Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-0196 State: PUBLISHED Published: 2025-01-03T19:00:17.072Z Last Updated: 2025-01-03T20:49:33.955Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Point of Sales and Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file /user/plist.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290133 - https://vuldb.com/?ctiid.290133 - https://vuldb.com/?submit.473350 - https://gist.github.com/Masamuneee/13b0a6384f0c07e8db462df9cb18fd47 - https://code-projects.org/
CVE ID: CVE-2025-0197 State: PUBLISHED Published: 2025-01-03T19:31:05.632Z Last Updated: 2025-01-03T20:50:22.424Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Point of Sales and Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Point of Sales and Inventory Management System 1.0. This vulnerability affects unknown code of the file /user/search.php. The manipulation of the argument name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290134 - https://vuldb.com/?ctiid.290134 - https://vuldb.com/?submit.473362 - https://gist.github.com/Masamuneee/07a787e5a4599954c178baf90eeb553c - https://code-projects.org/
CVE ID: CVE-2025-0198 State: PUBLISHED Published: 2025-01-03T20:31:05.227Z Last Updated: 2025-01-03T20:51:35.951Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Point of Sales and Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Point of Sales and Inventory Management System 1.0. This issue affects some unknown processing of the file /user/search_result.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP
e initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290135 - https://vuldb.com/?ctiid.290135 - https://vuldb.com/?submit.473383 - https://gist.github.com/Masamuneee/86580188bf42580c0ae70ae4d247e6df - https://code-projects.org/
CVE ID: CVE-2025-0199 State: PUBLISHED Published: 2025-01-03T22:31:05.073Z Last Updated: 2025-01-06T16:32:26.966Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Point of Sales and Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management System 1.0. Affected is an unknown function of the file /user/minus_cart.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichme
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290136 - https://vuldb.com/?ctiid.290136 - https://vuldb.com/?submit.473384 - https://gist.github.com/Masamuneee/eff0a0865d54305faa78624e63172a92 - https://code-projects.org/
CVE ID: CVE-2025-0200 State: PUBLISHED Published: 2025-01-04T03:00:16.975Z Last Updated: 2025-01-06T15:18:11.126Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Point of Sales and Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /user/search_num.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: -
ack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290137 - https://vuldb.com/?ctiid.290137 - https://vuldb.com/?submit.473386 - https://gist.github.com/Masamuneee/f238db57d8b1947d000cadf634a8387e - https://code-projects.org/
CVE ID: CVE-2025-0201 State: PUBLISHED Published: 2025-01-04T04:00:11.631Z Last Updated: 2025-01-06T16:32:01.086Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Point of Sales and Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user/update_account.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA
ay be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290138 - https://vuldb.com/?ctiid.290138 - https://vuldb.com/?submit.473418 - https://gist.github.com/Masamuneee/645d20dd1dc6389dd47a7fae0bb2cefa - https://code-projects.org/
CVE ID: CVE-2025-0202 State: PUBLISHED Published: 2025-01-04T05:00:15.407Z Last Updated: 2025-01-22T06:12:45.178Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: TCS Products: BaNCS Problem Types: CWE-73 Description: A vulnerability was found in TCS BaNCS 10. It has been classified as problematic. This affects an unknown part of the file /REPORTS/REPORTS_SHOW_FILE.jsp. The manipulation of the argument FilePath leads to file inclusion. The real existence of this vulnerability is still doubted at the moment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290139 - https://vuldb.com/?ctiid.290139 - https://vuldb.com/?submi
DP Vulnrichment: References: - https://vuldb.com/?id.290139 - https://vuldb.com/?ctiid.290139 - https://vuldb.com/?submit.469455
CVE ID: CVE-2025-0203 State: PUBLISHED Published: 2025-01-04T07:00:13.122Z Last Updated: 2025-01-06T16:31:19.988Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Student Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Student Management System 1.0. It has been declared as critical. This vulnerability affects the function showSubject1 of the file /config/DbFunction.php. The manipulation of the argument sid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CI
been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290140 - https://vuldb.com/?ctiid.290140 - https://vuldb.com/?submit.473410 - https://gist.github.com/th4s1s/e8488d7e35d789581979f3b7e4c48b1f - https://code-projects.org/
CVE ID: CVE-2025-0204 State: PUBLISHED Published: 2025-01-04T07:31:05.457Z Last Updated: 2025-01-06T16:28:48.399Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file /details.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290141 - https://vuldb.com/
used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290141 - https://vuldb.com/?ctiid.290141 - https://vuldb.com/?submit.474031 - https://gist.github.com/th4s1s/6f0b3fcf85455238b4316d0fda7d489e - https://code-projects.org/
CVE ID: CVE-2025-0205 State: PUBLISHED Published: 2025-01-04T09:00:09.858Z Last Updated: 2025-01-06T16:33:04.542Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /details2.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290142 - https://vuldb.com/?ctii
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290142 - https://vuldb.com/?ctiid.290142 - https://vuldb.com/?submit.474032 - https://gist.github.com/th4s1s/832bc65fadd7d49894f68a75f834c7f3 - https://code-projects.org/
CVE ID: CVE-2025-0206 State: PUBLISHED Published: 2025-01-04T12:00:17.309Z Last Updated: 2025-01-06T16:28:20.067Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-284, CWE-266 Description: A vulnerability classified as critical was found in code-projects Online Shoe Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290143 - https://vuldb.com/?ctiid.290143 - https://vuldb.com/?submit.474033 - https://gist.github.com/th4s1s/955b71b20235dddf30689d4b85b4d271 - https://code-projects.org/
CVE ID: CVE-2025-0207 State: PUBLISHED Published: 2025-01-04T12:31:04.814Z Last Updated: 2025-01-06T16:27:51.976Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /function/login.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290144 - https://vuldb.com/?ctiid.290144 - https://vuldb.com/?submit.474035 - https://gist.github.com/th4s1s/d10dfaebae75c8dbe54ad83d63725d81 - https://code-projects.org/
CVE ID: CVE-2025-0208 State: PUBLISHED Published: 2025-01-04T13:00:11.697Z Last Updated: 2025-01-06T16:27:22.505Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /summary.php. The manipulation of the argument tid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290145 - https://vuldb.com
used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290145 - https://vuldb.com/?ctiid.290145 - https://vuldb.com/?submit.474038 - https://gist.github.com/th4s1s/24925a20d1f9336858dee1cbbb30c249 - https://code-projects.org/
CVE ID: CVE-2025-0209 State: PUBLISHED Published: 2025-09-23T17:13:10.597Z Last Updated: 2025-09-23T18:37:43.867Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: WSO2 Products: WSO2 Identity Server Problem Types: CWE-79 Description: A reflected cross-site scripting (XSS) vulnerability exists in the account registration flow of WSO2 Identity Server due to improper output encoding. A malicious actor can exploit this vulnerability by injecting a crafted payload that is reflected in the server response, enabling the execution of arbitrary JavaScript in the victim's browser. This vulnerability could allow attackers to redirect users to malicious websites, modify
cript in the victim's browser. This vulnerability could allow attackers to redirect users to malicious websites, modify the user interface, or exfiltrate data from the browser. However, session-related sensitive cookies are protected using the httpOnly flag, which mitigates the risk of session hijacking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-3902/
CVE ID: CVE-2025-0210 State: PUBLISHED Published: 2025-01-04T14:00:17.968Z Last Updated: 2025-01-06T16:26:24.055Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: School Faculty Scheduling System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290155 - https://vuldb.com/?ctiid.290155 - https://vuldb.com/?submit.474112 - https://github.com/shaturo1337/POCs/blob/main/Blind%20SQL%20Injection%20in%20School%20Faculty%20Scheduling%20System.md - https://www.campcodes.com/
CVE ID: CVE-2025-0211 State: PUBLISHED Published: 2025-01-04T15:00:18.266Z Last Updated: 2025-01-06T16:25:50.565Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: School Faculty Scheduling System Problem Types: CWE-73 Description: A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290156 - https://vuldb.com/?ctiid.290156 - https://vuldb.com/?submit.474115 - https://github.com/shaturo1337/POCs/blob/main/LFI%20in%20School%20Faculty%20Scheduling%20System.md - https://www.campcodes.com/
CVE ID: CVE-2025-0212 State: PUBLISHED Published: 2025-01-04T16:00:13.790Z Last Updated: 2025-01-06T16:25:28.574Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Student Grading System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Student Grading System 1.0. It has been classified as critical. This affects an unknown part of the file /view_students.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290157 - https://v
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290157 - https://vuldb.com/?ctiid.290157 - https://vuldb.com/?submit.474168 - https://github.com/shaturo1337/POCs/blob/main/SQL%20Injection%20in%20Student%20Grading%20System.md - https://www.campcodes.com/
CVE ID: CVE-2025-0213 State: PUBLISHED Published: 2025-01-04T16:31:05.682Z Last Updated: 2025-01-06T16:25:07.194Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Project Management System Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in Campcodes Project Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forms/update_forms.php?action=change_pic2&id=4. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290158 - https://vuldb.com/?ctiid.290158 - https://vuldb.com/?submit.474200 - https://github.com/shaturo1337/POCs/blob/main/Remote%20Code%20Execution%20via%20Arbitrary%20File%20Upload%20in%20Project%20Management%20System.md - https://www.campcodes.com/
CVE ID: CVE-2025-0214 State: PUBLISHED Published: 2025-01-04T17:00:16.807Z Last Updated: 2025-01-06T16:24:38.906Z Severity: N/A (CVSS 4.3 AV:N/AC:H/Au:M/C:P/I:P/A:P) Vendors: TMD Products: Custom Header Menu Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in TMD Custom Header Menu 4.0.0.1 on OpenCart. It has been rated as problematic. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument headermenu_id leads to sql injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recom
gh. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290159 - https://vuldb.com/?ctiid.290159 - https://vuldb.com/?submit.474299 - https://gist.github.com/mcdruid/ff4f29f4e7830e9e91988c7195d77039
CVE ID: CVE-2025-0215 State: PUBLISHED Published: 2025-01-15T22:23:32.852Z Last Updated: 2025-01-16T18:43:27.670Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: davidanderson Products: UpdraftPlus: WP Backup & Migration Plugin Problem Types: CWE-79 Description: The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the showdata and initiate_restore parameters in all versions up to, and including, 1.24.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully t
possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an admin user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/af568eea-59ce-467e-ba03-625d04d3db6e?source=cve - https://plugins.trac.wordpress.org/browser/updraftplus/tags/1.24.12/includes/updraft-admin-common.js#L4404 - https://plugins.trac.wordpress.org/browser/updraftplus/tags/1.24.12/includes/updraft-admin-common.js#L4439
CVE ID: CVE-2025-0217 State: PUBLISHED Published: 2025-05-05T17:00:05.244Z Last Updated: 2025-11-03T19:35:05.560Z Vendors: BeyondTrust Products: Privileged Remote Access Problem Types: CWE-287 Description: BeyondTrust Privileged Remote Access (PRA) versions prior to 25.1 are vulnerable to a local authentication bypass. A local authenticated attacker can view the connection details of a ShellJump session that was initiated with external tools, allowing unauthorized access to connected sessions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.beyondtrust.com/trust-center/security-advisories/bt25-03
CVE ID: CVE-2025-0218 State: PUBLISHED Published: 2025-01-07T19:18:02.865Z Last Updated: 2025-11-03T17:31:33.459Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: pgAgent Problem Types: CWE-340 Description: When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator is used when generating the directory name, leading to the possibility for a local attacker to pre-create the directory and thus prevent pgAgent from executing jobs, disrupting scheduled tasks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pr
ent pgAgent from executing jobs, disrupting scheduled tasks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pgadmin-org/pgagent/commit/1ecd193a2be3a3dc9e98f369495e1a792e6d508c
CVE ID: CVE-2025-0219 State: PUBLISHED Published: 2025-01-05T05:31:04.064Z Last Updated: 2025-01-06T14:47:06.619Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Trimble Products: SPS851 Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component Receiver Status Identity Tab. The manipulation of the argument System Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Ad
d to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290198 - https://vuldb.com/?ctiid.290198 - https://vuldb.com/?submit.464906
CVE ID: CVE-2025-0220 State: PUBLISHED Published: 2025-01-05T12:31:04.599Z Last Updated: 2025-01-06T15:51:07.914Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Trimble Products: SPS851 Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in Trimble SPS851 488.01. This affects an unknown part of the component Ethernet Configuration Menu. The manipulation of the argument Hostname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes
y be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290199 - https://vuldb.com/?ctiid.290199 - https://vuldb.com/?submit.464943 - https://github.com/renanmalafatti/CVE/blob/main/CVE-2025-0220.md