Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-3195 State: PUBLISHED Published: 2025-04-04T01:00:09.418Z Last Updated: 2025-04-04T20:21:22.074Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Online Blood Bank Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in itsourcecode Online Blood Bank Management System 1.0. This issue affects some unknown processing of the file /bbms.php. The manipulation of the argument Search leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303149 - https://vuldb.com/?ctiid.303149 - https://vuldb.com/?submit.544147 - https://github.com/p1026/CVE/issues/21 - https://itsourcecode.com/
CVE ID: CVE-2025-3196 State: PUBLISHED Published: 2025-04-04T01:00:12.961Z Last Updated: 2025-07-23T09:03:04.258Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: Open Asset Import Library Products: Assimp Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD2Importer::InternReadFile in the library code/AssetLib/MD2/MD2Loader.cpp of the component Malformed File Handler. The manipulation of the argument Name leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed
ent Name leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303150 - https://vuldb.com/?ctiid.303150 - https://vuldb.com/?submit.545368 - https://github.com/assimp/assimp/issues/6069 - https://github.com/assimp/assimp/issues/6069#issuecomment-2763273425 - https://github.com/assimp/assimp/milestone/11
CVE ID: CVE-2025-3197 State: PUBLISHED Published: 2025-04-04T05:00:09.872Z Last Updated: 2025-04-04T14:17:14.575Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: expand-object Problem Types: CWE-1321 Description: Versions of the package expand-object from 0.0.0 are vulnerable to Prototype Pollution in the expand() function in index.js. This function expands the given string into an object and allows a nested property to be set without checking the provided keys for sensitive properties like __proto__. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-EXPANDOBJECT-5821390 - https://gist.github.c
CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-EXPANDOBJECT-5821390 - https://gist.github.com/miguelafmonteiro/d8f66af61d14e06338b688f90c4dfa7c - https://github.com/jonschlinkert/expand-object/blob/master/index.js%23L13
CVE ID: CVE-2025-3198 State: PUBLISHED Published: 2025-04-04T01:31:08.985Z Last Updated: 2025-04-04T20:21:07.450Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GNU Products: Binutils Problem Types: CWE-401, CWE-404 Description: A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patc
e public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303151 - https://vuldb.com/?ctiid.303151 - https://vuldb.com/?submit.545773 - https://sourceware.org/bugzilla/show_bug.cgi?id=32716 - https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d - https://www.gnu.org/
CVE ID: CVE-2025-3199 State: PUBLISHED Published: 2025-04-04T02:00:12.980Z Last Updated: 2025-04-04T20:20:58.871Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: ageerle Products: ruoyi-ai Problem Types: CWE-285, CWE-266 Description: A vulnerability was found in ageerle ruoyi-ai up to 2.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file ruoyi-modules/ruoyi-system/src/main/java/org/ruoyi/system/controller/system/SysModelController.java of the component API Interface. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version
The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.2 is able to address this issue. The name of the patch is c0daf641fb25b244591b7a6c3affa35c69d321fe. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303152 - https://vuldb.com/?ctiid.303152 - https://vuldb.com/?submit.545830 - https://github.com/Tr0e/CVE_Hunter/blob/main/ruoyi-ai/ruoyi-ai_UnauthorizedAccess_01.md - https://github.com/ageerle/ruoyi-ai/issues/43#issuecomment-2763091490 - https://github.com/ageerle/ruoyi-ai/issues/43 - https://github.com/gwozai/ruoyi-ai/commit/c0daf6
suecomment-2763091490 - https://github.com/ageerle/ruoyi-ai/issues/43 - https://github.com/gwozai/ruoyi-ai/commit/c0daf641fb25b244591b7a6c3affa35c69d321fe - https://github.com/ageerle/ruoyi-ai/releases/tag/v2.0.2
CVE ID: CVE-2025-3200 State: PUBLISHED Published: 2025-04-28T09:37:02.366Z Last Updated: 2025-04-28T12:23:31.446Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Wiesemann & Theis Products: Com-Server++, Com-Server PoE 3x Isolated, Com-Server 20mA, Com-Server OEM, Com-Server UL Problem Types: CWE-327 Description: An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://certvde.com/en/advisories/VDE-2025-031/
CVE ID: CVE-2025-3201 State: PUBLISHED Published: 2025-05-16T06:00:03.892Z Last Updated: 2025-05-16T17:29:50.710Z Vendors: Unknown Products: Contact Form builder with drag & drop for WordPress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Contact Form builder with drag & drop for WordPress WordPress plugin before 2.4.3 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4248289f-36d2-41c5-baf6-bb2c630482ef/
CVE ID: CVE-2025-3202 State: PUBLISHED Published: 2025-04-04T02:31:06.023Z Last Updated: 2025-04-04T15:46:14.641Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: ageerle Products: ruoyi-ai Problem Types: CWE-285, CWE-266 Description: A vulnerability classified as critical has been found in ageerle ruoyi-ai up to 2.0.0. Affected is an unknown function of the file ruoyi-modules/ruoyi-system/src/main/java/org/ruoyi/system/controller/system/SysNoticeController.java. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.1 is able to address this issue. The
exploit has been disclosed to the public and may be used. Upgrading to version 2.0.1 is able to address this issue. The name of the patch is 6382e177bf90cc56ff70521842409e35c50df32d. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303156 - https://vuldb.com/?ctiid.303156 - https://vuldb.com/?submit.545866 - https://github.com/Tr0e/CVE_Hunter/blob/main/ruoyi-ai/ruoyi-ai_UnauthorizedAccess_02.md - https://github.com/ageerle/ruoyi-ai/issues/44#issue-2957771318 - https://github.com/ageerle/ruoyi-ai/commit/6382e177bf90cc56ff70521842409e35c50df32d - https://github.com/ageerle/ruoyi-ai/releases/tag/v2.0.1
CVE ID: CVE-2025-3203 State: PUBLISHED Published: 2025-04-04T02:31:09.829Z Last Updated: 2025-04-04T15:45:15.623Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Tenda Products: W18E Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the function formSetAccountList of the file /goform/setModules. The manipulation of the argument Password leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303157 - https://vuldb.com/?ctiid.303157 - https://vuldb.com/?submit.545883 - https://github.com/ZIKH26/tmp_store_reports/blob/main/tenda-w18e.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-3204 State: PUBLISHED Published: 2025-04-04T03:00:13.795Z Last Updated: 2025-04-04T15:42:00.575Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: CodeAstro Products: Car Rental System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in CodeAstro Car Rental System 1.0. Affected by this issue is some unknown functionality of the file /returncar.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303158 - https:
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303158 - https://vuldb.com/?ctiid.303158 - https://vuldb.com/?submit.545893 - https://github.com/Lanxiy7th/lx_CVE_report-/issues/21 - https://codeastro.com/
CVE ID: CVE-2025-3205 State: PUBLISHED Published: 2025-04-04T03:00:16.819Z Last Updated: 2025-04-04T14:19:00.752Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: CodeAstro Products: Student Grading System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in CodeAstro Student Grading System 1.0. This affects an unknown part of the file studentsubject.php. The manipulation of the argument studentId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303159 - htt
lic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303159 - https://vuldb.com/?ctiid.303159 - https://vuldb.com/?submit.545894 - https://github.com/Lanxiy7th/lx_CVE_report-/issues/20 - https://codeastro.com/
CVE ID: CVE-2025-3206 State: PUBLISHED Published: 2025-04-04T03:31:05.315Z Last Updated: 2025-04-04T20:20:51.779Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Hospital Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilization leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303160 - https://vuldb.com/?ctiid.303160 - https://vuldb.com/?submit.545895 - https://github.com/Lanxiy7th/lx_CVE_report-/issues/19 - https://code-projects.org/
CVE ID: CVE-2025-3207 State: PUBLISHED Published: 2025-04-04T04:00:10.038Z Last Updated: 2025-04-04T20:20:43.775Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /birthing_form.php. The manipulation of the argument birth_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303161 - https://vuldb.com/?ctiid.303161 - https://vuldb.com/?submit.545934 - https://github.com/2364490073/cve1/blob/main/README.md - https://code-projects.org/
CVE ID: CVE-2025-3208 State: PUBLISHED Published: 2025-04-04T04:31:04.932Z Last Updated: 2025-04-04T14:46:38.672Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /xray_print.php. The manipulation of the argument itr_no leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303162 - https://vuldb.com/?ctiid.303162 - https://vuldb.com/?submit.545960 - https://github.com/ZOKEYE/CVE/blob/main/cve2.md - https://code-projects.org/
CVE ID: CVE-2025-3209 State: PUBLISHED Published: 2025-04-04T05:00:11.651Z Last Updated: 2025-04-04T14:46:19.604Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add_patient.php. The manipulation of the argument itr_no leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303163 - https://vuldb.com/?ctiid.303163 - https://vuldb.com/?submit.545961 - https://github.com/yjlhk/cve/blob/main/README.md - https://code-projects.org/
CVE ID: CVE-2025-3210 State: PUBLISHED Published: 2025-04-04T05:00:13.723Z Last Updated: 2025-04-04T13:12:46.024Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /birthing_pending.php. The manipulation of the argument birth_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
e exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303164 - https://vuldb.com/?ctiid.303164 - https://vuldb.com/?submit.545962 - https://github.com/yujiyuji159/cve/blob/main/README.md - https://code-projects.org/
CVE ID: CVE-2025-3211 State: PUBLISHED Published: 2025-04-04T05:31:05.092Z Last Updated: 2025-05-01T13:13:41.652Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /birthing_print.php. The manipulation of the argument itr_no/birth_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303165 - https://vuldb.com/?ctiid.303165 - https://vuldb.com/?submit.545964 - https://github.com/codinglosser/cve/blob/main/README.md - https://code-projects.org/
CVE ID: CVE-2025-3212 State: PUBLISHED Published: 2025-09-08T12:53:44.984Z Last Updated: 2025-09-09T03:55:19.863Z Vendors: Arm Ltd Products: Bifrost GPU Kernel Driver, Valhall GPU Kernel Driver, Arm 5th Gen GPU Architecture Kernel Driver Problem Types: CWE-416 Description: Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r41p0 through r49p4, from r50p0 through r51p0; Valhall GPU Kernel Driver: from r41p0 throu
frost GPU Kernel Driver: from r41p0 through r49p4, from r50p0 through r51p0; Valhall GPU Kernel Driver: from r41p0 through r49p4, from r50p0 through r54p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p4, from r50p0 through r54p0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://developer.arm.com/documentation/110627/latest
CVE ID: CVE-2025-3213 State: PUBLISHED Published: 2025-04-04T05:31:07.916Z Last Updated: 2025-04-04T13:31:44.967Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: e-Diary Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /view-note.php?noteid=11. The manipulation of the argument remark leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303166 - htt
lic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303166 - https://vuldb.com/?ctiid.303166 - https://vuldb.com/?submit.546128 - https://github.com/lyg986443/cve/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-3214 State: PUBLISHED Published: 2025-04-04T06:00:07.892Z Last Updated: 2025-04-04T14:39:38.606Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: JFinal Products: CMS Problem Types: CWE-22 Description: A vulnerability has been found in JFinal CMS up to 5.2.4 and classified as problematic. Affected by this vulnerability is the function engine.getTemplate of the file /readTemplate. The manipulation of the argument template leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains that thi
c and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains that this is not a bug but a feature. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303169 - https://vuldb.com/?ctiid.303169 - https://vuldb.com/?submit.548985 - https://github.com/Q16G/cve_detail/blob/main/jfinal/jfinal_enjoy_file_read.md
CVE ID: CVE-2025-3215 State: PUBLISHED Published: 2025-04-04T06:31:06.399Z Last Updated: 2025-04-04T14:30:06.937Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Restaurant Table Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes:
has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303170 - https://vuldb.com/?ctiid.303170 - https://vuldb.com/?submit.546164 - https://github.com/Camllia2024/mycve/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-3216 State: PUBLISHED Published: 2025-04-04T06:31:10.232Z Last Updated: 2025-04-04T14:29:21.115Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: e-Diary Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been classified as critical. This affects an unknown part of the file /password-recovery.php. The manipulation of the argument username/contactno leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303171 - https://vuldb.com/?ctiid.303171 - https://vuldb.com/?submit.546166 - https://github.com/rookiekuan/CVE/issues/1 - https://github.com/rookiekuan/CVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-3217 State: PUBLISHED Published: 2025-04-04T07:00:16.759Z Last Updated: 2025-04-04T13:16:51.392Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: e-Diary Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /registration.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303172
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.303172 - https://vuldb.com/?ctiid.303172 - https://vuldb.com/?submit.546168 - https://github.com/rookiekuan/CVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-3218 State: PUBLISHED Published: 2025-05-07T01:10:57.713Z Last Updated: 2025-09-01T00:35:12.463Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: i Problem Types: CWE-295 Description: IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could use the weaknesses, in conjunction with brute force authentication attacks or to bypass authority restrictions, to access the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7232750