Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-7754 State: PUBLISHED Published: 2025-07-17T20:02:06.388Z Last Updated: 2025-07-17T20:30:24.426Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /xray_form.php. The manipulation of the argument itr_no leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
e exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316744 - https://vuldb.com/?ctiid.316744 - https://vuldb.com/?submit.615537 - https://github.com/Damon-Gilbert/damon-blog/blob/main/cve-zy.pdf - https://code-projects.org/
CVE ID: CVE-2025-7755 State: PUBLISHED Published: 2025-07-17T20:32:06.954Z Last Updated: 2025-07-17T20:41:53.570Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Ordering System Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in code-projects Online Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/edit_product.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316745 - https://vuldb.com/?ctiid.316745 - https://vuldb.com/?submit.615552 - https://github.com/AlbaDove/cve/issues/4 - https://code-projects.org/
CVE ID: CVE-2025-7756 State: PUBLISHED Published: 2025-07-17T20:44:05.924Z Last Updated: 2025-07-18T14:19:46.249Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: E-Commerce Site Problem Types: CWE-352, CWE-862 Description: A vulnerability classified as problematic has been found in code-projects E-Commerce Site 1.0. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316746 - https://vuldb.com/?ctiid.316746 - http
lyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316746 - https://vuldb.com/?ctiid.316746 - https://vuldb.com/?submit.615620 - https://github.com/BalanceLee/CVE/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-7757 State: PUBLISHED Published: 2025-07-17T21:02:07.706Z Last Updated: 2025-07-18T14:12:19.365Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Land Record System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit-property.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316747 - https://vuldb.com/?ctiid.316747 - https://vuldb.com/?submit.615705 - https://github.com/hex31415926/cve/issues/4 - https://phpgurukul.com/
CVE ID: CVE-2025-7758 State: PUBLISHED Published: 2025-07-17T21:14:08.542Z Last Updated: 2025-07-18T14:58:05.269Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: T6 Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748_B20211015. Affected by this issue is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vu
launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316748 - https://vuldb.com/?ctiid.316748 - https://vuldb.com/?submit.615734 - https://github.com/AnduinBrian/Public/blob/main/Totolink%20T6/Vuln/3.md - https://github.com/AnduinBrian/Public/blob/main/Totolink%20T6/Vuln/3.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-7759 State: PUBLISHED Published: 2025-07-17T21:32:06.733Z Last Updated: 2025-10-20T08:15:07.837Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C) Vendors: thinkgem Products: JeeSite Problem Types: CWE-918 Description: A vulnerability was identified in thinkgem JeeSite up to 5.12.0. This vulnerability affects unknown code of the file modules/core/src/main/java/com/jeesite/common/ueditor/ActionEnter.java of the component UEditor Image Grabber. Such manipulation of the argument Source leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The name of the patch is 1c5e49b081803745214
performed from remote. The exploit is publicly available and might be used. The name of the patch is 1c5e49b0818037452148e0f8ff69ed04cb8fefdc. It is advisable to implement a patch to correct this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316749 - https://vuldb.com/?ctiid.316749 - https://vuldb.com/?submit.615769 - https://github.com/MentalityXt/jeesite_ssrf/tree/main - https://github.com/thinkgem/jeesite5/issues/27 - https://github.com/thinkgem/jeesite5/commit/1c5e49b0818037452148e0f8ff69ed04cb8fefdc
CVE ID: CVE-2025-7761 State: PUBLISHED Published: 2025-08-14T10:01:38.710Z Last Updated: 2025-08-14T14:49:01.373Z Vendors: Akcess-Net Products: Lepszy BIP Problem Types: CWE-79 Description: Lepszy BIP is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in index.php form in one of the parameters allows arbitrary JavaScript to be executed on victim's browser when specially crafted URL is opened. The vendor was contacted early about this disclosure but did not respond in any way. Potentially all versions are vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/posts/2025/07/CVE-2025-7761 - https://www.lepszybip.pl/
CVE ID: CVE-2025-7762 State: PUBLISHED Published: 2025-07-17T21:44:06.380Z Last Updated: 2025-07-18T14:56:54.715Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DI-8100 Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07.26A1. This issue affects some unknown processing of the file /menu_nat_more.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316757 - https://vuldb.com/?ctiid.316757 - https://vuldb.com/?submit.615796 - https://github.com/XiDP0/MyCVE/blob/main/CVE/D-Link%20DI_8100-16.07.26A1/menu_nat_more_asp/menu_nat_more_asp.md - https://www.dlink.com/
CVE ID: CVE-2025-7763 State: PUBLISHED Published: 2025-07-17T22:14:07.803Z Last Updated: 2025-07-18T13:58:45.231Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:OF/RC:C) Vendors: thinkgem Products: JeeSite Problem Types: CWE-601 Description: A vulnerability, which was classified as problematic, was found in thinkgem JeeSite up to 5.12.0. Affected is the function select of the file src/main/java/com/jeesite/modules/cms/web/SiteController.java of the component Site Controller. The manipulation of the argument redirect leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3d06b8d0
h the attack remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316758 - https://vuldb.com/?ctiid.316758 - https://vuldb.com/?submit.616103 - https://github.com/thinkgem/jeesite5/issues/28 - https://github.com/thinkgem/jeesite5/issues/28#issuecomment-3045862239 - https://github.com/thinkgem/jeesite5/commit/3d06b8d009d0267f0255acc87ea19d29d07cedc3
CVE ID: CVE-2025-7764 State: PUBLISHED Published: 2025-07-17T22:32:06.081Z Last Updated: 2025-07-18T13:57:16.782Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Appointment Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /admin/deletedoctorclinic.php. The manipulation of the argument clinic leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment
emotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316764 - https://vuldb.com/?ctiid.316764 - https://vuldb.com/?submit.616175 - https://github.com/jaynewboy/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-7765 State: PUBLISHED Published: 2025-07-17T22:44:06.555Z Last Updated: 2025-07-18T13:56:29.965Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Appointment Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addmanagerclinic.php. The manipulation of the argument clinic leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP V
launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316765 - https://vuldb.com/?ctiid.316765 - https://vuldb.com/?submit.616176 - https://github.com/jaynewboy/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-7766 State: PUBLISHED Published: 2025-07-22T21:44:10.227Z Last Updated: 2025-07-23T19:57:57.931Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Lantronix Products: Provisioning Manager Problem Types: CWE-611 Description: Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remote code execution on hosts with Provisioning Manager installed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-203-02 - https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/105906637/Latest+Versio
ws-events/ics-advisories/icsa-25-203-02 - https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/105906637/Latest+Version+of+Lantronix+Provisioning+Manager+LPM
CVE ID: CVE-2025-7767 State: PUBLISHED Published: 2025-07-18T00:02:06.861Z Last Updated: 2025-07-18T13:54:59.101Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in PHPGurukul Art Gallery Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/edit-art-medium-detail.php. The manipulation of the argument artmed leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: -
tack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316766 - https://vuldb.com/?ctiid.316766 - https://vuldb.com/?submit.616195 - https://github.com/wanglu-cell/myCVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-7768 State: PUBLISHED Published: 2025-08-06T20:28:43.631Z Last Updated: 2025-08-06T20:41:11.923Z Vendors: Tigo Energy Products: Cloud Connect Advanced Problem Types: CWE-798 Description: Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar energy production, and interfering with safety mechanisms. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-217-02
CVE ID: CVE-2025-7769 State: PUBLISHED Published: 2025-08-06T20:42:47.338Z Last Updated: 2025-08-06T20:51:40.366Z Vendors: Tigo Energy Products: Cloud Connect Advanced Problem Types: CWE-77 Description: Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobile_api endpoint when the DEVICE_PING command is called, allowing remote code execution due to improper handling of user input. When used with default credentials, this enables attackers to execute arbitrary commands on the device that could cause potential unauthorized access, service disruption, and data exposure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-
sruption, and data exposure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-217-02
CVE ID: CVE-2025-7770 State: PUBLISHED Published: 2025-08-06T20:45:06.780Z Last Updated: 2025-08-07T14:49:00.875Z Vendors: Tigo Energy Products: Cloud Connect Advanced Problem Types: CWE-337 Description: Tigo Energy's CCA device is vulnerable to insecure session ID generation in their remote API. The session IDs are generated using a predictable method based on the current timestamp, allowing attackers to recreate valid session IDs. When combined with the ability to circumvent session ID requirements for certain commands, this enables unauthorized access to sensitive device functions on connected solar optimization systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
functions on connected solar optimization systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-217-02
CVE ID: CVE-2025-7771 State: PUBLISHED Published: 2025-08-06T09:35:00.684Z Last Updated: 2025-08-06T20:25:31.602Z Vendors: TechPowerUp Products: ThrottleStop Problem Types: CWE-782 Description: ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure implementation can be exploited by a malicious user-mode application to patch the running Windows kernel and invoke arbitrary kernel functions with ring-0 privileges. The vulnerability enables local attackers to execute arbitrary code in kernel context, resulting in privilege escalation and potential follow-on attacks, such as di
execute arbitrary code in kernel context, resulting in privilege escalation and potential follow-on attacks, such as disabling security software or bypassing kernel-level protections. ThrottleStop.sys version 3.0.0.0 and possibly others are affected. Apply updates per vendor instructions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/klsecservices/Advisories/blob/master/K-TechPowerUp-2025-001.md - https://www.techpowerup.com/download/techpowerup-throttlestop/ - https://securelist.com/av-killer-exploiting-throttlestop-sys/117026/
CVE ID: CVE-2025-7772 State: PUBLISHED Published: 2025-07-18T06:45:32.423Z Last Updated: 2025-07-18T13:59:12.195Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: malcure Products: Malcure Malware Scanner — #1 Toolset for Malware Removal Problem Types: CWE-862 Description: The Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 16.8 via the wpmr_inspect_file() function due to a missing capability check. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server, wh
thenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/18ce05fa-0b10-4796-9e78-03e653b862da?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3309451%40wp-malware-removal&new=3309451%40wp-malware-removal&sfp_email=&sfph_mail=
CVE ID: CVE-2025-7773 State: PUBLISHED Published: 2025-08-14T13:52:35.800Z Last Updated: 2025-08-14T14:00:41.556Z Vendors: Rockwell Automation Products: 5032-CFGB16M12P5DR, 5032-CFGB16M12DR, 5032-CFGB16M12M12LDR Problem Types: CWE-863 Description: A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number increments at an interval that correlates to the last two consecutive sign in session interval, making it predictable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1733.html
CVE ID: CVE-2025-7774 State: PUBLISHED Published: 2025-08-14T13:39:59.455Z Last Updated: 2025-08-14T14:01:08.395Z Vendors: Rockwell Automation Products: 5032-CFGB16M12P5DR, 5032-CFGB16M12DR, 5032-CFGB16M12M12LDR Problem Types: CWE-306 Description: A security issue exists within the 5032 16pt Digital Configurable module’s web server. Intercepted session credentials can be used within a 3-minute timeout window, allowing unauthorized users to perform privileged actions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1733.html
CVE ID: CVE-2025-7775 State: PUBLISHED Published: 2025-08-26T12:56:53.794Z Last Updated: 2025-10-21T22:45:20.444Z Vendors: NetScaler Products: ADC, Gateway Problem Types: CWE-119 Description: Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB v
or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers (OR) CR virtual server with type HDX Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938
CVE ID: CVE-2025-7776 State: PUBLISHED Published: 2025-08-26T13:03:42.316Z Last Updated: 2025-08-27T14:33:12.503Z Vendors: NetScaler Products: ADC, Gateway Problem Types: CWE-119 Description: Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bounded to it Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938
CVE ID: CVE-2025-7777 State: PUBLISHED Published: 2025-08-20T11:38:59.459Z Last Updated: 2025-11-20T20:59:38.782Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: mirror registry for Red Hat OpenShift Description: The mirror-registry doesn't properly sanitize the host header HTTP header in HTTP request received, allowing an attacker to perform malicious redirects to attacker-controlled domains or phishing campaigns. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-7777 - https://bugzilla.redhat.com/show_bug.cgi?id=2382545
CVE ID: CVE-2025-7778 State: PUBLISHED Published: 2025-08-15T08:25:39.109Z Last Updated: 2025-08-15T16:14:50.555Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: artkrylov Products: Icons Factory Problem Types: CWE-285 Description: The Icons Factory plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient authorization and improper path validation within the delete_files() function in all versions up to, and including, 1.6.12. This makes it possible for unauthenticated attackers to to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Addition
server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/24f31bbf-883f-4903-847a-7bfc3e45654c?source=cve - https://plugins.trac.wordpress.org/browser/icons-factory/tags/1.6.12/icons-factory.php#L1330 - https://wordpress.org/plugins/icons-factory/#developers
CVE ID: CVE-2025-7779 State: PUBLISHED Published: 2025-09-30T14:52:46.494Z Last Updated: 2025-10-01T03:55:57.792Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Acronis Products: Acronis True Image, Acronis True Image for SanDisk, Acronis True Image for Western Digital Problem Types: CWE-269 Description: Local privilege escalation due to insecure XPC service configuration. The following products are affected: Acronis True Image (macOS) before build 42389, Acronis True Image for SanDisk (macOS) before build 42198, Acronis True Image for Western Digital (macOS) before build 42197. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security
rn Digital (macOS) before build 42197. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-8193