Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-6098 State: PUBLISHED Published: 2025-06-16T00:31:04.662Z Last Updated: 2025-06-16T16:21:39.074Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: UTT Products: 进取 750W Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in UTT 进取 750W up to 5.0. It has been classified as critical. This affects the function strcpy of the file /goform/setSysAdm of the component API. The manipulation of the argument passwd1 leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additi
the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312567 - https://vuldb.com/?ctiid.312567 - https://vuldb.com/?submit.589437 - https://github.com/newym/cve/blob/main/utt1.md - https://github.com/newym/cve/blob/main/utt1.md#poc
CVE ID: CVE-2025-6099 State: PUBLISHED Published: 2025-06-16T01:00:16.170Z Last Updated: 2025-06-16T16:20:25.933Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: szluyu99 Products: gin-vue-blog Problem Types: CWE-285, CWE-266 Description: A vulnerability was found in szluyu99 gin-vue-blog up to 61dd11ccd296e8642a318ada3ef7b3f7776d2410. It has been declared as critical. This vulnerability affects unknown code of the file gin-blog-server/internal/manager.go of the component PATCH Request Handler. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Th
er authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312568 - https://vuldb.com/?ctiid.312568 - https://vuldb.com/?submit.589495 - https://github.com/szluyu99/gin-vue-blog/issues/28
CVE ID: CVE-2025-6100 State: PUBLISHED Published: 2025-06-16T01:31:05.569Z Last Updated: 2025-06-16T16:18:20.626Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: realguoshuai Products: open-video-cms Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in realguoshuai open-video-cms 1.0. It has been rated as critical. This issue affects some unknown processing of the file /v1/video/list. The manipulation of the argument sort leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Anal
ic and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312569 - https://vuldb.com/?ctiid.312569 - https://vuldb.com/?submit.590375 - https://github.com/Bemcliu/cve/blob/main/README.md - https://github.com/Bemcliu/cve/blob/main/README.md#poc
CVE ID: CVE-2025-6101 State: PUBLISHED Published: 2025-06-16T02:00:11.764Z Last Updated: 2025-06-17T14:11:34.864Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: letta-ai Products: letta Problem Types: CWE-95, CWE-94 Description: A vulnerability classified as critical has been found in letta-ai letta up to 0.4.1. Affected is the function function_message of the file letta/letta/interface.py. The manipulation of the argument function_name/function_args leads to improper neutralization of directives in dynamically evaluated code. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312570 - https://vuldb.com/?ctiid.312570 - https://vuldb.com/?submit.590528 - https://github.com/letta-ai/letta/issues/2613
CVE ID: CVE-2025-6102 State: PUBLISHED Published: 2025-06-16T02:31:05.039Z Last Updated: 2025-06-16T18:09:17.604Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Wifi-soft Products: UniBox Controller Problem Types: CWE-78, CWE-77 Description: A vulnerability classified as critical was found in Wifi-soft UniBox Controller up to 20250506. Affected by this vulnerability is an unknown functionality of the file /authentication/logout.php. The manipulation of the argument mac_address leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but d
The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312571 - https://vuldb.com/?ctiid.312571 - https://vuldb.com/?submit.590648 - https://github.com/h0e4a0r1t/h0e4a0r1t.github.io/blob/master/2025/1/Command%20Injection%20Vulnerability%20in%20Wifi-soft%20UniBox%20controller-authentication_logout.pdf
CVE ID: CVE-2025-6103 State: PUBLISHED Published: 2025-06-16T03:00:12.081Z Last Updated: 2025-06-16T18:05:20.522Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Wifi-soft Products: UniBox Controller Problem Types: CWE-78, CWE-77 Description: A vulnerability, which was classified as critical, has been found in Wifi-soft UniBox Controller up to 20250506. Affected by this issue is some unknown functionality of the file /billing/test_accesscodelogin.php. The manipulation of the argument Password leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this d
ched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312572 - https://vuldb.com/?ctiid.312572 - https://vuldb.com/?submit.590734 - https://github.com/h0e4a0r1t/h0e4a0r1t.github.io/blob/master/2025/1/Command%20Injection%20Vulnerability%20in%20Wifi-soft%20UniBox%20controller-billing-test_accesscodelogin.pdf
CVE ID: CVE-2025-6104 State: PUBLISHED Published: 2025-06-16T03:31:05.078Z Last Updated: 2025-06-16T18:02:34.764Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Wifi-soft Products: UniBox Controller Problem Types: CWE-78, CWE-77 Description: A vulnerability, which was classified as critical, was found in Wifi-soft UniBox Controller up to 20250506. This affects an unknown part of the file /billing/pms_check.php. The manipulation of the argument ipaddress leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respon
as been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312573 - https://vuldb.com/?ctiid.312573 - https://vuldb.com/?submit.590747 - https://github.com/h0e4a0r1t/h0e4a0r1t.github.io/blob/master/2025/1/Command%20Injection%20Vulnerability%20in%20Wifi-soft%20UniBox%20controller-billing-pms_check.pdf
CVE ID: CVE-2025-6105 State: PUBLISHED Published: 2025-06-16T04:00:09.744Z Last Updated: 2025-06-16T17:59:07.688Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: jflyfox Products: jfinal_cms Problem Types: CWE-352, CWE-862 Description: A vulnerability has been found in jflyfox jfinal_cms 5.0.1 and classified as problematic. This vulnerability affects unknown code of the file HOME.java. The manipulation of the argument Logout leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst N
d may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312574 - https://vuldb.com/?ctiid.312574 - https://vuldb.com/?submit.590704 - https://github.com/webzzaa/CVE-/issues/3
CVE ID: CVE-2025-6106 State: PUBLISHED Published: 2025-06-16T04:31:04.416Z Last Updated: 2025-06-16T17:57:26.621Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: WuKongOpenSource Products: WukongCRM Problem Types: CWE-352, CWE-862 Description: A vulnerability was found in WuKongOpenSource WukongCRM 9.0 and classified as problematic. This issue affects some unknown processing of the file AdminRoleController.java. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analy
c and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312575 - https://vuldb.com/?ctiid.312575 - https://vuldb.com/?submit.590852 - https://github.com/luokuang1/CVE/issues/2
CVE ID: CVE-2025-6107 State: PUBLISHED Published: 2025-06-16T05:00:10.834Z Last Updated: 2025-06-23T16:08:48.104Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R) Vendors: comfyanonymous Products: comfyui Problem Types: CWE-915, CWE-913 Description: A vulnerability was found in comfyanonymous comfyui 0.3.40. It has been classified as problematic. Affected is the function set_attr of the file /comfy/utils.py. The manipulation leads to dynamically-determined object attributes. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and ma
n attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312576 - https://vuldb.com/?ctiid.312576 - https://vuldb.com/?submit.590921 - https://gist.github.com/superboy-zjc/f71b84ed074260a5e459581caa2f1fb2 - https://gist.github.com/superboy-zjc/f71b84ed074260a5e459581caa2f1fb2#proof-of-concept
CVE ID: CVE-2025-6108 State: PUBLISHED Published: 2025-06-16T05:31:05.347Z Last Updated: 2025-06-16T17:51:44.446Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: hansonwang99 Products: Spring-Boot-In-Action Problem Types: CWE-22 Description: A vulnerability was found in hansonwang99 Spring-Boot-In-Action up to 807fd37643aa774b94fd004cc3adbd29ca17e9aa. It has been declared as critical. Affected by this vulnerability is the function watermarkTest of the file /springbt_watermark/src/main/java/cn/codesheep/springbt_watermark/service/ImageUploadService.java of the component File Upload. The manipulation of the argument filename leads to path traversal. The attack ca
vice.java of the component File Upload. The manipulation of the argument filename leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312577 - https://vuldb.com/?ctiid.312577 - https://vuldb.com/?submit.592362 - https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250607-01.md
CVE ID: CVE-2025-6109 State: PUBLISHED Published: 2025-06-16T06:00:10.880Z Last Updated: 2025-06-16T18:45:03.532Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: javahongxi Products: whatsmars Problem Types: CWE-22 Description: A vulnerability was found in javahongxi whatsmars 2021.4.0. It has been rated as problematic. Affected by this issue is the function initialize of the file /whatsmars-archetypes/whatsmars-initializr/src/main/java/org/hongxi/whatsmars/initializr/controller/InitializrController.java. The manipulation of the argument artifactId leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to t
he argument artifactId leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312578 - https://vuldb.com/?ctiid.312578 - https://vuldb.com/?submit.592397 - https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250607-02.md - https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250607-02.md#steps-to-reproduce
CVE ID: CVE-2025-6110 State: PUBLISHED Published: 2025-06-16T06:31:07.100Z Last Updated: 2025-06-16T18:31:25.999Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1201 Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical has been found in Tenda FH1201 1.2.0.14(408). This affects an unknown part of the file /goform/SafeMacFilter. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312579 - https://vu
may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312579 - https://vuldb.com/?ctiid.312579 - https://vuldb.com/?submit.592473 - https://vuldb.com/?submit.592475 - https://lavender-bicycle-a5a.notion.site/Tenda-FH1201-fromSafeUrlFilter-20b53a41781f80bc8687e3887f536120?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-6111 State: PUBLISHED Published: 2025-06-16T07:00:09.017Z Last Updated: 2025-06-16T17:50:43.399Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1205 Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical was found in Tenda FH1205 2.0.0.7(775). This vulnerability affects the function fromVirtualSer of the file /goform/VirtualSer. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312580 - htt
lic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312580 - https://vuldb.com/?ctiid.312580 - https://vuldb.com/?submit.592471 - https://lavender-bicycle-a5a.notion.site/Tenda-FH1205-fromVirtualSer-20b53a41781f809180a7d46f12f0417f?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-6112 State: PUBLISHED Published: 2025-06-16T07:31:06.853Z Last Updated: 2025-06-16T17:27:20.513Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1205 Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in Tenda FH1205 2.0.0.7. This issue affects the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312581 - https:
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312581 - https://vuldb.com/?ctiid.312581 - https://vuldb.com/?submit.592472 - https://lavender-bicycle-a5a.notion.site/Tenda-FH1205-fromadvsetlanip-20b53a41781f80bf850ff39f88ad7f2b?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-6113 State: PUBLISHED Published: 2025-06-16T08:00:09.975Z Last Updated: 2025-06-16T17:25:59.102Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1203 Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. Affected is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312582 - https://vu
may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312582 - https://vuldb.com/?ctiid.312582 - https://vuldb.com/?submit.592478 - https://lavender-bicycle-a5a.notion.site/Tenda-FH1203-fromadvsetlanip-20b53a41781f8070bc65ffadd1ed6bf1?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-6114 State: PUBLISHED Published: 2025-06-16T08:31:05.867Z Last Updated: 2025-06-16T15:55:36.188Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-619L Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. Affected by this vulnerability is the function form_portforwarding of the file /goform/form_portforwarding. The manipulation of the argument ingress_name_%d/sched_name_%d/name_%d leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects prod
be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312583 - https://vuldb.com/?ctiid.312583 - https://vuldb.com/?submit.592568 - https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_60/60.md - https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_60/60.md#poc - https://www.dlink.com/
CVE ID: CVE-2025-6115 State: PUBLISHED Published: 2025-06-16T09:00:10.288Z Last Updated: 2025-06-16T18:30:13.933Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-619L Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. Affected by this issue is the function form_macfilter. The manipulation of the argument mac_hostname_%d/sched_name_%d leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional An
and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312584 - https://vuldb.com/?ctiid.312584 - https://vuldb.com/?submit.592570 - https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_62/62.md - https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_62/62.md#poc - https://www.dlink.com/
CVE ID: CVE-2025-6116 State: PUBLISHED Published: 2025-06-16T09:31:05.148Z Last Updated: 2025-06-16T18:17:48.440Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Das Products: Parking Management System 停车场管理系统 Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been classified as critical. This affects an unknown part of the file /IntraFieldVehicle/Search of the component API. The manipulation of the argument Value leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnric
ack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312585 - https://vuldb.com/?ctiid.312585 - https://vuldb.com/?submit.591160 - https://github.com/K-mxredo/MXdocument/blob/K-mxredo-blob/%E5%81%9C%E8%BD%A6%E5%9C%BA%E7%B3%BB%E7%BB%9FIntraFieldVehicle-Search.md
CVE ID: CVE-2025-6117 State: PUBLISHED Published: 2025-06-16T10:00:12.506Z Last Updated: 2025-06-16T15:43:18.192Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Das Products: Parking Management System 停车场管理系统 Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been declared as critical. This vulnerability affects unknown code of the file /Reservations/Search of the component API. The manipulation of the argument Value leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312586 - https://vuldb.com/?ctiid.312586 - https://vuldb.com/?submit.591161 - https://github.com/K-mxredo/MXdocument/blob/K-mxredo-blob/%E5%81%9C%E8%BD%A6%E5%9C%BA%E7%B3%BB%E7%BB%9FReservations-Search.md
CVE ID: CVE-2025-6118 State: PUBLISHED Published: 2025-06-16T10:31:05.313Z Last Updated: 2025-06-16T15:40:00.558Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Das Products: Parking Management System 停车场管理系统 Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been rated as critical. This issue affects some unknown processing of the file /vehicle/search of the component API. The manipulation of the argument vehicleTypeCode leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrich
ed remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312587 - https://vuldb.com/?ctiid.312587 - https://vuldb.com/?submit.591173 - https://github.com/K-mxredo/MXdocument/blob/K-mxredo-blob/%E5%81%9C%E8%BD%A6%E5%9C%BA%E7%B3%BB%E7%BB%9Fvehicle-search.md
CVE ID: CVE-2025-6119 State: PUBLISHED Published: 2025-06-16T11:00:09.282Z Last Updated: 2025-06-16T15:35:22.956Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: Open Asset Import Library Products: Assimp Problem Types: CWE-416, CWE-119 Description: A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the function Assimp::BVHLoader::ReadNodeChannels in the library assimp/code/AssetLib/BVH/BVHLoader.cpp. The manipulation of the argument pNode leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided t