Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-30220 State: PUBLISHED Published: 2025-06-10T15:16:39.339Z Last Updated: 2025-06-10T17:13:09.180Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L) Vendors: geoserver Products: geoserver Problem Types: CWE-611, CWE-918 Description: GeoServer is an open source server that allows users to share and edit geospatial data. GeoTools Schema class use of Eclipse XSD library to represent schema data structure is vulnerable to XML External Entity (XXE) exploit. This impacts whoever exposes XML processing with gt-xsd-core involved in parsing, when the documents carry a reference to an external XML schema. The gt-xsd-core Schemas class is not using the EntityRes
when the documents carry a reference to an external XML schema. The gt-xsd-core Schemas class is not using the EntityResolver provided by the ParserHandler (if any was configured). This also impacts users of gt-wfs-ng DataStore where the ENTITY_RESOLVER connection parameter was not being used as intended. This vulnerability is fixed in GeoTools 33.1, 32.3, 31.7, and 28.6.1, GeoServer 2.27.1, 2.26.3, and 2.25.7, and GeoNetwork 4.4.8 and 4.2.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/geoserver/geoserver/security/advisories/GHSA-jj54-8f66-c5pc - https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-2p76-gc46-5fvc - https://github.com
4-8f66-c5pc - https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-2p76-gc46-5fvc - https://github.com/geotools/geotools/security/advisories/GHSA-826p-4gcg-35vw - https://github.com/geonetwork/core-geonetwork/pull/8757 - https://github.com/geonetwork/core-geonetwork/pull/8803 - https://github.com/geonetwork/core-geonetwork/pull/8812 - https://docs.geoserver.org/latest/en/user/production/config.html#production-config-external-entities
CVE ID: CVE-2025-30221 State: PUBLISHED Published: 2025-03-27T14:46:32.430Z Last Updated: 2025-03-27T15:05:37.756Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Shopify Products: pitchfork Problem Types: CWE-113 Description: Pitchfork is a preforking HTTP server for Rack applications. Versions prior to 0.11.0 are vulnerable to HTTP Response Header Injection when used in conjunction with Rack 3. The issue was fixed in Pitchfork release 0.11.0. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Shopify/pitchfork/security/advisories/GHSA-pfqj-w6r6-g86v - https://github.com/Shopify/pitchfork/
: - https://github.com/Shopify/pitchfork/security/advisories/GHSA-pfqj-w6r6-g86v - https://github.com/Shopify/pitchfork/commit/17ed9b61bf9f58957065f7405b66102daf86bf55
CVE ID: CVE-2025-30222 State: PUBLISHED Published: 2025-03-25T23:00:08.995Z Last Updated: 2025-03-26T13:30:34.363Z Vendors: ericcornelissen Products: shescape Problem Types: CWE-200 Description: Shescape is a simple shell escape library for JavaScript. Versions 1.7.2 through 2.1.1 are vulnerable to potential environment variable exposure on Windows with CMD. This impact users of Shescape on Windows that explicitly configure `shell: 'cmd.exe'` or `shell: true` using any of `quote`/`quoteAll`/`escape`/`escapeAll`. An attacker may be able to get read-only access to environment variables. This bug has been patched in v2.1.2. For those who are already using v2 of Shescape, no further changes are
variables. This bug has been patched in v2.1.2. For those who are already using v2 of Shescape, no further changes are required. Those who are are using v1 of Shescape should follow the migration guide to upgrade to v2. There is no plan to release a patch compatible with v1 of Shescape. As a workaround, users can remove all instances of `%` from user input before using Shescape. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ericcornelissen/shescape/security/advisories/GHSA-66pp-5p9w-q87j - https://github.com/ericcornelissen/shescape/pull/1916 - https://github.com/ericcornelissen/shescape/commit/0a81f1eb077bab8caae283a2490cd7be9af179c6 - https://github.c
ll/1916 - https://github.com/ericcornelissen/shescape/commit/0a81f1eb077bab8caae283a2490cd7be9af179c6 - https://github.com/ericcornelissen/shescape/releases/tag/v2.1.2
CVE ID: CVE-2025-30223 State: PUBLISHED Published: 2025-03-31T16:17:05.914Z Last Updated: 2025-03-31T18:21:08.456Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: beego Products: beego Problem Types: CWE-79 Description: Beego is an open-source web framework for the Go programming language. Prior to 2.3.6, a Cross-Site Scripting (XSS) vulnerability exists in Beego's RenderForm() function due to improper HTML escaping of user-controlled data. This vulnerability allows attackers to inject malicious JavaScript code that executes in victims' browsers, potentially leading to session hijacking, credential theft, or account takeover. The vulnerability affects any
rowsers, potentially leading to session hijacking, credential theft, or account takeover. The vulnerability affects any application using Beego's RenderForm() function with user-provided data. Since it is a high-level function generating an entire form markup, many developers would assume it automatically escapes attributes (the way most frameworks do). This vulnerability is fixed in 2.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/beego/beego/security/advisories/GHSA-2j42-h78h-q4fg - https://github.com/beego/beego/commit/939bb18c66406466715ddadd25dd9ffa6f169e25
CVE ID: CVE-2025-30224 State: PUBLISHED Published: 2025-04-01T14:38:43.253Z Last Updated: 2025-05-29T22:03:07.714Z Vendors: mydumper Products: mydumper Problem Types: CWE-200 Description: MyDumper is a MySQL Logical Backup Tool. The MySQL C client library (libmysqlclient) allows authenticated remote actors to read arbitrary files from client systems via a crafted server response to LOAD LOCAL INFILE query, leading to sensitive information disclosure when clients connect to untrusted MySQL servers without explicitly disabling the local infile capability. Mydumper has the local infile option enabled by default and does not have an option to disable it. This can lead to an unexpected arbitrary
al infile option enabled by default and does not have an option to disable it. This can lead to an unexpected arbitrary file read if the Mydumper tool connects to an untrusted server. This vulnerability is fixed in 0.18.2-8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/mydumper/mydumper/security/advisories/GHSA-r8qc-xp3g-c458
CVE ID: CVE-2025-30225 State: PUBLISHED Published: 2025-03-26T16:27:14.665Z Last Updated: 2025-03-26T18:04:53.899Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: directus Products: directus Problem Types: CWE-770 Description: Directus is a real-time API and App dashboard for managing SQL database content. The `@directus/storage-driver-s3` package starting in version 9.22.0 and prior to version 12.0.1, corresponding to Directus starting in version 9.22.0 and prior to 11.5.0, is vulnerable to asset unavailability after a burst of malformed transformations. When making many malformed transformation requests at once, at some point, all assets are served as 403.
ransformations. When making many malformed transformation requests at once, at some point, all assets are served as 403. This causes denial of assets for all policies of Directus, including Admin and Public. Version 12.0.1 of the `@directus/storage-driver-s3` package, corresponding to version 11.5.0 of Directus, fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/directus/directus/security/advisories/GHSA-j8xj-7jff-46mx
CVE ID: CVE-2025-30232 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T14:37:08.614Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Exim Products: Exim Problem Types: CWE-416 Description: A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exim.org/static/doc/security/CVE-2025-30232.txt
CVE ID: CVE-2025-30234 State: PUBLISHED Published: 2025-03-19T00:00:00.000Z Last Updated: 2025-03-19T13:25:07.708Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: MNX Products: SmartOS Problem Types: CWE-321 Description: SmartOS, as used in Triton Data Center and other products, has static host SSH keys in the 60f76fd2-143f-4f57-819b-1ae32684e81b image (a Debian 12 LX zone image from 2024-07-26). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.tritondatacenter.com/tps-2025-002/ - https://smartos.topicbox.com/groups/smartos-discuss/Ta6f13072e6bedddc-M3702e993edd7d6ce8d78dfc8 - https://www.openwall.com/lists/oss-security/2025/03
groups/smartos-discuss/Ta6f13072e6bedddc-M3702e993edd7d6ce8d78dfc8 - https://www.openwall.com/lists/oss-security/2025/03/13/10
CVE ID: CVE-2025-30235 State: PUBLISHED Published: 2025-03-19T00:00:00.000Z Last Updated: 2025-03-19T13:55:06.104Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: SecurEnvoy Products: SecurAccess Problem Types: CWE-362 Description: Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of failed authentication attempts, because concurrent attempts are mishandled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://reserge.org/probabilistically-breaking-securenvoy-totp/ - https://securenvoy.com/wp-content/uploads/2025/03/Rel
https://reserge.org/probabilistically-breaking-securenvoy-totp/ - https://securenvoy.com/wp-content/uploads/2025/03/Release-Notes-9.4.515.pdf
CVE ID: CVE-2025-30236 State: PUBLISHED Published: 2025-03-19T00:00:00.000Z Last Updated: 2025-03-19T13:54:24.631Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: SecurEnvoy Products: SecurAccess Problem Types: CWE-472 Description: Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 allows authentication through only a six-digit TOTP code (skipping a password check) if an HTTP POST request contains a SESSION parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://reserge.org/probabilistically-breaking-securenvoy-totp/ - https://securenvoy.com/wp-content/uploads/2025/03/Release-Notes-9.4.515.pdf
CVE ID: CVE-2025-30247 State: PUBLISHED Published: 2025-09-29T21:07:20.786Z Last Updated: 2025-09-30T14:56:37.134Z Vendors: Western Digital Products: My Cloud Problem Types: CWE-78 Description: An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.westerndigital.com/support/product-security/wdc-25006-western-digital-my-cloud-os-5-firmware-5-31-108
CVE ID: CVE-2025-30254 State: PUBLISHED Published: 2025-04-15T20:56:58.899Z Last Updated: 2025-04-16T15:09:44.983Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Growatt Products: Cloud portal Problem Types: CWE-639 Description: An unauthenticated attacker can obtain a serial number of a smart meter(s) using its owner's username. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04
CVE ID: CVE-2025-30255 State: PUBLISHED Published: 2025-11-11T16:50:35.584Z Last Updated: 2025-11-14T17:34:53.836Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi Software for Windows Problem Types: Denial of Service, CWE-787 Description: Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not presen
enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01398.html
CVE ID: CVE-2025-30256 State: PUBLISHED Published: 2025-08-20T13:09:06.026Z Last Updated: 2025-11-03T18:09:00.836Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Tenda Products: AC6 V5.0 Problem Types: CWE-772 Description: A denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted series of HTTP requests can lead to a reboot. An attacker can send multiple network packets to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2166
CVE ID: CVE-2025-30257 State: PUBLISHED Published: 2025-04-15T21:53:13.608Z Last Updated: 2025-04-16T13:39:45.881Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Growatt Products: Cloud portal Problem Types: CWE-639 Description: Unauthenticated attackers can retrieve serial number of smart meters associated to a specific user account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04
CVE ID: CVE-2025-30258 State: PUBLISHED Published: 2025-03-19T00:00:00.000Z Last Updated: 2025-03-19T20:49:22.417Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L) Vendors: GnuPG Products: GnuPG Problem Types: CWE-754 Description: In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://lists.gnupg.org/pipermail/gnupg-announce/2025q1/000491.html - https://dev.gnupg.org/T7527 - https://dev
ences: - https://lists.gnupg.org/pipermail/gnupg-announce/2025q1/000491.html - https://dev.gnupg.org/T7527 - https://dev.gnupg.org/rG48978ccb4e20866472ef18436a32744350a65158
CVE ID: CVE-2025-30259 State: PUBLISHED Published: 2025-03-19T00:00:00.000Z Last Updated: 2025-03-20T20:36:29.389Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Meta Products: WhatsApp cloud service Problem Types: CWE-noinfo: Insufficient Information Description: The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.bleepingcompute
associated with BIGPRETZEL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.bleepingcomputer.com/news/security/whatsapp-patched-zero-day-flaw-used-in-paragon-spyware-attacks/ - https://citizenlab.ca/2025/03/a-first-look-at-paragons-proliferating-spyware-operations/
CVE ID: CVE-2025-30260 State: PUBLISHED Published: 2025-08-29T17:15:33.267Z Last Updated: 2025-08-29T18:23:55.771Z Vendors: QNAP Systems Inc. Products: Qsync Central Problem Types: CWE-770 Description: An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/secur
( 2025/04/23 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-22
CVE ID: CVE-2025-30261 State: PUBLISHED Published: 2025-08-29T17:15:40.052Z Last Updated: 2025-08-29T18:23:47.808Z Vendors: QNAP Systems Inc. Products: Qsync Central Problem Types: CWE-770 Description: An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.0 ( 2025/06/13 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/secur
( 2025/06/13 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-28
CVE ID: CVE-2025-30262 State: PUBLISHED Published: 2025-08-29T17:15:44.821Z Last Updated: 2025-08-29T18:23:41.588Z Vendors: QNAP Systems Inc. Products: Qsync Central Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.0 ( 2025/06/13 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-28
CVE ID: CVE-2025-30263 State: PUBLISHED Published: 2025-08-29T17:15:49.528Z Last Updated: 2025-08-29T18:23:35.381Z Vendors: QNAP Systems Inc. Products: Qsync Central Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.0 ( 2025/06/13 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-28
CVE ID: CVE-2025-30264 State: PUBLISHED Published: 2025-08-29T17:15:53.952Z Last Updated: 2025-08-30T03:55:37.100Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-77, CWE-78 Description: A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later QuTS hero h5.2.5.3138 build 20250519 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-21
CVE ID: CVE-2025-30265 State: PUBLISHED Published: 2025-08-29T17:15:58.561Z Last Updated: 2025-08-29T18:23:23.852Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-120, CWE-121 Description: A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later QuTS hero h5.2.5.3138 build 20250519 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-
later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-21
CVE ID: CVE-2025-30267 State: PUBLISHED Published: 2025-08-29T17:16:03.790Z Last Updated: 2025-08-29T18:23:17.830Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later QuTS hero h5.2.5.3138 build 20250519 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/
CVE ID: CVE-2025-30268 State: PUBLISHED Published: 2025-08-29T17:16:08.724Z Last Updated: 2025-08-29T18:23:10.854Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later QuTS hero h5.2.5.3138 build 20250519 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/
CVE ID: CVE-2025-30270 State: PUBLISHED Published: 2025-08-29T17:16:13.816Z Last Updated: 2025-08-29T18:23:04.907Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-22 Description: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later QuTS hero h5.2.5.3138 build 20250519 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisor
0519 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-21
CVE ID: CVE-2025-30271 State: PUBLISHED Published: 2025-08-29T17:16:18.464Z Last Updated: 2025-08-29T18:22:57.195Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-22 Description: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later QuTS hero h5.2.5.3138 build 20250519 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisor
CVE ID: CVE-2025-30272 State: PUBLISHED Published: 2025-08-29T17:16:22.812Z Last Updated: 2025-08-29T18:22:51.109Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later QuTS hero h5.2.5.3138 build 20250519 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-21