Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-8031 State: PUBLISHED Published: 2025-07-22T20:49:26.243Z Last Updated: 2025-11-04T15:54:01.343Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1971719 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozil
zilla.mozilla.org/show_bug.cgi?id=1971719 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisories/mfsa2025-58/ - https://www.mozilla.org/security/advisories/mfsa2025-59/ - https://www.mozilla.org/security/advisories/mfsa2025-61/ - https://www.mozilla.org/security/advisories/mfsa2025-62/ - https://www.mozilla.org/security/advisories/mfsa2025-63/
CVE ID: CVE-2025-8032 State: PUBLISHED Published: 2025-07-22T20:49:26.507Z Last Updated: 2025-11-04T15:53:28.867Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1974407 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisories/mfsa2025-58/ - http
tps://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisories/mfsa2025-58/ - https://www.mozilla.org/security/advisories/mfsa2025-59/ - https://www.mozilla.org/security/advisories/mfsa2025-61/ - https://www.mozilla.org/security/advisories/mfsa2025-62/ - https://www.mozilla.org/security/advisories/mfsa2025-63/
CVE ID: CVE-2025-8033 State: PUBLISHED Published: 2025-07-22T20:49:27.477Z Last Updated: 2025-11-04T15:51:29.775Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1973990 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https:/
ttps://bugzilla.mozilla.org/show_bug.cgi?id=1973990 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisories/mfsa2025-57/ - https://www.mozilla.org/security/advisories/mfsa2025-58/ - https://www.mozilla.org/security/advisories/mfsa2025-59/ - https://www.mozilla.org/security/advisories/mfsa2025-61/ - https://www.mozilla.org/security/advisories/mfsa2025-62/ - https://www.mozilla.org/security/advisories/mfsa2025-63/
CVE ID: CVE-2025-8034 State: PUBLISHED Published: 2025-07-22T20:49:27.749Z Last Updated: 2025-11-04T15:50:46.104Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1. Additional A
irefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1970422 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisories/mfsa2025-57/ - https://www.mozilla.org/security/advisories/mfsa2025-58/ - https://www.mozilla.org/security/advisories/mfsa2025-59/ - https://www.mozilla.org/security/advisories/mfsa2025-61/ - https://www.mozilla.org/security/advisories/mfsa2025-62/ - https://www.mozilla.org/security/advisories/mfsa2025-63/
CVE ID: CVE-2025-8035 State: PUBLISHED Published: 2025-07-22T20:49:28.660Z Last Updated: 2025-11-03T20:07:55.120Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - C
Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1975961 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisories/mfsa2025-58/ - https://www.mozilla.org/security/advisories/mfsa2025-59/ - https://www.mozilla.org/security/advisories/mfsa2025-61/ - https://www.mozilla.org/security/advisories/mfsa2025-62/ - https://www.mozilla.org/security/advisories/mfsa2025-63/
CVE ID: CVE-2025-8036 State: PUBLISHED Published: 2025-07-22T20:49:25.303Z Last Updated: 2025-11-04T15:57:04.675Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1960834 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisories/mfsa2025-59/ - https://www.mozilla
la.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisories/mfsa2025-59/ - https://www.mozilla.org/security/advisories/mfsa2025-61/ - https://www.mozilla.org/security/advisories/mfsa2025-63/
CVE ID: CVE-2025-8037 State: PUBLISHED Published: 2025-07-22T20:49:25.621Z Last Updated: 2025-11-04T15:55:40.034Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1964767 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisor
bug.cgi?id=1964767 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisories/mfsa2025-59/ - https://www.mozilla.org/security/advisories/mfsa2025-61/ - https://www.mozilla.org/security/advisories/mfsa2025-63/
CVE ID: CVE-2025-8038 State: PUBLISHED Published: 2025-07-22T20:49:26.764Z Last Updated: 2025-11-04T15:52:59.700Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Thunderbird ignored paths when checking the validity of navigations in a frame. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1808979 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisories/mfsa2025-59/ - https://www.mozilla.org/security/advisories/mfsa2025-61/ - https://www.mozilla.org/secu
curity/advisories/mfsa2025-59/ - https://www.mozilla.org/security/advisories/mfsa2025-61/ - https://www.mozilla.org/security/advisories/mfsa2025-63/
CVE ID: CVE-2025-8039 State: PUBLISHED Published: 2025-07-22T20:49:27.191Z Last Updated: 2025-11-04T15:51:57.642Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: In some cases search terms persisted in the URL bar even after navigating away from the search page. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1970997 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisories/mfsa2025-59/ - https://www.mozilla.org/security/advisories/mfsa2025-61/ - https:/
://www.mozilla.org/security/advisories/mfsa2025-59/ - https://www.mozilla.org/security/advisories/mfsa2025-61/ - https://www.mozilla.org/security/advisories/mfsa2025-63/
CVE ID: CVE-2025-8040 State: PUBLISHED Published: 2025-07-22T20:49:28.310Z Last Updated: 2025-10-30T16:01:31.020Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1975058%2C1975998 - https://w
es: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1975058%2C1975998 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisories/mfsa2025-59/ - https://www.mozilla.org/security/advisories/mfsa2025-61/ - https://www.mozilla.org/security/advisories/mfsa2025-63/
CVE ID: CVE-2025-8041 State: PUBLISHED Published: 2025-08-19T20:52:46.116Z Last Updated: 2025-08-20T15:18:10.040Z Vendors: Mozilla Products: Firefox Problem Types: Incorrect URL truncation in Firefox for Android Description: In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. This vulnerability affects Firefox < 141. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1670725 - https://www.mozilla.org/security/advisories/mfsa2025-56/
CVE ID: CVE-2025-8042 State: PUBLISHED Published: 2025-08-19T20:52:46.674Z Last Updated: 2025-08-20T15:18:01.430Z Vendors: Mozilla Products: Firefox Problem Types: Sandboxed iframe could start downloads Description: Firefox for Android allowed a sandboxed iframe without the `allow-downloads` attribute to start downloads. This vulnerability affects Firefox < 141. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1791322 - https://www.mozilla.org/security/advisories/mfsa2025-56/
CVE ID: CVE-2025-8043 State: PUBLISHED Published: 2025-07-22T20:49:28.983Z Last Updated: 2025-07-23T15:15:12.037Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Incorrect URL truncation Description: Focus incorrectly truncated URLs towards the beginning instead of around the origin. This vulnerability affects Firefox < 141 and Thunderbird < 141. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1970209 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisories/mfsa2025-61/
CVE ID: CVE-2025-8044 State: PUBLISHED Published: 2025-07-22T20:49:29.263Z Last Updated: 2025-10-30T16:13:18.680Z Vendors: Mozilla Products: Firefox, Thunderbird Description: Memory safety bugs present in Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 141 and Thunderbird < 141. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1933572%2C1971116 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisories/mfsa
%2C1971116 - https://www.mozilla.org/security/advisories/mfsa2025-56/ - https://www.mozilla.org/security/advisories/mfsa2025-61/
CVE ID: CVE-2025-8046 State: PUBLISHED Published: 2025-08-14T06:00:06.039Z Last Updated: 2025-08-14T14:49:50.570Z Vendors: Unknown Products: Injection Guard Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Injection Guard WordPress plugin before 1.2.8 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/14a53525-8c08-472d-bae4-b3f14368b802/
CVE ID: CVE-2025-8047 State: PUBLISHED Published: 2025-08-14T09:53:17.108Z Last Updated: 2025-08-14T14:49:11.501Z Vendors: Unknown Products: disable-right-click-powered-by-pixterme, pixter-image-digital-license Problem Types: CWE-829 Inclusion of Functionality from Untrusted Control Sphere Description: The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an apparent abandoned S3 bucket. It can be used as a backdoor by those who control it, but it currently displays an alert marketing security services. Users that pay are added to allowedDomains to suppress the popup. Add
tly displays an alert marketing security services. Users that pay are added to allowedDomains to suppress the popup. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a0c70b98-a3f9-4d4c-a25f-81424230b1a5/
CVE ID: CVE-2025-8048 State: PUBLISHED Published: 2025-10-20T19:56:29.335Z Last Updated: 2025-10-20T20:16:11.991Z Vendors: opentext Products: Flipper Problem Types: CWE-73 Description: External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file path and then download the specified file from the system by requesting the stored document ID. This issue affects Flipper: 3.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850531
CVE ID: CVE-2025-8049 State: PUBLISHED Published: 2025-10-20T19:56:20.291Z Last Updated: 2025-10-20T20:15:29.819Z Vendors: opentext Products: Flipper Problem Types: CWE-1220 Description: Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low-privilege user to elevate privileges within the application. This issue affects Flipper: 3.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850530
CVE ID: CVE-2025-8050 State: PUBLISHED Published: 2025-10-21T17:21:30.283Z Last Updated: 2025-10-21T18:22:41.036Z Vendors: opentext Products: Flipper Problem Types: CWE-73 Description: External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to access files hosted on the server. This issue affects Flipper: 3.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850526
CVE ID: CVE-2025-8051 State: PUBLISHED Published: 2025-10-20T19:55:57.106Z Last Updated: 2025-10-20T20:13:36.190Z Vendors: opentext Products: Flipper Problem Types: CWE-35 Description: Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal. The vulnerability could allow a user to access files hosted on the server. This issue affects Flipper: 3.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850527
CVE ID: CVE-2025-8052 State: PUBLISHED Published: 2025-10-20T19:57:34.805Z Last Updated: 2025-10-21T15:31:49.483Z Vendors: opentext Products: Flipper Problem Types: CWE-564 Description: SQL Injection vulnerability in opentext Flipper allows SQL Injection. The vulnerability could allow a low privilege user to interact with the database in unintended ways and extract data by interacting with the HQL processor. This issue affects Flipper: 3.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850533
CVE ID: CVE-2025-8053 State: PUBLISHED Published: 2025-10-20T19:55:17.290Z Last Updated: 2025-10-20T20:11:50.018Z Vendors: opentext Products: Flipper Problem Types: CWE-1220 Description: Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low privilege user to interact with the backend API without sufficient privileges. This issue affects Flipper: 3.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850532
CVE ID: CVE-2025-8057 State: PUBLISHED Published: 2025-09-16T14:02:47.457Z Last Updated: 2025-09-16T14:27:56.997Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Patika Global Technologies Products: HumanSuite Problem Types: CWE-639, CWE-610, CWE-285 Description: Authorization Bypass Through User-Controlled Key, Externally Controlled Reference to a Resource in Another Sphere, Improper Authorization vulnerability in Patika Global Technologies HumanSuite allows Exploiting Trust in Client.This issue affects HumanSuite: before 53.21.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0257
CVE ID: CVE-2025-8058 State: PUBLISHED Published: 2025-07-23T19:57:17.138Z Last Updated: 2025-11-04T21:15:01.015Z Vendors: The GNU C Library Products: glibc Problem Types: CWE-415 Description: The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
pported by the GNU C library. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=33185 - https://sourceware.org/git/?p=glibc.git;a=commit;h=3ff17af18c38727b88d9115e536c069e6b5d601f
CVE ID: CVE-2025-8059 State: PUBLISHED Published: 2025-08-12T04:25:40.466Z Last Updated: 2025-08-12T16:01:52.109Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: bplugins Products: B Blocks – The ultimate block collection Problem Types: CWE-862 Description: The B Blocks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization and improper input validation within the rgfr_registration() function in all versions up to, and including, 2.0.6. This makes it possible for unauthenticated attackers to create a new account and assign it the administrator role. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ww
ccount and assign it the administrator role. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0ee3b389-60c9-4f8e-9428-a71a6d9b20aa?source=cve - https://plugins.trac.wordpress.org/browser/b-blocks/trunk/includes/blocks/RegisterForm.php#L77 - https://wordpress.org/plugins/b-blocks/#developers - https://plugins.trac.wordpress.org/changeset/3340770/
CVE ID: CVE-2025-8060 State: PUBLISHED Published: 2025-07-23T01:32:06.931Z Last Updated: 2025-07-23T15:14:41.589Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC23 Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical. Affected by this vulnerability is the function sub_46C940 of the file /goform/setMacFilterCfg of the component httpd. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317317 - https://vuldb.com/?ctiid.317317 - https://vuldb.com/?submit.619604 - https://github.com/Thir0th/Thir0th-CVE/blob/main/Tenda%20AC23_V16.03.07.52_has_a_stack_overflow.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-8061 State: PUBLISHED Published: 2025-09-11T18:34:52.421Z Last Updated: 2025-09-22T15:48:36.752Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Dispatcher 3.0 Driver, Dispatcher 3.1 Driver Problem Types: CWE-782 Description: A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow an authenticated local user to execute code with elevated privileges. The Lenovo Dispatcher 3.2 driver is not affected. This vulnerability does not affect systems when the Windows feature Core Isolation Memory Integrity is enabled.
ffected. This vulnerability does not affect systems when the Windows feature Core Isolation Memory Integrity is enabled. Lenovo systems preloaded with Windows 11 have this feature enabled by default. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-200860
CVE ID: CVE-2025-8062 State: PUBLISHED Published: 2025-08-23T04:25:47.022Z Last Updated: 2025-08-26T18:52:27.065Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wen-solutions Products: WS Theme Addons Problem Types: CWE-79 Description: The WS Theme Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ws_weather shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user acces
ith contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/75154d59-458f-4a82-bff6-d28c1dbd8d7e?source=cve - https://plugins.trac.wordpress.org/browser/ws-theme-addons/trunk/inc/class-ws-theme-addons-shortcodes.php#L109 - https://wordpress.org/plugins/ws-theme-addons/#developers