Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-48861 State: PUBLISHED Published: 2025-08-14T09:07:24.465Z Last Updated: 2025-08-14T15:47:23.792Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Bosch Rexroth AG Products: ctrlX OS - Setup Problem Types: CWE-284 Description: A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-129652.html
CVE ID: CVE-2025-48862 State: PUBLISHED Published: 2025-08-14T09:08:01.853Z Last Updated: 2025-08-14T15:46:38.467Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Bosch Rexroth AG Products: ctrlX OS - Setup Problem Types: CWE-1104, CWE-311 Description: Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set. However, only the private key - if available in the backup - is encrypted, while the backup file itself remains unencrypted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-129652.html
CVE ID: CVE-2025-48865 State: PUBLISHED Published: 2025-05-30T06:14:45.819Z Last Updated: 2025-05-30T12:24:19.086Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: fabiolb Products: fabio Problem Types: CWE-345, CWE-348 Description: Fabio is an HTTP(S) and TCP router for deploying applications managed by consul. Prior to version 1.6.6, Fabio allows clients to remove X-Forwarded headers (except X-Forwarded-For) due to a vulnerability in how it processes hop-by-hop headers. Fabio adds HTTP headers like X-Forwarded-Host and X-Forwarded-Port when routing requests to backend applications. Since the receiving application should trust these headers, allowing HTTP
hen routing requests to backend applications. Since the receiving application should trust these headers, allowing HTTP clients to remove or modify them creates potential security vulnerabilities. Some of these custom headers can be removed and, in certain cases, manipulated. The attack relies on the behavior that headers can be defined as hop-by-hop via the HTTP Connection header. This issue has been patched in version 1.6.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/fabiolb/fabio/security/advisories/GHSA-q7p4-7xjv-j3wf - https://github.com/fabiolb/fabio/commit/fdaf1e966162e9dd3b347ffdd0647b39dc71a1a3 - https://github.com/fabiolb/fabio/releases/tag/
ithub.com/fabiolb/fabio/commit/fdaf1e966162e9dd3b347ffdd0647b39dc71a1a3 - https://github.com/fabiolb/fabio/releases/tag/v1.6.6
CVE ID: CVE-2025-48866 State: PUBLISHED Published: 2025-06-02T15:46:19.909Z Last Updated: 2025-06-09T15:03:29.894Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: owasp-modsecurity Products: ModSecurity Problem Types: CWE-1050 Description: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeArg` - this is the same action but an alias) is vulnerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue
nerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue. As a workaround, avoid using rules that contain the `sanitiseArg` (or `sanitizeArg`) action. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-f82j-8pp7-cw2w - https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-859r-vvv8-rm8r - https://github.com/owasp-modsecurity/ModSecurity/commit/3a54ccea62d3f7151bb08cb78d60c5e90b53ca2e - https://github.com/owasp-modsecurity/ModSecurity/wiki/Reference-Manual-(v2.x)#sanitisearg
CVE ID: CVE-2025-48867 State: PUBLISHED Published: 2025-09-24T17:25:42.227Z Last Updated: 2025-09-24T17:36:10.261Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: horilla-opensource Products: horilla Problem Types: CWE-79 Description: Horilla is a free and open source Human Resource Management System (HRMS). A stored cross-site scripting (XSS) vulnerability in Horilla HRM 1.3.0 allows authenticated admin or privileged users to inject malicious JavaScript payloads into multiple fields in the Project and Task modules. These payloads persist in the database and are executed when viewed by an admin or other privileged users through the web interface. Although th
n the database and are executed when viewed by an admin or other privileged users through the web interface. Although the issue is not exploitable by unauthenticated users, it still poses a high risk of session hijacking and unauthorized action within high-privilege accounts. At time of publication there is no known patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/horilla-opensource/horilla/security/advisories/GHSA-w242-xv47-j55r
CVE ID: CVE-2025-48868 State: PUBLISHED Published: 2025-09-24T13:51:04.834Z Last Updated: 2025-09-24T18:45:55.219Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: horilla-opensource Products: horilla Problem Types: CWE-95 Description: Horilla is a free and open source Human Resource Management System (HRMS). An authenticated Remote Code Execution (RCE) vulnerability exists in Horilla 1.3.0 due to the unsafe use of Python’s eval() function on a user-controlled query parameter in the project_bulk_archive view. This allows privileged users (e.g., administrators) to execute arbitrary system commands on the server. While having Django’s DEBUG=True makes exploitatio
, administrators) to execute arbitrary system commands on the server. While having Django’s DEBUG=True makes exploitation visibly easier by returning command output in the HTTP response, this is not required. The vulnerability can still be exploited in DEBUG=False mode by using blind payloads such as a reverse shell, leading to full remote code execution. This issue has been patched in version 1.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/horilla-opensource/horilla/security/advisories/GHSA-h6qj-pwmx-wjhw - https://github.com/horilla-opensource/horilla/commit/b0aab62b3a5fe6b7114b5c58db129b3744b4d8cc - https://drive.google.com/file/d/1XQAJilt77QxkjG
lla-opensource/horilla/commit/b0aab62b3a5fe6b7114b5c58db129b3744b4d8cc - https://drive.google.com/file/d/1XQAJilt77QxkjGEa94CsZRqZIZXa3ET9/view?usp=sharing - https://drive.google.com/file/d/1hnI9AK3fnpVrTlTRF7aRJsKhZCDIm2Ve/view?usp=sharing
CVE ID: CVE-2025-48869 State: PUBLISHED Published: 2025-09-24T17:17:40.979Z Last Updated: 2025-09-24T17:26:56.854Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: horilla-opensource Products: horilla Problem Types: CWE-284 Description: Horilla is a free and open source Human Resource Management System (HRMS). Unauthenticated users can access uploaded resume files in Horilla 1.3.0 by directly guessing or predicting file URLs. These files are stored in a publicly accessible directory, allowing attackers to retrieve sensitive candidate information without authentication. At time of publication there is no known patch. Additional Analyst Notes: - CISA ADP Vulnrich
on without authentication. At time of publication there is no known patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/horilla-opensource/horilla/security/advisories/GHSA-99h5-x29f-727w
CVE ID: CVE-2025-48870 State: REJECTED Published: N/A Last Updated: 2025-05-30T19:26:44.029Z Description: No description available.
CVE ID: CVE-2025-48871 State: REJECTED Published: N/A Last Updated: 2025-05-30T19:27:39.849Z Description: No description available.
CVE ID: CVE-2025-48872 State: REJECTED Published: N/A Last Updated: 2025-05-30T19:31:04.542Z Description: No description available.
CVE ID: CVE-2025-48873 State: REJECTED Published: N/A Last Updated: 2025-05-30T19:37:55.494Z Description: No description available.
CVE ID: CVE-2025-48874 State: REJECTED Published: N/A Last Updated: 2025-05-30T19:38:41.231Z Description: No description available.
CVE ID: CVE-2025-48875 State: PUBLISHED Published: 2025-05-30T06:26:24.366Z Last Updated: 2025-05-30T13:32:43.097Z Vendors: freescout-help-desk Products: freescout Problem Types: CWE-79 Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.181, the system's incorrect validation of last_name and first_name during profile data updates allows for the injection of arbitrary JavaScript code, which will be executed in a flesh-message when the data is deleted, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This issue has been patched in version 1.8.181. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/f
s been patched in version 1.8.181. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-mjjx-rv96-w9hq - https://github.com/freescout-help-desk/freescout/commit/508dda16853a39fcb6c2b46ea7b7f442d5f7eda7
CVE ID: CVE-2025-48876 State: REJECTED Published: N/A Last Updated: 2025-09-03T16:04:50.352Z Description: No description available.
CVE ID: CVE-2025-48877 State: PUBLISHED Published: 2025-06-09T12:36:29.651Z Last Updated: 2025-06-09T15:17:08.586Z Vendors: discourse Products: discourse Problem Types: CWE-1038 Description: Discourse is an open-source discussion platform. Prior to version 3.4.4 of the `stable` branch, version 3.5.0.beta5 of the `beta` branch, and version 3.5.0.beta6-dev of the `tests-passed` branch, Codepen is present in the default `allowed_iframes` site setting, and it can potentially auto-run arbitrary JS in the iframe scope, which is unintended. This issue is patched in version 3.4.4 of the `stable` branch, version 3.5.0.beta5 of the `beta` branch, and version 3.5.0.beta6-dev of the `tests-passed` branc
f the `stable` branch, version 3.5.0.beta5 of the `beta` branch, and version 3.5.0.beta6-dev of the `tests-passed` branch. As a workaround, the Codepen prefix can be removed from a site's `allowed_iframes`. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-cm93-6m2m-cjcv
CVE ID: CVE-2025-48878 State: PUBLISHED Published: 2025-11-10T20:43:04.366Z Last Updated: 2025-11-10T20:58:47.251Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Combodo Products: iTop Problem Types: CWE-862 Description: Combodo iTop is a web based IT service management tool. In versions on the 3.x branch prior to 3.2.2, an insecure direct object reference allows a user (e.g. with Service desk agent profile) to create a ModuleInstallation object when they shouldn't be able to do so. Version 3.2.2 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Combodo/iTop/security/advisories/GHSA-rj75-7cgw-4556
CVE ID: CVE-2025-48879 State: PUBLISHED Published: 2025-06-10T15:23:54.150Z Last Updated: 2025-06-10T15:57:42.371Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: OctoPrint Products: OctoPrint Problem Types: CWE-140, CWE-835 Description: OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows any unauthenticated attacker to send a manipulated broken multipart/form-data request to OctoPrint and through that make the web server component become unresponsive. The issue can be triggered by a broken multipart/form-data request lacking an end boundary to any of OctoPrint's endpoints implemented through the octoprint.server.util.tornado
ta request lacking an end boundary to any of OctoPrint's endpoints implemented through the octoprint.server.util.tornado.UploadStorageFallbackHandler request handler. The request handler will get stuck in an endless busy loop, looking for a part of the request that will never come. As Tornado is single-threaded, that will effectively block the whole web server. The vulnerability has been patched in version 1.11.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OctoPrint/OctoPrint/security/advisories/GHSA-9wj4-8h85-pgrw - https://github.com/OctoPrint/OctoPrint/commit/c9c35c17bd820f19c6b12e6c0359fc0cfdd0c1ec
CVE ID: CVE-2025-48880 State: PUBLISHED Published: 2025-05-30T06:27:23.708Z Last Updated: 2025-05-30T13:24:57.443Z Vendors: freescout-help-desk Products: freescout Problem Types: CWE-362 Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.181, when an administrative account is a deleting a user, there is the the possibility of a race condition occurring. This issue has been patched in version 1.8.181. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-9vf2-mg4j-4v7f - https://github.com/freescout-help-desk/freescout/commit/3f5bb2841f7de3303bc3cb00930a28440754d12
es/GHSA-9vf2-mg4j-4v7f - https://github.com/freescout-help-desk/freescout/commit/3f5bb2841f7de3303bc3cb00930a28440754d122
CVE ID: CVE-2025-48881 State: PUBLISHED Published: 2025-05-30T05:21:30.223Z Last Updated: 2025-06-04T20:49:45.746Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: valtimo-platform Products: valtimo-backend-libraries Problem Types: CWE-863 Description: Valtimo is a platform for Business Process Automation. In versions starting from 11.0.0.RELEASE to 11.3.3.RELEASE and 12.0.0.RELEASE to 12.12.0.RELEASE, all objects for which an object-management configuration exists can be listed, viewed, edited, created or deleted by unauthorised users. If object-urls are exposed via other channels, the contents of these objects can be viewed independent of object-management co
ect-urls are exposed via other channels, the contents of these objects can be viewed independent of object-management configurations. This issue has been patched in version 12.13.0.RELEASE. A workaround for this issue involves overriding the endpoint security as defined in ObjectenApiHttpSecurityConfigurer and ObjectManagementHttpSecurityConfigurer. Depending on the implementation, this could result in loss of functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/valtimo-platform/valtimo-backend-libraries/security/advisories/GHSA-965r-9cg9-g42p - https://github.com/valtimo-platform/valtimo-backend-libraries/commit/6ab04b30d3dab816bfea32d40ba50e5dd
-965r-9cg9-g42p - https://github.com/valtimo-platform/valtimo-backend-libraries/commit/6ab04b30d3dab816bfea32d40ba50e5dd4517272
CVE ID: CVE-2025-48882 State: PUBLISHED Published: 2025-05-30T19:43:35.441Z Last Updated: 2025-05-30T20:46:17.339Z Vendors: PHPOffice Products: Math Problem Types: CWE-611 Description: PHPOffice Math is a library that provides a set of classes to manipulate different formula file formats. Prior to version 0.3.0, loading XML data using the standard `libxml` extension and the `LIBXML_DTDLOAD` flag without additional filtration, leads to XXE. Version 0.3.0 fixes the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PHPOffice/Math/security/advisories/GHSA-42hm-pq2f-3r7m - https://github.com/PHPOffice/Math/commit/fc31c8f57a7a81f962cbf389fd89f4d9d06
h/security/advisories/GHSA-42hm-pq2f-3r7m - https://github.com/PHPOffice/Math/commit/fc31c8f57a7a81f962cbf389fd89f4d9d06fc99a
CVE ID: CVE-2025-48883 State: PUBLISHED Published: 2025-05-30T18:47:42.853Z Last Updated: 2025-05-30T20:39:45.976Z Vendors: chrome-php Products: chrome Problem Types: CWE-79 Description: Chrome PHP allows users to start playing with chrome/chromium in headless mode from PHP. Prior to version 1.14.0, CSS Selector expressions are not properly encoded, which can lead to XSS (cross-site scripting) vulnerabilities. This is patched in v1.14.0. As a workaround, users can apply encoding manually to their selectors if they are unable to upgrade. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/chrome-php/chrome/security/advisories/GHSA-3432-fmrf-7vmh - https://githu
Vulnrichment: References: - https://github.com/chrome-php/chrome/security/advisories/GHSA-3432-fmrf-7vmh - https://github.com/chrome-php/chrome/pull/691 - https://github.com/chrome-php/chrome/commit/34b2b8d1691f4e3940b1e1e95d388fffe81169c8
CVE ID: CVE-2025-48884 State: PUBLISHED Published: 2025-11-04T20:44:29.193Z Last Updated: 2025-11-04T21:03:39.940Z Vendors: galette Products: galette Problem Types: CWE-80 Description: Galette is a membership management web application for non profit organizations. In versions 1.1.5.2 and below, Galette's Document Type is vulnerable to Cross-site Scripting. This issue is fixed in version 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/galette/galette/security/advisories/GHSA-3rc3-rc5x-vmr4
CVE ID: CVE-2025-48885 State: PUBLISHED Published: 2025-05-30T18:41:59.248Z Last Updated: 2025-05-30T20:37:54.729Z Vendors: xwikisas Products: application-urlshortener Problem Types: CWE-352 Description: application-urlshortener create shortened URLs for XWiki pages. Versions prior to 1.2.4 are vulnerable to users with view access being able to create arbitrary pages. Any user (even guests) can create these docs, even if they don't exist already. This can enable guest users to denature the structure of wiki pages, by creating 1000's of pages with random name, that then become very difficult to handle by admins. Version 1.2.4 fixes the issue. No known workarounds are available. Additional Ana
me very difficult to handle by admins. Version 1.2.4 fixes the issue. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xwikisas/application-urlshortener/security/advisories/GHSA-c57g-9v2r-w8v3 - https://github.com/xwikisas/application-urlshortener/commit/f121a9c973fd25948e82efcb6289d53fe00a9e7d
CVE ID: CVE-2025-48886 State: PUBLISHED Published: 2025-06-19T14:24:58.304Z Last Updated: 2025-06-23T17:36:02.598Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: cardano-scaling Products: hydra Problem Types: CWE-755 Description: Hydra is a layer-two scalability solution for Cardano. Prior to version 0.22.0, the process assumes L1 event finality and does not consider failed transactions. Currently, Cardano L1 is monitored for certain events which are necessary for state progression. At the moment, Hydra considers those events as finalized as soon as they are recognized by the node participants making such transactions the target of re-org attacks. The syste
as soon as they are recognized by the node participants making such transactions the target of re-org attacks. The system does not currently consider the fact that failed transactions on the Cardano L1 can indeed appear in blocks because these transactions are so infrequent. This issue has been patched in version 0.22.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cardano-scaling/hydra/security/advisories/GHSA-qr9f-mpgf-wp25 - https://github.com/cardano-scaling/hydra/commit/2bc6a82ef6dbfa8b94e1c11d55253713065f605e - https://github.com/cardano-scaling/hydra/commit/fb22d968964bf5d5b79227cc845d871147044ce7
CVE ID: CVE-2025-48887 State: PUBLISHED Published: 2025-05-30T17:36:16.716Z Last Updated: 2025-05-30T17:58:23.074Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: vllm-project Products: vllm Problem Types: CWE-1333 Description: vLLM, an inference and serving engine for large language models (LLMs), has a Regular Expression Denial of Service (ReDoS) vulnerability in the file `vllm/entrypoints/openai/tool_parsers/pythonic_tool_parser.py` of versions 0.6.4 up to but excluding 0.9.0. The root cause is the use of a highly complex and nested regular expression for tool call detection, which can be exploited by an attacker to cause severe performance degradation or
lar expression for tool call detection, which can be exploited by an attacker to cause severe performance degradation or make the service unavailable. The pattern contains multiple nested quantifiers, optional groups, and inner repetitions which make it vulnerable to catastrophic backtracking. Version 0.9.0 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vllm-project/vllm/security/advisories/GHSA-w6q7-j642-7c25 - https://github.com/vllm-project/vllm/pull/18454 - https://github.com/vllm-project/vllm/commit/4fc1bf813ad80172c1db31264beaef7d93fe0601
CVE ID: CVE-2025-48888 State: PUBLISHED Published: 2025-06-04T19:15:55.041Z Last Updated: 2025-06-04T19:32:53.261Z Vendors: denoland Products: deno Problem Types: CWE-863 Description: Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.41.3 and prior to versions 2.1.13, 2.2.13, and 2.3.2, `deno run --allow-read --deny-read main.ts` results in allowed, even though 'deny' should be stronger. The result is the same with all global unary permissions given as `--allow-* --deny-*`. This only affects a nonsensical combination of flags, so there shouldn't be a real impact on the userbase. Users may upgrade to version 2.1.13, 2.2.13, or 2.3.2 to receive a patch. Additiona
't be a real impact on the userbase. Users may upgrade to version 2.1.13, 2.2.13, or 2.3.2 to receive a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/denoland/deno/security/advisories/GHSA-xqxc-x6p3-w683 - https://github.com/denoland/deno/pull/22894 - https://github.com/denoland/deno/pull/29213 - https://github.com/denoland/deno/commit/2f0fae9d9071dcaf0a689bc7097584b1b9ebc8db - https://github.com/denoland/deno/commit/9d665572d3cd39f997e29e6daac7c1102fc5c04f - https://github.com/denoland/deno/commit/ef315b56c26c9ef5f25284a5100d2ed525a148cf
CVE ID: CVE-2025-48889 State: PUBLISHED Published: 2025-05-30T06:12:32.703Z Last Updated: 2025-05-30T12:25:35.195Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: gradio-app Products: gradio Problem Types: CWE-434 Description: Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Prior to version 5.31.0, an arbitrary file copy vulnerability in Gradio's flagging feature allows unauthenticated attackers to copy any readable file from the server's filesystem. While attackers can't read these copied files, they can cause DoS by copying large files (like
the server's filesystem. While attackers can't read these copied files, they can cause DoS by copying large files (like /dev/urandom) to fill disk space. This issue has been patched in version 5.31.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gradio-app/gradio/security/advisories/GHSA-8jw3-6x8j-v96g
CVE ID: CVE-2025-48890 State: PUBLISHED Published: 2025-06-24T04:37:32.299Z Last Updated: 2025-06-24T14:30:34.332Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ELECOM CO.,LTD. Products: WRH-733GBK, WRH-733GWH Problem Types: CWE-78 Description: WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in miniigd SOAP service. If a remote unauthenticated attacker sends a specially crafted request to the affected product, an arbitrary OS command may be executed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20250624-
cuted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20250624-02/ - https://jvn.jp/en/jp/JVN39435597/