Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-2111 State: PUBLISHED Published: 2025-04-19T05:30:13.219Z Last Updated: 2025-04-21T02:39:44.237Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: hiddenpearls Products: Insert Headers And Footers Problem Types: CWE-352 Description: The Insert Headers And Footers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.1. This is due to missing or incorrect nonce validation on the 'custom_plugin_set_option' function. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site via a forged request granted they can trick a site administrator into performin
arbitrary options on the WordPress site via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. The 'WPBRIGADE_SDK__DEV_MODE' constant must be set to 'true' to exploit the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7b00d175-261d-46e3-bf3c-2d18f4e4972d?source=cve - https://plugins.trac.wordpress.org/browser/wp-headers-and-footers/trunk/lib/wpb-sdk/views/wpb
-2d18f4e4972d?source=cve - https://plugins.trac.wordpress.org/browser/wp-headers-and-footers/trunk/lib/wpb-sdk/views/wpb-debug.php#L69 - https://plugins.trac.wordpress.org/browser/wp-headers-and-footers/trunk/lib/wpb-sdk/views/wpb-debug.php#L63 - https://plugins.trac.wordpress.org/changeset/3276361/
CVE ID: CVE-2025-2112 State: PUBLISHED Published: 2025-03-08T21:31:04.169Z Last Updated: 2025-03-10T15:54:47.625Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: user-xiangpeng Products: yaoqishan Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in user-xiangpeng yaoqishan up to a47fec4a31cbd13698c592dfdc938c8824dd25e4. It has been declared as critical. Affected by this vulnerability is the function getMediaLisByFilter of the file cn/javaex/yaoqishan/service/media_info/MediaInfoService.java. The manipulation of the argument typeId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This pr
ql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299005 - https://vuldb.com/?ctiid.299005 - https://vuldb.com/?submit.506085 - https://github.com/xiaolian-11/code_demo/blob/main/yaoqishan-sql.md
CVE ID: CVE-2025-2113 State: PUBLISHED Published: 2025-03-09T03:00:12.023Z Last Updated: 2025-03-10T15:51:10.532Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: AT Software Solutions Products: ATSVD Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in AT Software Solutions ATSVD up to 3.4.1. It has been rated as critical. Affected by this issue is some unknown functionality of the component Esqueceu a senha. The manipulation of the argument txtCPF leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.4.2 is able to address this issue. It is recommended to upgrade the a
the public and may be used. Upgrading to version 3.4.2 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299006 - https://vuldb.com/?ctiid.299006 - https://vuldb.com/?submit.506341 - https://github.com/yago3008/cves
CVE ID: CVE-2025-2114 State: PUBLISHED Published: 2025-03-09T04:31:04.454Z Last Updated: 2025-03-10T15:49:48.966Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Shenzhen Sixun Software Products: Sixun Shanghui Group Business Management System Problem Types: CWE-285, CWE-266 Description: A vulnerability, which was classified as problematic, has been found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This issue affects some unknown processing of the file /WebPages/Adm/OperatorStop.asp of the component Reset Password Interface. The manipulation of the argument OperId leads to improper authorization. The attack may be initiated rem
word Interface. The manipulation of the argument OperId leads to improper authorization. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299009 - https://vuldb.com/?ctiid.299009 - https://vuldb.com/?submit.506591 - https://github.com/zhangbuneng/an-arbitrary-user-password-reset-vulnerability-in-the-Sixun-Shanghui-7-Group/issues/1#issue-2877317082
CVE ID: CVE-2025-2115 State: PUBLISHED Published: 2025-03-09T05:31:04.443Z Last Updated: 2025-03-10T15:46:17.501Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zzskzy Products: Warehouse Refinement Management System Problem Types: CWE-434, CWE-284 Description: A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 3.1. Affected is the function ProcessRequest of the file /AcceptZip.ashx. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not
ploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299010 - https://vuldb.com/?ctiid.299010 - https://vuldb.com/?submit.506655 - https://github.com/heiheixz/report/blob/main/sk_1.md
CVE ID: CVE-2025-2116 State: PUBLISHED Published: 2025-03-09T06:31:06.093Z Last Updated: 2025-03-10T14:14:50.307Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Beijing Founder Electronics Products: Founder Enjoys All-Media Acquisition and Editing System Problem Types: CWE-918 Description: A vulnerability has been found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /newsedit/newsedit/xy/imageProxy.do of the component File Protocol Handler. The manipulation of the argument xyImgUrl leads to server-side request for
xy.do of the component File Protocol Handler. The manipulation of the argument xyImgUrl leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299011 - https://vuldb.com/?ctiid.299011 - https://vuldb.com/?submit.503719 - https://flowus.cn/share/a104e4fc-a8f7-48b1-8648-1a3e5f78b9bf?code=G8A6P3
CVE ID: CVE-2025-2117 State: PUBLISHED Published: 2025-03-09T07:31:06.110Z Last Updated: 2025-03-10T16:07:34.495Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Beijing Founder Electronics Products: Founder Enjoys All-Media Acquisition and Editing System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0 and classified as critical. Affected by this issue is the function electricDocList of the file /newsedit/report/reportCenter.do. The manipulation of the argument fvID/catID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the
e argument fvID/catID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299012 - https://vuldb.com/?ctiid.299012 - https://vuldb.com/?submit.508302 - https://flowus.cn/share/d2f022c7-a6e5-4b6d-bcb7-8a2f030bbab8?code=G8A6P3
CVE ID: CVE-2025-2118 State: PUBLISHED Published: 2025-03-09T08:31:04.415Z Last Updated: 2025-05-12T15:33:38.326Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Quantico Tecnologia Products: PRMV Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Quantico Tecnologia PRMV 6.48. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Login Endpoint. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299013 - https://vuldb.com/?ctiid.299013 - https://vuldb.com/?submit.506948 - https://github.com/yago3008/cves
CVE ID: CVE-2025-2119 State: PUBLISHED Published: 2025-03-09T09:00:10.640Z Last Updated: 2025-05-12T15:34:01.211Z Severity: LOW (CVSS 2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Thinkware Products: Car Dashcam F800 Pro Problem Types: CWE-1392 Description: A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed t
. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299032 - https://vuldb.com/?ctiid.299032 - https://vuldb.com/?submit.507326 - https://github.com/geo-chen/Thinkware-Dashcam
CVE ID: CVE-2025-2120 State: PUBLISHED Published: 2025-03-09T10:31:03.993Z Last Updated: 2025-03-10T15:45:15.593Z Severity: LOW (CVSS 2.1 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Thinkware Products: Car Dashcam F800 Pro Problem Types: CWE-313, CWE-312 Description: A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been rated as problematic. This issue affects some unknown processing of the file /tmp/hostapd.conf of the component Configuration File Handler. The manipulation leads to cleartext storage in a file or on disk. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The v
ossible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299033 - https://vuldb.com/?ctiid.299033 - https://vuldb.com/?submit.507327 - https://github.com/geo-chen/Thinkware-Dashcam
CVE ID: CVE-2025-2121 State: PUBLISHED Published: 2025-03-09T11:00:07.276Z Last Updated: 2025-03-10T15:44:32.074Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Thinkware Products: Car Dashcam F800 Pro Problem Types: CWE-284, CWE-266 Description: A vulnerability classified as critical has been found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected is an unknown function of the component File Storage. The manipulation leads to improper access controls. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way
losed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299034 - https://vuldb.com/?ctiid.299034 - https://vuldb.com/?submit.507328 - https://github.com/geo-chen/Thinkware-Dashcam
CVE ID: CVE-2025-2122 State: PUBLISHED Published: 2025-03-09T13:31:04.529Z Last Updated: 2025-03-10T15:36:57.372Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Thinkware Products: Car Dashcam F800 Pro Problem Types: CWE-404 Description: A vulnerability classified as problematic was found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected by this vulnerability is an unknown functionality of the component Connection Handler. The manipulation leads to denial of service. The attack can only be initiated within the local network. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the publ
lexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299035 - https://vuldb.com/?ctiid.299035 - https://github.com/geo-chen/Thinkware-Dashcam
CVE ID: CVE-2025-2123 State: PUBLISHED Published: 2025-03-09T15:00:12.269Z Last Updated: 2025-03-10T15:35:51.889Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: GeSHi Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1. Affected by this issue is the function get_var of the file /contrib/cssgen.php of the component CSS Handler. The manipulation of the argument default-styles/keywords-1/keywords-2/keywords-3/keywords-4/comments leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CIS
may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299036 - https://vuldb.com/?ctiid.299036 - https://vuldb.com/?submit.507418 - https://github.com/GeSHi/geshi-1.0/issues/159 - https://github.com/GeSHi/geshi-1.0/issues/159#issue-2880408694
CVE ID: CVE-2025-2124 State: PUBLISHED Published: 2025-03-09T15:31:04.685Z Last Updated: 2025-03-10T19:29:17.013Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Control iD Products: RH iD Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in Control iD RH iD 25.2.25.0. This affects an unknown part of the file /v2/customerdb/person.svc/change_password of the component API Handler. The manipulation of the argument message leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not re
it has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299037 - https://vuldb.com/?ctiid.299037 - https://vuldb.com/?submit.509845 - https://github.com/yago3008/cves
CVE ID: CVE-2025-2125 State: PUBLISHED Published: 2025-03-09T16:00:07.185Z Last Updated: 2025-03-10T19:26:42.786Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Control iD Products: RH iD Problem Types: CWE-99 Description: A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic. This vulnerability affects unknown code of the file /v2/report.svc/comprovante_marcacao/?companyId=1 of the component PDF Document Handler. The manipulation of the argument nsr leads to improper control of resource identifiers. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
e attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299038 - https://vuldb.com/?ctiid.299038 - https://vuldb.com/?submit.509856 - https://github.com/yago3008/cves
CVE ID: CVE-2025-2126 State: PUBLISHED Published: 2025-03-09T17:00:09.771Z Last Updated: 2025-03-10T18:31:50.858Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: JoomlaUX Products: JUX Real Estate Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as critical. This issue affects some unknown processing of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties of the component GET Parameter Handler. The manipulation of the argument title leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was
ion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299039 - https://vuldb.com/?ctiid.299039 - https://vuldb.com/?submit.509884
CVE ID: CVE-2025-2127 State: PUBLISHED Published: 2025-03-09T17:31:03.683Z Last Updated: 2025-03-10T18:05:16.412Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: JoomlaUX Products: JUX Real Estate Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla. It has been classified as problematic. Affected is an unknown function of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties. The manipulation of the argument Itemid/jp_yearbuilt leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted e
to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299040 - https://vuldb.com/?ctiid.299040 - https://vuldb.com/?submit.509891
CVE ID: CVE-2025-2128 State: PUBLISHED Published: 2025-04-11T09:21:44.921Z Last Updated: 2025-04-11T14:37:49.453Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: stylemix Products: Cost Calculator Builder Problem Types: CWE-89 Description: The Cost Calculator Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_ids’ parameter in all versions up to, and including, 3.2.67 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already
ible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7a7157c0-8378-4aa0-bc47-635be4ba2f8f?source=cve - https://plugins.trac.wordpress.org/browser/cost-calculator-builder/trunk/includes/classes/models/Payments.php#L52 - https://wordpress.org/plugins/cost-calculator-builder/#developers - https://plugins.trac.wordpress.org/changeset/3263770/
CVE ID: CVE-2025-2129 State: PUBLISHED Published: 2025-03-09T20:00:09.867Z Last Updated: 2025-03-10T17:59:05.752Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Mage AI Problem Types: CWE-1188 Description: A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at t
exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. After 7 months of repeated follow-ups by the researcher, Mage AI has decided to not accept this issue as a valid security vulnerability and has confirmed that they will not be addressing it. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299049 - https://vuldb.com/?ctiid.299049 - https://vuldb.com/?submit.510690 - https://github.com/zn9988/publications/blob/main/2.Mage-AI%20-%20Insecure%20Default%20Authentication%20Setup%20Leading%20to%20Zero-Click%20RCE/README.md
CVE ID: CVE-2025-2130 State: PUBLISHED Published: 2025-03-09T22:00:10.586Z Last Updated: 2025-03-10T17:52:09.540Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: OpenXE Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in OpenXE up to 1.12. It has been declared as problematic. This vulnerability affects unknown code of the component Ticket Bearbeiten Page. The manipulation of the argument Notizen leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vul
endor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299050 - https://vuldb.com/?ctiid.299050 - https://vuldb.com/?submit.511529 - https://github.com/janssensjelle/published-pocs/blob/main/openxe-xss-ticket.md - https://www.singto.io/pocsforexploits/openxe/openxe-xss-ticket.html
CVE ID: CVE-2025-2131 State: PUBLISHED Published: 2025-03-09T22:31:04.299Z Last Updated: 2025-03-10T17:42:47.572Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: dayrui Products: XunRuiCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in dayrui XunRuiCMS up to 4.6.3. It has been rated as problematic. This issue affects some unknown processing of the component Friendly Links Handler. The manipulation of the argument Website Address leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299051 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299051 - https://vuldb.com/?ctiid.299051 - https://vuldb.com/?submit.511411 - https://github.com/dayrui/xunruicms/issues/7