Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-34038 State: PUBLISHED Published: 2025-06-24T01:06:35.820Z Last Updated: 2025-11-20T21:12:10.868Z Vendors: Shanghai Fanwei Network Technology Products: e-cology Problem Types: CWE-89 Description: A SQL injection vulnerability exists in Fanwei e-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes. Exploitation evidence was observed
L queries, potentially exposing sensitive data such as administrator password hashes. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cnblogs.com/0day-li/p/14637680.html - https://www.cnvd.org.cn/flaw/show/CNVD-2021-33202 - https://www.weaver.com.cn/ - https://vulncheck.com/advisories/fanwei-ecology-sql-injection
CVE ID: CVE-2025-34039 State: PUBLISHED Published: 2025-06-24T01:07:05.619Z Last Updated: 2025-11-20T21:11:16.554Z Vendors: Yonyou Co., Ltd. Products: UFIDA NC Problem Types: CWE-306 Description: A code injection vulnerability exists in Yonyou UFIDA NC v6.5 and prior due to the exposure of the BeanShell testing servlet (bsh.servlet.BshServlet) without proper access controls. The servlet allows unauthenticated remote attackers to execute arbitrary Java code via the bsh.script parameter. This can be exploited to run system commands and ultimately gain full control over the target server. The issue is rooted in a third-party JAR component bundled with the application, and the servlet is accessi
rget server. The issue is rooted in a third-party JAR component bundled with the application, and the servlet is accessible without authentication on vulnerable installations. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cnblogs.com/pursue-security/p/17685141.html - https://www.cnvd.org.cn/flaw/show/CNVD-2021-30167 - https://vulncheck.com/advisories/yonyou-ufida-nc-beanshell-code-injection
CVE ID: CVE-2025-34040 State: PUBLISHED Published: 2025-06-24T01:12:22.769Z Last Updated: 2025-11-20T21:03:00.992Z Vendors: Seeyon (Beijing Zhiyuan Internet Software Co., Ltd.) Products: Zhiyuan OA Web Application System Problem Types: CWE-434, CWE-22 Description: An arbitrary file upload vulnerability exists in the Zhiyuan OA platform via the wpsAssistServlet interface. The realFileType and fileId parameters are improperly validated during multipart file uploads, allowing unauthenticated attackers to upload crafted JSP files outside of intended directories using path traversal. Successful exploitation enables remote code execution as the uploaded file can be accessed and executed through th
rsal. Successful exploitation enables remote code execution as the uploaded file can be accessed and executed through the web server. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-01 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://service.seeyon.com/patchtools/tp.html#/patchList?type=%E5%AE%89%E5%85%A8%E8%A1%A5%E4%B8%81&id=1 - https://www.cnblogs.com/pursue-security/p/17677130.html - https://www.cnvd.org.cn/flaw/show/CNVD-2021-01627 - https://vulncheck.com/advisories/zhiyuan-oa-system-path-traversal-file-upload
CVE ID: CVE-2025-34041 State: PUBLISHED Published: 2025-06-24T01:39:59.289Z Last Updated: 2025-11-20T21:01:54.758Z Vendors: Sangfor Technologies Co., Ltd. Products: Endpoint Detection and Response Platform Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) management platform versions 3.2.16, 3.2.17, and 3.2.19. The vulnerability allows unauthenticated attackers to construct and send malicious HTTP requests to the EDR Manager interface, leading to arbitrary command execution with elevated privileges. This flaw only affects the Chinese-language EDR builds. Exploitation evidence was observed b
n with elevated privileges. This flaw only affects the Chinese-language EDR builds. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sangfor.com/blog/cybersecurity/sangfor-endpoint-secure-remote-command-execution-vulnerability - https://www.cnvd.org.cn/flaw/show/CNVD-2020-46552 - https://vulncheck.com/advisories/sangfor-edr-command-injection
CVE ID: CVE-2025-34042 State: PUBLISHED Published: 2025-06-26T15:51:13.423Z Last Updated: 2025-11-20T21:00:51.375Z Vendors: Beward Products: N100 IP Camera Problem Types: CWE-78 Description: An authenticated command injection vulnerability exists in the Beward N100 IP Camera firmware version M2.1.6.04C014 via the ServerName and TimeZone parameters in the servetest CGI page. An attacker with access to the web interface can inject arbitrary system commands into these parameters, which are unsafely embedded into backend system calls without proper input sanitization. Successful exploitation results in remote code execution with root privileges. Exploitation evidence was observed by the Shadowse
l exploitation results in remote code execution with root privileges. Exploitation evidence was observed by the Shadowserver Foundation on 2024-12-02 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.beward.net - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5512.php - https://www.fortiguard.com/encyclopedia/ips/48618 - https://s4e.io/tools/beward-n100-h264-vga-ip-camera-arbitrary-file-disclosure - https://packetstorm.news/files/id/151531 - https://cxsecurity.com/issue/WLB-2019020042 - https://vulncheck.com/advisories/beward-n100-remote-command-execution
CVE ID: CVE-2025-34043 State: PUBLISHED Published: 2025-06-26T15:51:22.357Z Last Updated: 2025-11-20T20:59:46.626Z Vendors: Vacron Products: Network Video Recorder (NVR) Problem Types: CWE-78, CWE-20 Description: A remote command injection vulnerability exists in Vacron Network Video Recorder (NVR) devices v1.4 due to improper input sanitization in the board.cgi script. The vulnerability allows unauthenticated attackers to pass arbitrary commands to the underlying operating system via crafted HTTP requests. These commands are executed with the privileges of the web server process, enabling remote code execution and potential full device compromise. Exploitation evidence was observed by the S
rocess, enabling remote code execution and potential full device compromise. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tenable.com/plugins/nessus/104124 - https://www.sonicwall.com/blog/vacron-network-video-recorder-remote-command-execution - https://ssd-disclosure.com/ssd-advisory-vacron-nvr-remote-command-execution/ - https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=30386 - https://vulncheck.com/advisories/vacron-nvr-remote-command-execution - https://www.vacron.com/
CVE ID: CVE-2025-34044 State: PUBLISHED Published: 2025-06-26T15:51:30.957Z Last Updated: 2025-11-17T21:15:30.068Z Vendors: Shenzhen Lingkong Technology Products: WIFISKY 7-layer flow control router Problem Types: CWE-78 Description: A remote command injection vulnerability exists in the confirm.php interface of the WIFISKY 7-layer Flow Control Router via a specially-crafted HTTP GET request to the t parameter. Insufficient input validation allows unauthenticated attackers to execute arbitrary OS commands. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-25 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://www.szwifisky.com/ - https://ww
2025-01-25 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://www.szwifisky.com/ - https://www.cnvd.org.cn/flaw/show/CNVD-2021-45363 - https://s4e.io/tools/wifisky-7-layer-flow-control-router-remote-code-execution - https://www.variotdbs.pl/vuln/VAR-202107-1715/ - https://vulncheck.com/advisories/wifisky-flow-control-router-rce - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/wifisky7-rce.yaml
CVE ID: CVE-2025-34045 State: PUBLISHED Published: 2025-06-26T15:51:37.884Z Last Updated: 2025-11-20T20:58:35.120Z Vendors: Shenzhen Yuanmengyun Technology Co., Ltd. Products: WeiPHP Problem Types: CWE-22 Description: A path traversal vulnerability exists in WeiPHP 5.0, an open source WeChat public account platform development framework by Shenzhen Yuanmengyun Technology Co., Ltd. The flaw occurs in the picUrl parameter of the /public/index.php/material/Material/_download_imgage endpoint, where insufficient input validation allows unauthenticated remote attackers to perform directory traversal via crafted POST requests. This enables arbitrary file read on the server, potentially exposing sen
directory traversal via crafted POST requests. This enables arbitrary file read on the server, potentially exposing sensitive information such as configuration files and source code. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cnvd.org.cn/flaw/show/CNVD-2020-68596 - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cnvd/2020/CNVD-2020-68596.yaml - https://vulncheck.com/advisories/weiphp-path-traversal-file-read
CVE ID: CVE-2025-34046 State: PUBLISHED Published: 2025-06-26T15:51:45.664Z Last Updated: 2025-11-20T20:57:30.975Z Vendors: Shanghai Fanwei Network Technology Products: E-Office Problem Types: CWE-434 Description: An unauthenticated file upload vulnerability exists in the Fanwei E-Office <= v9.4 web management interface. The vulnerability affects the /general/index/UploadFile.php endpoint, which improperly validates uploaded files when invoked with certain parameters (uploadType=eoffice_logo or uploadType=theme). An attacker can exploit this flaw by sending a crafted HTTP POST request to upload arbitrary files without requiring authentication. Successful exploitation could enable remote code
OST request to upload arbitrary files without requiring authentication. Successful exploitation could enable remote code execution on the affected server, leading to complete compromise of the web application and potentially the underlying system. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cnvd.org.cn/flaw/show/CNVD-2021-49104 - https://github.com/M0ge/CNVD-2021-49104-Fanwei-Eoffice-fileupload/blob/main/eoffice_fileupload.py - https://vulncheck.com/advisories/fanwei-eoffice-file-upload - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cnvd/2021/CNVD-2021-
es/fanwei-eoffice-file-upload - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cnvd/2021/CNVD-2021-49104.yaml
CVE ID: CVE-2025-34047 State: PUBLISHED Published: 2025-06-26T16:10:37.548Z Last Updated: 2025-11-20T20:54:01.500Z Vendors: Beijing NetGuard Nebula Information Technology Co., Ltd. Products: Leadsec SSL VPN Problem Types: CWE-22, CWE-20 Description: A path traversal vulnerability exists in the Leadsec SSL VPN (formerly Lenovo NetGuard), allowing unauthenticated attackers to read arbitrary files on the underlying system via the ostype parameter in the /vpn/user/download/client endpoint. This flaw arises from insufficient input sanitation, enabling traversal sequences to escape the intended directory and access sensitive files. Exploitation evidence was observed by the Shadowserver Foundation
pe the intended directory and access sensitive files. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cnvd.org.cn/flaw/show/CNVD-2021-64035 - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cnvd/2021/CNVD-2021-64035.yaml - https://www.leadsec.com.cn/ - https://vulncheck.com/advisories/leadsec-vpn-path-traversal-file-read
CVE ID: CVE-2025-34048 State: PUBLISHED Published: 2025-06-26T15:52:04.200Z Last Updated: 2025-11-21T19:36:40.882Z Vendors: D-Link Products: DSL-2730U, DSL-2750U, DSL-2750E Problem Types: CWE-22 Description: A path traversal vulnerability exists in the web management interface of D-Link DSL-2730U, DSL-2750U, and DSL-2750E ADSL routers with firmware versions IN_1.02, SEA_1.04, and SEA_1.07. The vulnerability is due to insufficient input validation on the getpage parameter within the /cgi-bin/webproc CGI script. This flaw allows an unauthenticated remote attacker to perform path traversal attacks by supplying crafted requests, enabling arbitrary file read on the affected device. Exploitation e
ath traversal attacks by supplying crafted requests, enabling arbitrary file read on the affected device. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/40735 - https://github.com/threat9/routersploit/blob/master/routersploit/modules/exploits/routers/dlink/dsl_2730_2750_path_traversal.py - https://www.dlink.com - https://vulncheck.com/advisories/dlink-dsl-routers-path-traversal-file-read
CVE ID: CVE-2025-34049 State: PUBLISHED Published: 2025-06-26T15:52:12.197Z Last Updated: 2025-11-20T20:52:40.621Z Vendors: OptiLink Products: ONT1GEW GPON Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the OptiLink ONT1GEW GPON router firmware version V2.1.11_X101 Build 1127.190306 and earlier. The router’s web management interface fails to properly sanitize user input in the target_addr parameter of the formTracert and formPing administrative endpoints. An authenticated attacker can inject arbitrary operating system commands, which are executed with root privileges, leading to remote code execution. Successful exploitation enables full compromise of the
executed with root privileges, leading to remote code execution. Successful exploitation enables full compromise of the device. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/49955 - https://optilinknetwork.com/ - https://vulncheck.com/advisories/optilink-ont1gew-router-rce
CVE ID: CVE-2025-34050 State: PUBLISHED Published: 2025-07-01T14:42:57.143Z Last Updated: 2025-07-01T18:45:06.703Z Vendors: AVTECH Products: IP cameras, DVR devices, NVR devices Problem Types: CWE-352 Description: A cross-site request forgery (CSRF) vulnerability exists in the web interface of AVTECH IP camera, DVR, and NVR devices. An attacker can craft malicious requests that, when executed in the context of an authenticated user’s browser session, allow unauthorized changes to the device configuration without user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/40500 - https://avtech.com/ - https://web.archive.org/web/20240
hment: References: - https://www.exploit-db.com/exploits/40500 - https://avtech.com/ - https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities - https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH - https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns
CVE ID: CVE-2025-34051 State: PUBLISHED Published: 2025-07-01T14:44:22.913Z Last Updated: 2025-07-01T14:59:04.311Z Vendors: AVTECH Products: DVR devices Problem Types: CWE-918, CWE-200 Description: A server-side request forgery vulnerability exists in multiple firmware versions of AVTECH DVR devices that exposes the /cgi-bin/nobody/Search.cgi?action=cgi_query endpoint without authentication. An attacker can manipulate the ip, port, and queryb64str parameters to make arbitrary HTTP requests from the DVR to internal or external systems, potentially exposing sensitive data or interacting with internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit
interacting with internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/40500 - https://avtech.com/ - https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities - https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH - https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns
CVE ID: CVE-2025-34052 State: REJECTED Published: 2025-07-01T14:44:40.785Z Last Updated: 2025-10-09T15:06:37.810Z Description: No description available.
CVE ID: CVE-2025-34053 State: PUBLISHED Published: 2025-07-01T14:45:02.858Z Last Updated: 2025-07-01T18:46:09.474Z Vendors: AVTECH Products: IP camera, DVR, and NVR devices Problem Types: CWE-290 Description: An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function is used to identify ".cab" requests, allowing any URL containing ".cab" to bypass authentication and access protected endpoints. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/40500 - https://avtech.com/ - https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-m
tps://avtech.com/ - https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities - https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH - https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns
CVE ID: CVE-2025-34054 State: PUBLISHED Published: 2025-07-01T14:46:00.832Z Last Updated: 2025-11-20T20:51:31.936Z Vendors: AVTECH Products: IP camera, DVR, and NVR Devices Problem Types: CWE-78 Description: An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgi_query. The use of wget without input sanitization allows attackers to inject shell commands through the username or queryb64str parameters, executing commands as root. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-04 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/40500 - https://avtech.com/ - ht
alyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/40500 - https://avtech.com/ - https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities - https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH - https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns
CVE ID: CVE-2025-34055 State: PUBLISHED Published: 2025-07-01T14:46:38.848Z Last Updated: 2025-07-01T18:33:20.804Z Vendors: AVTECH Products: IP camera, DVR, and NVR Devices Problem Types: CWE-78, CWE-20 Description: An OS command injection vulnerability exists in AVTECH DVR, NVR, and IP camera devices within the adcommand.cgi endpoint, which interfaces with the ActionD daemon. Authenticated users can invoke the DoShellCmd operation, passing arbitrary input via the strCmd parameter. This input is executed directly by the system shell without sanitation allowing attackers to execute commands as the root user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-
execute commands as the root user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/40500 - https://avtech.com/ - https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities - https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH - https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns
CVE ID: CVE-2025-34056 State: PUBLISHED Published: 2025-07-01T14:46:52.800Z Last Updated: 2025-07-01T18:34:41.482Z Vendors: AVTECH Products: IP camera, DVR, and NVR Devices Problem Types: CWE-78, CWE-20 Description: An OS command injection vulnerability exists in AVTECH IP camera, DVR, and NVR devices via the PwdGrp.cgi endpoint, which handles user and group management operations. Authenticated users can supply input through the pwd or grp parameters, which are directly embedded into system commands without proper sanitation. This allows for the execution of arbitrary shell commands with root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.
commands with root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/40500 - https://avtech.com/ - https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities - https://web.archive.org/web/20161029201749/https://github.com/ebux/AVTECH - https://vulncheck.com/advisories/avtech-ipcamera-nvr-dvr-mulitple-vulns
CVE ID: CVE-2025-34057 State: PUBLISHED Published: 2025-07-02T13:43:52.935Z Last Updated: 2025-11-13T19:08:30.586Z Vendors: Ruijie Products: NBR Router Problem Types: CWE-306 Description: An information disclosure vulnerability exists in Ruijie NBR series routers (known to affect NBR2000G, NBR1300G, and NBR1000 models) via the /WEB_VMS/LEVEL15/ endpoint. By crafting a specific POST request with modified Cookie headers and specially formatted parameters, an unauthenticated attacker can retrieve administrative account credentials in plaintext. This flaw allows direct disclosure of sensitive user data due to improper authentication checks and insecure backend logic. Exploitation evidence was ob
re of sensitive user data due to improper authentication checks and insecure backend logic. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.seebug.org/vuldb/ssvid-89107 - https://vulners.com/seebug/SSV:89107 - https://vulncheck.com/advisories/ruijie-nbr-router-administrative-credential-disclosure
CVE ID: CVE-2025-34058 State: PUBLISHED Published: 2025-07-01T14:48:40.033Z Last Updated: 2025-07-01T18:38:53.665Z Vendors: Hangzhou Hikvision System Technology Products: Streaming Media Management Server Problem Types: CWE-521, CWE-22 Description: Hikvision Streaming Media Management Server v2.3.5 uses default credentials that allow remote attackers to authenticate and access restricted functionality. After authenticating with these credentials, an attacker can exploit an arbitrary file read vulnerability in the /systemLog/downFile.php endpoint via directory traversal in the fileName parameter. This exploit chain can enable unauthorized access to sensitive system files. Additional Analyst N
he fileName parameter. This exploit chain can enable unauthorized access to sensitive system files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cnvd.org.cn/flaw/show/CNVD-2021-14544 - https://blog.csdn.net/qq_40684306/article/details/115278837 - https://www.hikvision.com/en/support/cybersecurity/security-advisory/ - https://vulncheck.com/advisories/hikvision-streaming-server-default-creds-file-read