Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ing. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315121 - https://vuldb.com/?ctiid.315121 - https://vuldb.com/?submit.607104 - https://github.com/Catcheryp/CVE/issues/5 - https://itsourcecode.com/
CVE ID: CVE-2025-7183 State: PUBLISHED Published: 2025-07-08T15:02:05.917Z Last Updated: 2025-07-08T20:44:09.212Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/customer_account.php. The manipulation of the argument Customer leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
e exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315122 - https://vuldb.com/?ctiid.315122 - https://vuldb.com/?submit.607127 - https://github.com/To-LingJing/CVE-Issues/issues/3 - https://www.campcodes.com/
CVE ID: CVE-2025-7184 State: PUBLISHED Published: 2025-07-08T15:32:05.323Z Last Updated: 2025-07-08T15:57:20.467Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Library System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Library System 1.0. It has been classified as critical. This affects an unknown part of the file /user/teacher/books.php. The manipulation of the argument Search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id
ed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315123 - https://vuldb.com/?ctiid.315123 - https://vuldb.com/?submit.607185 - https://github.com/HeDunSec/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-7185 State: PUBLISHED Published: 2025-07-08T16:02:08.373Z Last Updated: 2025-07-08T20:38:13.630Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Library System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /approve.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315124 - https:
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315124 - https://vuldb.com/?ctiid.315124 - https://vuldb.com/?submit.607186 - https://github.com/HeDunSec/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-7186 State: PUBLISHED Published: 2025-07-08T16:32:05.934Z Last Updated: 2025-07-08T20:35:05.427Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Chat System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Chat System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /user/fetch_chat.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315125 - http
ic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315125 - https://vuldb.com/?ctiid.315125 - https://vuldb.com/?submit.607195 - https://github.com/LamentXU123/cve/blob/main/sql_fetch_chat.md - https://code-projects.org/
CVE ID: CVE-2025-7187 State: PUBLISHED Published: 2025-07-08T17:02:05.518Z Last Updated: 2025-07-09T13:36:47.381Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Chat System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /user/fetch_member.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315126 - https://
nd may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315126 - https://vuldb.com/?ctiid.315126 - https://vuldb.com/?submit.607196 - https://github.com/LamentXU123/cve/blob/main/sql_fetch_member.md - https://code-projects.org/
CVE ID: CVE-2025-7188 State: PUBLISHED Published: 2025-07-08T17:32:05.694Z Last Updated: 2025-07-08T17:43:01.837Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Chat System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/addmember.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315127
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315127 - https://vuldb.com/?ctiid.315127 - https://vuldb.com/?submit.607197 - https://github.com/LamentXU123/cve/blob/main/sql_addmember.md - https://code-projects.org/
CVE ID: CVE-2025-7189 State: PUBLISHED Published: 2025-07-08T18:02:06.045Z Last Updated: 2025-07-08T18:11:12.969Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Chat System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /user/send_message.php. The manipulation of the argument msg leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315128 - https://vuldb.com/?ctiid.315128 - https://vuldb.com/?submit.607198 - https://github.com/LamentXU123/cve/blob/main/sql_send_message.md - https://code-projects.org/
CVE ID: CVE-2025-7190 State: PUBLISHED Published: 2025-07-08T18:32:05.864Z Last Updated: 2025-07-09T13:35:37.684Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Library Management System Problem Types: CWE-434, CWE-284 Description: A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. This affects an unknown part of the file /admin/student_edit_photo.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: R
tely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315129 - https://vuldb.com/?ctiid.315129 - https://vuldb.com/?submit.607202 - https://github.com/y2xsec324/cve/issues/11 - https://code-projects.org/
CVE ID: CVE-2025-7191 State: PUBLISHED Published: 2025-07-08T19:02:06.091Z Last Updated: 2025-07-09T13:34:52.171Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Student Enrollment System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Student Enrollment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315130 - https://vuldb.com/?ctiid.315130 - https://vuldb.com/?submit.607216 - https://github.com/yihaofuweng/cve/issues/11 - https://code-projects.org/
CVE ID: CVE-2025-7192 State: PUBLISHED Published: 2025-07-08T19:32:06.193Z Last Updated: 2025-07-09T13:32:20.976Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-645 Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical. This issue affects the function ssdpcgi_main of the file /htdocs/cgibin of the component ssdpcgi. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst No
be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315131 - https://vuldb.com/?ctiid.315131 - https://vuldb.com/?submit.607261 - https://github.com/Thir0th/Thir0th-CVE/blob/main/D-Link%20DIR%E2%80%91645%20A1%20has%20a%20remote%20arbitrary%20command%20execution%20vulnerability%20in%20ssdpcgi.md - https://www.dlink.com/
CVE ID: CVE-2025-7193 State: PUBLISHED Published: 2025-07-08T20:02:06.086Z Last Updated: 2025-07-09T13:30:23.701Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Agri-Trading Online Shopping System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Agri-Trading Online Shopping System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/suppliercontroller.php. The manipulation of the argument supplier leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CIS
aunch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315132 - https://vuldb.com/?ctiid.315132 - https://vuldb.com/?submit.607303 - https://github.com/Sp1d3rL1/CVE/issues/7 - https://itsourcecode.com/
CVE ID: CVE-2025-7194 State: PUBLISHED Published: 2025-07-08T20:32:06.360Z Last Updated: 2025-07-08T20:49:58.352Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DI-500WF Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in D-Link DI-500WF 17.04.10A1T. It has been declared as critical. Affected by this vulnerability is the function sprintf of the file ip_position.asp of the component jhttpd. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
loit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315133 - https://vuldb.com/?ctiid.315133 - https://vuldb.com/?submit.607311 - https://github.com/BigMancer/CVE/issues/1 - https://www.dlink.com/
CVE ID: CVE-2025-7195 State: PUBLISHED Published: 2025-08-07T19:05:08.756Z Last Updated: 2025-11-25T12:14:45.488Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L) Vendors: Red Hat Products: Compliance Operator 1, multicluster engine for Kubernetes 2.7, multicluster engine for Kubernetes 2.9, Red Hat Advanced Cluster Management for Kubernetes 2.12, Red Hat Advanced Cluster Management for Kubernetes 2.14, Red Hat Openshift Data Foundation 4.18, File Integrity Operator, Multicluster Engine for Kubernetes, Multicluster Global Hub, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Advanced Cluster Security 4, Red Hat build of Apicurio Registry 3, Red Hat Fuse 7
r Management for Kubernetes 2, Red Hat Advanced Cluster Security 4, Red Hat build of Apicurio Registry 3, Red Hat Fuse 7, Red Hat OpenShift Container Platform 4, Red Hat OpenShift Dev Workspaces Operator, Red Hat OpenShift Virtualization 4, Red Hat Web Terminal Problem Types: CWE-276 Description: Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used Operator-SDK before 0.15.2 to scaffold their operator may still be impacted by this if the insecure user_set
rs who used Operator-SDK before 0.15.2 to scaffold their operator may still be impacted by this if the insecure user_setup script is still being used to build new container images. In affected images, the /etc/passwd file is created during build time with group-writable permissions and a group ownership of root (gid=0). An attacker who can execute commands within an affected container, even as a non-root user, may be able to leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container. Additional Analyst Notes: - CISA ADP Vulnrichment: R
luding UID 0, leading to full root privileges within the container. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:19332 - https://access.redhat.com/errata/RHSA-2025:19335 - https://access.redhat.com/errata/RHSA-2025:19958 - https://access.redhat.com/errata/RHSA-2025:19961 - https://access.redhat.com/errata/RHSA-2025:21368 - https://access.redhat.com/errata/RHSA-2025:21885 - https://access.redhat.com/security/cve/CVE-2025-7195 - https://bugzilla.redhat.com/show_bug.cgi?id=2376300
CVE ID: CVE-2025-7196 State: PUBLISHED Published: 2025-07-08T21:02:06.224Z Last Updated: 2025-07-09T16:04:15.442Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Jonnys Liquor Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Jonnys Liquor 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /browse.php. The manipulation of the argument Search leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.31513
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315134 - https://vuldb.com/?ctiid.315134 - https://vuldb.com/?submit.607468 - https://github.com/Gemileo/CVE/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-7197 State: PUBLISHED Published: 2025-07-08T21:32:05.419Z Last Updated: 2025-07-09T13:17:48.270Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Jonnys Liquor Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Jonnys Liquor 1.0. This affects an unknown part of the file /admin/delete-row.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315135 - https:
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315135 - https://vuldb.com/?ctiid.315135 - https://vuldb.com/?submit.607819 - https://github.com/18889016001/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-7198 State: PUBLISHED Published: 2025-07-08T22:02:06.638Z Last Updated: 2025-07-09T13:26:59.331Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Jonnys Liquor Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Jonnys Liquor 1.0. This vulnerability affects unknown code of the file /admin/admin-area.php. The manipulation of the argument drink leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315136 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315136 - https://vuldb.com/?ctiid.315136 - https://vuldb.com/?submit.607820 - https://github.com/18889016001/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-7199 State: PUBLISHED Published: 2025-07-08T22:32:05.849Z Last Updated: 2025-07-09T18:53:55.684Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Library System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Library System 1.0. This issue affects some unknown processing of the file /notapprove.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315137 - https://vuldb.com/?ctiid.315137 - https://vuldb.com/?submit.607470 - https://github.com/Gemileo/CVE/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-7200 State: PUBLISHED Published: 2025-07-08T23:02:05.678Z Last Updated: 2025-07-09T13:16:06.375Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: krishna9772 Products: Pharmacy Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in krishna9772 Pharmacy Management System up to a2efc8442931ec9308f3b4cf4778e5701153f4e5. Affected is an unknown function of the file quantity_upd.php. The manipulation of the argument med_name/med_cat/ex_date leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious d
It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315138 - https://vuldb.com/?ctiid.315138 - https://vuldb.com/?submit.607526 - https://github.com/horytick/CVE/blob/main/SQL%20Injection%20Vulnerability%20in%20Pharmacy%20Management%20System.md
CVE ID: CVE-2025-7202 State: PUBLISHED Published: 2025-08-06T08:28:23.397Z Last Updated: 2025-08-06T20:23:30.776Z Vendors: Elgato Products: Key Light, Key Light Air, Key Light Mini, Key Light Neo, Ring Light, Light Strip, Light Strip Pro Problem Types: CWE-352 Description: A Cross-Site Request Forgery (CSRF) in Elgato's Key Lights and related light products allows an attacker to host a malicious webpage that remotely controlles the victim's lights. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.toreon.com/flashing-your-lights-cve-2025-7202/
CVE ID: CVE-2025-7204 State: PUBLISHED Published: 2025-07-09T14:50:36.477Z Last Updated: 2025-07-10T11:35:40.506Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: ConnectWise Products: PSA Problem Types: CWE-201 Description: In ConnectWise PSA versions older than 2025.9, a vulnerability exists where authenticated users could gain access to sensitive user information. Specific API requests were found to return an overly verbose user object, which included encrypted password hashes for other users. Authenticated users could then retrieve these hashes. An attacker or privileged user could then use these exposed hashes to conduct offline brute-force or dictionary
hashes. An attacker or privileged user could then use these exposed hashes to conduct offline brute-force or dictionary attacks. Such attacks could lead to credential compromise, allowing unauthorized access to accounts, and potentially privilege escalation within the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.connectwise.com/company/trust/security-bulletins/connectwise-psa-2025.9-security-fix - https://www.themissinglink.com.au/security-advisories/cve-2025-7204
CVE ID: CVE-2025-7205 State: PUBLISHED Published: 2025-07-31T07:25:00.594Z Last Updated: 2025-07-31T14:34:47.892Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: givewp Products: GiveWP – Donation Plugin and Fundraising Platform Problem Types: CWE-79 Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the donor notes parameter in all versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with GiveWP worker-level access and above, to inject arbitrary web scripts in pages that will ex
uthenticated attackers, with GiveWP worker-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additionally, they need to trick an administrator into visiting the legacy version of the site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/39e501d8-88a0-4625-aeb0-aa33fc89a8d4?source=cve - https://plugins.trac.wordpress.org/browser/give/trunk/src/API/REST/V3/Routes/Donors/DonorNotesController.php#51 - https://plugins.trac.wordpress.org/changeset/3333090/give
CVE ID: CVE-2025-7206 State: PUBLISHED Published: 2025-07-08T23:32:06.224Z Last Updated: 2025-07-09T13:14:14.731Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-825 Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, has been found in D-Link DIR-825 2.10. This issue affects the function sub_410DDC of the file switch_language.cgi of the component httpd. The manipulation of the argument Language leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported
has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315155 - https://vuldb.com/?ctiid.315155 - https://vuldb.com/?submit.607661 - https://github.com/i-Corner/cve/issues/2 - https://www.dlink.com/