Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-4349 State: PUBLISHED Published: 2025-05-06T11:31:04.439Z Last Updated: 2025-05-06T13:29:54.757Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-600L Problem Types: CWE-77, CWE-74 Description: A vulnerability classified as critical has been found in D-Link DIR-600L up to 2.07B01. This affects the function formSysCmd. The manipulation of the argument host leads to command injection. It is possible to initiate the attack remotely. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307467 - https://vuldb.com/?ctiid.307467 -
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307467 - https://vuldb.com/?ctiid.307467 - https://vuldb.com/?submit.558302 - https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir600l/Command_injection-formSysCmd-sysCmd/README.md - https://www.dlink.com/
CVE ID: CVE-2025-4350 State: PUBLISHED Published: 2025-05-06T11:31:06.350Z Last Updated: 2025-05-06T13:28:48.495Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DIR-600L Problem Types: CWE-77, CWE-74 Description: A vulnerability classified as critical was found in D-Link DIR-600L up to 2.07B01. This vulnerability affects the function wake_on_lan. The manipulation of the argument host leads to command injection. The attack can be initiated remotely. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307468 - https://vuldb.com/?ctiid.307468 -
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307468 - https://vuldb.com/?ctiid.307468 - https://vuldb.com/?submit.558303 - https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir600l/Command_injection-wake_on_lan-mac/README.md - https://www.dlink.com/
CVE ID: CVE-2025-4352 State: PUBLISHED Published: 2025-05-06T12:00:07.536Z Last Updated: 2025-06-04T20:28:46.442Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Brilliance Products: Golden Link Secondary System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424. This issue affects some unknown processing of the file /reprotframework/tcEntrFlowSelect.htm. The manipulation of the argument custTradeId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnric
ted remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307469 - https://vuldb.com/?ctiid.307469 - https://vuldb.com/?submit.564592 - https://github.com/eeeeeekkkkkkkk/POC/blob/main/%E9%BB%84%E9%87%91%E9%80%9A%E4%BA%8C%E7%BA%A7%E7%B3%BB%E7%BB%9F%E4%B8%89%E4%BB%A3%E7%AE%A1%E7%90%86%E7%AB%AF%E7%B3%BB%E7%BB%9FtcEntrFlowSelect%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5.md
CVE ID: CVE-2025-4353 State: PUBLISHED Published: 2025-05-06T12:00:09.711Z Last Updated: 2025-06-04T20:28:48.326Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Brilliance Products: Golden Link Secondary System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Affected is an unknown function of the file /paraframework/queryTsDictionaryType.htm. The manipulation of the argument dictCn1 leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307470 - https://vuldb.com/?ctiid.307470 - https://vuldb.com/?submit.564593 - https://github.com/eeeeeekkkkkkkk/POC/blob/main/%E9%BB%84%E9%87%91%E9%80%9A%E4%BA%8C%E7%BA%A7%E7%B3%BB%E7%BB%9F%E4%B8%89%E4%BB%A3%E7%AE%A1%E7%90%86%E7%AB%AF%E7%B3%BB%E7%BB%9FqueryTsDictionaryType%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5.md
CVE ID: CVE-2025-4354 State: PUBLISHED Published: 2025-05-06T12:31:05.656Z Last Updated: 2025-05-06T13:17:16.484Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: DAP-1520 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02 and classified as critical. Affected by this issue is the function check_dws_cookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307472 - https://vuldb.com/?ctiid.307472 - https://
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307472 - https://vuldb.com/?ctiid.307472 - https://vuldb.com/?submit.564719 - https://github.com/Ghostsuzhijian/Iot-/blob/main/DAP-1520_replace_special_char/DAP-1520_replace_special_char.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-4355 State: PUBLISHED Published: 2025-05-06T12:31:10.092Z Last Updated: 2025-05-06T13:14:35.053Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: DAP-1520 Problem Types: CWE-122, CWE-119 Description: A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been classified as critical. This affects the function set_ws_action of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307473 - https://vuldb.com/?ctiid.307473 - http
lyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307473 - https://vuldb.com/?ctiid.307473 - https://vuldb.com/?submit.564720 - https://github.com/Ghostsuzhijian/Iot-/blob/main/DAP-1520_set_ws_action/DAP-1520_set_ws_action.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-4356 State: PUBLISHED Published: 2025-05-06T13:00:09.716Z Last Updated: 2025-05-06T13:35:05.883Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: DAP-1520 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been declared as critical. This vulnerability affects the function mod_graph_auth_uri_handler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307474 - https://vuldb.com/?ctiid.307474 - https://vuldb.com/?submit.564722 - https://github.com/Ghostsuzhijian/Iot-/blob/main/dap1520_mod_graph_auth_uri_handler/dap1520_mod_graph_auth_uri_handler.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-4357 State: PUBLISHED Published: 2025-05-06T13:31:07.818Z Last Updated: 2025-05-06T14:39:36.483Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Tenda Products: RX3 Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in Tenda RX3 16.03.13.11_multi. It has been rated as critical. This issue affects some unknown processing of the file /goform/telnet. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307475 - https://vuldb.com/?ctiid.307475 - https://vuldb.com/?submit.5
Vulnrichment: References: - https://vuldb.com/?id.307475 - https://vuldb.com/?ctiid.307475 - https://vuldb.com/?submit.564727 - https://github.com/Ghostsuzhijian/Iot-/blob/main/RX3_telnetd/rx3_telnetd.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-4358 State: PUBLISHED Published: 2025-05-06T13:31:20.566Z Last Updated: 2025-05-15T06:49:15.969Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Company Visitor Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. Affected is an unknown function of the file /admin-profile.php. The manipulation of the argument adminname/mobilenumber leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307476 - https://vuldb.com/?ctiid.307476 - https://vuldb.com/?submit.564733 - https://github.com/Pjwww13447/pjwww/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-4359 State: PUBLISHED Published: 2025-05-06T14:00:07.190Z Last Updated: 2025-05-06T14:30:42.574Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_member. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307477 - https://vuldb.com/?ctiid.307477 - https://vuldb.com/?submit.564746 - https://github.com/arpcyber010/CVE/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-4360 State: PUBLISHED Published: 2025-05-06T14:31:05.115Z Last Updated: 2025-05-06T15:06:42.344Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /view_member.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id
ed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307478 - https://vuldb.com/?ctiid.307478 - https://vuldb.com/?submit.564748 - https://github.com/arpcyber010/CVE/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-4361 State: PUBLISHED Published: 2025-05-06T14:31:08.220Z Last Updated: 2025-05-06T15:02:48.105Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Company Visitor Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. This affects an unknown part of the file /department.php. The manipulation of the argument departmentname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307485 - https://vuldb.com/?ctiid.307485 - https://vuldb.com/?submit.564750 - https://github.com/Pjwww13447/pjwww/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-4362 State: PUBLISHED Published: 2025-05-06T15:00:06.802Z Last Updated: 2025-05-06T19:52:29.927Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=save_membership. The manipulation of the argument member_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.30748
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307486 - https://vuldb.com/?ctiid.307486 - https://vuldb.com/?submit.564758 - https://github.com/arpcyber2/CVE/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-4363 State: PUBLISHED Published: 2025-05-06T15:31:05.107Z Last Updated: 2025-05-06T16:11:25.928Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=end_membership. The manipulation of the argument rid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307487 - https://vuldb.com/?ctiid.307487 - https://vuldb.com/?submit.564759 - https://github.com/arpcyber2/CVE/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-4364 State: PUBLISHED Published: 2025-05-20T17:48:02.341Z Last Updated: 2025-05-20T18:16:37.144Z Vendors: Assured Telematics Inc. Products: Fleet Management System Problem Types: CWE-497 Description: The affected products could allow an unauthenticated attacker to access system information that could enable further access to sensitive files and obtain administrative credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-11
CVE ID: CVE-2025-4365 State: PUBLISHED Published: 2025-06-17T12:38:10.318Z Last Updated: 2025-06-17T13:49:08.982Z Vendors: NetScaler Products: Console, SDX (SVM) Problem Types: CWE-1284 Description: Arbitrary file read in NetScaler Console and NetScaler SDX (SVM) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694729
CVE ID: CVE-2025-4366 State: PUBLISHED Published: 2025-05-22T15:50:20.789Z Last Updated: 2025-06-18T13:46:25.042Z Problem Types: CWE-444 Description: A request smuggling vulnerability identified within Pingora’s proxying framework, pingora-proxy, allows malicious HTTP requests to be injected via manipulated request bodies on cache HITs, leading to unauthorized request execution and potential cache poisoning. Fixed in: https://github.com/cloudflare/pingora/commit/fda3317ec822678564d641e7cf1c9b77ee3759ff https://github.com/cloudflare/pingora/commit/fda3317ec822678564d641e7cf1c9b77ee3759ff Impact: The issue could lead to request smuggling in cases where Pingora’s proxying framework, pingora-pro
c9b77ee3759ff Impact: The issue could lead to request smuggling in cases where Pingora’s proxying framework, pingora-proxy, is used for caching allowing an attacker to manipulate headers and URLs in subsequent requests made on the same HTTP/1.1 connection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cloudflare/pingora
CVE ID: CVE-2025-4367 State: PUBLISHED Published: 2025-06-19T03:40:13.166Z Last Updated: 2025-06-20T13:12:10.681Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: codename065 Products: Download Manager Problem Types: CWE-80 Description: The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpdm_user_dashboard shortcode in all versions up to, and including, 3.3.18 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user
tackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/029956d7-6e3f-4159-9f53-05691e0262fc?source=cve - https://plugins.trac.wordpress.org/browser/download-manager/trunk/src/User/views/dashboard/profile.php#L79 - https://plugins.trac.wordpress.org/browser/download-manager/trunk/src/wpdm-functions.php#L200 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3313608%40download-manager&old=3308801%40download-manager&sfp_email=&sfph_mail=
CVE ID: CVE-2025-4368 State: PUBLISHED Published: 2025-05-06T15:31:08.687Z Last Updated: 2025-05-06T15:43:26.512Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC8 Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in Tenda AC8 16.03.34.06. Affected is the function formGetRouterStatus of the file /goform/MtuSetMacWan. The manipulation of the argument shareSpeed leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307488 - https://vuldb.com/?cti
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307488 - https://vuldb.com/?ctiid.307488 - https://vuldb.com/?submit.564812 - https://github.com/fjl1113/cve/blob/main/Tenda.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-4369 State: PUBLISHED Published: 2025-07-15T09:22:51.602Z Last Updated: 2025-07-15T13:20:38.029Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: papin Products: Companion Auto Update Problem Types: CWE-79 Description: The Companion Auto Update plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘update_delay_days’ parameter in all versions up to, and including, 3.9.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only
access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b4c61072-5480-43f3-ad9f-ed3f0d577ebc?source=cve - https://wordpress.org/plugins/companion-auto-update/#developers - https://plugins.trac.wordpress.org/browser/companion-auto-update/tags/3.9.2/admin/dashboard.php#L71 - https://plugins.trac.wordpress.org/changeset/3325878/
CVE ID: CVE-2025-4370 State: PUBLISHED Published: 2025-07-29T04:23:46.517Z Last Updated: 2025-07-29T14:03:02.036Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: themefusecom Products: Brizy – Page Builder Problem Types: CWE-862 Description: The Brizy – Page Builder plugin for WordPress is vulnerable to limited file uploads due to missing authorization on process_external_asset_urls function as well as missing path validation in store_file function in all versions up to, and including, 2.6.20. This makes it possible for unauthenticated attackers to upload .TXT files on the affected site's server. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
ckers to upload .TXT files on the affected site's server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/db18f6b4-600d-4c63-a9f2-4e3b8ab4fba3?source=cve - https://plugins.trac.wordpress.org/browser/brizy/tags/2.6.17/editor/asset/static-file-trait.php#L44 - https://plugins.trac.wordpress.org/browser/brizy/tags/2.6.17/editor/asset/media-processor.php#L27
CVE ID: CVE-2025-4371 State: PUBLISHED Published: 2025-08-18T20:04:19.300Z Last Updated: 2025-08-19T13:01:02.706Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: 510 FHD Webcam, Performance FHD Webcam Problem Types: CWE-347 Description: A potential vulnerability was reported in the Lenovo 510 FHD and Performance FHD web cameras that could allow an attacker with physical access to write arbitrary firmware updates to the device over a USB connection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-194466
CVE ID: CVE-2025-4372 State: PUBLISHED Published: 2025-05-06T21:35:44.381Z Last Updated: 2025-05-08T03:55:57.294Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/412057896
CVE ID: CVE-2025-4373 State: PUBLISHED Published: 2025-05-06T14:48:39.264Z Last Updated: 2025-11-20T20:48:55.545Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telec
tions Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Insights proxy 1.5, Red Hat OpenShift distributed tracing 3.6.1, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-124 Description: A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function.
iption: A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:10855 - https://access.redhat.com/errata/RHSA-2025:11140 - https://access.redhat.com/errata/RHSA-2025:11327 - https://access.redhat.com/errata/RHSA-2025:11373 - https://access.redhat.com/errata/RHSA-2025:11374 - https://access.redhat.com/errata/RHSA-2025:11662 - https://access.redhat.com/errata/RHSA-2025:12275 - https://access.redhat.com/errata/RHSA