Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-13421 State: PUBLISHED Published: 2025-11-19T23:02:06.028Z Last Updated: 2025-11-20T16:13:53.579Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Human Resource Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in itsourcecode Human Resource Management System 1.0. Impacted is an unknown function of the file /src/store/NoticeStore.php. Such manipulation of the argument noticeDesc leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332943 - https://vuldb.com/?ctiid.332943 - https://vuldb.com/?submit.695953 - https://github.com/f14g-orz/CVE/issues/9 - https://itsourcecode.com/
CVE ID: CVE-2025-13422 State: PUBLISHED Published: 2025-11-19T23:32:06.123Z Last Updated: 2025-11-20T16:16:20.974Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: freeprojectscodes Products: Sports Club Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in freeprojectscodes Sports Club Management System 1.0. The affected element is an unknown function of the file /dashboard/admin/change_s_pwd.php. Performing manipulation of the argument login_id results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
ly. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332944 - https://vuldb.com/?ctiid.332944 - https://vuldb.com/?submit.696004 - https://github.com/f14g-orz/CVE/issues/10
CVE ID: CVE-2025-13423 State: PUBLISHED Published: 2025-11-19T23:32:08.944Z Last Updated: 2025-11-20T18:26:29.256Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Retro Basketball Shoes Online Store Problem Types: CWE-434, CWE-284 Description: A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/admin_product.php. Executing manipulation of the argument product_image can lead to unrestricted upload. The attack may be launched remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332945 - https://vuldb.com/?ctiid.332945 - https://vuldb.com/?submit.696051 - https://github.com/Abxery/cveee/issues/6 - https://www.campcodes.com/
CVE ID: CVE-2025-13424 State: PUBLISHED Published: 2025-11-20T00:02:06.927Z Last Updated: 2025-11-20T18:27:13.450Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Supplier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_product.php. The manipulation of the argument txtProductName leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332946 - https://vuldb.com/?ctiid.332946 - https://vuldb.com/?submit.696053 - https://github.com/arpcyber070/CVE/issues/3 - https://www.campcodes.com/
CVE ID: CVE-2025-13425 State: PUBLISHED Published: 2025-11-20T15:30:31.256Z Last Updated: 2025-11-20T16:24:21.448Z Vendors: Google Products: OSV-SCALIBR Problem Types: CWE-476 Description: A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic (index out of range) and an application crash (denial of service) in OSV-SCALIBR. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/google/osv-scalibr/commit/e67c4e198ca099cb7c16957a80f6c5331d90a672
CVE ID: CVE-2025-13432 State: PUBLISHED Published: 2025-11-21T14:20:53.921Z Last Updated: 2025-11-21T15:13:18.518Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: HashiCorp Products: Terraform Enterprise Problem Types: CWE-863 Description: Terraform state versions can be created by a user with specific but insufficient permissions in a Terraform Enterprise workspace. This may allow for the alteration of infrastructure if a subsequent plan operation is approved by a user with approval permission or auto-applied. This vulnerability, CVE-2025-13432, is fixed in Terraform Enterprise version 1.1.1 and 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
13432, is fixed in Terraform Enterprise version 1.1.1 and 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2025-34-terraform-enterprise-state-versions-can-be-created-by-users-without-sufficient-write-access/76821
CVE ID: CVE-2025-13433 State: PUBLISHED Published: 2025-11-20T00:32:05.854Z Last Updated: 2025-11-20T15:30:36.998Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:R) Vendors: Muse Group Products: MuseHub Problem Types: CWE-428, CWE-426 Description: A security flaw has been discovered in Muse Group MuseHub 2.1.0.1567. The affected element is an unknown function of the file C:\Program Files\WindowsApps\Muse.MuseHub_2.1.0.1567_x64__rb9pth70m6nz6\Muse.Updater.exe of the component Windows Service. The manipulation results in unquoted search path. The attack is only possible with local access. A high complexity level is associated with this attack. The exploitabilit
The attack is only possible with local access. A high complexity level is associated with this attack. The exploitability is described as difficult. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332977 - https://vuldb.com/?ctiid.332977 - https://vuldb.com/?submit.687547 - https://github.com/lakshayyverma/CVE-Discovery/blob/main/Musehub.md
CVE ID: CVE-2025-13434 State: PUBLISHED Published: 2025-11-20T01:02:05.491Z Last Updated: 2025-11-20T15:07:06.733Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: jameschz Products: Hush Framework Problem Types: CWE-644 Description: A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $_SERVER['HOST'] causes improper neutralization of http headers for scripting syntax. The attack is possible to be carried out remotely. The exploit has been made available to the public and coul
ng syntax. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332978 - https://vuldb.com/?ctiid.332978 - https://vuldb.com/?submit.687568 - https://github.com/lakshayyverma/CVE-Discovery/blob/main/hush.md
CVE ID: CVE-2025-13435 State: PUBLISHED Published: 2025-11-20T01:32:04.986Z Last Updated: 2025-11-20T14:46:53.213Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: Dreampie Products: Resty Problem Types: CWE-22 Description: A security vulnerability has been detected in Dreampie Resty up to 1.3.1.SNAPSHOT. This affects the function Request of the file /resty-httpclient/src/main/java/cn/dreampie/client/HttpClient.java of the component HttpClient Module. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is reported as difficult.
k may be performed from remote. Attacks of this nature are highly complex. The exploitability is reported as difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332979 - https://vuldb.com/?ctiid.332979 - https://vuldb.com/?submit.687603 - https://github.com/Xzzz111/exps/blob/main/archives/Resty-PathTraversal-01/cve_application.md
CVE ID: CVE-2025-13437 State: PUBLISHED Published: 2025-11-20T16:25:16.866Z Last Updated: 2025-11-20T16:49:32.470Z Vendors: Google Products: zx Problem Types: CWE-706 Description: When zx is invoked with --prefer-local=<path>, the CLI creates a symlink named ./node_modules pointing to <path>/node_modules. Due to a logic error in src/cli.ts (linkNodeModules / cleanup), the function returns the target path instead of the alias (symlink path). The later cleanup routine removes what it received, which deletes the target directory itself. Result: zx can delete an external <path>/node_modules outside the current working directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
/node_modules outside the current working directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/google/zx/issues/1348
CVE ID: CVE-2025-13442 State: PUBLISHED Published: 2025-11-20T01:32:07.186Z Last Updated: 2025-11-20T14:30:06.287Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: UTT Products: 进取 750W Problem Types: CWE-77, CWE-74 Description: A security vulnerability has been detected in UTT 进取 750W up to 3.2.2-191225. Affected by this vulnerability is the function system of the file /goform/formPdbUpConfig. Such manipulation of the argument policyNames leads to command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst
nd may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333015 - https://vuldb.com/?ctiid.333015 - https://vuldb.com/?submit.688782 - https://github.com/alc9700jmo/CVE/issues/20
CVE ID: CVE-2025-13443 State: PUBLISHED Published: 2025-11-20T02:02:06.154Z Last Updated: 2025-11-20T14:52:21.901Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: macrozheng Products: mall Problem Types: CWE-284, CWE-266 Description: A vulnerability was detected in macrozheng mall up to 1.0.3. Affected by this issue is the function delete of the file /member/readHistory/delete. Performing manipulation of the argument ids results in improper access controls. Remote exploitation of the attack is possible. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333016 - https://vuldb.com/?ct
d. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333016 - https://vuldb.com/?ctiid.333016 - https://vuldb.com/?submit.690892 - https://github.com/Hwwg/cve/issues/15
CVE ID: CVE-2025-13445 State: PUBLISHED Published: 2025-11-20T02:02:09.585Z Last Updated: 2025-11-20T14:52:14.900Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC21 Problem Types: CWE-121, CWE-119 Description: A flaw has been found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/SetIpMacBind. Executing manipulation of the argument list can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333017 - https://vuldb.com/?ctiid.333017 - https://vuldb.com/?submit.6940
nrichment: References: - https://vuldb.com/?id.333017 - https://vuldb.com/?ctiid.333017 - https://vuldb.com/?submit.694066 - https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN7.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-13446 State: PUBLISHED Published: 2025-11-20T02:32:07.969Z Last Updated: 2025-11-20T14:52:07.354Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC21 Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333018 - https://vuldb.c
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333018 - https://vuldb.com/?ctiid.333018 - https://vuldb.com/?submit.694425 - https://vuldb.com/?submit.694430 - https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN8.md - https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN9.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-13449 State: PUBLISHED Published: 2025-11-20T02:32:10.250Z Last Updated: 2025-11-20T19:13:58.271Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Shop Project Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333019 - https://vuldb.com/?ctiid.33
itional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333019 - https://vuldb.com/?ctiid.333019 - https://vuldb.com/?submit.694653 - https://github.com/xiaojuzirr/cve/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-13450 State: PUBLISHED Published: 2025-11-20T03:02:06.705Z Last Updated: 2025-11-20T19:15:38.354Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Shop Project Problem Types: CWE-79, CWE-94 Description: A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument f_name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333020 - https:/
may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333020 - https://vuldb.com/?ctiid.333020 - https://vuldb.com/?submit.694780 - https://github.com/xiaojuzirr/cve/issues/5 - https://www.sourcecodester.com/
CVE ID: CVE-2025-13451 State: PUBLISHED Published: 2025-11-20T03:02:09.496Z Last Updated: 2025-11-20T19:20:20.915Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Shop Project Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333021 - https://vuldb.c
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333021 - https://vuldb.com/?ctiid.333021 - https://vuldb.com/?submit.694674 - https://github.com/xiaojuzirr/cve/issues/4 - https://www.sourcecodester.com/
CVE ID: CVE-2025-13452 State: PUBLISHED Published: 2025-11-25T07:28:20.236Z Last Updated: 2025-11-25T07:28:20.236Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: nmedia Products: Admin and Customer Messages After Order for WooCommerce: OrderConvo Problem Types: CWE-639 Description: The Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 14. This is due to a flawed permission check in the REST API permission callback that returns true when no nonce is provided. This makes it possible for unauthenticated attackers to impersonate any WordPress user
s true when no nonce is provided. This makes it possible for unauthenticated attackers to impersonate any WordPress user and inject arbitrary messages into any WooCommerce order conversation by directly calling the REST endpoint with controlled user_id, order_id, and context parameters. References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2c1dd87c-cc28-43b3-8378-4583dc6de195?source=cve - https://plugins.trac.wordpress.org/browser/admin-and-client-message-after-order-for-woocommerce/trunk/includes/wprest.class.php#L56 - https://plugins.trac.wordpress.org/browser/admin-and-client-message-after-order-for-woocommerce/tags/14/includes/wprest.class.php#L56 - https://plugins.trac
rowser/admin-and-client-message-after-order-for-woocommerce/tags/14/includes/wprest.class.php#L56 - https://plugins.trac.wordpress.org/browser/admin-and-client-message-after-order-for-woocommerce/trunk/includes/wprest.class.php#L113 - https://plugins.trac.wordpress.org/browser/admin-and-client-message-after-order-for-woocommerce/tags/14/includes/wprest.class.php#L113
CVE ID: CVE-2025-13466 State: PUBLISHED Published: 2025-11-24T18:29:36.725Z Last Updated: 2025-11-24T18:57:00.939Z Vendors: body-parser Products: body-parser Problem Types: CWE-400 Description: body-parser 2.2.0 is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can send payloads containing thousands of parameters within the default 100KB request size limit, causing elevated CPU and memory usage. This can lead to service slowdown or partial outages under sustained malicious traffic. This issue is addressed in version 2.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/e
sue is addressed in version 2.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/expressjs/body-parser/security/advisories/GHSA-wqch-xfxh-vrr4
CVE ID: CVE-2025-13468 State: PUBLISHED Published: 2025-11-20T13:32:08.236Z Last Updated: 2025-11-20T18:33:51.514Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Alumni Management System Problem Types: CWE-862, CWE-863 Description: A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function delete_forum/delete_career/delete_comment/delete_gallery/delete_event of the file admin/admin_class.php of the component Delete Handler. Executing manipulation of the argument ID can lead to missing authorization. It is possible to launch the attack remotely. The exploit has been made available to t
an lead to missing authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333041 - https://vuldb.com/?ctiid.333041 - https://vuldb.com/?submit.694826 - https://hackmd.io/@mlgzackfly/SourceCodester - https://www.sourcecodester.com/
CVE ID: CVE-2025-13469 State: PUBLISHED Published: 2025-11-20T13:32:10.915Z Last Updated: 2025-11-20T21:00:03.081Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:ND/RL:OF/RC:C) Vendors: Public Knowledge Project Products: omp, ojs Problem Types: CWE-79, CWE-94 Description: A security vulnerability has been detected in Public Knowledge Project omp and ojs 3.3.0/3.4.0/3.5.0. Impacted is an unknown function of the file plugins/paymethod/manual/templates/paymentForm.tpl of the component Payment Instructions Setting Handler. The manipulation of the argument manualInstructions leads to cross site scripting. The attack can be initiated remotely. You should upgrade the affected component. Addit
ns leads to cross site scripting. The attack can be initiated remotely. You should upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333042 - https://vuldb.com/?ctiid.333042 - https://vuldb.com/?submit.695020 - https://github.com/pkp/pkp-lib/issues/12022 - https://github.com/pkp/pkp-lib/issues/12022#event-20904087480 - https://github.com/pkp/pkp-lib/issues/12022#event-20904112770
CVE ID: CVE-2025-13470 State: PUBLISHED Published: 2025-11-21T17:05:15.683Z Last Updated: 2025-11-21T17:35:33.645Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Ribose Products: RNP Problem Types: CWE-330 Description: In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key (PKESK) packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted using public-key encryption in this release can be decrypted trivially by supplying an all-zero session key, fully compromising confidentiality. The vulnerability affects only public key encryp
supplying an all-zero session key, fully compromising confidentiality. The vulnerability affects only public key encryption (PKESK packets). Passphrase-based encryption (SKESK packets) is not affected. Root cause: Vulnerable session key buffer used in PKESK packet generation. The defect was introduced in commit `7bd9a8dc356aae756b40755be76d36205b6b161a` where initialization logic inside `encrypted_build_skesk()` only randomized the key for the SKESK path and omitted it for the PKESK path. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rnpgp/rnp/commit/7bd9a8dc356aae756b40755be76d36205b6b161a - https://launchpad.net/ubuntu/+source/rnp - https://aur.archli
npgp/rnp/commit/7bd9a8dc356aae756b40755be76d36205b6b161a - https://launchpad.net/ubuntu/+source/rnp - https://aur.archlinux.org/packages/rnp - https://packages.gentoo.org/packages/dev-util/librnp - https://bugzilla.redhat.com/show_bug.cgi?id=2415863 - https://access.redhat.com/security/cve/cve-2025-13402 - https://open.ribose.com/advisories/ra-2025-11-20/ - https://github.com/rnpgp/rnp/releases/tag/v0.18.1
CVE ID: CVE-2025-13484 State: PUBLISHED Published: 2025-11-20T22:32:05.833Z Last Updated: 2025-11-24T18:13:48.650Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Complete Online Beauty Parlor Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/customer-list.php. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
otely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333084 - https://vuldb.com/?ctiid.333084 - https://vuldb.com/?submit.696054 - https://github.com/Abxery/cveee/issues/8 - https://www.campcodes.com/