Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309414 - https://vuldb.com/?ctiid.309414 - https://vuldb.com/?submit.575631 - https://github.com/Blu3B3ard/PoC-FreeFloat-FTP-Server-1.0/blob/main/exploit.txt
CVE ID: CVE-2025-4873 State: PUBLISHED Published: 2025-05-18T11:31:05.510Z Last Updated: 2025-05-19T14:18:21.507Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: News Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309415 - https://vuldb.com/?ctiid.309415 - https://vuldb.com/?submit.576244 - https://github.com/Schatten-42/MyCVE/issues/6 - https://phpgurukul.com/
CVE ID: CVE-2025-4874 State: PUBLISHED Published: 2025-05-18T12:00:10.385Z Last Updated: 2025-05-19T14:17:48.744Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: News Portal Project Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/contactus.php. The manipulation of the argument pagetitle leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309416 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309416 - https://vuldb.com/?ctiid.309416 - https://vuldb.com/?submit.576251 - https://github.com/Schatten-42/MyCVE/issues/7 - https://phpgurukul.com/
CVE ID: CVE-2025-4875 State: PUBLISHED Published: 2025-05-18T12:31:04.886Z Last Updated: 2025-05-19T14:17:08.638Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Online Shopping Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309418 - https
c and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309418 - https://vuldb.com/?ctiid.309418 - https://vuldb.com/?submit.576265 - https://github.com/arpcyber040/CVE/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-4876 State: PUBLISHED Published: 2025-05-19T16:04:34.031Z Last Updated: 2025-09-03T16:33:11.971Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: ConnectWise Products: Risk Assessment Problem Types: CWE-321 Description: ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. This key is embedded in plaintext within the binary and used in cryptographic operations without dynamic key management. Once obtained the key can be used to decrypt CSV input files used for authenticated network scanning. Additional Analyst Notes: - CISA ADP Vulnrichmen
sed to decrypt CSV input files used for authenticated network scanning. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/packetlabs/vulnerability-advisory/blob/main/Disclosures/PL-2025-11315/README.md
CVE ID: CVE-2025-4877 State: PUBLISHED Published: 2025-08-20T12:19:18.520Z Last Updated: 2025-11-20T21:09:40.650Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-787 Description: There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under alloca
function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it's possible that the program perform out of bounds write leading to a heap corruption. This issue affects only 32-bits builds of libssh. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-4877 - https://bugzilla.redhat.com/show_bug.cgi?id=2376193 - https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.11&id=6fd9cc8ce3958092a1aae11f1f2e911b2747732d - https://www.libssh.org/security/advisories/CVE-2025-4877.txt
CVE ID: CVE-2025-4878 State: PUBLISHED Published: 2025-07-22T14:17:03.122Z Last Updated: 2025-11-21T07:34:36.235Z Severity: LOW (CVSS 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-416 Description: A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap cor
n be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-4878 - https://bugzilla.redhat.com/show_bug.cgi?id=2376184 - https://git.libssh.org/projects/libssh.git/commit/?id=697650caa97eaf7623924c75f9fcfec6dd423cd1 - https://git.libssh.org/projects/libssh.git/commit/?id=b35ee876adc92a208d47194772e99f9c71e0bedb
CVE ID: CVE-2025-4879 State: PUBLISHED Published: 2025-06-17T13:02:59.807Z Last Updated: 2025-06-18T03:56:01.373Z Vendors: Citrix Products: Workspace App for Windows Problem Types: CWE-269 Description: Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694718
CVE ID: CVE-2025-4880 State: PUBLISHED Published: 2025-05-18T13:00:09.485Z Last Updated: 2025-05-19T14:16:31.605Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: News Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309433 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309433 - https://vuldb.com/?ctiid.309433 - https://vuldb.com/?submit.576264 - https://github.com/Schatten-42/MyCVE/issues/8 - https://phpgurukul.com/
CVE ID: CVE-2025-4881 State: PUBLISHED Published: 2025-05-18T13:31:04.466Z Last Updated: 2025-05-19T14:15:50.747Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Restaurant Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/user_save.php. The manipulation of the argument username/name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309434 - https://vuldb.com/?ctiid.309434 - https://vuldb.com/?submit.576284 - https://github.com/Cherish-Ink/CVE/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-4882 State: PUBLISHED Published: 2025-05-18T14:00:09.025Z Last Updated: 2025-05-19T14:15:13.103Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Restaurant Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/team_update.php. The manipulation of the argument team leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309435 - https://vuldb.com/?ctiid.309435 - https://vuldb.com/?submit.576285 - https://github.com/Cherish-Ink/CVE/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-4883 State: PUBLISHED Published: 2025-05-18T14:31:04.922Z Last Updated: 2025-05-19T14:10:30.464Z Severity: N/A (CVSS 8.3 AV:N/AC:L/Au:M/C:C/I:C/A:C) Vendors: D-Link Products: DI-8100 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been declared as critical. This vulnerability affects the function ctxz_asp of the file /ctxz.asp of the component Connection Limit Page. The manipulation of the argument def/defTcp/defUdp/defIcmp/defOther leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309436 - https://vuldb.com/?ctiid.309436 - https://vuldb.com/?submit.576392 - https://github.com/Yhuanhuan01/DI-8100_Vulnerability_Report/blob/main/DI-8100-Vulnerability_Report_ctxz.md - https://www.dlink.com/
CVE ID: CVE-2025-4884 State: PUBLISHED Published: 2025-05-18T15:00:06.379Z Last Updated: 2025-05-19T15:22:42.011Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Restaurant Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/assign_save.php. The manipulation of the argument team leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309437 - https://vuldb.com/?ctiid.309437 - https://vuldb.com/?submit.577363 - https://github.com/arpcyber555/CVE/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-4885 State: PUBLISHED Published: 2025-05-18T15:31:05.257Z Last Updated: 2025-05-19T15:22:35.379Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument serial leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichm
o the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309438 - https://vuldb.com/?ctiid.309438 - https://vuldb.com/?submit.577364 - https://github.com/arpcyber555/CVE/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-4886 State: PUBLISHED Published: 2025-05-18T16:00:06.496Z Last Updated: 2025-05-19T15:22:29.635Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/product_update.php. The manipulation of the argument serial leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CI
been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309439 - https://vuldb.com/?ctiid.309439 - https://vuldb.com/?submit.577365 - https://github.com/arpcyber555/CVE/issues/3 - https://itsourcecode.com/
CVE ID: CVE-2025-4887 State: PUBLISHED Published: 2025-05-18T16:31:04.349Z Last Updated: 2025-05-19T15:22:23.770Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SourceCodester Products: Online Student Clearance System Problem Types: CWE-352, CWE-862 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Online Student Clearance System 1.0. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309440
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309440 - https://vuldb.com/?ctiid.309440 - https://vuldb.com/?submit.577487 - https://github.com/ClausiusFan/CVE/blob/main/CVE_2.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-4888 State: PUBLISHED Published: 2025-05-18T17:00:08.256Z Last Updated: 2025-05-19T15:22:17.747Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Pharmacy Management System Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. This affects the function medicineType::take_order of the component Add Order Details. The manipulation leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309441 - https://vuldb.com/?ctiid.309441 - https://vuldb.com/?submit.577497 - https://github.com/zzzxc643/cve/blob/main/Pharmacy_Management_System.md - https://code-projects.org/
CVE ID: CVE-2025-4889 State: PUBLISHED Published: 2025-05-18T17:31:04.154Z Last Updated: 2025-05-19T15:22:12.092Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Tourism Management System Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of the component User Registration. The manipulation of the argument username/password leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CI
ed to approach this attack. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309442 - https://vuldb.com/?ctiid.309442 - https://vuldb.com/?submit.577498 - https://github.com/zzzxc643/cve/blob/main/Tourism-Management-System.md - https://code-projects.org/
CVE ID: CVE-2025-4890 State: PUBLISHED Published: 2025-05-18T18:00:05.886Z Last Updated: 2025-05-19T18:26:47.610Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Tourism Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in code-projects Tourism Management System 1.0 and classified as critical. This issue affects the function LoginUser of the component Login User. The manipulation of the argument username/password leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
rement. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309443 - https://vuldb.com/?ctiid.309443 - https://vuldb.com/?submit.577499 - https://github.com/zzzxc643/cve/blob/main/Tourism-Management-System2.md - https://code-projects.org/
CVE ID: CVE-2025-4891 State: PUBLISHED Published: 2025-05-18T18:31:04.569Z Last Updated: 2025-05-19T14:50:56.458Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Police Station Management System Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in code-projects Police Station Management System 1.0. It has been classified as critical. Affected is the function criminal::display of the file source.cpp of the component Display Record. The manipulation of the argument N leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Addition
possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309444 - https://vuldb.com/?ctiid.309444 - https://vuldb.com/?submit.577500 - https://github.com/zzzxc643/cve/blob/main/Police-StationManagementSystem.md - https://code-projects.org/
CVE ID: CVE-2025-4892 State: PUBLISHED Published: 2025-05-18T19:00:07.537Z Last Updated: 2025-05-19T15:22:06.552Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Police Station Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in code-projects Police Station Management System 1.0. It has been declared as critical. Affected by this vulnerability is the function criminal::remove of the file source.cpp of the component Delete Record. The manipulation of the argument No leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and ma
ck-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309445 - https://vuldb.com/?ctiid.309445 - https://vuldb.com/?submit.577501 - https://github.com/zzzxc643/cve/blob/main/Police-StationManagementSystem2.md - https://code-projects.org/
CVE ID: CVE-2025-4893 State: PUBLISHED Published: 2025-05-18T19:31:03.970Z Last Updated: 2025-05-19T14:09:52.146Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: jammy928 Products: CoinExchange_CryptoExchange_Java Problem Types: CWE-22 Description: A vulnerability classified as critical has been found in jammy928 CoinExchange_CryptoExchange_Java up to 8adf508b996020d3efbeeb2473d7235bd01436fa. This affects the function uploadLocalImage of the file /CoinExchange_CryptoExchange_Java-master/00_framework/core/src/main/java/com/bizzan/bitrade/util/UploadFileUtil.java of the component File Upload Endpoint. The manipulation of the argument filename leads to path traversal. It is possibl
of the component File Upload Endpoint. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309447 - https://vuldb.com/?ctiid.309447 - https://vuldb.com/?submit.577907 - https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250515-01.md
CVE ID: CVE-2025-4894 State: PUBLISHED Published: 2025-05-18T20:00:09.114Z Last Updated: 2025-05-19T14:09:15.093Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: calmkart Products: Django-sso-server Problem Types: CWE-326, CWE-310 Description: A vulnerability classified as problematic was found in calmkart Django-sso-server up to 057247929a94ffc358788a37ab99e391379a4d15. This vulnerability affects the function gen_rsa_keys of the file common/crypto.py. The manipulation leads to inadequate encryption strength. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. This product is using a rollin
ly. The complexity of an attack is rather high. The exploitation appears to be difficult. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309448 - https://vuldb.com/?ctiid.309448 - https://vuldb.com/?submit.578019
CVE ID: CVE-2025-4895 State: PUBLISHED Published: 2025-05-18T20:31:05.404Z Last Updated: 2025-05-19T14:07:22.560Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Doctors Appointment System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/delete-session.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309449 - https://vuldb.com/?ctiid.309449 - https://vuldb.com/?submit.578022 - https://github.com/Xiaoyi-ing/CVE/issues/11 - https://www.sourcecodester.com/
CVE ID: CVE-2025-4896 State: PUBLISHED Published: 2025-05-18T21:00:08.557Z Last Updated: 2025-05-19T14:06:51.238Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC10 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/UserCongratulationsExec. The manipulation of the argument getuid leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309452 - https://vuldb.com/?cti