Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-2333 State: REJECTED Published: N/A Last Updated: 2025-03-15T11:19:41.596Z Description: No description available.
CVE ID: CVE-2025-2334 State: PUBLISHED Published: 2025-03-15T23:00:09.225Z Last Updated: 2025-03-17T16:08:29.430Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: 274056675 Products: springboot-openai-chatgpt Problem Types: CWE-284, CWE-266 Description: A vulnerability classified as problematic has been found in 274056675 springboot-openai-chatgpt e84f6f5. This affects the function deleteChat of the file /api/mjkj-chat/chat/ai/delete/chat of the component Chat History Handler. The manipulation of the argument chatListId leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analys
ossible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299799 - https://vuldb.com/?ctiid.299799 - https://vuldb.com/?submit.505688 - https://www.cnblogs.com/aibot/p/18732182
CVE ID: CVE-2025-2335 State: PUBLISHED Published: 2025-03-16T02:31:04.489Z Last Updated: 2025-03-17T18:14:49.991Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Drivin Products: Soluções Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in Drivin Soluções up to 20250226. This vulnerability affects unknown code of the file /api/school/registerSchool of the component API Handler. The manipulation of the argument message leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Addit
o the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299800 - https://vuldb.com/?ctiid.299800 - https://vuldb.com/?submit.509834 - https://github.com/yago3008/cves
CVE ID: CVE-2025-2336 State: PUBLISHED Published: 2025-06-04T16:32:31.665Z Last Updated: 2025-11-03T19:43:05.229Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Google Products: AngularJS Problem Types: CWE-791 Description: Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively affect the application's performance and behavior by using too large or slow-to-load images. This issue affects AngularJS
ffect the application's performance and behavior by using too large or slow-to-load images. This issue affects AngularJS versions greater than or equal to 1.3.1. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status . Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.herodevs.com/vulnerability-directory/cve-2025-2336 - https://codepen.io/herodevs/pen/bNGYaXx/412a3a4218387479898912f60c269c6c
CVE ID: CVE-2025-2337 State: PUBLISHED Published: 2025-03-16T09:31:21.364Z Last Updated: 2025-07-24T09:43:28.926Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: tbeu Products: matio Problem Types: CWE-122, CWE-119 Description: A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the function Mat_VarPrint of the file src/mat.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299801 - https://vuldb.com/?ctiid.299801 - h
Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299801 - https://vuldb.com/?ctiid.299801 - https://vuldb.com/?submit.510779 - https://vuldb.com/?submit.510780 - https://github.com/tbeu/matio/issues/267 - https://github.com/tbeu/matio/issues/267#issue-2883856488
CVE ID: CVE-2025-2338 State: PUBLISHED Published: 2025-03-16T12:31:04.547Z Last Updated: 2025-07-24T09:43:26.945Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: tbeu Products: matio Problem Types: CWE-122, CWE-119 Description: A vulnerability, which was classified as critical, was found in tbeu matio 1.5.28. Affected is the function strdup_vprintf of the file src/io.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299802 - https://vuldb.com/?ctiid.299802 - http
lyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299802 - https://vuldb.com/?ctiid.299802 - https://vuldb.com/?submit.510781 - https://github.com/tbeu/matio/issues/269 - https://github.com/tbeu/matio/issues/269#issue-2883920922
CVE ID: CVE-2025-2339 State: PUBLISHED Published: 2025-03-16T13:00:07.828Z Last Updated: 2025-03-17T14:31:33.262Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: otale Products: Tale Blog Problem Types: CWE-287 Description: A vulnerability was found in otale Tale Blog 2.0.5. It has been classified as problematic. This affects an unknown part of the file /%61dmin/api/logs. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that
was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299805 - https://vuldb.com/?ctiid.299805 - https://vuldb.com/?submit.511578 - https://github.com/qkdjksfkeg/cve_article/blob/main/Tale/Unauthorized.md
CVE ID: CVE-2025-2340 State: PUBLISHED Published: 2025-03-16T13:31:05.400Z Last Updated: 2025-03-17T14:21:41.903Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: otale Products: Tale Blog Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in otale Tale Blog 2.0.5. It has been declared as problematic. This vulnerability affects the function saveOptions of the file /options/save of the component Site Settings. The manipulation of the argument Site Title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any wa
closed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299806 - https://vuldb.com/?ctiid.299806 - https://vuldb.com/?submit.514793 - https://github.com/qkdjksfkeg/cve_article/blob/main/Tale/XSS.md
CVE ID: CVE-2025-2341 State: PUBLISHED Published: 2025-03-16T14:31:04.416Z Last Updated: 2025-03-17T14:21:20.714Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IROAD Products: Dash Cam X5 Problem Types: CWE-1392 Description: A vulnerability was found in IROAD Dash Cam X5 up to 20250203. It has been rated as problematic. This issue affects some unknown processing of the component SSID. The manipulation leads to use of default credentials. The attack needs to be initiated within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was co
e exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299807 - https://vuldb.com/?ctiid.299807 - https://vuldb.com/?submit.512418 - https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-1-default-credentials-for-ssid-cwe-1393
CVE ID: CVE-2025-2342 State: PUBLISHED Published: 2025-03-16T16:00:07.647Z Last Updated: 2025-03-17T14:18:23.651Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IROAD Products: X5 Mobile App Problem Types: CWE-798, CWE-259 Description: A vulnerability classified as critical has been found in IROAD X5 Mobile App up to 5.2.5 on Android. Affected is an unknown function of the component API Endpoint. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Not
may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299808 - https://vuldb.com/?ctiid.299808 - https://vuldb.com/?submit.512419 - https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-2-hardcoded-credentials-in-apk-iroad--v525-to-ports-9091-and-9092
CVE ID: CVE-2025-2343 State: PUBLISHED Published: 2025-03-16T17:31:04.395Z Last Updated: 2025-03-17T14:17:49.548Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IROAD Products: Dash Cam X5, Dash Cam X6 Problem Types: CWE-798, CWE-259 Description: A vulnerability classified as critical was found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. Affected by this vulnerability is an unknown functionality of the component Device Pairing. The manipulation leads to hard-coded credentials. Access to the local network is required for this attack to succeed. The complexity of an attack is rather high. The exploitation appears to be difficult. The vendor was contact
to succeed. The complexity of an attack is rather high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299809 - https://vuldb.com/?ctiid.299809 - https://vuldb.com/?submit.516881 - https://github.com/geo-chen/IROAD#finding-3-bypassing-of-device-pairing-cwe-798-for-iroad-x-series
CVE ID: CVE-2025-2344 State: PUBLISHED Published: 2025-03-16T18:00:07.198Z Last Updated: 2025-03-17T14:17:13.638Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IROAD Products: Dash Cam X5, Dash Cam X6 Problem Types: CWE-306, CWE-287 Description: A vulnerability, which was classified as critical, has been found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. Affected by this issue is some unknown functionality of the component API Endpoint. The manipulation leads to missing authentication. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnri
or was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299810 - https://vuldb.com/?ctiid.299810 - https://vuldb.com/?submit.516882 - https://github.com/geo-chen/IROAD#finding-4-remotely-dump-video-footage-and-live-video-stream
CVE ID: CVE-2025-2345 State: PUBLISHED Published: 2025-03-16T18:31:04.588Z Last Updated: 2025-03-17T14:06:09.191Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: IROAD Products: Dash Cam X5, Dash Cam X6 Problem Types: CWE-285, CWE-266 Description: A vulnerability, which was classified as very critical, was found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. This affects an unknown part. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299811 - https://vuld
in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299811 - https://vuldb.com/?ctiid.299811 - https://vuldb.com/?submit.516883 - https://github.com/geo-chen/IROAD/blob/main/README.md#finding-5-managing-settings-to-obtain-sensitive-data-and-sabotaging-car-battery
CVE ID: CVE-2025-2346 State: PUBLISHED Published: 2025-03-16T20:00:11.895Z Last Updated: 2025-03-17T13:48:27.831Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: IROAD Products: Dash Cam X5, Dash Cam X6 Problem Types: CWE-346, CWE-345 Description: A vulnerability has been found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308 and classified as problematic. This vulnerability affects unknown code of the component Domain Handler. The manipulation of the argument Domain Name leads to origin validation error. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Additional Analyst Notes: -
tely. The complexity of an attack is rather high. The exploitation appears to be difficult. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299812 - https://vuldb.com/?ctiid.299812 - https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-6-public-domain-used-for-internal-domain-name
CVE ID: CVE-2025-2347 State: PUBLISHED Published: 2025-03-16T20:31:04.413Z Last Updated: 2025-03-17T13:45:11.469Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: IROAD Products: Dash Cam FX2 Problem Types: CWE-1393 Description: A vulnerability was found in IROAD Dash Cam FX2 up to 20250308 and classified as problematic. This issue affects some unknown processing of the component Device Registration. The manipulation of the argument Password with the input qwertyuiop leads to use of default password. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrich
cal network. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299813 - https://vuldb.com/?ctiid.299813 - https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-7-bypass-of-device-pairingregistration-for-iroad-fx2
CVE ID: CVE-2025-2348 State: PUBLISHED Published: 2025-03-16T21:00:07.043Z Last Updated: 2025-03-17T16:47:05.739Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IROAD Products: Dash Cam FX2 Problem Types: CWE-200, CWE-284 Description: A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been classified as problematic. Affected is an unknown function of the file /mnt/extsd/event/ of the component HTTP/RTSP. The manipulation leads to information disclosure. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299814 - https://vuldb.com/?ctiid.299814 - https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-8-dumping-files-over-http-and-rtsp-without-authentication
CVE ID: CVE-2025-2349 State: PUBLISHED Published: 2025-03-16T21:31:04.302Z Last Updated: 2025-03-17T16:45:26.090Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IROAD Products: Dash Cam FX2 Problem Types: CWE-916, CWE-326 Description: A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/passwd of the component Password Hash Handler. The manipulation leads to password hash with insufficient computational effort. Access to the local network is required for this attack. The complexity of an attack is rather high. The exploitation appears to
the local network is required for this attack. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299815 - https://vuldb.com/?ctiid.299815 - https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-9-exposed-root-password
CVE ID: CVE-2025-2350 State: PUBLISHED Published: 2025-03-16T22:00:19.587Z Last Updated: 2025-03-17T16:29:49.083Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: IROAD Products: Dash Cam FX2 Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been rated as critical. Affected by this issue is some unknown functionality of the file /action/upload_file. The manipulation leads to unrestricted upload. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299816 - https://vuldb.com/?ctiid.299816 - https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-10-unauthenticated-uploads - https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-11-unrestricted-webshell
CVE ID: CVE-2025-2351 State: PUBLISHED Published: 2025-03-16T22:31:04.147Z Last Updated: 2025-03-17T14:57:38.586Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: DayCloud Products: StudentManage Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of
ic and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299818 - https://vuldb.com/?ctiid.299818 - https://vuldb.com/?submit.512793
CVE ID: CVE-2025-2352 State: PUBLISHED Published: 2025-03-16T23:00:11.835Z Last Updated: 2025-03-17T14:55:43.017Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: StarSea99 Products: starsea-mall Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects some unknown processing of the file /admin/indexConfigs/save of the component Backend. The manipulation of the argument categoryName leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information abou
oit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299819 - https://vuldb.com/?ctiid.299819 - https://vuldb.com/?submit.513137 - https://github.com/Jingyi-u/starsea-mall/tree/main
CVE ID: CVE-2025-2353 State: PUBLISHED Published: 2025-03-16T23:31:18.227Z Last Updated: 2025-03-17T14:53:28.189Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: VAM Products: Virtual Airlines Manager Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in VAM Virtual Airlines Manager up to 2.6.2. Affected is an unknown function of the file /vam/index.php of the component HTTP GET Parameter Handler. The manipulation of the argument ID/registry_id/plane_icao leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well
ttack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299820 - https://vuldb.com/?ctiid.299820 - https://vuldb.com/?submit.513284
CVE ID: CVE-2025-2354 State: PUBLISHED Published: 2025-03-17T00:00:07.759Z Last Updated: 2025-03-17T14:51:10.756Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: VAM Products: Virtual Airlines Manager Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in VAM Virtual Airlines Manager 2.6.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /vam/index.php. The manipulation of the argument registry_id/plane_icao/hub_id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contac
loit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299821 - https://vuldb.com/?ctiid.299821 - https://vuldb.com/?submit.513287
CVE ID: CVE-2025-2355 State: PUBLISHED Published: 2025-03-17T00:31:04.118Z Last Updated: 2025-03-17T13:38:26.270Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: BlackVue Products: App Problem Types: CWE-256, CWE-255 Description: A vulnerability was found in BlackVue App 3.65 on Android and classified as problematic. Affected by this issue is some unknown functionality of the component API Endpoint Handler. The manipulation of the argument BCS_TOKEN/SECRET_KEY leads to unprotected storage of credentials. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this discl
is attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299822 - https://vuldb.com/?ctiid.299822 - https://vuldb.com/?submit.513351 - https://github.com/geo-chen/BlackVue/blob/main/README.md#finding-2-hardcoded-secrets-exposed-in-plaintext