Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-6378 State: PUBLISHED Published: 2025-06-26T02:06:33.229Z Last Updated: 2025-06-27T14:52:38.704Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: corporatezen222 Products: Responsive Food and Drink Menu Problem Types: CWE-79 Description: The Responsive Food and Drink Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's display_pdf_menus shortcode in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages th
ssible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/342ccae4-2e77-4a4f-963f-689b882eb7f0?source=cve - https://wordpress.org/plugins/responsive-food-and-drink-menu/#developers
CVE ID: CVE-2025-6379 State: PUBLISHED Published: 2025-06-28T03:21:58.650Z Last Updated: 2025-06-30T16:20:01.584Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: beeteam368 Products: BeeTeam368 Extensions Pro Problem Types: CWE-22 Description: The BeeTeam368 Extensions Pro plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_live_fn() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the originally intended directory. This vulnerability can be used to delete the wp-config.php file, which can be leveraged int
iginally intended directory. This vulnerability can be used to delete the wp-config.php file, which can be leveraged into a site takeover. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/26abf509-f0a9-4849-9028-d6c42832158f?source=cve - https://themeforest.net/item/vidmov-video-wordpress-theme/35542187
CVE ID: CVE-2025-6380 State: PUBLISHED Published: 2025-07-24T09:22:17.749Z Last Updated: 2025-07-24T13:44:39.011Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: onlyoffice Products: ONLYOFFICE Docs Problem Types: CWE-862 Description: The ONLYOFFICE Docs plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within its oo.callback REST endpoint in versions 1.1.0 to 2.2.0. The plugin’s permission callback only verifies that the supplied, encrypted attachment ID maps to an existing attachment post, but does not verify the requester’s identity or capabilities. This makes it possible for unauthenticated attackers to log in as a
not verify the requester’s identity or capabilities. This makes it possible for unauthenticated attackers to log in as an arbitrary user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/608b0506-074b-4df3-8c30-57cfb090f553?source=cve - https://plugins.trac.wordpress.org/browser/onlyoffice/tags/2.2.0/public/views/class-onlyoffice-plugin-callback.php#L57 - https://wordpress.org/plugins/onlyoffice/#developers - https://plugins.trac.wordpress.org/browser/onlyoffice/tags/2.2.0/public/class-onlyoffice-plugin-public.php#L111
CVE ID: CVE-2025-6381 State: PUBLISHED Published: 2025-06-28T03:21:59.274Z Last Updated: 2025-06-30T16:19:16.241Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: beeteam368 Products: BeeTeam368 Extensions Problem Types: CWE-36 Description: The BeeTeam368 Extensions plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_remove_temp_file() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the originally intended directory. This vulnerability can be used to delete the wp-config.php file, which can be leveraged in
riginally intended directory. This vulnerability can be used to delete the wp-config.php file, which can be leveraged into a site takeover. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/aed40456-43c3-4647-9bce-e7c6139c84cd?source=cve - https://themeforest.net/item/vidmov-video-wordpress-theme/35542187
CVE ID: CVE-2025-6382 State: PUBLISHED Published: 2025-07-24T09:22:20.550Z Last Updated: 2025-07-24T13:14:06.275Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: taeggie Products: Taeggie Feed Problem Types: CWE-79 Description: The Taeggie Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's taeggie-feed shortcode in all versions up to, and including, 0.1.10. The plugin’s render() method takes the user-supplied name attribute and injects it directly into a <script> tag - both in the id attribute and inside jQuery.getScript() - without proper escaping. This makes it possible for authenticated attackers, with contributor-leve
jQuery.getScript() - without proper escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c7f5ac78-5195-4b59-abc7-f41e487f9361?source=cve - https://plugins.trac.wordpress.org/browser/taeggie-feed/trunk/taeggie_feed.php - https://wordpress.org/plugins/taeggie-feed/#developers
CVE ID: CVE-2025-6383 State: PUBLISHED Published: 2025-06-26T02:06:34.379Z Last Updated: 2025-06-27T14:52:09.146Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: fmos Products: WP-PhotoNav Problem Types: CWE-79 Description: The WP-PhotoNav plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's photonav shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected pag
el access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c07054e1-b6c9-4e70-aece-09f81bb418ef?source=cve - https://wordpress.org/plugins/wp-photonav/#developers
CVE ID: CVE-2025-6384 State: PUBLISHED Published: 2025-06-19T20:57:04.714Z Last Updated: 2025-06-23T20:22:46.218Z Vendors: CrafterCMS Products: CrafterCMS Problem Types: CWE-913 Description: Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass Sandbox restrictions and obtain RCE (Remote Code Execution). This issue affects CrafterCMS: from 4.0.0 through 4.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.craftercms.org/current/security/advisory.html#cv-2025061901
CVE ID: CVE-2025-6385 State: PUBLISHED Published: 2025-07-24T09:22:18.661Z Last Updated: 2025-07-24T13:31:23.679Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: ejointjp Products: WP Applink Problem Types: CWE-79 Description: The WP Applink plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 0.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA
rary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/75e41e78-ce8c-4248-9eca-b36391fbbbde?source=cve - https://wordpress.org/plugins/wp-applink/#developers
CVE ID: CVE-2025-6386 State: PUBLISHED Published: 2025-07-07T09:55:20.059Z Last Updated: 2025-07-07T14:22:50.915Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: parisneo Products: parisneo/lollms Problem Types: CWE-203 Description: The parisneo/lollms repository is affected by a timing attack vulnerability in the `authenticate_user` function within the `lollms_authentication.py` file. This vulnerability allows attackers to enumerate valid usernames and guess passwords incrementally by analyzing response time differences. The affected version is the latest, and the issue is resolved in version 20.1. The vulnerability arises from the use of Python's default str
is the latest, and the issue is resolved in version 20.1. The vulnerability arises from the use of Python's default string equality operator for password comparison, which compares characters sequentially and exits on the first mismatch, leading to variable response times based on the number of matching initial characters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/6da05485-d219-4f18-9ffc-991053524b67 - https://github.com/parisneo/lollms/commit/f78437f7b5aa39a78c6201912faf4e0645a38c48
CVE ID: CVE-2025-6387 State: PUBLISHED Published: 2025-07-24T09:22:19.383Z Last Updated: 2025-07-24T13:18:59.038Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: jonsisk Products: WP Get The Table Problem Types: CWE-79 Description: The WP Get The Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes:
t arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8bd18b7a-6555-4838-821d-fcbe0be34ac4?source=cve - https://wordpress.org/plugins/wp-get-the-table/#developers
CVE ID: CVE-2025-6388 State: PUBLISHED Published: 2025-10-03T08:23:49.620Z Last Updated: 2025-10-03T15:56:24.432Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Theme-Spirit Products: Spirit Framework Problem Types: CWE-288 Description: The Spirit Framework plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.2.14. This is due to the custom_actions() function not properly validating a user's identity prior to authenticating them to the site. This makes it possible for unauthenticated attackers to log in as any user, including administrators, granted they have access to the administrator's username. Additional
rs to log in as any user, including administrators, granted they have access to the administrator's username. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a4cbc0e7-4328-451f-a595-1ce17e9d0031?source=cve - https://themespirit.com/talemy-changelog/
CVE ID: CVE-2025-6389 State: PUBLISHED Published: 2025-11-25T02:26:49.836Z Last Updated: 2025-11-25T02:26:49.836Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sneeit Products: Sneeit Framework Problem Types: CWE-94 Description: The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeit_articles_pagination_callback() function. This is due to the function accepting user input and then passing that through call_user_func(). This makes it possible for unauthenticated attackers to execute code on the server which can be leveraged to inject backdoors or, for example, create new adm
cated attackers to execute code on the server which can be leveraged to inject backdoors or, for example, create new administrative user accounts. References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b5ed8a39-50b0-4acf-9054-ba389c49f345?source=cve - https://themeforest.net/item/flat-news-responsive-magazine-wordpress-theme/6000513#item-description__release-notes
CVE ID: CVE-2025-6390 State: PUBLISHED Published: 2025-07-10T21:07:02.812Z Last Updated: 2025-07-11T16:57:31.743Z Vendors: Broadcom Products: Brocade SANnav Problem Types: CWE-497 Description: Brocade SANnav before SANnav 2.4.0a logs passwords and pbe keys in the Brocade SANnav server audit logs after installation and under specific conditions. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/exter
Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35909
CVE ID: CVE-2025-6391 State: PUBLISHED Published: 2025-07-17T21:45:27.024Z Last Updated: 2025-07-18T14:11:11.224Z Vendors: Broadcom Products: Brocade ASCG Problem Types: CWE-532 Description: Brocade ASCG before 3.3.0 logs JSON Web Tokens (JWT) in log files. An attacker with access to the log files can withdraw the unencrypted tokens with security implications, such as unauthorized access, session hijacking, and information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35951
CVE ID: CVE-2025-6392 State: PUBLISHED Published: 2025-07-10T21:14:15.748Z Last Updated: 2025-07-11T16:51:45.490Z Vendors: Broadcom Products: Brocade SANnav Problem Types: CWE-532 Description: Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker exec commands. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notifica
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35910
CVE ID: CVE-2025-6393 State: PUBLISHED Published: 2025-06-21T01:00:20.713Z Last Updated: 2025-06-23T14:43:28.605Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: A702R, A3002R, A3002RU, EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.1615/4.0.0-B20230531.1404/4.0.0-B20230721.1521/4.1.2cu.5232_B20210713. It has been classified as critical. Affected is an unknown function of the file /boafrm/formIPv6Addr of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack re
st Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313386 - https://vuldb.com/?ctiid.313386 - https://vuldb.com/?submit.597565 - https://vuldb.com/?submit.597566 - https://vuldb.com/?submit.597591 - https://vuldb.com/?submit.597592 - https://github.com/awindog/cve/blob/main/688/15.md - https://github.com/awindog/cve/blob/main/688/16.md - https://www.totolink.net/
CVE ID: CVE-2025-6394 State: PUBLISHED Published: 2025-06-21T01:31:05.097Z Last Updated: 2025-06-23T14:42:47.669Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Online Hotel Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add_reserve.php. The manipulation of the argument firstname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be
attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313387 - https://vuldb.com/?ctiid.313387 - https://vuldb.com/?submit.597662 - https://github.com/aoc1997/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-6395 State: PUBLISHED Published: 2025-07-10T15:20:46.031Z Last Updated: 2025-11-06T23:37:02.408Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Discovery 2, Red Hat Insights proxy 1.5, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat OpenShift Container Platform 4 Problem Types: CWE-476 Description: A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite()
476 Description: A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:16115 - https://access.redhat.com/errata/RHSA-2025:16116 - https://access.redhat.com/errata/RHSA-2025:17181 - https://access.redhat.com/errata/RHSA-2025:17348 - https://access.redhat.com/errata/RHSA-2025:17361 - https://access.redhat.com/errata/RHSA-2025:17415 - https://access.redhat.com/errata/RHSA-2025:19088 - https://access.redhat.com/security/cve/CVE-2025-6395 - https://bugzilla.redhat.com/show_bug.cgi?id=2376755
CVE ID: CVE-2025-6396 State: PUBLISHED Published: 2025-09-26T14:12:16.717Z Last Updated: 2025-09-26T15:15:13.950Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Webbeyaz Website Design Products: Website Software Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Webbeyaz Website Design Website Software allows Cross-Site Scripting (XSS).This issue affects Website Software: through 2025.07.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0302
CVE ID: CVE-2025-6398 State: PUBLISHED Published: 2025-08-01T08:49:52.112Z Last Updated: 2025-08-01T12:03:09.923Z Vendors: ASUS Products: AI Suite Problem Types: CWE-476 Description: A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash (BSOD). Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.asus.com/content/security-advisory/
CVE ID: CVE-2025-6399 State: PUBLISHED Published: 2025-06-21T03:31:06.960Z Last Updated: 2025-06-23T19:27:58.186Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formIPv6Addr of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
y. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313392 - https://vuldb.com/?ctiid.313392 - https://vuldb.com/?submit.597681 - https://github.com/d2pq/cve/blob/main/616/19.md - https://github.com/d2pq/cve/blob/main/616/19.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6400 State: PUBLISHED Published: 2025-06-21T05:31:08.158Z Last Updated: 2025-06-23T19:27:53.229Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: N300RH Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formPortFw of the component HTTP POST Message Handler. The manipulation of the argument service_type leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichm
d remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313394 - https://vuldb.com/?ctiid.313394 - https://vuldb.com/?submit.597687 - https://github.com/d2pq/cve/blob/main/616/20.md - https://github.com/d2pq/cve/blob/main/616/20.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6401 State: PUBLISHED Published: 2025-06-21T06:31:08.227Z Last Updated: 2025-06-23T19:27:48.226Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R) Vendors: TOTOLINK Products: N300RH Problem Types: CWE-404 Description: A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101. It has been classified as problematic. This affects an unknown part of the file /boafrm/formFilter of the component HTTP POST Message Handler. The manipulation of the argument url leads to denial of service. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313395 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313395 - https://vuldb.com/?ctiid.313395 - https://vuldb.com/?submit.597688 - https://github.com/d2pq/cve/blob/main/616/21.md - https://github.com/d2pq/cve/blob/main/616/21.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6402 State: PUBLISHED Published: 2025-06-21T08:31:06.990Z Last Updated: 2025-06-23T19:27:42.964Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formIpv6Setup of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
y. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313396 - https://vuldb.com/?ctiid.313396 - https://vuldb.com/?submit.597693 - https://github.com/d2pq/cve/blob/main/616/22.md - https://www.totolink.net/