Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-4723 State: PUBLISHED Published: 2025-05-15T21:31:08.352Z Last Updated: 2025-05-16T13:18:23.119Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Placement Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /all_student.php. The manipulation of the argument delete leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309025 - https://vuldb.com/?ctiid.309025 - https://vuldb.com/?submit.569965 - https://github.com/byxs0x0/cve/issues/5 - https://itsourcecode.com/
CVE ID: CVE-2025-4724 State: PUBLISHED Published: 2025-05-15T22:00:07.485Z Last Updated: 2025-05-16T13:17:53.214Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Placement Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in itsourcecode Placement Management System 1.0. Affected by this issue is some unknown functionality of the file /student_profile.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309026 - https://vuldb.com/?ctiid.309026 - https://vuldb.com/?submit.569974 - https://github.com/Lena-lyy/SQL/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-4725 State: PUBLISHED Published: 2025-05-15T22:00:10.297Z Last Updated: 2025-05-16T13:17:23.468Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Placement Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. This affects an unknown part of the file /view_drive.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309027
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309027 - https://vuldb.com/?ctiid.309027 - https://vuldb.com/?submit.569977 - https://github.com/Lena-lyy/SQL/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-4726 State: PUBLISHED Published: 2025-05-15T22:31:05.642Z Last Updated: 2025-05-16T13:16:40.741Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Placement Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /view_student.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309028
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309028 - https://vuldb.com/?ctiid.309028 - https://vuldb.com/?submit.570010 - https://github.com/Lena-lyy/SQL/issues/3 - https://itsourcecode.com/
CVE ID: CVE-2025-4727 State: PUBLISHED Published: 2025-05-15T23:00:08.288Z Last Updated: 2025-05-16T13:21:17.233Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Meteor Problem Types: CWE-1333, CWE-400 Description: A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedata_server.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the pu
plexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.2 is able to address this issue. The identifier of the patch is f7ea6817b90952baaea9baace2a3b4366fee6a63. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309029 - https://vuldb.com/?ctiid.309029 - https://vuldb.com/?submit.570441 - https://github.com/meteor/meteor/issues/13713 - https://github.com/meteor/meteor/pull/13721 - https://github.com/meteor/meteor/commit/f7ea6817b90952baaea9baace2a3b4366fee6a63 - https://github.com/meteor/meteor
21 - https://github.com/meteor/meteor/commit/f7ea6817b90952baaea9baace2a3b4366fee6a63 - https://github.com/meteor/meteor/releases/tag/release/METEOR%403.2.2
CVE ID: CVE-2025-4728 State: PUBLISHED Published: 2025-05-15T23:00:11.133Z Last Updated: 2025-05-16T13:20:20.902Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Best Online News Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Best Online News Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /search.php. The manipulation of the argument searchtitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309030 - https://vuldb.com/?ctiid.309030 - https://vuldb.com/?submit.570677 - https://github.com/Lena-lyy/SQL/issues/4 - https://www.sourcecodester.com/
CVE ID: CVE-2025-4729 State: PUBLISHED Published: 2025-05-15T23:31:06.917Z Last Updated: 2025-05-16T13:18:50.742Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: TOTOLINK Products: A3002R, A3002RU Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMapDelDevice of the component HTTP POST Request Handler. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: -
tack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309031 - https://vuldb.com/?ctiid.309031 - https://vuldb.com/?submit.570686 - https://github.com/CH13hh/tmp_store_cc/blob/main/tt/ta/2.md - https://www.totolink.net/
CVE ID: CVE-2025-4730 State: PUBLISHED Published: 2025-05-16T00:00:07.685Z Last Updated: 2025-05-16T13:35:00.815Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: A3002R, A3002RU Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipulation of the argument devicemac1 leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vul
aunched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309032 - https://vuldb.com/?ctiid.309032 - https://vuldb.com/?submit.570687 - https://github.com/CH13hh/tmp_store_cc/blob/main/tt/ta/3.md - https://www.totolink.net/
CVE ID: CVE-2025-4731 State: PUBLISHED Published: 2025-05-16T00:00:10.124Z Last Updated: 2025-05-16T15:11:13.182Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: A3002R, A3002RU Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type/ip_subnet leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnric
ack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309033 - https://vuldb.com/?ctiid.309033 - https://vuldb.com/?submit.570688 - https://github.com/CH13hh/tmp_store_cc/blob/main/tt/ta/4.md - https://www.totolink.net/
CVE ID: CVE-2025-4732 State: PUBLISHED Published: 2025-05-16T00:31:06.843Z Last Updated: 2025-05-16T13:16:10.593Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: A3002R, A3002RU Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309034 - https://vuldb.com/?ctiid.309034 - https://vuldb.com/?submit.570690 - https://github.com/CH13hh/tmp_store_cc/blob/main/tt/ta/6.md - https://www.totolink.net/
CVE ID: CVE-2025-4733 State: PUBLISHED Published: 2025-05-16T00:31:09.060Z Last Updated: 2025-05-16T13:15:45.521Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: A3002R, A3002RU Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This issue affects some unknown processing of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309035 - https://vuldb.com/?ctiid.309035 - https://vuldb.com/?submit.570703 - https://github.com/CH13hh/tmp_store_cc/blob/main/tt/ta/7.md - https://www.totolink.net/
CVE ID: CVE-2025-4734 State: PUBLISHED Published: 2025-05-16T01:00:08.560Z Last Updated: 2025-06-21T14:32:40.792Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/ci_update.php. The manipulation of the argument id/name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309036 - https://vuldb.com/?ctiid.309036 - https://vuldb.com/?submit.570714 - https://github.com/2319797429/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-4735 State: PUBLISHED Published: 2025-05-16T01:31:04.840Z Last Updated: 2025-05-16T15:48:20.017Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-434, CWE-284 Description: A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/product.php. The manipulation of the argument Picture leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309037 - https://vuldb.com/?ctiid.309037 - https://vuldb.com/?submit.570715 - https://github.com/2319797429/CVE/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-4736 State: PUBLISHED Published: 2025-05-16T01:31:07.731Z Last Updated: 2025-05-16T15:47:29.378Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Daily Expense Tracker Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Daily Expense Tracker 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309038 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309038 - https://vuldb.com/?ctiid.309038 - https://vuldb.com/?submit.570814 - https://github.com/bleakTS/myCVE/issues/4 - https://phpgurukul.com/
CVE ID: CVE-2025-4737 State: PUBLISHED Published: 2025-05-15T07:58:15.251Z Last Updated: 2025-05-15T16:04:57.086Z Vendors: TECNO Products: com.transsion.aivoiceassistant Problem Types: CWE-312 Description: Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive information leakage. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.tecno.com/SRC/blogdetail/422?lang=en_US - https://security.tecno.com/SRC/securityUpdates
CVE ID: CVE-2025-4738 State: PUBLISHED Published: 2025-06-19T12:45:41.235Z Last Updated: 2025-06-20T13:11:17.057Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Yirmibes Software Products: MY ERP Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yirmibes Software MY ERP allows SQL Injection.This issue affects MY ERP: before 1.170. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0132
CVE ID: CVE-2025-4739 State: PUBLISHED Published: 2025-05-16T02:00:07.269Z Last Updated: 2025-05-16T15:45:32.177Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: projectworlds Products: Hospital Database Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in projectworlds Hospital Database Management System 1.0. It has been classified as critical. This affects an unknown part of the file /medicines_info.php. The manipulation of the argument Med_ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309039 - https://vuldb.com/?ctiid.309039 - https://vuldb.com/?submit.570855 - https://github.com/3169417664/cve/issues/1
CVE ID: CVE-2025-4740 State: PUBLISHED Published: 2025-05-16T02:31:04.559Z Last Updated: 2025-05-16T15:44:12.650Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: BeamCtrl Products: Airiana Problem Types: CWE-502, CWE-20 Description: A vulnerability was found in BeamCtrl Airiana up to 11.0. It has been declared as problematic. This vulnerability affects unknown code of the file coef. The manipulation leads to deserialization. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309040 - https://vuldb.com/?ctiid.309040 - ht
nalyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309040 - https://vuldb.com/?ctiid.309040 - https://vuldb.com/?submit.570888 - https://github.com/BeamCtrl/Airiana/issues/42 - https://github.com/BeamCtrl/Airiana/issues/42#issue-3037828880
CVE ID: CVE-2025-4741 State: PUBLISHED Published: 2025-05-16T03:00:07.068Z Last Updated: 2025-05-16T15:43:38.088Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/purchase_add.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309041
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309041 - https://vuldb.com/?ctiid.309041 - https://vuldb.com/?submit.570913 - https://github.com/snkercyber/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-4742 State: PUBLISHED Published: 2025-05-16T03:00:09.043Z Last Updated: 2025-05-16T15:43:04.443Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: XU-YIJIE Products: grpo-flat Problem Types: CWE-502, CWE-20 Description: A vulnerability classified as problematic has been found in XU-YIJIE grpo-flat up to 9024b43f091e2eb9bac65802b120c0b35f9ba856. Affected is the function main of the file grpo_vanilla.py. The manipulation leads to deserialization. Local access is required to approach this attack. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Additio
releases is used by this product. Therefore, no version details of affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309042 - https://vuldb.com/?ctiid.309042 - https://vuldb.com/?submit.570923 - https://github.com/XU-YIJIE/grpo-flat/issues/3
CVE ID: CVE-2025-4743 State: PUBLISHED Published: 2025-05-16T03:31:04.216Z Last Updated: 2025-05-16T16:03:49.105Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Employee Record System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Employee Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /dashboard/getData.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309043 - https://vuldb.com/?ctiid.309043 - https://vuldb.com/?submit.570963 - https://github.com/872323857/CVE/blob/main/employee-record-system.md - https://code-projects.org/
CVE ID: CVE-2025-4744 State: PUBLISHED Published: 2025-05-16T04:00:05.243Z Last Updated: 2025-05-16T16:01:57.705Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Employee Record System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in code-projects Employee Record System 1.0. Affected by this issue is some unknown functionality of the file dashboard\edit_employee.php. The manipulation of the argument employeed_id/first_name/middle_name/last_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst N
The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309044 - https://vuldb.com/?ctiid.309044 - https://vuldb.com/?submit.570965 - https://github.com/872323857/CVE/blob/main/employee-record-system-xss1.pdf - https://code-projects.org/
CVE ID: CVE-2025-4745 State: PUBLISHED Published: 2025-05-16T04:00:07.155Z Last Updated: 2025-05-16T16:01:20.697Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Employee Record System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in code-projects Employee Record System 1.0. This affects an unknown part of the file current_employees.php. The manipulation of the argument employeed_id/first_name/middle_name/last_name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnric
ack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309045 - https://vuldb.com/?ctiid.309045 - https://vuldb.com/?submit.570967 - https://github.com/872323857/CVE/blob/main/employee-record-system-xss2.pdf - https://code-projects.org/
CVE ID: CVE-2025-4746 State: PUBLISHED Published: 2025-05-16T04:31:04.556Z Last Updated: 2025-05-16T16:00:39.328Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/purchase_delete.php. The manipulation of the argument pr_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.30
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309046 - https://vuldb.com/?ctiid.309046 - https://vuldb.com/?submit.571020 - https://github.com/snkercyber/CVE/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-4747 State: PUBLISHED Published: 2025-05-16T05:00:06.984Z Last Updated: 2025-05-16T15:57:31.938Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Bohua Products: NetDragon Firewall Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in Bohua NetDragon Firewall 1.0 and classified as critical. This issue affects some unknown processing of the file /systemstatus/ip_status.php. The manipulation of the argument subnet leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309047 - https://vuldb