Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-55115 State: PUBLISHED Published: 2025-09-16T12:21:51.089Z Last Updated: 2025-09-17T03:55:52.077Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: BMC Products: Control-M/Agent Problem Types: CWE-23 Description: A path traversal in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions. This vulnerability was fixed in 9.0.20.100 and above. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bmcapps.my.site.com/casemgmt/sc_Knowl
nd above. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099 - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441969
CVE ID: CVE-2025-55116 State: PUBLISHED Published: 2025-09-16T12:22:23.865Z Last Updated: 2025-09-17T03:55:51.235Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: BMC Products: Control-M/Agent Problem Types: CWE-121 Description: A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099 - https://bmcapps.my.si
ichment: References: - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099 - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441969
CVE ID: CVE-2025-55117 State: PUBLISHED Published: 2025-09-16T12:22:58.166Z Last Updated: 2025-09-16T13:18:02.597Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: BMC Products: Control-M/Agent Problem Types: CWE-121 Description: A stack-based buffer overflow can be remotely triggered when formatting an error message in the Control-M/Agent when SSL/TLS communication is configured. The issue occurs in the following cases: * Control-M/Agent 9.0.20: SSL/TLS configuration is set to the non-default setting "use_openssl=n"; * Control-M/Agent 9.0.21 and 9.0.22: Agent router configuration uses the non-default settings "JAVA_AR=N" and "use_openssl=n". Additional Analy
1 and 9.0.22: Agent router configuration uses the non-default settings "JAVA_AR=N" and "use_openssl=n". Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099 - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441972
CVE ID: CVE-2025-55118 State: PUBLISHED Published: 2025-09-16T12:23:39.683Z Last Updated: 2025-11-18T12:32:45.651Z Severity: HIGH (CVSS 8.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H) Vendors: BMC Products: Control-M/Agent Problem Types: CWE-122, CWE-125, CWE-787, CWE-191, CWE-665, CWE-835, CWE-415, CWE-416 Description: Memory corruptions can be remotely triggered in the Control-M/Agent when SSL/TLS communication is configured. The issue occurs in the following cases: * Control-M/Agent 9.0.20: SSL/TLS configuration is set to the non-default setting "use_openssl=n"; * Control-M/Agent 9.0.21 and 9.0.22: Agent router configuration uses the non-default settings "JAVA_AR=N" and "use_openssl=n"
rol-M/Agent 9.0.21 and 9.0.22: Agent router configuration uses the non-default settings "JAVA_AR=N" and "use_openssl=n" Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099 - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441972
CVE ID: CVE-2025-55123 State: PUBLISHED Published: 2025-11-20T19:10:15.783Z Last Updated: 2025-11-20T21:40:47.974Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Revive Products: Revive Adserver Description: Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own advertiser users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/3404968
CVE ID: CVE-2025-55124 State: PUBLISHED Published: 2025-11-20T19:10:15.617Z Last Updated: 2025-11-20T21:44:35.613Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Revive Products: Revive Adserver Description: Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/3403727
CVE ID: CVE-2025-55126 State: PUBLISHED Published: 2025-11-20T19:07:42.392Z Last Updated: 2025-11-20T20:57:50.870Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Revive Products: Revive Adserver Description: HackerOne community member Dang Hung Vi (vidang04) has reported a stored XSS vulnerability involving the navigation box at the top of advertiser-related pages, with campaign names being the vector for the stored XSS Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/3411750
CVE ID: CVE-2025-55127 State: PUBLISHED Published: 2025-11-20T19:07:15.245Z Last Updated: 2025-11-20T21:19:26.325Z Vendors: Revive Products: Revive Adserver Description: HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users. A username with leading or trailing whitespace could be virtually indistinguishable from its legitimate counterpart when the username is displayed in the UI, potentially leading to confusion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/3413764
CVE ID: CVE-2025-55128 State: PUBLISHED Published: 2025-11-20T19:06:52.867Z Last Updated: 2025-11-20T21:01:05.623Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Revive Products: Revive Adserver Description: HackerOne community member Dao Hoang Anh (yoyomiski) has reported an uncontrolled resource consumption vulnerability in the “userlog-index.php”. An attacker with access to the admin interface could request an arbitrarily large number of items per page, potentially leading to a denial of service Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/3413890
CVE ID: CVE-2025-55133 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-08T12:40:42.124Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Agora Foundation Products: Agora Problem Types: CWE-79 Description: In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/agorafoundation/agora/pull/556 - https://github.com/agorafoundation/agora/commit/b087490042cb131963b524d0f86511a63a7ff085 - https://github.com/Msfv3n0m/vulnerability-research/tree/main/CVE-2025-55133
CVE ID: CVE-2025-55134 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-08T12:41:53.260Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Agora Foundation Products: Agora Problem Types: CWE-79 Description: In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/agorafoundation/agora/pull/556 - https://github.com/agorafoundation/agora/commit/b087490042cb131963b524d0f86511a63a7ff085 - https://github.com/Msfv3n0m/vulnerability-research/tree/main/CVE-2025-55134
CVE ID: CVE-2025-55135 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-08T12:39:00.744Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Agora Foundation Products: Agora Problem Types: CWE-434 Description: In Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to server/controller/userController.js. Formats other than PNG, JPEG, and WEBP are permitted by server/routes/userRoutes.js; this includes SVG. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/agorafoundation/agora/pull/556 - https://github.com/agorafoundation/agora/commit/690ce56f254af01375b6033e53a80f14d7
.com/agorafoundation/agora/pull/556 - https://github.com/agorafoundation/agora/commit/690ce56f254af01375b6033e53a80f14d7cc002e - https://github.com/agorafoundation/agora/blob/90f7f9c217cf1d5dc9d27f5695cd65b61a4c4759/server/controller/userController.js#L332-L336 - https://github.com/Msfv3n0m/vulnerability-research/tree/main/CVE-2025-55135
CVE ID: CVE-2025-55136 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T16:34:57.883Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: tae898 Products: ERC Problem Types: CWE-502 Description: ERC (aka Emotion Recognition in Conversation) through 0.3 has insecure deserialization via a serialized object because jsonpickle is used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/tae898/erc/pull/31
CVE ID: CVE-2025-55137 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T16:34:28.118Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Latkecrszy Products: LinkJoin Problem Types: CWE-843 Description: LinkJoin through 882f196 mishandles lacks type checking in password reset. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Latkecrszy/linkjoin/pull/4
CVE ID: CVE-2025-55138 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T16:33:42.795Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Latkecrszy Products: LinkJoin Problem Types: CWE-304 Description: LinkJoin through 882f196 mishandles token ownership in password reset. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Latkecrszy/linkjoin/pull/4
CVE ID: CVE-2025-55139 State: PUBLISHED Published: 2025-09-09T15:41:16.568Z Last Updated: 2025-09-09T17:31:52.640Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Ivanti Products: Connect Secure, Policy Secure, ZTA Gateway, Neurons for Secure Access Problem Types: CWE-918 Description: SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with admin privileges to enumerate internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
admin privileges to enumerate internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/September-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-and-Neurons-for-Secure-Access-Multiple-CVEs?language=en_US
CVE ID: CVE-2025-55141 State: PUBLISHED Published: 2025-09-09T15:45:52.822Z Last Updated: 2025-09-10T03:56:12.587Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Connect Secure, Policy Secure, ZTA Gateway, Neurons for Secure Access Problem Types: CWE-862 Description: Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure authentication related settings. Additional Analyst Notes: - CISA
attacker with read-only admin privileges to configure authentication related settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/September-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-and-Neurons-for-Secure-Access-Multiple-CVEs?language=en_US
CVE ID: CVE-2025-55142 State: PUBLISHED Published: 2025-09-09T15:49:20.192Z Last Updated: 2025-09-10T03:56:13.385Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Connect Secure, Policy Secure, ZTA Gateway, Neurons for Secure Access Problem Types: CWE-862 Description: Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure authentication related settings. Additional Analyst Notes: - CISA
CVE ID: CVE-2025-55143 State: PUBLISHED Published: 2025-09-09T15:52:50.837Z Last Updated: 2025-09-09T17:31:30.593Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Ivanti Products: Connect Secure, Policy Secure, ZTA Gateway, Neurons for Secure Access Problem Types: CWE-79 Description: Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to inject arbitrary text into a crafted HTTP response. User interaction is required. Additional Analyst
icated attacker to inject arbitrary text into a crafted HTTP response. User interaction is required. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/September-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-and-Neurons-for-Secure-Access-Multiple-CVEs?language=en_US
CVE ID: CVE-2025-55144 State: PUBLISHED Published: 2025-09-09T15:55:30.629Z Last Updated: 2025-09-09T17:31:23.981Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Ivanti Products: Connect Secure, Policy Secure, ZTA Gateway, Neurons for Secure Access Problem Types: CWE-862 Description: Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure restricted settings. Additional Analyst Notes: - CISA ADP Vulnr
ed attacker with read-only admin privileges to configure restricted settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/September-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-and-Neurons-for-Secure-Access-Multiple-CVEs?language=en_US
CVE ID: CVE-2025-55145 State: PUBLISHED Published: 2025-09-09T15:22:05.340Z Last Updated: 2025-09-10T03:56:11.009Z Severity: HIGH (CVSS 8.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L) Vendors: Ivanti Products: Connect Secure 22.7R2.9, Policy Secure, ZTA Gateway, Neurons for Secure Access Problem Types: CWE-862 Description: Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker to hijack existing HTML5 connections. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
enticated attacker to hijack existing HTML5 connections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/September-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-and-Neurons-for-Secure-Access-Multiple-CVEs?language=en_US
CVE ID: CVE-2025-55146 State: PUBLISHED Published: 2025-09-09T15:28:10.038Z Last Updated: 2025-09-09T17:32:12.057Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Ivanti Products: Connect Secure, Policy Secure, ZTA Gateway, Neurons for Secure Access Problem Types: CWE-252 Description: An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with admin privileges to trigger a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment:
icated attacker with admin privileges to trigger a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/September-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-and-Neurons-for-Secure-Access-Multiple-CVEs?language=en_US
CVE ID: CVE-2025-55147 State: PUBLISHED Published: 2025-09-09T15:32:25.940Z Last Updated: 2025-09-10T03:56:14.983Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Connect Secure, Policy Secure, ZTA Gateway, Neurons for Secure Access Problem Types: CWE-352 Description: CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to execute sensitive actions on behalf of the victim user. User interaction is required Additional Analyst Notes: - CISA ADP
ecute sensitive actions on behalf of the victim user. User interaction is required Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/September-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-and-Neurons-for-Secure-Access-Multiple-CVEs?language=en_US
CVE ID: CVE-2025-55148 State: PUBLISHED Published: 2025-09-09T15:37:45.415Z Last Updated: 2025-09-09T17:31:58.340Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: Ivanti Products: Connect Secure, Policy Secure, ZTA Gateway, Neurons for Secure Access Problem Types: CWE-862 Description: Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure restricted settings. Additional Analyst Notes: - CISA ADP Vulnric
attacker with read-only admin privileges to configure restricted settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/September-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-and-Neurons-for-Secure-Access-Multiple-CVEs?language=en_US
CVE ID: CVE-2025-55149 State: PUBLISHED Published: 2025-08-09T02:02:30.630Z Last Updated: 2025-08-11T14:03:29.406Z Vendors: ulab-uiuc Products: tiny-scientist Problem Types: CWE-22 Description: Tiny-Scientist is a lightweight framework for automating the entire lifecycle of scientific research—from ideation to implementation, writing, and review. In versions 0.1.1 and below, a critical path traversal vulnerability has been identified in the review_paper function in backend/app.py. The vulnerability allows malicious users to access arbitrary PDF files on the server by providing crafted file paths that bypass the intended security restrictions. This vulnerability allows attackers to: read any
ing crafted file paths that bypass the intended security restrictions. This vulnerability allows attackers to: read any PDF file accessible to the server process, potentially access sensitive documents outside the intended directory and perform reconnaissance on the server's file system structure. This issue does not currently have a fix. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ulab-uiuc/tiny-scientist/security/advisories/GHSA-rrgf-hcr9-jq6h
CVE ID: CVE-2025-55150 State: PUBLISHED Published: 2025-08-11T21:57:14.326Z Last Updated: 2025-08-12T15:48:34.238Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: Stirling-Tools Products: Stirling-PDF Problem Types: CWE-918 Description: Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/html/pdf endpoint to convert HTML to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security sanitization which can be bypassed and result in SSRF. This issue has been patched in version 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichmen
assed and result in SSRF. This issue has been patched in version 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-xw8v-9mfm-g2pm - https://github.com/Stirling-Tools/Stirling-PDF/commit/7d6b70871bad2a3ff810825f7382c49f55293943
CVE ID: CVE-2025-55151 State: PUBLISHED Published: 2025-08-11T21:56:54.737Z Last Updated: 2025-08-12T15:47:33.710Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: Stirling-Tools Products: Stirling-PDF Problem Types: CWE-918 Description: Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, the "convert file to pdf" functionality (/api/v1/convert/file/pdf) uses LibreOffice's unoconvert tool for conversion, and SSRF vulnerabilities exist during the conversion process. This issue has been patched in version 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/S
has been patched in version 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-76hv-h7g2-xfv3 - https://github.com/Stirling-Tools/Stirling-PDF/commit/7d6b70871bad2a3ff810825f7382c49f55293943
CVE ID: CVE-2025-55152 State: PUBLISHED Published: 2025-08-09T01:29:54.545Z Last Updated: 2025-08-11T13:33:40.071Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: oakserver Products: oak Problem Types: CWE-400, CWE-1333 Description: oak is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. In versions 17.1.5 and below, it's possible to significantly slow down an oak server with specially crafted values of the x-forwarded-proto or x-forwarded-for headers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/oakserver/oak/security/advisories/GHSA-r3v7-pc4g-7xp9 -
Notes: - CISA ADP Vulnrichment: References: - https://github.com/oakserver/oak/security/advisories/GHSA-r3v7-pc4g-7xp9 - https://github.com/oakserver/oak/commit/b60e60330ef227707c4dc13ef0ea36192d894f44
CVE ID: CVE-2025-55153 State: REJECTED Published: N/A Last Updated: 2025-08-19T17:15:48.126Z Description: No description available.
CVE ID: CVE-2025-55154 State: PUBLISHED Published: 2025-08-13T14:00:28.056Z Last Updated: 2025-11-03T18:13:40.112Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ImageMagick Products: ImageMagick Problem Types: CWE-190 Description: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com
nd 7.1.2-1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qp29-wxp5-wh82 - https://goo.gle/bigsleep