags/3.6/classes/blocks/site-identity.php#L375
CVE ID: CVE-2025-0507 State: PUBLISHED Published: 2025-01-31T04:21:46.537Z Last Updated: 2025-02-10T22:07:59.206Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: snexed Products: Ticketmeo – Sell Tickets – Event Ticketing Problem Types: CWE-79 Description: The Ticketmeo – Sell Tickets – Event Ticketing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 2.3.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages th
ssible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/149edbdf-4a27-4d79-8dd1-b5b3efbf648b?source=cve - https://plugins.trac.wordpress.org/browser/ploxel/tags/2.2.0/ploxel.php#L49 - https://plugins.trac.wordpress.org/changeset/3231203/
CVE ID: CVE-2025-0508 State: PUBLISHED Published: 2025-03-20T10:11:30.798Z Last Updated: 2025-10-15T12:50:48.695Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: aws Products: aws/sagemaker-python-sdk Problem Types: CWE-328 Description: A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This issue can cause integrity problems within the pipeline, potentially leading to erroneous processing outcomes. Additional Analyst No
ause integrity problems within the pipeline, potentially leading to erroneous processing outcomes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/eb056818-5b81-466f-81ee-916058d34af2 - https://github.com/aws/sagemaker-python-sdk/commit/dcdd99f911e8b1a05d19cf1ad939b0fefae47864
CVE ID: CVE-2025-0509 State: PUBLISHED Published: 2025-02-04T20:01:08.865Z Last Updated: 2025-02-17T12:03:46.428Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: sparkle-project Products: Sparkle Problem Types: CWE-552 Description: A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s (Ed)DSA signing checks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sparkle-project/Sparkle/pull/2550 - https://sparkle-project.org/documentation/security-and-reliability/
CVE ID: CVE-2025-0510 State: PUBLISHED Published: 2025-02-04T13:58:55.320Z Last Updated: 2025-02-06T21:02:54.085Z Vendors: Mozilla Products: Thunderbird Problem Types: Address of e-mail sender can be spoofed by malicious email Description: Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040. This vulnerability affects Thunderbird < 128.7 and Thunderbird < 135. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1940570 - https://www.mozilla.org/security/advisories/mfsa2025-10/ - https://www.mozilla.org/security/advisories/mfsa2025-11/
CVE ID: CVE-2025-0511 State: PUBLISHED Published: 2025-02-12T11:11:16.201Z Last Updated: 2025-02-12T16:07:17.207Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: uscnanbu Products: Welcart e-Commerce Problem Types: CWE-79 Description: The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 2.11.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6c26270b-a0a7-4877-aa66-bffe260003df?source=cve - https://plugins.trac.wordpress.org/browser/usc-e-shop/trunk/functions/settlement_func.php#L612 - https://wordpress.org/plugins/usc-e-shop/#developers - https://plugins.trac.wordpress.org/changeset/3235131/
CVE ID: CVE-2025-0512 State: PUBLISHED Published: 2025-03-04T08:23:41.481Z Last Updated: 2025-03-04T15:09:03.580Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: codemacher Products: Structured Content (JSON-LD) #wpsc Problem Types: CWE-79 Description: The Structured Content (JSON-LD) #wpsc plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sc_fs_local_business shortcode in all versions up to, and including, 6.4.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in
es it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8ac5fe69-7885-4fb7-8107-079216d6955e?source=cve - https://plugins.trac.wordpress.org/browser/structured-content/trunk/templates/shortcodes/local-business.php#L10 - https://wordpress.org/plugins/structured-content/#developers - https://plugins.trac.wordpress.org/changeset/3248930/
CVE ID: CVE-2025-0513 State: PUBLISHED Published: 2025-02-11T10:27:26.482Z Last Updated: 2025-02-11T14:41:18.275Z Vendors: Octopus Deploy Products: Octopus Server Problem Types: XSS in Octopus Deploy error page Description: In affected versions of Octopus Server error messages were handled unsafely on the error page. If an adversary could control any part of the error message they could embed code which may impact the user viewing the error message. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://advisories.octopus.com/post/2024/sa2025-04/
CVE ID: CVE-2025-0514 State: PUBLISHED Published: 2025-02-25T21:16:30.521Z Last Updated: 2025-02-25T21:29:02.530Z Vendors: The Document Foundation Products: LibreOffice Problem Types: CWE-20 Description: Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before < 24.8.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.libreoffice.org/about-us/security/advisories/cve-2025-0514
CVE ID: CVE-2025-0515 State: PUBLISHED Published: 2025-01-18T07:05:07.187Z Last Updated: 2025-01-21T21:27:09.468Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: cmsmasters Products: Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme Problem Types: CWE-862 Description: The Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'cmsmasters_hide_admin_notice' function in all versions up to, and including, 2.0.4. This makes it possible for authenticated attackers, with Subscriber-level
n in all versions up to, and including, 2.0.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to 'hide' on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values to true such as registration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/44ad056b-8995-4068-8b05-4fefb8d2ff0a?source=cve - https://themeforest.net/item/buzz-club-night-club-dj-music-festival-event-wordpress-theme/17973992
CVE ID: CVE-2025-0516 State: PUBLISHED Published: 2025-02-12T15:30:47.995Z Last Updated: 2025-02-12T16:00:10.811Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: Improper Authorization in GitLab CE/EE affecting all versions from 17.7 prior to 17.7.4, 17.8 prior to 17.8.2 allow users with limited permissions to perform unauthorized actions on critical project data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/513540 - https://hackerone.com/reports/2914644
CVE ID: CVE-2025-0517 State: REJECTED Published: N/A Last Updated: 2025-02-08T21:32:50.208Z Description: No description available.
CVE ID: CVE-2025-0518 State: PUBLISHED Published: 2025-01-16T16:45:10.761Z Last Updated: 2025-11-03T20:56:41.893Z Vendors: FFmpeg Products: FFmpeg Problem Types: CWE-252, CWE-125 Description: Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C . This issue affects FFmpeg: 7.1. Issue was fixed: https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a This issue was discovered by: Simcha Kosman Additional A
m/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a This issue was discovered by: Simcha Kosman Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a
CVE ID: CVE-2025-0520 State: PUBLISHED Published: 2025-04-29T19:35:37.829Z Last Updated: 2025-11-19T20:29:09.159Z Vendors: ShowDoc Products: ShowDoc Problem Types: CWE-434 Description: An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vulhub/vulhub/tree/master/showdoc/CNVD-2020-26585 - https://github.com/star7th/showdoc/pull/1059 - https://www.cnvd.org.cn/flaw/show/CNVD-2020-26585 - https://www.vulncheck.com/advisories/showdoc-unauthenticated-file-upl
ttps://www.cnvd.org.cn/flaw/show/CNVD-2020-26585 - https://www.vulncheck.com/advisories/showdoc-unauthenticated-file-upload-rce
CVE ID: CVE-2025-0521 State: PUBLISHED Published: 2025-02-18T11:10:18.504Z Last Updated: 2025-02-18T14:26:27.507Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: saadiqbal Products: Post SMTP – WordPress SMTP Plugin with Email Logs and Mobile App for Failure Notifications – Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES and more Problem Types: CWE-79 Description: The Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the from and subject parameter in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web sc
input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/366dfbf1-870c-4ce3-abc4-a2b2f4e72175?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3237626%40post-smtp%2Ftrunk&old=3229076%40post-smtp%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2025-0522 State: PUBLISHED Published: 2025-02-06T06:00:04.828Z Last Updated: 2025-03-14T16:05:51.210Z Vendors: Unknown Products: LikeBot Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The LikeBot WordPress plugin through 0.85 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4c2eed5a-f4d8-457d-a403-7eaced36c491/
CVE ID: CVE-2025-0524 State: REJECTED Published: N/A Last Updated: 2025-03-15T22:16:12.754Z Description: No description available.
CVE ID: CVE-2025-0525 State: PUBLISHED Published: 2025-02-11T09:53:25.849Z Last Updated: 2025-03-24T16:29:52.963Z Vendors: Octopus Deploy Products: Octopus Server Problem Types: File Existence Disclosure Description: In affected versions of Octopus Server the preview import feature could be leveraged to identify the existence of a target file. This could provide an adversary with information that may aid in further attacks against the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://advisories.octopus.com/post/2024/sa2025-02/
CVE ID: CVE-2025-0526 State: PUBLISHED Published: 2025-02-11T10:09:56.067Z Last Updated: 2025-03-18T17:50:08.178Z Vendors: Octopus Deploy Products: Octopus Server Problem Types: File Upload Path Traversal Description: In affected versions of Octopus Deploy it was possible to upload files to unexpected locations on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://advisories.octopus.com/post/2024/sa2025-03/
CVE ID: CVE-2025-0527 State: PUBLISHED Published: 2025-01-17T13:31:05.652Z Last Updated: 2025-02-12T20:31:23.634Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Admission Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Admission Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /signupconfirm.php. The manipulation of the argument in_eml leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA
n disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292411 - https://vuldb.com/?ctiid.292411 - https://vuldb.com/?submit.477899 - https://github.com/Curious-L/-/issues/4 - https://code-projects.org/
CVE ID: CVE-2025-0528 State: PUBLISHED Published: 2025-01-17T14:31:07.148Z Last Updated: 2025-01-17T14:48:09.167Z Severity: N/A (CVSS 8.3 AV:N/AC:L/Au:M/C:C/I:C/A:C) Vendors: Tenda Products: AC8, AC10, AC18 Problem Types: CWE-77, CWE-74 Description: A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16.03.10.20. Affected by this issue is some unknown functionality of the file /goform/telnet of the component HTTP Request Handler. The manipulation leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292412 - https://vuldb.com/?ctiid.292412 - https://vuldb.com/?submit.478175 - https://github.com/Pr0b1em/IoT/blob/master/TendaAC10v16.03.10.20telnet.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-0529 State: PUBLISHED Published: 2025-01-17T15:00:15.332Z Last Updated: 2025-02-12T20:31:25.122Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Train Ticket Reservation System Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, was found in code-projects Train Ticket Reservation System 1.0. This affects an unknown part of the component Login Form. The manipulation of the argument username leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: R
ment. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292413 - https://vuldb.com/?ctiid.292413 - https://vuldb.com/?submit.478447 - https://gist.github.com/higordiego/f9943e2e6ba81a02a85dd07c742eecfc - https://code-projects.org/
CVE ID: CVE-2025-0530 State: PUBLISHED Published: 2025-01-17T15:31:05.513Z Last Updated: 2025-02-12T20:31:25.005Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Job Recruitment Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. This vulnerability affects unknown code of the file /_parse/_feedback_system.php. The manipulation of the argument type leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292414
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292414 - https://vuldb.com/?ctiid.292414 - https://vuldb.com/?submit.478674 - https://github.com/ha0day125/cve/blob/main/xss-ha0day.md - https://code-projects.org/
CVE ID: CVE-2025-0531 State: PUBLISHED Published: 2025-01-17T16:00:19.069Z Last Updated: 2025-01-21T15:06:24.572Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Chat System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/leaveroom.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292415 - https://vuldb.com/?ctiid.29
itional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292415 - https://vuldb.com/?ctiid.292415 - https://vuldb.com/?submit.478688 - https://github.com/LamentXU123/cve/blob/main/sql_injection2.md - https://code-projects.org/
CVE ID: CVE-2025-0532 State: PUBLISHED Published: 2025-01-17T17:31:04.437Z Last Updated: 2025-01-21T15:54:09.836Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Codezips Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/new_submit.php. The manipulation of the argument m_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292416
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292416 - https://vuldb.com/?ctiid.292416 - https://vuldb.com/?submit.479100 - https://github.com/TIANN0/CVE/issues/1
CVE ID: CVE-2025-0533 State: PUBLISHED Published: 2025-01-17T18:00:16.133Z Last Updated: 2025-01-17T20:58:51.643Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Campaign Management System Platform for Women Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Code/sc_login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CIS
can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292417 - https://vuldb.com/?ctiid.292417 - https://vuldb.com/?submit.479119 - https://github.com/onupset/CVE/issues/2 - https://1000projects.org/