Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-29312 State: PUBLISHED Published: 2025-03-24T00:00:00.000Z Last Updated: 2025-03-26T14:25:27.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link type from indirect to direct. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/Saber-Berserker/4e54c2aa70abab2b133ce2c2b7e91249
CVE ID: CVE-2025-29313 State: PUBLISHED Published: 2025-03-24T00:00:00.000Z Last Updated: 2025-03-25T17:36:37.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use of incorrectly resolved name or reference in OpenDaylight Service Function Chaining (SFC) Subproject SFC Sodium-SR4 and below allows attackers to cause a Denial of Service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://blog.csdn.net/weixin_43959580/article/details/146018191
CVE ID: CVE-2025-29314 State: PUBLISHED Published: 2025-03-24T00:00:00.000Z Last Updated: 2025-03-25T15:03:10.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Shiro cookie configurations in OpenDaylight Service Function Chaining (SFC) Subproject SFC Sodium-SR4 and below allow attackers to access sensitive information via a man-in-the-middle attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://blog.csdn.net/weixin_43959580/article/details/146018166
CVE ID: CVE-2025-29315 State: PUBLISHED Published: 2025-03-24T00:00:00.000Z Last Updated: 2025-03-26T15:08:44.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the Shiro-based RBAC (Role-based Access Control) mechanism of OpenDaylight Service Function Chaining (SFC) Subproject SFC Sodium-SR4 and below allows attackers to execute privileged operations via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://blog.csdn.net/weixin_43959580/article/details/144794289
CVE ID: CVE-2025-29316 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-05-05T17:26:50.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in DataPatrol Screenshot watermark, printing watermark agent v.3.5.2.0 allows a physically proximate attacker to obtain sensitive information. NOTE: the Supplier disputes the Print Job Watermark Bypass claim because the watermark is added by hooking into the OS printing mechanism, and thus is not supposed to be visible when previewing a "generated printout" on screen. The Supplier disputes the Screenshot Watermark Bypass claim because the product's documentation explains the step of setting Developer Tools to Di
Screenshot Watermark Bypass claim because the product's documentation explains the step of setting Developer Tools to Disallowed through AD Group Policy. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://app.filemail.com/d/fjyvgdkchxdzefl - https://gist.github.com/Donsat12/c9295859e6f7ce406b787ded72701ea4?short_path=0e57ef8
CVE ID: CVE-2025-29322 State: PUBLISHED Published: 2025-03-26T00:00:00.000Z Last Updated: 2025-04-08T19:01:56.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in ScriptCase before v1.0.003 - Build 3 allows attackers to execute arbitrary code via a crafted payload to the "Connection Name" in the New Connection and Rename Connection pages. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.scriptcase.com.br/ - https://github.com/simalamuel/Research/tree/main/CVE-2025-29322
CVE ID: CVE-2025-29331 State: PUBLISHED Published: 2025-06-26T00:00:00.000Z Last Updated: 2025-06-26T15:11:23.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute arbitrary code via the management script x-ui passes the no check certificate option to wget when downloading updates Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.digilol.net/security-advisories/dlsec2025-001.html - https://github.com/MHSanaei/3x-ui/pull/2661
CVE ID: CVE-2025-29339 State: PUBLISHED Published: 2025-04-22T00:00:00.000Z Last Updated: 2025-04-23T13:36:39.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation. When processing a PFCP Session Establishment Request with PDN Type=0, the UPF fails to handle the invalid value propagated from SMF (or via direct attack), triggering a fatal assertion check and causing a daemon crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/open5gs/open5gs/issues/3727
CVE ID: CVE-2025-29357 State: PUBLISHED Published: 2025-03-13T00:00:00.000Z Last Updated: 2025-03-19T14:30:18.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the startIp and endIp parameters at /goform/SetPptpServerCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/2664521593/mycve/blob/main/Tenda/RX3/tenda_rx3_bof_4.pdf
CVE ID: CVE-2025-29358 State: PUBLISHED Published: 2025-03-13T00:00:00.000Z Last Updated: 2025-03-19T18:43:23.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the firewallEn parameter at /goform/SetFirewallCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/2664521593/mycve/blob/main/Tenda/RX3/tenda_rx3_bof_2.pdf
CVE ID: CVE-2025-29359 State: PUBLISHED Published: 2025-03-13T00:00:00.000Z Last Updated: 2025-03-19T18:42:17.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the deviceId parameter at /goform/saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/2664521593/mycve/blob/main/Tenda/RX3/tenda_rx3_bof_6.pdf
CVE ID: CVE-2025-29360 State: PUBLISHED Published: 2025-03-13T00:00:00.000Z Last Updated: 2025-03-19T18:41:08.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the time and timeZone parameters at /goform/SetSysTimeCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/2664521593/mycve/blob/main/Tenda/RX3/tenda_rx3_bof_1.pdf
CVE ID: CVE-2025-29361 State: PUBLISHED Published: 2025-03-13T00:00:00.000Z Last Updated: 2025-03-19T18:44:47.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list parameter at /goform/SetVirtualServerCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/2664521593/mycve/blob/main/Tenda/RX3/tenda_rx3_bof_5.pdf
CVE ID: CVE-2025-29362 State: PUBLISHED Published: 2025-03-13T00:00:00.000Z Last Updated: 2025-03-19T18:49:08.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list parameter at /goform/setPptpUserList. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/2664521593/mycve/blob/main/Tenda/RX3/tenda_rx3_bof_3.pdf
CVE ID: CVE-2025-29363 State: PUBLISHED Published: 2025-03-13T00:00:00.000Z Last Updated: 2025-03-19T18:50:26.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to buffer overflow via the schedStartTime and schedEndTime parameters at /goform/saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/2664521593/mycve/blob/main/Tenda/RX3/tenda_rx3_bof_7.pdf
CVE ID: CVE-2025-29364 State: PUBLISHED Published: 2025-08-28T00:00:00.000Z Last Updated: 2025-08-28T20:05:00.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in the READ_SYSCALL and WRITE_SYSCALL system calls. The application verifies the legitimacy of the starting and ending addresses for memory read/write operations. By configuring the starting and ending addresses for memory read/write to point to distinct memory segments within the virtual machine, it is possible to circumvent these checks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Giles-one/spimsimulatorEscape
hecks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Giles-one/spimsimulatorEscape?tab=readme-ov-file#bug2-bypass-check-in-read_syscall-and-write_syscall-leading-to-out-of-bounds-readwrite - https://gist.github.com/Giles-one/a398e3da21ea9567970c6f0de543c3b3
CVE ID: CVE-2025-29365 State: PUBLISHED Published: 2025-08-22T00:00:00.000Z Last Updated: 2025-08-22T16:13:07.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Giles-one/spimsimulatorEscape?tab=readme-ov-file#bug1-out-of-bounds-write-in-read_input-function - https://gist.github.com/Giles-one/3a80cd1c7014e50601bd1c0dd9d41663
CVE ID: CVE-2025-29366 State: PUBLISHED Published: 2025-08-22T00:00:00.000Z Last Updated: 2025-08-26T14:09:17.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: In mupen64plus v2.6.0 there is an array overflow vulnerability in the write_rdram_regs and write_rdram_regs functions, which enables executing arbitrary commands on the host machine. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mupen64plus/mupen64plus-core/blob/2.6.0/src/device/rdram/rdram.c#L159 - https://github.com/mupen64plus/mupen64plus-core/blob/master/src/device/rdram/rdram.h#L60 - https://github.com/mupen64plus/mupen64plus-core/blob/master/src/device/rdram/rdram.h#L50 - https
ice/rdram/rdram.h#L60 - https://github.com/mupen64plus/mupen64plus-core/blob/master/src/device/rdram/rdram.h#L50 - https://github.com/Giles-one/mupen64plusEscape/tree/main/BUG1 - https://gist.github.com/Giles-one/f4ea405c2a26000bb4ff4cfb9622be49
CVE ID: CVE-2025-29369 State: PUBLISHED Published: 2025-04-03T00:00:00.000Z Last Updated: 2025-04-10T20:36:55.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-Projects Matrimonial Site V1.0 is vulnerable to SQL Injection in /view_profile.php?id=1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://code-projects.org/matrimonial-site-in-php-with-source-code/ - https://github.com/sqs404/tesc
CVE ID: CVE-2025-29384 State: PUBLISHED Published: 2025-03-14T00:00:00.000Z Last Updated: 2025-03-19T18:37:25.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/shuqi233/loophole/blob/main/Tenda%20AC9/AdvSetMacMtuWan1.md
CVE ID: CVE-2025-29385 State: PUBLISHED Published: 2025-03-14T00:00:00.000Z Last Updated: 2025-03-19T18:36:38.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC9 v1.0 V15.03.05.14_multi, the cloneType parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/shuqi233/loophole/blob/main/Tenda%20AC9/AdvSetMacMtuWan3.md
CVE ID: CVE-2025-29386 State: PUBLISHED Published: 2025-03-14T00:00:00.000Z Last Updated: 2025-03-19T18:35:49.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC9 v1.0 V15.03.05.14_multi, the mac parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/shuqi233/loophole/blob/main/Tenda%20AC9/AdvSetMacMtuWan4.md
CVE ID: CVE-2025-29387 State: PUBLISHED Published: 2025-03-14T00:00:00.000Z Last Updated: 2025-03-17T18:34:19.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC9 v1.0 V15.03.05.14_multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/shuqi233/loophole/blob/main/Tenda%20AC9/AdvSetMacMtuWan2.md
CVE ID: CVE-2025-29389 State: PUBLISHED Published: 2025-04-09T00:00:00.000Z Last Updated: 2025-04-09T18:40:49.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: PbootCMS v3.2.9 contains a XSS vulnerability in admin.php?p=/Content/index/mcode/2#tab=t2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jaylan545/security/issues/1 - https://gist.github.com/jaylan545/0540db17daca2bf42fe5a3ce864300c9
CVE ID: CVE-2025-29390 State: PUBLISHED Published: 2025-04-09T00:00:00.000Z Last Updated: 2025-04-09T18:39:55.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the set_password function in application/controllers/home.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jerryhanjj/ERP/issues/7 - https://gist.github.com/jaylan545/dbe989f09c73e311ccbfe5336435638c
CVE ID: CVE-2025-29391 State: PUBLISHED Published: 2025-04-09T00:00:00.000Z Last Updated: 2025-04-09T18:38:26.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: horvey Library-Manager v1.0 is vulnerable to SQL Injection in Admin/Controller/BookController.class.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/horvey/Library-Manager/issues/9 - https://gist.github.com/jaylan545/73dee34609ac492b9009625fb985cde4
CVE ID: CVE-2025-29394 State: PUBLISHED Published: 2025-04-09T00:00:00.000Z Last Updated: 2025-04-22T20:56:24.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: An insecure permissions vulnerability in verydows v2.0 allows a remote attacker to execute arbitrary code by uploading a file type. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Verytops/verydows/issues/24 - https://gist.github.com/jaylan545/01e9653c0139638152927fe6f00cd82e
CVE ID: CVE-2025-29401 State: PUBLISHED Published: 2025-03-19T00:00:00.000Z Last Updated: 2025-03-25T15:26:06.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /views/plugin.php of emlog pro v2.5.7 allows attackers to execute arbitrary code via uploading a crafted PHP file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bGl1o/emlogpro/blob/main/emlog%20pro2.5.7-getshell.md
CVE ID: CVE-2025-29405 State: PUBLISHED Published: 2025-03-19T00:00:00.000Z Last Updated: 2025-03-24T14:42:39.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /admin/template.php of emlog pro 2.5.0 and pro 2.5.* allows attackers to execute arbitrary code via uploading a crafted PHP file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bGl1o/emlogpro/blob/main/emlog%20pro2.5.7-getshell-2.md - https://gist.github.com/bGl1o/19a141ee6e899884fa85f3a52898bcc6
CVE ID: CVE-2025-29410 State: PUBLISHED Published: 2025-03-20T00:00:00.000Z Last Updated: 2025-03-21T18:57:01.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /contact.php of Hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the txtEmail parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kishan0725/Hospital-Management-System/issues/49 - https://www.simonjuguna.com/cve-2025-29410-hospital-management-system-xss-vulnerability/
CVE ID: CVE-2025-29411 State: PUBLISHED Published: 2025-03-20T00:00:00.000Z Last Updated: 2025-03-24T15:09:49.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary code via uploading a crafted PHP file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MartMbithi/iBanking/issues/12 - https://www.simonjuguna.com/cve-2025-29411-authenticated-remote-code-execution-rce-via-arbitrary-file-upload/
CVE ID: CVE-2025-29412 State: PUBLISHED Published: 2025-03-20T00:00:00.000Z Last Updated: 2025-03-21T19:16:55.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MartMbithi/iBanking/issues/11 - https://www.simonjuguna.com/cve-2025-29412-cross-site-scripting-xss-vulnerability-in-ibanking-v2-0-0/
CVE ID: CVE-2025-29420 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-08-26T13:31:46.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: PerfreeBlog v4.0.11 has a directory traversal vulnerability in the getThemeFilesByName function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/147536951/Qiany1/blob/main/Perfreeblog_1.pdf
CVE ID: CVE-2025-29421 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-08-26T15:49:33.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/147536951/Qiany1/blob/main/Perfreeblog_2.pdf
CVE ID: CVE-2025-29425 State: PUBLISHED Published: 2025-03-17T00:00:00.000Z Last Updated: 2025-03-19T18:27:30.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in exam_save.php via the parameters member and first. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/872323857/CVE/blob/main/Online%20Class%20and%20Exam%20Scheduling%20System.md
CVE ID: CVE-2025-29426 State: PUBLISHED Published: 2025-03-17T00:00:00.000Z Last Updated: 2025-03-19T18:26:15.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/class.php via the id and cys parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/872323857/CVE/blob/main/Online%20Class%20and%20Exam%20Scheduling%20System-class.php.md
CVE ID: CVE-2025-29427 State: PUBLISHED Published: 2025-03-17T00:00:00.000Z Last Updated: 2025-03-19T18:28:27.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in profile.php via the member_first and member_last parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/872323857/CVE/blob/main/Online%20Class%20and%20Exam%20Scheduling%20System-profile.pdf
CVE ID: CVE-2025-29429 State: PUBLISHED Published: 2025-03-17T00:00:00.000Z Last Updated: 2025-03-18T15:19:45.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/program.php via the id, code, and name parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/872323857/CVE/blob/main/Online%20Class%20and%20Exam%20Scheduling%20System-program.php.md
CVE ID: CVE-2025-29430 State: PUBLISHED Published: 2025-03-17T00:00:00.000Z Last Updated: 2025-03-19T18:31:48.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/room.php via the id and rome parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/872323857/CVE/blob/main/Online%20Class%20and%20Exam%20Scheduling%20System-room.php.md
CVE ID: CVE-2025-29431 State: PUBLISHED Published: 2025-03-17T00:00:00.000Z Last Updated: 2025-03-19T18:34:40.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/department.php via the id, code, and name parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/872323857/CVE/blob/main/Online%20Class%20and%20Exam%20Scheduling%20System-department.php.md
CVE ID: CVE-2025-29446 State: PUBLISHED Published: 2025-04-21T00:00:00.000Z Last Updated: 2025-05-12T14:17:18.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: open-webui v0.5.16 is vulnerable to SSRF in routers/ollama.py in function verify_connection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jcxj/jcxj/blob/master/source/_posts/open-webui-ssrf%E6%BC%8F%E6%B4%9E.md - https://github.com/l1uyi/cve-list/blob/main/cve-list/open-webui-ssrf.md
CVE ID: CVE-2025-29448 State: PUBLISHED Published: 2025-05-07T00:00:00.000Z Last Updated: 2025-05-12T18:37:31.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Abdullah4eb/CVE-2025-29448
CVE ID: CVE-2025-29449 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-04-21T19:15:13.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the link identification function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/morysummer/vx41bz/tawn9fxg1ggv1sdr
CVE ID: CVE-2025-29450 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-04-21T19:13:05.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the site settings component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/morysummer/vx41bz/ftlzvxve3t5713c6
CVE ID: CVE-2025-29451 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-04-18T15:50:13.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/morysummer/vx41bz/xd2v1fxmoopgrfm7