Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312588 - https://vuldb.com/?ctiid.312588 - https://vuldb.com/?submit.591233 - https://github.com/assimp/assimp/issues/6219 - https://github.com/assimp/assimp/issues/6219#issuecomment-2945016005 - https://github.com/user-attachments/files/20604791/reproduce_2.tar.gz
CVE ID: CVE-2025-6120 State: PUBLISHED Published: 2025-06-16T11:31:06.030Z Last Updated: 2025-06-16T14:47:28.362Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: Open Asset Import Library Products: Assimp Problem Types: CWE-122, CWE-119 Description: A vulnerability classified as critical was found in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function read_meshes in the library assimp/code/AssetLib/MDL/HalfLife/HL1MDLLoader.cpp. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The pro
s possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312589 - https://vuldb.com/?ctiid.312589 - https://vuldb.com/?submit.591235 - https://github.com/assimp/assimp/issues/6220 - https://github.com/assimp/assimp/issues/6220#issuecomment-2945018579 - https://github.com/user-attachments/files/20605340/read_meshes_reproduce.tar.gz
CVE ID: CVE-2025-6121 State: PUBLISHED Published: 2025-06-16T12:00:12.435Z Last Updated: 2025-06-16T13:58:25.466Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-632 Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, has been found in D-Link DIR-632 FW103B08. Affected by this issue is the function get_pure_content of the component HTTP POST Request Handler. The manipulation of the argument Content-Length leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer
he exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312590 - https://vuldb.com/?ctiid.312590 - https://vuldb.com/?submit.592574 - https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir632-dlink-get_pure_content - https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir632-dlink-get_pure_content#poc - https://www.dlink.com/
CVE ID: CVE-2025-6122 State: PUBLISHED Published: 2025-06-16T12:31:06.180Z Last Updated: 2025-06-16T13:53:13.246Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Restaurant Order System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Restaurant Order System 1.0. This affects an unknown part of the file /table.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id
ed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312591 - https://vuldb.com/?ctiid.312591 - https://vuldb.com/?submit.592624 - https://vuldb.com/?submit.592617 - https://github.com/ez-lbz/poc/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-6123 State: PUBLISHED Published: 2025-06-16T13:00:08.092Z Last Updated: 2025-06-16T13:22:37.611Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Restaurant Order System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Restaurant Order System 1.0 and classified as critical. This vulnerability affects unknown code of the file /payment.php. The manipulation of the argument tabidNoti leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312592 - https://vuldb.com/?ctiid.312592 - https://vuldb.com/?submit.592621 - https://github.com/ez-lbz/poc/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-6124 State: PUBLISHED Published: 2025-06-16T13:31:04.921Z Last Updated: 2025-06-16T13:56:12.557Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Restaurant Order System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. This issue affects some unknown processing of the file /tablelow.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312593 - https://vuldb.com/?ctiid.312593 - https://vuldb.com/?submit.592625 - https://github.com/ez-lbz/poc/issues/4 - https://code-projects.org/
CVE ID: CVE-2025-6125 State: PUBLISHED Published: 2025-06-16T14:00:12.086Z Last Updated: 2025-06-16T14:46:39.208Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Rail Pass Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/aboutus.php. The manipulation of the argument pagedes leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312594 - https://vuldb.com/?ctiid.312594 - https://vuldb.com/?submit.592638 - https://github.com/kakalalaww/CVE/issues/11 - https://phpgurukul.com/
CVE ID: CVE-2025-6126 State: PUBLISHED Published: 2025-06-16T14:31:06.253Z Last Updated: 2025-06-16T15:45:24.399Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Rail Pass Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /contact.php. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional
ly. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312595 - https://vuldb.com/?ctiid.312595 - https://vuldb.com/?submit.592639 - https://github.com/kakalalaww/CVE/issues/12 - https://phpgurukul.com/
CVE ID: CVE-2025-6127 State: PUBLISHED Published: 2025-06-16T15:00:11.968Z Last Updated: 2025-06-16T15:35:55.949Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Nipah Virus Testing Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /search-report.php. The manipulation of the argument serachdata leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CIS
may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312596 - https://vuldb.com/?ctiid.312596 - https://vuldb.com/?submit.592641 - https://github.com/kakalalaww/CVE/issues/14 - https://phpgurukul.com/
CVE ID: CVE-2025-6128 State: PUBLISHED Published: 2025-06-16T15:31:05.931Z Last Updated: 2025-06-16T15:48:19.952Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This affects an unknown part of the file /boafrm/formWirelessTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312597 - https://vuldb.com/?ctiid.312597 - https://vuldb.com/?submit.592694 - https://github.com/byxs0x0/cve2/blob/main/8.md - https://github.com/byxs0x0/cve2/blob/main/8.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6129 State: PUBLISHED Published: 2025-06-16T16:00:14.890Z Last Updated: 2025-06-16T16:38:59.263Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This vulnerability affects unknown code of the file /boafrm/formSaveConfig of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
y. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312598 - https://vuldb.com/?ctiid.312598 - https://vuldb.com/?submit.592695 - https://github.com/byxs0x0/cve2/blob/main/9.md - https://github.com/byxs0x0/cve2/blob/main/9.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6130 State: PUBLISHED Published: 2025-06-16T16:31:07.769Z Last Updated: 2025-06-17T18:12:18.803Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue affects some unknown processing of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312599 - https://vuldb.com/?ctiid.312599 - https://vuldb.com/?submit.592696 - https://github.com/byxs0x0/cve2/blob/main/10.md - https://github.com/byxs0x0/cve2/blob/main/10.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6131 State: PUBLISHED Published: 2025-06-16T17:00:15.848Z Last Updated: 2025-06-16T18:58:51.878Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: CodeAstro Products: Food Ordering System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0. Affected is an unknown function of the file /admin/store/edit/ of the component POST Request Parameter Handler. The manipulation of the argument Restaurant Name/Address leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional A
It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312600 - https://vuldb.com/?ctiid.312600 - https://vuldb.com/?submit.592780 - https://github.com/Vanshdhawan188/Food-Ordering-System-in-PHP-CodeIgniter-/blob/main/Stored%20Cross-Site%20Scripting%20(XSS).md - https://codeastro.com/
CVE ID: CVE-2025-6132 State: PUBLISHED Published: 2025-06-16T17:31:05.267Z Last Updated: 2025-06-16T18:58:03.858Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Chanjet Products: CRM Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Chanjet CRM 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysconfig/departmentsetting.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312601
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312601 - https://vuldb.com/?ctiid.312601 - https://vuldb.com/?submit.592781 - https://github.com/ltranquility/CVE/issues/3
CVE ID: CVE-2025-6133 State: PUBLISHED Published: 2025-06-16T18:00:15.805Z Last Updated: 2025-06-16T18:56:48.769Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Projectworlds Products: Life Insurance Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Projectworlds Life Insurance Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /insertagent.php. The manipulation of the argument agent_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
otely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312602 - https://vuldb.com/?ctiid.312602 - https://vuldb.com/?submit.592838 - https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertAgent.php_agent_id.md - https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertAgent.php_agent_id.md#poc
CVE ID: CVE-2025-6134 State: PUBLISHED Published: 2025-06-16T18:31:04.855Z Last Updated: 2025-06-16T18:54:32.701Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Projectworlds Products: Life Insurance Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /insertClient.php. The manipulation of the argument client_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additiona
ely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312603 - https://vuldb.com/?ctiid.312603 - https://vuldb.com/?submit.592839 - https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertClient_client_id.md - https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertClient_client_id.md#poc
CVE ID: CVE-2025-6135 State: PUBLISHED Published: 2025-06-16T19:00:14.136Z Last Updated: 2025-06-17T13:55:40.047Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Projectworlds Products: Life Insurance Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /insertNominee.php. The manipulation of the argument client_id/nominee_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnr
iated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312604 - https://vuldb.com/?ctiid.312604 - https://vuldb.com/?submit.592840 - https://vuldb.com/?submit.592841 - https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertNominee.php_client_id.md - https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertNominee.php_nominee_id.md
CVE ID: CVE-2025-6136 State: PUBLISHED Published: 2025-06-16T19:31:05.649Z Last Updated: 2025-06-17T13:54:14.838Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Projectworlds Products: Life Insurance Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertPayment.php. The manipulation of the argument recipt_no leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312605 - https://vuldb.com/?ctiid.312605 - https://vuldb.com/?submit.592842 - https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertPayment.php.md - https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertPayment.php.md#poc
CVE ID: CVE-2025-6137 State: PUBLISHED Published: 2025-06-16T20:00:16.269Z Last Updated: 2025-06-17T13:53:11.047Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: T10 Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in TOTOLINK T10 4.1.8cu.5207. Affected is the function setWiFiScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312606 - https://vuldb.com/?ctiid.312606 - https://vuldb.com/?submit.592911 - https://candle-throne-f75.notion.site/TOTOLINK-T10-setWiFiScheduleCfg-20ddf0aa11858053a171f052787c202f - https://www.totolink.net/
CVE ID: CVE-2025-6138 State: PUBLISHED Published: 2025-06-16T20:31:09.003Z Last Updated: 2025-06-17T15:25:12.912Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: T10 Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical was found in TOTOLINK T10 4.1.8cu.5207. Affected by this vulnerability is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ssid5g leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
e exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312607 - https://vuldb.com/?ctiid.312607 - https://vuldb.com/?submit.592917 - https://candle-throne-f75.notion.site/TOTOLINK-T10-setWizardCfg-20ddf0aa1185808892f1dbbf63e6a153?pvs=73 - https://www.totolink.net/
CVE ID: CVE-2025-6139 State: PUBLISHED Published: 2025-06-16T21:00:17.742Z Last Updated: 2025-06-17T18:18:54.803Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: TOTOLINK Products: T10 Problem Types: CWE-259, CWE-255 Description: A vulnerability, which was classified as problematic, has been found in TOTOLINK T10 4.1.8cu.5207. Affected by this issue is some unknown functionality of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. The attack can only be initiated within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the pub
lexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312608 - https://vuldb.com/?ctiid.312608 - https://vuldb.com/?submit.592922 - https://candle-throne-f75.notion.site/TOTOLINK-T10-shadow-20ddf0aa118580f5a455cd5dbc521472 - https://www.totolink.net/
CVE ID: CVE-2025-6140 State: PUBLISHED Published: 2025-06-16T21:31:06.961Z Last Updated: 2025-06-17T15:24:14.082Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: spdlog Problem Types: CWE-400, CWE-404 Description: A vulnerability, which was classified as problematic, was found in spdlog up to 1.15.1. This affects the function scoped_padder in the library include/spdlog/pattern_formatter-inl.h. The manipulation leads to resource consumption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Upgrading to version 1.15.2 is able to address this issue. The identifier of th
disclosed to the public and may be used. Upgrading to version 1.15.2 is able to address this issue. The identifier of the patch is 10320184df1eb4638e253a34b1eb44ce78954094. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312609 - https://vuldb.com/?ctiid.312609 - https://vuldb.com/?submit.592999 - https://github.com/gabime/spdlog/issues/3360 - https://github.com/gabime/spdlog/issues/3360#issuecomment-2729579422 - https://github.com/gabime/spdlog/commit/10320184df1eb4638e253a34b1eb44ce78954094 - https://github.com/gabime/spdlog/releases/tag/v1.15.2
CVE ID: CVE-2025-6141 State: PUBLISHED Published: 2025-06-16T22:00:17.088Z Last Updated: 2025-06-17T13:52:08.255Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C) Vendors: GNU Products: ncurses Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst No