Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-29835 State: PUBLISHED Published: 2025-05-13T16:58:59.407Z Last Updated: 2025-09-10T00:09:33.730Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wi
Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-125, CWE-476 Description: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update
ation over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29835
CVE ID: CVE-2025-29836 State: PUBLISHED Published: 2025-05-13T16:59:00.086Z Last Updated: 2025-09-10T00:09:34.357Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wi
ion: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29836
CVE ID: CVE-2025-29837 State: PUBLISHED Published: 2025-05-13T16:59:00.715Z Last Updated: 2025-09-10T00:09:34.920Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wi
Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-59 Description: Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to
on: Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to disclose information locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29837
CVE ID: CVE-2025-29838 State: PUBLISHED Published: 2025-05-13T16:59:01.390Z Last Updated: 2025-09-10T00:09:35.488Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2025 (Server Core installation), Windows 11 Version 24H2, Windows Server 2025 Problem Types: CWE-476 Description: Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29838
CVE ID: CVE-2025-29839 State: PUBLISHED Published: 2025-05-13T16:59:01.882Z Last Updated: 2025-09-10T00:09:36.160Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wind
indows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-125 Description: Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally. Additional
n: Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29839
CVE ID: CVE-2025-29840 State: PUBLISHED Published: 2025-05-13T16:59:02.573Z Last Updated: 2025-09-10T00:09:36.965Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-121 Description: Stack-based buf
Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-121 Description: Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29840
CVE ID: CVE-2025-29841 State: PUBLISHED Published: 2025-05-13T16:59:03.238Z Last Updated: 2025-09-10T00:09:37.532Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows Server 2025 (Server Core installation), Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2025 Problem Types: CWE-362, CWE-416 Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Servi
ent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker to elevate privileges locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29841
CVE ID: CVE-2025-29842 State: PUBLISHED Published: 2025-05-13T16:59:03.789Z Last Updated: 2025-09-10T00:09:38.028Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 22H2, Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2019, Windows Server 2025, Windows 10 Version 21H2, Windows 11 Version 23H2, Windows 10 Version 1607, Windows 10 Version 1507, Windows 11 version 22H2, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019 (Server Core installation), Windows 10 Version 1809, Windows Server 2025 (Server C
re installation), Windows Server 2019 (Server Core installation), Windows 10 Version 1809, Windows Server 2025 (Server Core installation), Windows 11 version 22H3 Problem Types: CWE-349 Description: Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29842
CVE ID: CVE-2025-29865 State: PUBLISHED Published: 2025-08-07T01:30:37.885Z Last Updated: 2025-08-07T13:25:39.749Z Vendors: TAGFREE Products: X-Free Uploader Problem Types: CWE-22 Description: : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TAGFREE X-Free Uploader XFU allows Path Traversal.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0085, from 2.0.1.0034 before 2.0.1.0035. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.boho.or.kr/kr/bbs/view.do?searchCnd=&bbsId=B0000302&searchWrd=&menuNo=205023&pageIndex=1&categoryCode=&nttId=71825
CVE ID: CVE-2025-29866 State: PUBLISHED Published: 2025-08-07T05:09:53.284Z Last Updated: 2025-08-07T13:37:56.611Z Vendors: TAGFREE Products: X-Free Uploader Problem Types: CWE-73 Description: : External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU allows : Parameter Injection.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0085, from 2.0.1.0034 before 2.0.1.0035. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.boho.or.kr/kr/bbs/view.do?searchCnd=&bbsId=B0000302&searchWrd=&menuNo=205023&pageIndex=1&categoryCode=&nttId=71827
CVE ID: CVE-2025-29868 State: PUBLISHED Published: 2025-04-01T07:56:28.633Z Last Updated: 2025-04-10T15:03:07.021Z Vendors: Apache Software Foundation Products: Apache Answer Problem Types: CWE-495 Description: Private Data Structure Returned From A Public Method vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.2. If a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of that accessing user. Users are recommended to upgrade to version 1.4.5, which fixes the issue. In the new version, administrators can set whether external content can be displayed. Additional An
ich fixes the issue. In the new version, administrators can set whether external content can be displayed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/l7pohw5g03g3qsvrz8pqc9t29mdv5lhf
CVE ID: CVE-2025-29870 State: PUBLISHED Published: 2025-04-09T09:03:35.579Z Last Updated: 2025-04-10T14:24:24.090Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Inaba Denki Sangyo Co., Ltd. Products: AC-WPS-11ac, AC-WPS-11ac-P, AC-WPSM-11ac, AC-WPSM-11ac-P, AC-PD-WPS-11ac, AC-PD-WPS-11ac-P Problem Types: CWE-306 Description: Missing authentication for critical function vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote unauthenticated attacker may obtain the product configuration information including authentication information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.inaba.co.jp/abaniact/n
ication information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.inaba.co.jp/abaniact/news/security_20250404.pdf - https://jvn.jp/en/vu/JVNVU93925742/
CVE ID: CVE-2025-29871 State: PUBLISHED Published: 2025-06-06T15:52:49.989Z Last Updated: 2025-06-06T16:36:10.951Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-125 Description: An out-of-bounds read vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-16
CVE ID: CVE-2025-29872 State: PUBLISHED Published: 2025-06-06T15:52:45.331Z Last Updated: 2025-06-06T16:36:16.913Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-770 Description: An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advis
CVE ID: CVE-2025-29873 State: PUBLISHED Published: 2025-06-06T15:52:40.536Z Last Updated: 2025-06-06T16:36:22.590Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-16
CVE ID: CVE-2025-29874 State: PUBLISHED Published: 2025-08-29T17:04:43.116Z Last Updated: 2025-08-29T18:25:29.609Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4907 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-19
CVE ID: CVE-2025-29875 State: PUBLISHED Published: 2025-08-29T17:05:24.575Z Last Updated: 2025-08-29T18:25:23.665Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4907 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-19
CVE ID: CVE-2025-29876 State: PUBLISHED Published: 2025-06-06T15:52:36.353Z Last Updated: 2025-06-06T16:36:28.464Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-16
CVE ID: CVE-2025-29877 State: PUBLISHED Published: 2025-06-06T15:52:31.206Z Last Updated: 2025-06-06T16:36:33.858Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-16
CVE ID: CVE-2025-29878 State: PUBLISHED Published: 2025-08-29T17:06:15.798Z Last Updated: 2025-08-29T18:25:17.722Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4907 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-19
CVE ID: CVE-2025-29879 State: PUBLISHED Published: 2025-08-29T17:06:28.385Z Last Updated: 2025-08-29T18:25:11.513Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4907 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-19
CVE ID: CVE-2025-29882 State: PUBLISHED Published: 2025-08-29T17:14:18.812Z Last Updated: 2025-08-29T18:25:05.280Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later QuTS hero h5.2.5.3138 build 20250519 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/
19 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-21
CVE ID: CVE-2025-29883 State: PUBLISHED Published: 2025-06-06T15:54:29.327Z Last Updated: 2025-06-06T16:35:06.639Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-295 Description: An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the security of the system. We have already fixed the vulnerability in the following versions: File Station 5 5.5.6.4791 and later and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-09
CVE ID: CVE-2025-29884 State: PUBLISHED Published: 2025-06-06T15:54:34.504Z Last Updated: 2025-06-06T16:34:58.993Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-295 Description: An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the security of the system. We have already fixed the vulnerability in the following versions: File Station 5 5.5.6.4791 and later and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-09
CVE ID: CVE-2025-29885 State: PUBLISHED Published: 2025-06-06T15:54:38.867Z Last Updated: 2025-06-06T16:34:52.698Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-295 Description: An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the security of the system. We have already fixed the vulnerability in the following versions: File Station 5 5.5.6.4791 and later and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-09
CVE ID: CVE-2025-29886 State: PUBLISHED Published: 2025-08-29T17:14:25.686Z Last Updated: 2025-08-29T18:24:57.359Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4907 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-19
CVE ID: CVE-2025-29887 State: PUBLISHED Published: 2025-08-29T17:14:32.736Z Last Updated: 2025-08-29T18:24:51.513Z Vendors: QNAP Systems Inc. Products: QuRouter Problem Types: CWE-77, CWE-78 Description: A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.5.1.060 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-25
CVE ID: CVE-2025-29888 State: PUBLISHED Published: 2025-08-29T17:14:39.588Z Last Updated: 2025-08-29T18:24:45.881Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4907 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-19
CVE ID: CVE-2025-29889 State: PUBLISHED Published: 2025-08-29T17:14:45.448Z Last Updated: 2025-08-29T18:24:39.599Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4907 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-19