Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-47684 State: PUBLISHED Published: 2025-05-07T14:20:55.218Z Last Updated: 2025-05-07T18:08:01.412Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Smaily Products: Smaily for WP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Smaily Smaily for WP allows Cross Site Request Forgery. This issue affects Smaily for WP: from n/a through 3.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smaily-for-wp/vulnerability/wordpress-smaily-for-wp-3-1-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-47685 State: PUBLISHED Published: 2025-05-07T14:20:55.734Z Last Updated: 2025-05-07T18:07:51.298Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Moloni Products: Contribuinte Checkout Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Moloni Contribuinte Checkout allows Stored XSS. This issue affects Contribuinte Checkout: from n/a through 2.0.02. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/contribuinte-checkout/vulnerability/wordpress-contribuinte-checkout-plugin-2-0-02-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cv
ility/wordpress-contribuinte-checkout-plugin-2-0-02-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47686 State: PUBLISHED Published: 2025-05-07T14:20:56.276Z Last Updated: 2025-05-07T18:07:40.834Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: DELUCKS Products: DELUCKS SEO Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DELUCKS DELUCKS SEO allows Stored XSS. This issue affects DELUCKS SEO: from n/a through 2.5.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/delucks-seo/vulnerability/wordpress-delucks-seo-2-5-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47687 State: PUBLISHED Published: 2025-05-23T12:43:18.746Z Last Updated: 2025-05-27T14:26:17.105Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: StoreKeeper B.V. Products: StoreKeeper for WooCommerce Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in StoreKeeper B.V. StoreKeeper for WooCommerce allows Upload a Web Shell to a Web Server. This issue affects StoreKeeper for WooCommerce: from n/a through 14.4.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/storekeeper-for-woocommerce/vulnerability/wordpress-storekeeper-for-woo
https://patchstack.com/database/wordpress/plugin/storekeeper-for-woocommerce/vulnerability/wordpress-storekeeper-for-woocommerce-14-4-4-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-47688 State: PUBLISHED Published: 2025-05-07T14:20:56.807Z Last Updated: 2025-05-07T18:07:28.371Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Saad Iqbal Products: Advanced File Manager Problem Types: CWE-862 Description: Missing Authorization vulnerability in Saad Iqbal Advanced File Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Advanced File Manager: from n/a through 5.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/file-manager-advanced/vulnerability/wordpress-advanced-file-manager-plugin-5-3-1-broken-access-cont
ase/wordpress/plugin/file-manager-advanced/vulnerability/wordpress-advanced-file-manager-plugin-5-3-1-broken-access-control-to-notice-dismissal-vulnerability?_s_id=cve
CVE ID: CVE-2025-47689 State: PUBLISHED Published: 2025-08-14T10:34:24.327Z Last Updated: 2025-08-14T14:42:40.653Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: johnh10 Products: Video Blogster Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in johnh10 Video Blogster Lite allows Reflected XSS. This issue affects Video Blogster Lite: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/video-blogster-lite/vulnerability/wordpress-video-blogster-lite-plugin-1-2-reflected-cross-site-scriptin
ordpress/plugin/video-blogster-lite/vulnerability/wordpress-video-blogster-lite-plugin-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47690 State: PUBLISHED Published: 2025-05-23T12:43:18.277Z Last Updated: 2025-05-27T14:27:36.958Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: smackcoders Products: Lead Form Data Collection to CRM Problem Types: CWE-862 Description: Missing Authorization vulnerability in smackcoders Lead Form Data Collection to CRM allows Privilege Escalation. This issue affects Lead Form Data Collection to CRM: from n/a through 3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-leads-builder-any-crm/vulnerability/wordpress-lead-form-data-collection-to-crm-plugin-3-1-arbitrary-option-up
/plugin/wp-leads-builder-any-crm/vulnerability/wordpress-lead-form-data-collection-to-crm-plugin-3-1-arbitrary-option-update-to-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-47691 State: PUBLISHED Published: 2025-05-07T14:20:57.321Z Last Updated: 2025-05-07T17:32:55.294Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: Ultimate Member Products: Ultimate Member Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Ultimate Member Ultimate Member allows Code Injection. This issue affects Ultimate Member: from n/a through 2.10.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ultimate-member/vulnerability/wordpress-ultimate-member-plugin-2-10-3-arbitrary-function-call-vulnerability?_s_id=cve
CVE ID: CVE-2025-47692 State: PUBLISHED Published: 2025-05-07T14:20:57.916Z Last Updated: 2025-05-07T17:32:34.324Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: contentstudio Products: ContentStudio Problem Types: CWE-862 Description: Missing Authorization vulnerability in contentstudio ContentStudio allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ContentStudio: from n/a through 1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/contentstudio/vulnerability/wordpress-contentstudio-1-3-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-47693 State: PUBLISHED Published: 2025-05-16T15:45:17.462Z Last Updated: 2025-05-16T16:23:01.002Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: roninwp Products: FAT Services Booking Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Services Booking allows PHP Local File Inclusion. This issue affects FAT Services Booking: from n/a through 5.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fat-services-booking/vulnerability/wordpress-fat-services-booking-plugi
https://patchstack.com/database/wordpress/plugin/fat-services-booking/vulnerability/wordpress-fat-services-booking-plugin-5-5-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-47694 State: PUBLISHED Published: 2025-09-09T16:25:25.744Z Last Updated: 2025-09-09T18:42:04.742Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: solwin Products: Blog Designer PRO Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in solwin Blog Designer PRO. This issue affects Blog Designer PRO: from n/a through 3.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/blog-designer-pro/vulnerability/wordpress-blog-designer-pro-plugin-3-4-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47695 State: PUBLISHED Published: 2025-09-09T16:25:25.028Z Last Updated: 2025-09-09T18:42:11.699Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: solwin Products: Blog Designer PRO Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in solwin Blog Designer PRO. This issue affects Blog Designer PRO: from n/a through 3.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/blog-designer-pro/vulnerability/wordpress-blog-designer-pro-plugin-3-4-7-authenticated-non-arbitrary-local-file-
/plugin/blog-designer-pro/vulnerability/wordpress-blog-designer-pro-plugin-3-4-7-authenticated-non-arbitrary-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-47696 State: PUBLISHED Published: 2025-08-31T03:48:03.893Z Last Updated: 2025-09-02T20:34:01.491Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Solwin Products: Blog Designer PRO Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Solwin Blog Designer PRO.This issue affects Blog Designer PRO: from n/a through 3.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/blog-designer-pro/vulnerability/wordpress-blog-designer-pro-plugin-3-4-7-unauthenticated-non-arbitrary-local-file
plugin/blog-designer-pro/vulnerability/wordpress-blog-designer-pro-plugin-3-4-7-unauthenticated-non-arbitrary-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-47697 State: PUBLISHED Published: 2025-05-30T06:36:16.947Z Last Updated: 2025-05-30T12:18:17.312Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: UCHIDA YOKO CO., LTD. Products: wivia 5 Problem Types: CWE-602 Description: Client-side enforcement of server-side security issue exists in wivia 5 all versions. If exploited, an unauthenticated attacker may bypass authentication and operate the affected device as the moderator user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.uchida.co.jp/wivia/support02.html - https://jvn.jp/en/jp/JVN51394666/
CVE ID: CVE-2025-47698 State: PUBLISHED Published: 2025-09-18T21:07:39.648Z Last Updated: 2025-09-19T13:01:51.935Z Vendors: Cognex Products: In-Sight 2000 series, In-Sight 7000 series, In-Sight 8000 series, In-Sight 9000 series, In-Sight Explorer Problem Types: CWE-319 Description: An adjacent attacker without authentication can exploit this vulnerability to retrieve a set of user-privileged credentials. These credentials are present during the firmware upgrade procedure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06
CVE ID: CVE-2025-47699 State: PUBLISHED Published: 2025-10-23T03:38:46.248Z Last Updated: 2025-10-23T14:34:57.306Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Gallagher Products: Command Centre Server Problem Types: CWE-497 Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the Gallagher Morpho integration could allow an authenticated operator with limited site permissions to make critical changes to local Morpho devices. This issue affects Command Centre Server: 9.30 prior to vEL9.30.2482 (MR2), 9.20 prior to vEL9.20.2819 (MR4), 9.10 prior to vEL9.10.3672 (MR7), 9.00 prior to vEL9.00.3831 (MR8), all ve
2482 (MR2), 9.20 prior to vEL9.20.2819 (MR4), 9.10 prior to vEL9.10.3672 (MR7), 9.00 prior to vEL9.00.3831 (MR8), all versions of 8.90 and prior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-47699
CVE ID: CVE-2025-47700 State: PUBLISHED Published: 2025-08-21T07:28:37.220Z Last Updated: 2025-08-21T14:53:18.203Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-918 Description: Mattermost Server versions 10.5.x <= 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-47701 State: PUBLISHED Published: 2025-05-14T17:01:18.960Z Last Updated: 2025-05-20T16:19:12.229Z Vendors: Drupal Products: Restrict route by IP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Restrict route by IP allows Cross Site Request Forgery.This issue affects Restrict route by IP: from 0.0.0 before 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-047
CVE ID: CVE-2025-47702 State: PUBLISHED Published: 2025-05-14T17:01:36.012Z Last Updated: 2025-05-15T14:36:03.487Z Vendors: Drupal Products: oEmbed Providers Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal oEmbed Providers allows Cross-Site Scripting (XSS).This issue affects oEmbed Providers: from 0.0.0 before 2.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-048
CVE ID: CVE-2025-47703 State: PUBLISHED Published: 2025-05-14T17:01:49.816Z Last Updated: 2025-05-20T16:20:57.033Z Vendors: Drupal Products: COOKiES Consent Management Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting (XSS).This issue affects COOKiES Consent Management: from 0.0.0 before 1.2.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-049
CVE ID: CVE-2025-47704 State: PUBLISHED Published: 2025-05-14T17:02:09.877Z Last Updated: 2025-05-20T16:20:22.120Z Vendors: Drupal Products: Klaro Cookie & Consent Management Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting (XSS).This issue affects Klaro Cookie & Consent Management: from 0.0.0 before 3.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-050
CVE ID: CVE-2025-47705 State: PUBLISHED Published: 2025-05-14T17:02:25.341Z Last Updated: 2025-05-15T14:33:21.343Z Vendors: Drupal Products: IFrame Remove Filter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal IFrame Remove Filter allows Cross-Site Scripting (XSS).This issue affects IFrame Remove Filter: from 0.0.0 before 2.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-051
CVE ID: CVE-2025-47706 State: PUBLISHED Published: 2025-05-14T17:02:44.744Z Last Updated: 2025-05-19T14:27:48.058Z Vendors: Drupal Products: Enterprise MFA - TFA for Drupal Problem Types: CWE-294 Description: Authentication Bypass by Capture-replay vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Remote Services with Stolen Credentials.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-052
CVE ID: CVE-2025-47707 State: PUBLISHED Published: 2025-05-14T17:03:02.330Z Last Updated: 2025-05-15T14:29:37.021Z Vendors: Drupal Products: Enterprise MFA - TFA for Drupal Problem Types: CWE-288 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-053
CVE ID: CVE-2025-47708 State: PUBLISHED Published: 2025-05-14T17:03:14.838Z Last Updated: 2025-05-20T16:17:25.732Z Vendors: Drupal Products: Enterprise MFA - TFA for Drupal Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Cross Site Request Forgery.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-054
CVE ID: CVE-2025-47709 State: PUBLISHED Published: 2025-05-14T17:03:28.895Z Last Updated: 2025-05-19T14:29:13.199Z Vendors: Drupal Products: Enterprise MFA - TFA for Drupal Problem Types: CWE-862 Description: Missing Authorization vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Forceful Browsing.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-055
CVE ID: CVE-2025-47710 State: PUBLISHED Published: 2025-05-14T17:03:48.714Z Last Updated: 2025-05-19T14:31:38.836Z Vendors: Drupal Products: Enterprise MFA - TFA for Drupal Problem Types: CWE-288 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-056
CVE ID: CVE-2025-47711 State: PUBLISHED Published: 2025-06-09T06:03:47.063Z Last Updated: 2025-11-08T07:16:25.135Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8 Advanced Virtualization, Red Hat Enterprise Linux 9 Problem Types: CWE-193 Description: There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical intern
ge data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-47711 - https://bugzilla.redhat.com/show_bug.cgi?id=2365687
CVE ID: CVE-2025-47712 State: PUBLISHED Published: 2025-06-09T05:58:41.198Z Last Updated: 2025-11-08T07:16:28.855Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8 Advanced Virtualization, Red Hat Enterprise Linux 9 Problem Types: CWE-190 Description: A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.
large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-47712 - https://bugzilla.redhat.com/show_bug.cgi?id=2365724 - https://lists.libguestfs.org/archives/list/guestfs@lists.libguestfs.org/thread/67E7AASHHADIY7VAD3FFW2I67LTWVWYF/
CVE ID: CVE-2025-47713 State: PUBLISHED Published: 2025-06-10T23:06:45.585Z Last Updated: 2025-06-14T03:56:14.817Z Vendors: Apache Software Foundation Products: Apache CloudStack Problem Types: CWE-269 Description: A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can reset the password of user-accounts of Admin role type. This operation is not appropriately restricted and allows the attacker to assume control over higher-privileged user-accounts. A malicious Domain Admin attacker can impersonate an Admin user-account and gain access to sensitive APIs and resources that could result in th
n attacker can impersonate an Admin user-account and gain access to sensitive APIs and resources that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of infrastructure managed by CloudStack. Users are recommended to upgrade to Apache CloudStack 4.19.3.0 or 4.20.1.0, which fixes the issue with the following: * Strict validation on Role Type hierarchy: the caller's user-account role must be equal to or higher than the target user-account's role. * API privilege comparison: the caller must possess all privileges of the user they are operating on. * Two new domain-level settings (restricted to the default Admin): - role.typ
vileges of the user they are operating on. * Two new domain-level settings (restricted to the default Admin): - role.types.allowed.for.operations.on.accounts.of.same.role.type: Defines which role types are allowed to act on users of the same role type. Default: "Admin, DomainAdmin, ResourceAdmin". - allow.operations.on.users.in.same.account: Allows/disallows user operations within the same account. Default: true. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cloudstack.apache.org/blog/cve-advisories-4.19.3.0-4.20.1.0/ - https://www.shapeblue.com/shapeblue-security-advisory-apache-cloudstack-security-releases-4-19-3-0-and-4-20-1-0/ - https://lists.apache.org/thread/
hapeblue-security-advisory-apache-cloudstack-security-releases-4-19-3-0-and-4-20-1-0/ - https://lists.apache.org/thread/y3qnwn59t8qggtdohv7k7vw39bgb3d60
CVE ID: CVE-2025-47724 State: PUBLISHED Published: 2025-06-04T07:23:11.629Z Last Updated: 2025-06-04T13:44:48.631Z Vendors: Delta Electronics Products: CNCSoft Problem Types: CWE-787 Description: Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00006_CNCSoft%20-%20Out-of-bounds%20Write.pdf
CVE ID: CVE-2025-47725 State: PUBLISHED Published: 2025-06-04T07:23:51.676Z Last Updated: 2025-06-04T13:44:33.745Z Vendors: Delta Electronics Products: CNCSoft Problem Types: CWE-787 Description: Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00006_CNCSoft%20-%20Out-of-bounds%20Write.pdf