Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300708 - https://vuldb.com/?ctiid.300708 - https://vuldb.com/?submit.521454 - https://github.com/ARPANET-cyber/CVE/issues/14 - https://phpgurukul.com/
CVE ID: CVE-2025-2688 State: PUBLISHED Published: 2025-03-24T06:31:06.925Z Last Updated: 2025-03-24T12:19:29.119Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: TOTOLINK Products: A3000RU Problem Types: CWE-284, CWE-266 Description: A vulnerability classified as problematic was found in TOTOLINK A3000RU up to 5.9c.5185. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ExportSyslog.sh of the component Syslog Configuration File Handler. The manipulation leads to improper access controls. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: -
done within the local network. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300709 - https://vuldb.com/?ctiid.300709 - https://vuldb.com/?submit.521570 - https://lavender-bicycle-a5a.notion.site/TOTOLINK-A3000RU-ExportSyslog-1b953a41781f8064970dc7809a52ac6c?pvs=4 - https://www.totolink.net/
CVE ID: CVE-2025-2689 State: PUBLISHED Published: 2025-03-24T07:00:07.140Z Last Updated: 2025-03-24T12:17:13.656Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: yiisoft Products: Yii2 Problem Types: CWE-502, CWE-20 Description: A vulnerability, which was classified as critical, has been found in yiisoft Yii2 up to 2.0.45. Affected by this issue is the function getIterator of the file symfony\finder\Iterator\SortableIterator.php. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300710 - https://vuldb.c
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300710 - https://vuldb.com/?ctiid.300710 - https://vuldb.com/?submit.521709 - https://github.com/gaorenyusi/gaorenyusi/blob/main/Yii2.md
CVE ID: CVE-2025-2690 State: PUBLISHED Published: 2025-03-24T07:31:04.253Z Last Updated: 2025-03-24T12:14:34.960Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: yiisoft Products: Yii2 Problem Types: CWE-502, CWE-20 Description: A vulnerability, which was classified as critical, was found in yiisoft Yii2 up to 2.0.39. This affects the function Generate of the file phpunit\src\Framework\MockObject\MockClass.php. The manipulation leads to deserialization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300711 - https://vuldb.com/?ctii
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300711 - https://vuldb.com/?ctiid.300711 - https://vuldb.com/?submit.521718 - https://github.com/gaorenyusi/gaorenyusi/blob/main/Yii2-2.md
CVE ID: CVE-2025-2691 State: PUBLISHED Published: 2025-03-23T14:21:36.494Z Last Updated: 2025-03-24T12:25:04.248Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:P) Vendors: n/a Products: nossrf Problem Types: CWE-918 Description: Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-NOSSRF-9510842
CVE ID: CVE-2025-2694 State: PUBLISHED Published: 2025-09-04T14:43:26.848Z Last Updated: 2025-09-04T15:02:53.828Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Sterling B2B Integrator, Sterling File Gateway Problem Types: CWE-79 Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio
he Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7244023
CVE ID: CVE-2025-2697 State: PUBLISHED Published: 2025-08-26T16:47:25.981Z Last Updated: 2025-08-26T17:36:08.348Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N) Vendors: IBM Products: Cognos Command Center Problem Types: CWE-601 Description: IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct fu
site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7242159
CVE ID: CVE-2025-2699 State: PUBLISHED Published: 2025-03-24T08:00:05.891Z Last Updated: 2025-03-24T12:11:30.322Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: GetmeUK Products: ContentTools Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in GetmeUK ContentTools up to 1.6.16. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Image Handler. The manipulation of the argument onload leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Anal
ic and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300716 - https://vuldb.com/?ctiid.300716 - https://vuldb.com/?submit.515864 - https://gist.github.com/Masamuneee/657f2e2b0eb5bf9b0d4dbb79f00dac37
CVE ID: CVE-2025-2700 State: PUBLISHED Published: 2025-03-24T08:31:04.254Z Last Updated: 2025-03-24T12:08:33.843Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: michelson Products: Dante Editor Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrich
was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300717 - https://vuldb.com/?ctiid.300717 - https://vuldb.com/?submit.515869 - https://gist.github.com/Masamuneee/3be24bf5bf2b09dc61ead2af89363f86
CVE ID: CVE-2025-2701 State: PUBLISHED Published: 2025-03-24T09:00:06.117Z Last Updated: 2025-03-24T12:04:44.527Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: AMTT Products: Hotel Broadband Operation System Problem Types: CWE-78, CWE-77 Description: A vulnerability classified as critical was found in AMTT Hotel Broadband Operation System 1.0. This vulnerability affects the function popen of the file /manager/network/port_setup.php. The manipulation of the argument SwitchVersion/SwitchWrite/SwitchIP/SwitchIndex/SwitchState leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted
ttack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300718 - https://vuldb.com/?ctiid.300718 - https://vuldb.com/?submit.516089 - https://github.com/zian10001/cve/blob/main/rce.md
CVE ID: CVE-2025-2702 State: PUBLISHED Published: 2025-03-24T09:31:04.522Z Last Updated: 2025-03-24T12:01:03.408Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Softwin Products: WMX3 Problem Types: CWE-434, CWE-284 Description: A vulnerability, which was classified as critical, has been found in Softwin WMX3 3.1. This issue affects the function ImageAdd of the file /ImageAdd.ashx. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichmen
s contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300719 - https://vuldb.com/?ctiid.300719 - https://vuldb.com/?submit.516289 - https://github.com/Rain1er/report/blob/main/THNlcnBf/RCE_1.md
CVE ID: CVE-2025-2703 State: PUBLISHED Published: 2025-04-23T11:36:02.852Z Last Updated: 2025-06-10T10:53:48.851Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L) Vendors: Grafana Products: Grafana, Grafana Enterprise Problem Types: CWE-79 Description: The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in order to make it execute arbitrary JavaScript. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://grafana.com/security/security-advisories/cve-2025-2703 - https://www.sonarsource.com/blog/data-in-danger-detecting-xss-in-grafana-cve-2025-2703/
CVE ID: CVE-2025-2704 State: PUBLISHED Published: 2025-04-02T21:00:58.582Z Last Updated: 2025-10-23T10:53:34.373Z Vendors: OpenVPN Products: OpenVPN Problem Types: CWE-754 Description: OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.openvpn.net/openvpn/wiki/CVE-2025-2704 - https://www.mail-archive.com/openvpn-announce@lists.sourceforge.net/msg00142.html
CVE ID: CVE-2025-2705 State: PUBLISHED Published: 2025-03-24T16:00:07.614Z Last Updated: 2025-03-24T18:02:49.037Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Digiwin Products: ERP Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical has been found in Digiwin ERP 5.1. Affected is the function DoUpload/DoWebUpload of the file /Api/FileUploadApi.ashx. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vul
endor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300726 - https://vuldb.com/?ctiid.300726 - https://vuldb.com/?submit.516291 - https://github.com/Rain1er/report/blob/main/THNlcnBf/RCE_3.md - https://github.com/Rain1er/report/blob/main/THNlcnBf/RCE_4.md
CVE ID: CVE-2025-2706 State: PUBLISHED Published: 2025-03-24T18:31:03.890Z Last Updated: 2025-03-24T19:31:04.860Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Digiwin Products: ERP Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical was found in Digiwin ERP 5.0.1. Affected by this vulnerability is an unknown functionality of the file /Api/TinyMce/UploadAjaxAPI.ashx. The manipulation of the argument File leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CIS
ed. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300727 - https://vuldb.com/?ctiid.300727 - https://vuldb.com/?submit.516293 - https://github.com/Rain1er/report/blob/main/THNlcnBf/RCE_5.md
CVE ID: CVE-2025-2707 State: PUBLISHED Published: 2025-03-24T19:00:06.004Z Last Updated: 2025-03-24T19:29:01.196Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: zhijiantianya Products: ruoyi-vue-pro Problem Types: CWE-22 Description: A vulnerability, which was classified as critical, has been found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this issue is some unknown functionality of the file /app-api/infra/file/upload of the component Front-End Store Interface. The manipulation of the argument path leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosu
motely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300728 - https://vuldb.com/?ctiid.300728 - https://vuldb.com/?submit.517029 - https://github.com/uglory-gll/javasec/blob/main/ruoyi-vue-pro.md#3file-path-traversal-front-end
CVE ID: CVE-2025-2708 State: PUBLISHED Published: 2025-03-24T19:31:03.576Z Last Updated: 2025-03-24T20:06:17.827Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: zhijiantianya Products: ruoyi-vue-pro Problem Types: CWE-22 Description: A vulnerability, which was classified as critical, was found in zhijiantianya ruoyi-vue-pro 2.4.1. This affects an unknown part of the file /admin-api/infra/file/upload of the component Backend File Upload Interface. The manipulation of the argument path leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did n
exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300729 - https://vuldb.com/?ctiid.300729 - https://vuldb.com/?submit.517030 - https://github.com/uglory-gll/javasec/blob/main/ruoyi-vue-pro.md#4file-path-traversal-back-end
CVE ID: CVE-2025-2709 State: PUBLISHED Published: 2025-03-24T20:00:11.432Z Last Updated: 2025-03-25T13:59:52.938Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Yonyou Products: UFIDA ERP-NC Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This vulnerability affects unknown code of the file /login.jsp. The manipulation of the argument key/redirect leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vu
vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300730 - https://vuldb.com/?ctiid.300730 - https://vuldb.com/?submit.517305 - https://github.com/Hebing123/cve/issues/84
CVE ID: CVE-2025-2710 State: PUBLISHED Published: 2025-03-24T20:31:03.779Z Last Updated: 2025-03-25T13:38:59.424Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Yonyou Products: UFIDA ERP-NC Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This issue affects some unknown processing of the file /menu.jsp. The manipulation of the argument flag leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment:
contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300731 - https://vuldb.com/?ctiid.300731 - https://vuldb.com/?submit.517306 - https://github.com/Hebing123/cve/issues/85
CVE ID: CVE-2025-2711 State: PUBLISHED Published: 2025-03-24T21:00:10.838Z Last Updated: 2025-03-25T13:59:46.086Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Yonyou Products: UFIDA ERP-NC Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been classified as problematic. Affected is an unknown function of the file /help/systop.jsp. The manipulation of the argument langcode leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA
. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300732 - https://vuldb.com/?ctiid.300732 - https://vuldb.com/?submit.517309 - https://github.com/Hebing123/cve/issues/86
CVE ID: CVE-2025-2712 State: PUBLISHED Published: 2025-03-24T21:31:03.846Z Last Updated: 2025-03-25T13:59:38.769Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Yonyou Products: UFIDA ERP-NC Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /help/top.jsp. The manipulation of the argument langcode leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst N
d may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300733 - https://vuldb.com/?ctiid.300733 - https://github.com/Hebing123/cve/issues/86
CVE ID: CVE-2025-2713 State: PUBLISHED Published: 2025-03-28T15:27:43.231Z Last Updated: 2025-09-08T09:47:48.152Z Vendors: Google Products: gVisor Problem Types: CWE-266 Description: Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/google/gvisor/commit/586c38d70081b13b2ed494cef48e99b93956843e
CVE ID: CVE-2025-2714 State: PUBLISHED Published: 2025-03-24T22:00:07.642Z Last Updated: 2025-03-25T13:36:43.261Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: JoomlaUX Products: JUX Real Estate Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /extensions/realestate/index.php/agents/agent-register/addagent. The manipulation of the argument plan_id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure
ely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300734 - https://vuldb.com/?ctiid.300734 - https://vuldb.com/?submit.517638
CVE ID: CVE-2025-2715 State: PUBLISHED Published: 2025-03-24T22:31:04.189Z Last Updated: 2025-03-25T13:33:35.987Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: timschofield Products: webERP Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatch_Invoice.php of the component Confirm Dispatch and Invoice Page. The manipulation of the argument Narrative leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this iss
motely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300735 - https://vuldb.com/?ctiid.300735 - https://vuldb.com/?submit.519791 - https://github.com/janssensjelle/published-pocs/blob/main/weberp-xss-confirm-dispatch.md
CVE ID: CVE-2025-2716 State: PUBLISHED Published: 2025-03-24T23:00:07.183Z Last Updated: 2025-03-25T13:32:43.404Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:P/I:N/A:N) Vendors: China Mobile Products: P22g-CIac Problem Types: CWE-22 Description: A vulnerability classified as problematic was found in China Mobile P22g-CIac 1.0.00.488. This vulnerability affects unknown code of the component Samba Path Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
ly about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300736 - https://vuldb.com/?ctiid.300736 - https://vuldb.com/?submit.519900 - https://github.com/rookiiiiiiie/China-Mobile-Internet-of-Things-Co.-Ltd./blob/main/Issues.md
CVE ID: CVE-2025-2717 State: PUBLISHED Published: 2025-03-24T23:31:05.104Z Last Updated: 2025-03-25T13:29:34.768Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: D-Link Products: DIR-823X Problem Types: CWE-78, CWE-77 Description: A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub_41710C of the file /goform/diag_nslookup of the component HTTP POST Request Handler. The manipulation of the argument target_addr leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300737 - https://vuldb.com/?ctiid.300737 - https://vuldb.com/?submit.517958 - https://github.com/mono7s/Dir-823x/blob/main/diag_nslookup/diag_nslookup.md - https://www.dlink.com/
CVE ID: CVE-2025-2718 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:38.933Z Description: No description available.