Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-2938 State: PUBLISHED Published: 2025-06-26T05:31:30.851Z Last Updated: 2025-06-27T03:55:21.151Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-840 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated users to gain elevated project privileges by requesting access to projects where role modifications during the approval process resulted in unintended permission grants. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/
ermission grants. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/529006 - https://hackerone.com/reports/3063091
CVE ID: CVE-2025-2939 State: PUBLISHED Published: 2025-06-03T02:27:34.986Z Last Updated: 2025-06-03T14:51:37.647Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: techjewel Products: Ninja Tables – Easy Data Table Builder Problem Types: CWE-502 Description: The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.0.18 via deserialization of untrusted input from the args[callback] parameter . This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to execute arbitrary functions, though it does not all
P Object. The additional presence of a POP chain allows attackers to execute arbitrary functions, though it does not allow user supplied parameters only single functions can be called so the impact is limited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8e38553d-5dba-4c84-95f7-43420245c770?source=cve - https://plugins.trac.wordpress.org/browser/ninja-tables/tags/5.0.18/vendor/wpfluent/framework/src/WPFluent/Http/Client.php#L399 - https://plugins.trac.wordpress.org/browser/ninja-tables/trunk/vendor/wpfluent/framework/src/WPFluent/Http/Client.php#L399 - https://plugins.trac.wordpress.org/browser/ninja-tables/tags/5.
r/wpfluent/framework/src/WPFluent/Http/Client.php#L399 - https://plugins.trac.wordpress.org/browser/ninja-tables/tags/5.0.19/vendor/wpfluent/framework/src/WPFluent/Http/Client.php#L399
CVE ID: CVE-2025-2940 State: PUBLISHED Published: 2025-06-27T08:23:57.327Z Last Updated: 2025-06-27T13:34:55.809Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: techjewel Products: Ninja Tables – Easy Data Table Builder Problem Types: CWE-918 Description: The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.18 via the args[url] parameter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Additional Analyst Not
from the web application and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/02480559-be5c-4d23-9e62-bb76fafb4f42?source=cve - https://plugins.trac.wordpress.org/browser/ninja-tables/trunk/vendor/wpfluent/framework/src/WPFluent/Http/Client.php#L268 - https://plugins.trac.wordpress.org/browser/ninja-tables/tags/5.0.18/vendor/wpfluent/framework/src/WPFluent/Http/Client.php#L268 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3269692%40ninja-tables&new=3269692%40ninja-tables&sfp_email=&sfph_mail= - https://plugins.trac
&sfph_mail=&reponame=&old=3269692%40ninja-tables&new=3269692%40ninja-tables&sfp_email=&sfph_mail= - https://plugins.trac.wordpress.org/browser/ninja-tables/tags/5.0.19/vendor/wpfluent/framework/src/WPFluent/Http/Client.php
CVE ID: CVE-2025-2941 State: PUBLISHED Published: 2025-04-05T07:01:10.502Z Last Updated: 2025-04-07T14:11:26.697Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: glenwpcoder Products: Drag and Drop Multiple File Upload for WooCommerce Problem Types: CWE-22 Description: The Drag and Drop Multiple File Upload for WooCommerce plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation via the wc-upload-file[] parameter in all versions up to, and including, 1.1.4. This makes it possible for unauthenticated attackers to move arbitrary files on the server, which can easily lead to remote code execution when the right file
ated attackers to move arbitrary files on the server, which can easily lead to remote code execution when the right file is moved (such as wp-config.php). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2685a2b4-aba3-425b-af0d-06f7693ab3d7?source=cve - https://wordpress.org/plugins/drag-and-drop-multiple-file-upload-for-woocommerce/#developers - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3266697%40drag-and-drop-multiple-file-upload-for-woocommerce&new=3266697%40drag-and-drop-multiple-file-upload-for-woocommerce&sfp_email=&sfph_mail=
CVE ID: CVE-2025-2942 State: PUBLISHED Published: 2025-07-11T06:00:02.439Z Last Updated: 2025-07-15T13:47:22.514Z Vendors: Unknown Products: Order Delivery Date Problem Types: CWE-200 Information Exposure Description: The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action, allowing attackers to retrieve such information Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/13a87567-2cf7-4bfb-8d63-a8e74950978f/
CVE ID: CVE-2025-2944 State: PUBLISHED Published: 2025-05-10T05:32:16.082Z Last Updated: 2025-05-12T13:20:33.086Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: jegtheme Products: Jeg Elementor Kit Problem Types: CWE-79 Description: The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video Button and Countdown Widgets in all versions up to, and including, 2.6.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute wheneve
d attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7baa8cca-96a5-4d6b-86d5-53cd1a4675cf?source=cve - https://wordpress.org/plugins/jeg-elementor-kit/#developers - https://plugins.trac.wordpress.org/changeset/3290315/
CVE ID: CVE-2025-2945 State: PUBLISHED Published: 2025-04-03T12:23:14.792Z Last Updated: 2025-04-04T03:55:25.268Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: pgadmin.org Products: pgAdmin 4 Description: Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud Deployment modules). The vulnerability is associated with the 2 POST endpoints; /sqleditor/query_tool/download, where the query_commited parameter and /cloud/deploy endpoint, where the high_availability parameter is unsafely passed to the Python eval() function, allowing arbitrary code execution. This issue affects pgAdmin 4: before 9.2. Additional Analyst Notes: - CISA ADP
tion, allowing arbitrary code execution. This issue affects pgAdmin 4: before 9.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pgadmin-org/pgadmin4/issues/8603
CVE ID: CVE-2025-2946 State: PUBLISHED Published: 2025-04-03T12:23:30.694Z Last Updated: 2025-04-03T17:57:18.517Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H) Vendors: pgadmin.org Products: pgAdmin 4 Description: pgAdmin <= 9.1 is affected by a security vulnerability with Cross-Site Scripting(XSS). If attackers execute any arbitrary HTML/JavaScript in a user's browser through query result rendering, then HTML/JavaScript runs on the browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pgadmin-org/pgadmin4/issues/8602
CVE ID: CVE-2025-2947 State: PUBLISHED Published: 2025-04-17T17:10:52.646Z Last Updated: 2025-08-28T16:40:47.631Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: i Problem Types: CWE-278 Description: IBM i 7.6 contains a privilege escalation vulnerability due to incorrect profile swapping in an OS command. A malicious actor can use the command to elevate privileges to gain root access to the host operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7231025
CVE ID: CVE-2025-2950 State: PUBLISHED Published: 2025-04-18T14:50:21.165Z Last Updated: 2025-08-28T16:41:27.679Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: i Problem Types: CWE-644 Description: IBM i 7.3, 7.4, 7.5, and 7.5 is vulnerable to a host header injection attack caused by improper neutralization of HTTP header content by IBM Navigator for i. An authenticated user can manipulate the host header in HTTP requests to change domain/IP address which may lead to unexpected behavior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7231320
CVE ID: CVE-2025-2951 State: PUBLISHED Published: 2025-03-30T11:31:09.211Z Last Updated: 2025-03-31T12:52:20.579Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Bluestar Products: Micro Mall Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Bluestar Micro Mall 1.0. Affected is an unknown function of the file /api/data.php. The manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302004 - https://vuldb.com/?ctiid.302004 - https://v
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302004 - https://vuldb.com/?ctiid.302004 - https://vuldb.com/?submit.521162 - https://www.jianshu.com/p/22d3ae38e628?v=1742101731758
CVE ID: CVE-2025-2952 State: PUBLISHED Published: 2025-03-30T15:00:11.185Z Last Updated: 2025-03-31T13:08:29.518Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Bluestar Products: Micro Mall Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical was found in Bluestar Micro Mall 1.0. Affected by this vulnerability is an unknown functionality of the file /api/api.php?mod=upload&type=1. The manipulation of the argument File leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302005 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302005 - https://vuldb.com/?ctiid.302005 - https://www.jianshu.com/p/22d3ae38e628?v=1742101731758
CVE ID: CVE-2025-2953 State: PUBLISHED Published: 2025-03-30T15:31:04.853Z Last Updated: 2025-04-22T11:36:56.085Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: PyTorch Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_pool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The security policy of the project warns to use unknown models which mig
s vulnerability is still doubted at the moment. The security policy of the project warns to use unknown models which might establish malicious effects. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302006 - https://vuldb.com/?ctiid.302006 - https://vuldb.com/?submit.521279 - https://github.com/pytorch/pytorch/issues/149274 - https://github.com/pytorch/pytorch/issues/149274#issue-2923122269 - https://github.com/pytorch/pytorch/blob/main/SECURITY.md#untrusted-models
CVE ID: CVE-2025-2954 State: PUBLISHED Published: 2025-03-30T16:31:05.242Z Last Updated: 2025-03-31T13:04:26.725Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: mannaandpoem Products: OpenManus Problem Types: CWE-284, CWE-266 Description: A vulnerability, which was classified as problematic, was found in mannaandpoem OpenManus up to 2025.3.13. This affects the function execute of the file app/tool/file_saver.py of the component File Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but d
The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302007 - https://vuldb.com/?ctiid.302007 - https://vuldb.com/?submit.521545 - https://magnificent-dill-351.notion.site/Arbitrary-File-Writing-in-OpenManus-2025-3-13-1b9c693918ed805e8e7fd35a896d2d41
CVE ID: CVE-2025-2955 State: PUBLISHED Published: 2025-03-30T17:31:06.954Z Last Updated: 2025-04-01T14:37:10.335Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: TOTOLINK Products: A3000RU Problem Types: CWE-284, CWE-266 Description: A vulnerability has been found in TOTOLINK A3000RU up to 5.9c.5185 and classified as problematic. This vulnerability affects unknown code of the file /cgi-bin/ExportIbmsConfig.sh of the component IBMS Configuration File Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
otely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302008 - https://vuldb.com/?ctiid.302008 - https://vuldb.com/?submit.521567 - https://lavender-bicycle-a5a.notion.site/TOTOLINK-A3000RU-ExportIbmsConfig-1b953a41781f80b89397e8c34717eb94?pvs=4 - https://www.totolink.net/
CVE ID: CVE-2025-2956 State: PUBLISHED Published: 2025-03-30T18:00:09.819Z Last Updated: 2025-03-31T14:01:26.813Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: TRENDnet Products: TI-G102i Problem Types: CWE-476, CWE-404 Description: A vulnerability was found in TRENDnet TI-G102i 1.0.7.S0_ /1.0.8.S0_ and classified as problematic. This issue affects the function plugins_call_handle_uri_raw of the file /usr/sbin/lighttpd of the component HTTP Request Handler. The manipulation leads to null pointer dereference. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early abo
thin the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302009 - https://vuldb.com/?ctiid.302009 - https://vuldb.com/?submit.521717 - https://docs.google.com/document/d/16iWGXHpmlwJ0GAOi458YlpR56McCvDcN/edit#heading=h.gjdgxs - https://drive.google.com/file/d/1irEQCJRvcJbh1PdPbk0PRwJB8-fc5mYR/view?usp=sharing
CVE ID: CVE-2025-2957 State: PUBLISHED Published: 2025-03-30T19:00:07.178Z Last Updated: 2025-04-01T14:36:56.637Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: TRENDnet Products: TEW-411BRP+ Problem Types: CWE-476, CWE-404 Description: A vulnerability was found in TRENDnet TEW-411BRP+ 2.07. It has been classified as problematic. Affected is the function sub_401DB0 of the file /usr/sbin/httpd of the component HTTP Request Handler. The manipulation leads to null pointer dereference. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but
The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302010 - https://vuldb.com/?ctiid.302010 - https://vuldb.com/?submit.521719 - https://docs.google.com/document/d/1NnvweBsYJQ0MGwBvpi5aAe69g8g5PaNL/edit#heading=h.gjdgxs - https://drive.google.com/file/d/1Hq3-cTke0SeJguNpop-jpzMtoCHkg9Cb/view?usp=drive_link
CVE ID: CVE-2025-2958 State: PUBLISHED Published: 2025-03-30T20:00:09.476Z Last Updated: 2025-04-01T14:36:33.881Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: TRENDnet Products: TEW-818DRU Problem Types: CWE-404 Description: A vulnerability was found in TRENDnet TEW-818DRU 1.0.14.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/httpd of the component HTTP Request Handler. The manipulation leads to denial of service. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure bu
k. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302011 - https://vuldb.com/?ctiid.302011 - https://vuldb.com/?submit.521723 - https://docs.google.com/document/d/1DHUsUpeizmqFbJe_0SjsJvCFspPeFDaK/edit#heading=h.gjdgxs - https://drive.google.com/file/d/1SbZ63uqg6QJYjPFcLY5wBqWrh-NMrnZq/view?usp=drive_link
CVE ID: CVE-2025-2959 State: PUBLISHED Published: 2025-03-30T20:31:05.582Z Last Updated: 2025-03-31T14:29:10.736Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: TRENDnet Products: TEW-410APB Problem Types: CWE-476, CWE-404 Description: A vulnerability was found in TRENDnet TEW-410APB 1.3.06b. It has been rated as problematic. Affected by this issue is the function sub_4019A0 of the file /usr/sbin/httpd of the component HTTP Request Handler. The manipulation leads to null pointer dereference. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this discl
l network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302012 - https://vuldb.com/?ctiid.302012 - https://vuldb.com/?submit.521725 - https://docs.google.com/document/d/1PcJZQ364MQxz1eUt6PLnWIQYTLNuJ5_3/edit#heading=h.gjdgxs - https://drive.google.com/file/d/1idRNkvFHyh5vOxw2VIs2wcwdVOVLuqkG/view?usp=drive_link
CVE ID: CVE-2025-2960 State: PUBLISHED Published: 2025-03-30T21:00:10.878Z Last Updated: 2025-03-31T14:28:21.693Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: TRENDnet Products: TEW-637AP, TEW-638APB Problem Types: CWE-476, CWE-404 Description: A vulnerability classified as problematic has been found in TRENDnet TEW-637AP and TEW-638APB 1.2.7/1.3.0.106. This affects the function sub_41DED0 of the file /bin/goahead of the component HTTP Request Handler. The manipulation leads to null pointer dereference. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early abou
uired for this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302013 - https://vuldb.com/?ctiid.302013 - https://vuldb.com/?submit.521727 - https://docs.google.com/document/d/17FadWn-UWXjvcYNzDI4JRjag-lGUU9pJ/edit#heading=h.gjdgxs - https://drive.google.com/file/d/1SS7jsYBNl0faSOy_vH5tNn_xJJ_HA1xU/view?usp=drive_link
CVE ID: CVE-2025-2961 State: PUBLISHED Published: 2025-03-30T21:31:05.057Z Last Updated: 2025-03-31T15:46:30.775Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: opensolon Problem Types: CWE-24, CWE-23 Description: A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function render_mav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additi
'../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302014 - https://vuldb.com/?ctiid.302014 - https://vuldb.com/?submit.522380 - https://github.com/Q16G/cve_detail/blob/main/solon/templateRCE.md
CVE ID: CVE-2025-2962 State: PUBLISHED Published: 2025-06-24T05:32:11.287Z Last Updated: 2025-06-24T14:22:14.696Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: zephyrproject-rtos Products: Zephyr Problem Types: CWE-835 Description: A denial-of-service issue in the dns implemenation could cause an infinite loop. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-2qp5-c2vq-g2ww
CVE ID: CVE-2025-2963 State: REJECTED Published: 2025-03-30T22:00:12.181Z Last Updated: 2025-04-03T22:43:13.507Z Description: No description available.
CVE ID: CVE-2025-2964 State: REJECTED Published: 2025-03-30T22:31:04.804Z Last Updated: 2025-04-04T00:02:40.416Z Description: No description available.
CVE ID: CVE-2025-2965 State: REJECTED Published: 2025-03-30T23:00:09.762Z Last Updated: 2025-04-04T00:04:48.646Z Description: No description available.
CVE ID: CVE-2025-2966 State: REJECTED Published: 2025-03-30T23:31:04.929Z Last Updated: 2025-04-04T00:07:16.944Z Description: No description available.
CVE ID: CVE-2025-2967 State: REJECTED Published: 2025-03-31T00:00:15.619Z Last Updated: 2025-04-04T00:09:05.813Z Description: No description available.
CVE ID: CVE-2025-2968 State: REJECTED Published: 2025-03-31T00:31:04.798Z Last Updated: 2025-04-04T00:10:47.389Z Description: No description available.
CVE ID: CVE-2025-2969 State: REJECTED Published: 2025-03-31T01:00:09.296Z Last Updated: 2025-04-04T00:12:16.264Z Description: No description available.
CVE ID: CVE-2025-2970 State: REJECTED Published: 2025-03-31T01:31:04.838Z Last Updated: 2025-04-04T00:31:27.202Z Description: No description available.
CVE ID: CVE-2025-2971 State: REJECTED Published: 2025-03-31T02:00:06.962Z Last Updated: 2025-04-07T22:31:29.807Z Description: No description available.
CVE ID: CVE-2025-2972 State: REJECTED Published: 2025-03-31T02:31:04.884Z Last Updated: 2025-04-04T00:29:36.255Z Description: No description available.