Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-3681 State: PUBLISHED Published: 2025-04-16T10:00:05.699Z Last Updated: 2025-04-16T19:12:05.383Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component MODE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304970 - https://vuldb.com/?ctiid.304970 - https://v
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304970 - https://vuldb.com/?ctiid.304970 - https://vuldb.com/?submit.552789 - https://fitoxs.com/exploit/exploit-f2dbb39791fbe7e94d805312769e84cb.txt
CVE ID: CVE-2025-3682 State: PUBLISHED Published: 2025-04-16T10:31:04.320Z Last Updated: 2025-04-16T19:11:27.224Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. This affects an unknown part of the component PASV Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304971 - https://vuldb.com/?ctiid.304971 - https://vuldb
s: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304971 - https://vuldb.com/?ctiid.304971 - https://vuldb.com/?submit.552790 - https://fitoxs.com/exploit/exploit-e3b0c44298fc1c149afbf4c8996fb924.txt
CVE ID: CVE-2025-3683 State: PUBLISHED Published: 2025-04-16T10:31:05.489Z Last Updated: 2025-04-16T19:10:38.710Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. This vulnerability affects unknown code of the component SIZE Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304972 - https://vuldb.com/?ctiid.304972 - https://vuldb.
: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304972 - https://vuldb.com/?ctiid.304972 - https://vuldb.com/?submit.552791 - https://fitoxs.com/exploit/exploit-5f4dcc3b5aa765d61d8327deb882cf99.txt
CVE ID: CVE-2025-3684 State: PUBLISHED Published: 2025-04-16T11:00:06.403Z Last Updated: 2025-04-16T19:06:38.502Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Xianqi Products: Kindergarten Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Xianqi Kindergarten Management System 2.0 Bulid 20190808. It has been rated as critical. This issue affects some unknown processing of the file stu_list.php of the component Child Management. The manipulation of the argument sex leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Addition
tely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304973 - https://vuldb.com/?ctiid.304973 - https://vuldb.com/?submit.553239 - https://github.com/Upgradeextension/xianqi/blob/main/README.md
CVE ID: CVE-2025-3685 State: PUBLISHED Published: 2025-04-16T11:00:09.838Z Last Updated: 2025-04-16T14:36:56.308Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file /edit_fpatient.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304974 - https://vuldb.com/?ctiid.304974 - https://vuldb.com/?submit.553346 - https://github.com/bazhahei123/CVE/blob/main/sql_cve_4_8.pdf - https://code-projects.org/
CVE ID: CVE-2025-3686 State: PUBLISHED Published: 2025-04-16T11:31:04.738Z Last Updated: 2025-04-16T14:35:36.222Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: misstt123 Products: oasys Problem Types: CWE-22 Description: A vulnerability classified as problematic was found in misstt123 oasys 1.0. Affected by this vulnerability is the function image of the file /show. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Additional Analyst Notes: - CISA ADP
ng. This is why information about affected and unaffected releases are unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304975 - https://vuldb.com/?ctiid.304975 - https://vuldb.com/?submit.553372 - https://github.com/misstt123/oasys/issues/10
CVE ID: CVE-2025-3687 State: PUBLISHED Published: 2025-04-16T12:00:14.382Z Last Updated: 2025-04-16T14:31:16.783Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: misstt123 Products: oasys Problem Types: CWE-352, CWE-862 Description: A vulnerability, which was classified as problematic, has been found in misstt123 oasys 1.0. Affected by this issue is some unknown functionality of the component Sticky Notes Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor
. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304976 - https://vuldb.com/?ctiid.304976 - https://vuldb.com/?submit.553429 - https://github.com/misstt123/oasys/issues/11
CVE ID: CVE-2025-3688 State: PUBLISHED Published: 2025-04-16T12:00:16.304Z Last Updated: 2025-04-16T14:30:31.161Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: mirweiye Products: Seven Bears Library CMS Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in mirweiye Seven Bears Library CMS 2023. This affects an unknown part of the component Background Management Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304977 - https
c and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304977 - https://vuldb.com/?ctiid.304977 - https://vuldb.com/?submit.553486 - https://github.com/KKDT12138/CVE/blob/main/cve.pdf
CVE ID: CVE-2025-3689 State: PUBLISHED Published: 2025-04-16T12:31:05.912Z Last Updated: 2025-04-16T14:29:28.398Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Men Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-customer-detailed.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304978 - https://vuldb.com/?ctiid.304978 - https://vuldb.com/?submit.553500 - https://github.com/Xiaoyao-i03i/CVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-3690 State: PUBLISHED Published: 2025-04-16T13:00:13.117Z Last Updated: 2025-04-16T13:13:46.166Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Men Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/edit-services.php. The manipulation of the argument cost leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304979 - https://vuldb.com/?ctiid.304979 - https://vuldb.com/?submit.553501 - https://github.com/Xiaoyao-i03i/CVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-3691 State: PUBLISHED Published: 2025-04-16T13:00:15.026Z Last Updated: 2025-04-16T13:13:03.592Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: mirweiye Products: Seven Bears Library CMS Problem Types: CWE-918 Description: A vulnerability was found in mirweiye Seven Bears Library CMS 2023. It has been classified as problematic. Affected is an unknown function of the component Add Link Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304980 - https://vuldb
y be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304980 - https://vuldb.com/?ctiid.304980 - https://vuldb.com/?submit.553507 - https://github.com/KKDT12138/CVE/blob/main/cve2.pdf
CVE ID: CVE-2025-3692 State: PUBLISHED Published: 2025-04-16T13:31:05.123Z Last Updated: 2025-04-16T13:53:33.086Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Online Eyewear Shop Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=save_product. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304981 - https://vuldb.com/?ctiid.304981 - https://vuldb.com/?submit.553520 - https://github.com/vulnofound/cve/blob/main/xss.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3693 State: PUBLISHED Published: 2025-04-16T14:00:20.712Z Last Updated: 2025-04-16T14:27:17.426Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: W12 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda W12 3.0.0.5. It has been rated as critical. Affected by this issue is the function cgiWifiRadioSet of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304982 - https://vuldb.com/?ctiid.304982 - https://vuldb.com/?s
SA ADP Vulnrichment: References: - https://vuldb.com/?id.304982 - https://vuldb.com/?ctiid.304982 - https://vuldb.com/?submit.553526 - https://github.com/02Tn/vul/issues/1 - https://www.tenda.com.cn/
CVE ID: CVE-2025-3694 State: PUBLISHED Published: 2025-04-16T14:31:05.543Z Last Updated: 2025-04-16T14:54:15.031Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Web-based Pharmacy Product Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the component Login Handler. The manipulation of the argument login_email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304983 - https://vuldb.com/?ctiid.304983 - https://vuldb.com/?submit.553568 - https://github.com/yaklang/IRifyScanResult/blob/main/Web-based%20Pharmacy%20Product%20Management%20System/sql_inject_in_session_email.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3696 State: PUBLISHED Published: 2025-04-16T14:31:07.458Z Last Updated: 2025-04-16T14:50:51.173Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Web-based Pharmacy Product Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /search/search_stock. php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304984 - https://vuldb.com/?ctiid.304984 - https://vuldb.com/?submit.553579 - https://github.com/yaklang/IRifyScanResult/blob/main/Web-based%20Pharmacy%20Product%20Management%20System/sql_inject_in_search.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3697 State: PUBLISHED Published: 2025-04-16T15:00:14.274Z Last Updated: 2025-04-16T15:35:12.458Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Web-based Pharmacy Product Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file /edit-product.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnric
ted remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.304985 - https://vuldb.com/?ctiid.304985 - https://vuldb.com/?submit.553624 - https://github.com/yaklang/IRifyScanResult/blob/main/Web-based%20Pharmacy%20Product%20Management%20System/sql_inject_in_edit.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-3698 State: PUBLISHED Published: 2025-04-16T02:24:23.469Z Last Updated: 2025-09-09T13:55:10.268Z Vendors: TECNO Products: com.transsion.carlcare Problem Types: CWE-749 Description: Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead to information leakage risk. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.tecno.com/SRC/blogdetail/410?lang=en_US - https://security.tecno.com/SRC/securityUpdates
CVE ID: CVE-2025-3699 State: PUBLISHED Published: 2025-06-26T22:40:37.915Z Last Updated: 2025-07-01T19:24:14.966Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mitsubishi Electric Corporation Products: G-50, G-50-W, G-50A, GB-50, GB-50A, GB-24A, G-150AD, AG-150A-A, AG-150A-J, GB-50AD, GB-50ADA-A, GB-50ADA-J, EB-50GU-A, EB-50GU-J, AE-200J, AE-200A, AE-200E, AE-50J, AE-50A, AE-50E, EW-50J, EW-50A, EW-50E, TE-200A, TE-50A, TW-50A, CMS-RMD-J Problem Types: CWE-306 Description: Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation G-50 Version 3.37 and prior, G-50-W Version 3.37 and prior, G-50A Version 3.37 and prior,
tsubishi Electric Corporation G-50 Version 3.37 and prior, G-50-W Version 3.37 and prior, G-50A Version 3.37 and prior, GB-50 Version 3.37 and prior, GB-50A Version 3.37 and prior, GB-24A Version 9.12 and prior, G-150AD Version 3.21 and prior, AG-150A-A Version 3.21 and prior, AG-150A-J Version 3.21 and prior, GB-50AD Version 3.21 and prior, GB-50ADA-A Version 3.21 and prior, GB-50ADA-J Version 3.21 and prior, EB-50GU-A Version 7.11 and prior, EB-50GU-J Version 7.11 and prior, AE-200J Version 8.01 and prior, AE-200A Version 8.01 and prior, AE-200E Version 8.01 and prior, AE-50J Version 8.01 and prior, AE-50A Version 8.01 and prior, AE-50E Version 8.01 and prior, EW-50J Version 8.01 and prior
-50J Version 8.01 and prior, AE-50A Version 8.01 and prior, AE-50E Version 8.01 and prior, EW-50J Version 8.01 and prior, EW-50A Version 8.01 and prior, EW-50E Version 8.01 and prior, TE-200A Version 8.01 and prior, TE-50A Version 8.01 and prior, TW-50A Version 8.01 and prior, and CMS-RMD-J Version 1.40 and prior allows a remote unauthenticated attacker to bypass authentication and then control the air conditioning systems illegally, or disclose information in them by exploiting this vulnerability. In addition, the attacker may tamper with firmware for them using the disclosed information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/psi
sed information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-004_en.pdf - https://jvn.jp/vu/JVNVU96471539/ - https://www.cisa.gov/news-events/ics-advisories/icsa-25-177-01
CVE ID: CVE-2025-3701 State: PUBLISHED Published: 2025-09-03T12:50:27.597Z Last Updated: 2025-09-03T13:15:25.047Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Malcure Web Security Products: Malcure Malware Scanner Problem Types: CWE-862 Description: Missing Authorization vulnerability in Malcure Web Security Malcure Malware Scanner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Malcure Malware Scanner: from n/a through 16.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-malware-removal/vulnerability/wordpress-malcure-malware-scanner-plugin-16
://patchstack.com/database/wordpress/plugin/wp-malware-removal/vulnerability/wordpress-malcure-malware-scanner-plugin-16-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-3702 State: PUBLISHED Published: 2025-07-03T12:14:04.205Z Last Updated: 2025-07-03T13:15:06.381Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Melapress Products: Melapress File Monitor Problem Types: CWE-862 Description: Missing Authorization vulnerability in Melapress Melapress File Monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress File Monitor: from n/a before 2.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/website-file-changes-monitor/vulnerability/wordpress-melapress-file-monitor-plugin-2-2-0-broken-acces
e/wordpress/plugin/website-file-changes-monitor/vulnerability/wordpress-melapress-file-monitor-plugin-2-2-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-3703 State: PUBLISHED Published: 2025-08-14T10:34:37.304Z Last Updated: 2025-08-14T14:42:24.667Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wipeoutmedia Products: CSS & JavaScript Toolbox Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wipeoutmedia CSS & JavaScript Toolbox allows PHP Local File Inclusion. This issue affects CSS & JavaScript Toolbox: from n/a through n/a. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/css-javascript-toolbox/vulnerability/wordpress-css
hment: References: - https://patchstack.com/database/wordpress/plugin/css-javascript-toolbox/vulnerability/wordpress-css-javascript-toolbox-12-0-3-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-3704 State: PUBLISHED Published: 2025-05-27T14:39:32.084Z Last Updated: 2025-05-27T15:18:49.853Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: DBAR Productions Products: Volunteer Sign Up Sheets Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DBAR Productions Volunteer Sign Up Sheets allows Stored XSS.This issue affects Volunteer Sign Up Sheets: from n/a before 5.5.5. The patch is available exclusively on GitHub at https://github.com/dbarproductions/pta-volunteer-sign-up-sheets , as the vendor encounters difficulties using SVN to deploy to the WordPres
dbarproductions/pta-volunteer-sign-up-sheets , as the vendor encounters difficulties using SVN to deploy to the WordPress.org repository. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pta-volunteer-sign-up-sheets/vulnerability/wordpress-volunteer-sign-up-sheets-plugin-5-5-5-cross-site-scripting-xss-vulnerability?_s_id=cve - https://github.com/dbarproductions/pta-volunteer-sign-up-sheets/archive/refs/tags/5.5.5.zip
CVE ID: CVE-2025-3705 State: PUBLISHED Published: 2025-07-07T09:20:03.263Z Last Updated: 2025-07-07T17:34:15.583Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Frauscher Products: FDS102, FDS101, FDS-SNMP101 Problem Types: CWE-78 Description: A physical attacker with no privileges can gain full control of the affected device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') when loading a config file from a USB drive. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://certvde.com/en/advisories/VDE-2025-030
CVE ID: CVE-2025-3706 State: PUBLISHED Published: 2025-04-28T02:39:46.515Z Last Updated: 2025-04-28T18:04:45.435Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: 104 Corporation Products: eHRMS Problem Types: CWE-79 Description: The eHRMS from 104 Corporation has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10079-f0958-1.html - https://www.twcert.org.tw/en/cp-139-10080-31e4b-2.html
CVE ID: CVE-2025-3707 State: PUBLISHED Published: 2025-05-02T02:50:33.346Z Last Updated: 2025-05-02T16:28:39.998Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Sunnet Products: eHRD CTMS Problem Types: CWE-89 Description: The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL command to read database contents. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10083-4ed7f-1.html - https://www.twcert.org.tw/en/cp-139-10084-d7c47-2.html