Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-46647 State: PUBLISHED Published: 2025-07-02T11:08:47.179Z Last Updated: 2025-11-04T21:10:49.580Z Vendors: Apache Software Foundation Products: Apache APISIX Problem Types: CWE-302 Description: A vulnerability of plugin openid-connect in Apache APISIX. This vulnerability will only have an impact if all of the following conditions are met: 1. Use the openid-connect plugin with introspection mode 2. The auth service connected to openid-connect provides services to multiple issuers 3. Multiple issuers share the same private key and relies only on the issuer being different If affected by this vulnerability, it would allow an attacker with a valid account on one of the issuers t
ing different If affected by this vulnerability, it would allow an attacker with a valid account on one of the issuers to log into the other issuer. This issue affects Apache APISIX: until 3.12.0. Users are recommended to upgrade to version 3.12.0 or higher. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/yrpp2cd3o4qkxlrh421mq8gsrt0k4x0w
CVE ID: CVE-2025-46652 State: PUBLISHED Published: 2025-04-26T00:00:00.000Z Last Updated: 2025-10-24T19:23:47.167Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IZArc Products: IZArc Problem Types: CWE-830 Description: In IZArc through 4.5, there is a Mark-of-the-Web Bypass Vulnerability. When a user performs an extraction from an archive file that bears Mark-of-the-Web, Mark-of-the-Web is not propagated to the extracted files. NOTE: this is disputed because Mark-of-the-Web propagation can increase risk via security-warning habituation, and because the intended control sphere for file-origin metadata (e.g., HostUrl in Zone.Identifier) may be narrower than
nd because the intended control sphere for file-origin metadata (e.g., HostUrl in Zone.Identifier) may be narrower than that for reading the file's content. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/EnisAksu/Argonis/blob/main/CVEs/IZArc/IZArc%20Mark-of-the-Web%20Bypass%20Vulnerability.md - https://github.com/EnisAksu/Argonis/security/advisories/GHSA-637g-8v47-79mv - https://www.izarc.org/news
CVE ID: CVE-2025-46653 State: PUBLISHED Published: 2025-04-26T00:00:00.000Z Last Updated: 2025-04-29T15:22:37.440Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: node-formidable Products: Formidable Problem Types: CWE-338 Description: Formidable (aka node-formidable) 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for untrusted executable content; however, hexoid is documented as not "cryptographically secure." (Also, there is a scenario in which only the last two characters of a hexoid string need to be guessed, but this is not often relevant.) NOTE: this does not imply that, in a typical use case, attackers will be able to ex
ed, but this is not often relevant.) NOTE: this does not imply that, in a typical use case, attackers will be able to exploit any hexoid behavior to upload and execute their own content. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zast-ai/vulnerability-reports/blob/main/formidable/file_upload/report.md - https://github.com/node-formidable/formidable/blob/d0fbec13edc8add54a1afb9ce1a8d3db803f8d47/CHANGELOG.md?plain=1#L10 - https://github.com/node-formidable/formidable/commit/022c2c5577dfe14d2947f10909d81b03b6070bf5
CVE ID: CVE-2025-46654 State: PUBLISHED Published: 2025-04-26T00:00:00.000Z Last Updated: 2025-04-29T15:22:49.333Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: HackMD Products: CodiMD Problem Types: CWE-424 Description: CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can be bypassed by uploading a .html file that references an uploaded .js file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/hackmdio/codimd/issues/1910 - https://github.com/zast-ai/vulnerability-reports/blob/main/formidable/file_upload/report.md
CVE ID: CVE-2025-46655 State: PUBLISHED Published: 2025-04-26T00:00:00.000Z Last Updated: 2025-04-29T15:22:43.429Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: HackMD Products: CodiMD Problem Types: CWE-424 Description: CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG documents containing JavaScript, but it can be bypassed in certain cases of different-origin file storage, such as AWS S3. NOTE: it can be considered a user error if AWS is employed for hosting untrusted JavaScript content, but the selected architecture within AWS does not have components that are able to insert Content-Security-Policy headers. Addit
selected architecture within AWS does not have components that are able to insert Content-Security-Policy headers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/hackmdio/codimd/issues/1910 - https://github.com/zast-ai/vulnerability-reports/blob/main/formidable/file_upload/report.md
CVE ID: CVE-2025-46656 State: PUBLISHED Published: 2025-04-26T00:00:00.000Z Last Updated: 2025-04-29T15:22:30.630Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: python-markdownify Products: python-markdownify Problem Types: CWE-1284 Description: python-markdownify (aka markdownify) before 0.14.1 allows large headline prefixes such as <h9999999> in addition to <h1> through <h6>. This causes memory consumption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/matthewwithanm/python-markdownify/compare/0.14.0...0.14.1 - https://github.com/matthewwithanm/python-markdownify/issues/143
CVE ID: CVE-2025-46657 State: PUBLISHED Published: 2025-04-27T00:00:00.000Z Last Updated: 2025-04-28T16:19:40.784Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: Karaz Products: Karazal Problem Types: CWE-79 Description: Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nov-1337/CVE-2025-46657/blob/main/CVE-2025-46657.md
CVE ID: CVE-2025-46658 State: PUBLISHED Published: 2025-08-05T00:00:00.000Z Last Updated: 2025-08-05T15:37:16.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error messages. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.4cstrategies.com/solutions/exonaut/ - https://gist.github.com/Jowu73/005ca4f85b27fb272a4e62e373341fa5
CVE ID: CVE-2025-46659 State: PUBLISHED Published: 2025-08-06T00:00:00.000Z Last Updated: 2025-08-06T20:40:29.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. Information disclosure can occur via an external HTTPS request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.4cstrategies.com/solutions/exonaut/ - https://gist.github.com/Jowu73/a393a8de99f2dbefcca7d9727c412dff
CVE ID: CVE-2025-46660 State: PUBLISHED Published: 2025-08-06T00:00:00.000Z Last Updated: 2025-08-06T20:36:39.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are hashed without a salt. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.4cstrategies.com/solutions/exonaut/ - https://gist.github.com/Jowu73/b8a2a267804dbfb17876dbedbbbfb28f
CVE ID: CVE-2025-46661 State: PUBLISHED Published: 2025-04-28T00:00:00.000Z Last Updated: 2025-04-28T16:31:04.425Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: IPW Products: Metazo Problem Types: CWE-1336 Description: IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side Template-Injection. All instances have been patched by the Supplier. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://code-white.com/public-vulnerability-list/ - https://www.ipwsystems.com/
CVE ID: CVE-2025-46672 State: PUBLISHED Published: 2025-04-27T00:00:00.000Z Last Updated: 2025-04-29T15:22:18.313Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: NASA Products: CryptoLib Problem Types: CWE-252 Description: NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nasa/CryptoLib/pull/360 - https://securitybynature.fr/post/hacking-cryptolib/ - https://github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2
CVE ID: CVE-2025-46673 State: PUBLISHED Published: 2025-04-27T00:00:00.000Z Last Updated: 2025-04-29T15:22:12.623Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: NASA Products: CryptoLib Problem Types: CWE-913 Description: NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitybynature.fr/post/hacking-cryptolib/ - https://github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2 - https://github.com/nasa/CryptoLib/pull/286 - https://github.com/nasa/CryptoLib/pull/306
toLib/compare/v1.3.1...v1.3.2 - https://github.com/nasa/CryptoLib/pull/286 - https://github.com/nasa/CryptoLib/pull/306 - https://github.com/nasa/CryptoLib/compare/v1.3.0...v1.3.1
CVE ID: CVE-2025-46674 State: PUBLISHED Published: 2025-04-27T00:00:00.000Z Last Updated: 2025-04-28T16:19:53.199Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L) Vendors: NASA Products: CryptoLib Problem Types: CWE-489 Description: NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream oracle. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitybynature.fr/post/hacking-cryptolib/ - https://github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2 - https://github.com/nasa/CryptoLib/pull/365
CVE ID: CVE-2025-46675 State: PUBLISHED Published: 2025-04-27T00:00:00.000Z Last Updated: 2025-04-28T16:19:46.895Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: NASA Products: CryptoLib Problem Types: CWE-913 Description: In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitybynature.fr/post/hacking-cryptolib/ - https://github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2 - https://github.com/nasa/CryptoLib/pull/358 - https://github.com/nasa/CryptoLib/pull/359
CVE ID: CVE-2025-46686 State: PUBLISHED Published: 2025-07-23T00:00:00.000Z Last Updated: 2025-08-26T18:49:49.357Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Redis Products: Redis Problem Types: CWE-401 Description: Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs because the server allocates memory for the command arguments of every bulk, even when the command is skipped because of insufficient permissions. NOTE: this is disputed by the Supplier because abuse of the commands network protocol is not a violation of the Redis Security Model. Additional Analyst Notes: - C
use abuse of the commands network protocol is not a violation of the Redis Security Model. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/redis/redis - https://github.com/io-no/CVE-Reports/issues/1 - https://github.com/redis/redis/security/advisories/GHSA-2r7g-8hpc-rpq9
CVE ID: CVE-2025-46687 State: PUBLISHED Published: 2025-04-27T00:00:00.000Z Last Updated: 2025-04-28T16:19:35.018Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: QuickJS Project Products: QuickJS Problem Types: CWE-770 Description: quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/quickjs-ng/quickjs/issues/1018 - https://github.com/quickjs-ng/quickjs/pull/1020 - https://github.com/bellard/quickjs/commit/1eb05e44fad89daafa8ee3eb74b8520b4a37ec9a - https://githu
g/quickjs/pull/1020 - https://github.com/bellard/quickjs/commit/1eb05e44fad89daafa8ee3eb74b8520b4a37ec9a - https://github.com/quickjs-ng/quickjs/commit/28fa43d3ddff2c1ba91b6e3a788b2d7ba82d1465 - https://github.com/bellard/quickjs/issues/399 - https://bellard.org/quickjs/Changelog
CVE ID: CVE-2025-46688 State: PUBLISHED Published: 2025-04-27T00:00:00.000Z Last Updated: 2025-04-28T16:19:28.938Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: QuickJS Project Products: QuickJS Problem Types: CWE-131 Description: quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/quickjs-ng/quickjs/issues/1018 - https://github.com/quickjs-ng/quickjs/pull/1020 - https://github.com/bellard/quickjs/commit/1eb05e44fad89daafa8ee3eb74b8520b4a37ec9a - https:
ickjs-ng/quickjs/pull/1020 - https://github.com/bellard/quickjs/commit/1eb05e44fad89daafa8ee3eb74b8520b4a37ec9a - https://github.com/quickjs-ng/quickjs/commit/28fa43d3ddff2c1ba91b6e3a788b2d7ba82d1465 - https://github.com/bellard/quickjs/issues/399 - https://bellard.org/quickjs/Changelog
CVE ID: CVE-2025-46689 State: PUBLISHED Published: 2025-04-27T00:00:00.000Z Last Updated: 2025-04-28T16:19:22.673Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Ververica Products: Ververica Platform Problem Types: CWE-79 Description: Ververica Platform 2.14.0 contain an Reflected XSS vulnerability via a namespaces/default/formats URI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ververica/ververica-platform-playground - https://github.com/gozan10/cve/issues/17 - https://www.ververica.com/
CVE ID: CVE-2025-46690 State: PUBLISHED Published: 2025-04-27T00:00:00.000Z Last Updated: 2025-04-28T16:19:16.655Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: Ververica Products: Ververica Platform Problem Types: CWE-425 Description: Ververica Platform 2.14.0 allows low-privileged users to access SQL connectors via a direct namespaces/default/formats request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ververica/ververica-platform-playground - https://www.ververica.com - https://github.com/gozan10/cve/issues/18
CVE ID: CVE-2025-46701 State: PUBLISHED Published: 2025-05-29T19:06:04.289Z Last Updated: 2025-11-03T20:04:34.067Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: CWE-178 Description: Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1 through 10.1.40, from 9.0.0.M1 through 9.0.104. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may
EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.7, 10.1.41 or 9.0.105, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/xhqqk9w5q45srcdqhogdk04lhdscv30j
CVE ID: CVE-2025-46702 State: PUBLISHED Published: 2025-06-30T16:51:13.440Z Last Updated: 2025-06-30T20:49:08.152Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-863 Description: Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly enforce channel member management permissions when adding participants to playbook runs. This allows authenticated users with member-level permissions to bypass system admin restrictions and add or remove users to/from private channels via the playbook run participants feature, even when the 'Manage Members
nd add or remove users to/from private channels via the playbook run participants feature, even when the 'Manage Members' permission has been explicitly removed. This can lead to unauthorized access to sensitive channel content and allow guest users to gain channel management privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-46703 State: PUBLISHED Published: 2025-09-19T13:09:20.143Z Last Updated: 2025-09-19T14:04:13.791Z Vendors: Hallo Welt! GmbH Products: BlueSpice Problem Types: CWE-116 Description: Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:AtMentions) allows Cross-Site Scripting (XSS). This issue affects BlueSpice: from 5 through 5.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2025-05
CVE ID: CVE-2025-46704 State: PUBLISHED Published: 2025-07-10T23:19:32.390Z Last Updated: 2025-07-11T13:40:07.067Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Advantech Products: iView Problem Types: CWE-22 Description: A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack. This issue requires an authenticated attacker with at least user-level privileges. A specific parameter is not properly sanitized or normalized, potentially allowing an attacker to determine the existence of arbitrary files on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
ne the existence of arbitrary files on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-08 - https://www.advantech.com/en/support/details/firmware-?id=1-HIPU-183
CVE ID: CVE-2025-46705 State: PUBLISHED Published: 2025-11-05T14:56:55.535Z Last Updated: 2025-11-05T22:36:34.501Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Entr'ouvert Products: Lasso Problem Types: CWE-617 Description: A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr&#39;ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2196
CVE ID: CVE-2025-46706 State: PUBLISHED Published: 2025-10-15T13:55:45.786Z Last Updated: 2025-10-16T03:56:53.424Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP, BIG-IP Next SPK, BIG-IP Next CNF Problem Types: CWE-770 Description: When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000151611
CVE ID: CVE-2025-46707 State: PUBLISHED Published: 2025-06-27T16:53:44.938Z Last Updated: 2025-07-02T14:26:00.627Z Vendors: Imagination Technologies Products: Graphics DDK Problem Types: CWE-668 Description: Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE ID: CVE-2025-46708 State: PUBLISHED Published: 2025-06-27T17:04:00.516Z Last Updated: 2025-07-01T17:36:03.642Z Vendors: Imagination Technologies Products: Graphics DDK Problem Types: CWE-280 Description: Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE ID: CVE-2025-46709 State: PUBLISHED Published: 2025-08-08T23:27:05.154Z Last Updated: 2025-08-11T18:54:18.557Z Vendors: Imagination Technologies Products: Graphics DDK Problem Types: CWE-416 Description: Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kernel exception. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE ID: CVE-2025-46710 State: PUBLISHED Published: 2025-06-16T11:13:19.232Z Last Updated: 2025-06-23T17:36:34.526Z Vendors: Imagination Technologies Products: Graphics DDK Problem Types: CWE-416 Description: Possible kernel exceptions caused by reading and writing kernel heap data after free. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE ID: CVE-2025-46711 State: PUBLISHED Published: 2025-09-22T10:21:29.352Z Last Updated: 2025-09-22T13:06:14.173Z Vendors: Imagination Technologies Products: Graphics DDK Problem Types: CWE-476 Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger NULL pointer dereference kernel exceptions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE ID: CVE-2025-46712 State: PUBLISHED Published: 2025-05-08T19:26:27.563Z Last Updated: 2025-05-08T20:03:27.225Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: erlang Products: otp Problem Types: CWE-440 Description: Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been patched in versions OTP-27.3.4
tacker to inject these messages in a connection during the handshake. This issue has been patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/erlang/otp/security/advisories/GHSA-934x-xq38-hhqf - https://github.com/erlang/otp/releases/tag/OTP-25.3.2.21 - https://github.com/erlang/otp/releases/tag/OTP-26.2.5.12 - https://github.com/erlang/otp/releases/tag/OTP-27.3.4