Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sions up to, and including, 2.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/34adbae5-d615-4f8d-a845-6741d897f06c?source=cve - https://wordpress.org/plugins/ultimate-member/#developers - https://plugins.trac.wordpress.org/browser/ultimate-member/trunk/includes/core/class-member-directory.php#L1775 - https://plu
://plugins.trac.wordpress.org/browser/ultimate-member/trunk/includes/core/class-member-directory.php#L1775 - https://plugins.trac.wordpress.org/browser/ultimate-member/trunk/includes/core/class-member-directory.php#L1863 - https://github.com/ultimatemember/ultimatemember/pull/1654/commits/74647d42cc8d63f5d4f687efcd0792c246c23039 - https://plugins.trac.wordpress.org/changeset/3249862/
CVE ID: CVE-2025-1703 State: PUBLISHED Published: 2025-03-26T09:21:48.784Z Last Updated: 2025-04-03T13:04:38.248Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: ultimateblocks Products: Ultimate Blocks – WordPress Blocks Plugin Problem Types: CWE-79 Description: The Ultimate Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘content’ parameter in all versions up to, and including, 3.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an inje
utor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a2520d98-3cee-4431-bf9c-b2fd01a584ce?source=cve - https://plugins.trac.wordpress.org/browser/ultimate-blocks/trunk/src/extensions/responsive-control/class-responsive-control.php#L46 - https://wordpress.org/plugins/ultimate-blocks/#developers - https://plugins.trac.wordpress.org/changeset/3260377 - https://plugins.trac.wordpress.org/changeset/3260377/ultimate-blocks/trunk/src/extensions/responsive-control/class-responsive-control.php
CVE ID: CVE-2025-1704 State: PUBLISHED Published: 2025-04-16T23:06:28.279Z Last Updated: 2025-05-08T19:15:06.471Z Vendors: Google Products: ChromeOS Problem Types: Use-After-Free (UAF) Description: ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issuetracker.google.com/issues/359915523 - https://issues.chromium.org/issues/b/359915523
CVE ID: CVE-2025-1705 State: PUBLISHED Published: 2025-03-28T08:23:44.395Z Last Updated: 2025-03-28T13:55:01.328Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: tagDiv Products: tagDiv Composer Problem Types: CWE-79 Description: The tagDiv Composer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.3. This is due to missing or incorrect nonce validation within the td_ajax_get_views AJAX action. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additiona
rged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2aaa8c34-cf7b-4630-adc8-cbb534deff89?source=cve - https://tagdiv.com/tagdiv-composer-page-builder-basics/ - https://themeforest.net/item/newspaper/5489609 - https://tagdiv.com/newspaper-changelog/
CVE ID: CVE-2025-1706 State: PUBLISHED Published: 2025-05-17T00:40:28.729Z Last Updated: 2025-05-19T20:25:12.056Z Vendors: Imagination Technologies Products: Graphics DDK Problem Types: CWE-416 Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE ID: CVE-2025-1707 State: PUBLISHED Published: 2025-03-11T21:21:12.899Z Last Updated: 2025-03-12T14:06:30.498Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: techlabpro1 Products: Review Schema – Review & Structure Data Schema Plugin Problem Types: CWE-98 Description: The Review Schema plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.4 via post meta. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain s
the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php file type can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9b4de243-d337-4f29-a766-bcafb3848d1c?source=cve - https://plugins.trac.wordpress.org/browser/review-schema/tags/2.2.4/app/Shortcodes/ReviewSchema.php#L108 - https://plugins.trac.wordpress.org/changeset/3253799/review-schema
CVE ID: CVE-2025-1708 State: PUBLISHED Published: 2025-07-03T11:18:22.134Z Last Updated: 2025-07-03T13:17:20.348Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Endress+Hauser Products: Endress+Hauser MEAC300-FNADE4 Problem Types: CWE-89 Description: The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its content. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.endress.com - https://sick.com/psirt - https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - https://www.first.org/cvss/calculator/3.1 - https://www.sick.com/.well-known/csaf/white/2025/sc
-recommended-practices - https://www.first.org/cvss/calculator/3.1 - https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json - https://sick.com/psirt - https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdf
CVE ID: CVE-2025-1709 State: PUBLISHED Published: 2025-07-03T11:20:20.793Z Last Updated: 2025-07-03T13:17:00.475Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Endress+Hauser Products: Endress+Hauser MEAC300-FNADE4 Problem Types: CWE-256 Description: Several credentials for the local PostgreSQL database are stored in plain text (partially base64 encoded). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.endress.com - https://sick.com/psirt - https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - https://www.first.org/cvss/calculator/3.1 - https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json - h
es - https://www.first.org/cvss/calculator/3.1 - https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json - https://sick.com/psirt - https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdf
CVE ID: CVE-2025-1710 State: PUBLISHED Published: 2025-07-03T11:21:18.058Z Last Updated: 2025-07-03T13:16:53.110Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Endress+Hauser Products: Endress+Hauser MEAC300-FNADE4 Problem Types: CWE-307 Description: The maxView Storage Manager does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute-force attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.endress.com - https://sick.com/psirt - https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - https://www.first.org/cvss/calcul
com/psirt - https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - https://www.first.org/cvss/calculator/3.1 - https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json - https://sick.com/psirt - https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdf
CVE ID: CVE-2025-1711 State: PUBLISHED Published: 2025-07-03T11:22:09.710Z Last Updated: 2025-07-03T13:16:47.136Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Endress+Hauser Products: Endress+Hauser MEAC300-FNADE4 Problem Types: CWE-1392 Description: Multiple services of the DUT as well as different scopes of the same service reuse the same credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.endress.com - https://sick.com/psirt - https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - https://www.first.org/cvss/calculator/3.1 - https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json - ht
s - https://www.first.org/cvss/calculator/3.1 - https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json - https://sick.com/psirt - https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdf
CVE ID: CVE-2025-1712 State: PUBLISHED Published: 2025-05-21T09:10:42.626Z Last Updated: 2025-05-21T10:28:28.256Z Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-88 Description: Argument injection in special agent configuration in Checkmk <2.4.0p1, <2.3.0p32, <2.2.0p42 and 2.1.0 allows authenticated attackers to write arbitrary files Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/17996
CVE ID: CVE-2025-1713 State: PUBLISHED Published: 2025-07-17T13:59:46.231Z Last Updated: 2025-07-17T14:21:42.020Z Vendors: Xen Products: Xen Description: When setting up interrupt remapping for legacy PCI(-X) devices, including PCI(-X) bridges, a lookup of the upstream bridge is required. This lookup, itself involving acquiring of a lock, is done in a context where acquiring that lock is unsafe. This can lead to a deadlock. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://xenbits.xenproject.org/xsa/advisory-467.html
CVE ID: CVE-2025-1714 State: PUBLISHED Published: 2025-03-05T14:56:53.962Z Last Updated: 2025-03-07T04:37:18.431Z Vendors: Perforce Products: Gliffy Problem Types: CWE-200, CWE-307 Description: Lack of Rate Limiting in Sign-up workflow in Perforce Gliffy prior to version 4.14.0-7 on Gliffy online allows attacker to enumerate valid user emails and potentially DOS the server Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://portal.perforce.com/s/detail/a91PA000001ScY1YAK
CVE ID: CVE-2025-1716 State: PUBLISHED Published: 2025-02-26T14:51:38.085Z Last Updated: 2025-03-03T15:58:37.163Z Vendors: mmaitre314 Products: picklescan Problem Types: CWE-184 Description: picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package (hosted, for example, on pypi.org or GitHub) via `pip.main()`. Because pip is not a restricted global, the model, when scanned with picklescan, would pass security checks and appear to be safe, when it could instead prove to be problematic. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://sites.google.com/sonatype.com/vul
problematic. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1716 - https://github.com/mmaitre314/picklescan/commit/78ce704227c51f070c0c5fb4b466d92c62a7aa3d - https://github.com/mmaitre314/picklescan/security/advisories/GHSA-655q-fx9r-782v
CVE ID: CVE-2025-1717 State: PUBLISHED Published: 2025-02-27T07:23:13.273Z Last Updated: 2025-02-27T14:38:26.954Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: pluginly Products: 1 click passwordless login, temporary login, social login & user switching – Login Me Now Problem Types: CWE-288 Description: The Login Me Now plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.2. This is due to insecure authentication based on an arbitrary transient name in the 'AutoLogin::listen()' function. This makes it possible for unauthenticated attackers to log in an existing user on the site, even an administrator. Note: this v
es it possible for unauthenticated attackers to log in an existing user on the site, even an administrator. Note: this vulnerability requires using a transient name and value from another software, so the plugin is not inherently vulnerable on it's own. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fc689622-50d6-47c4-a5f6-0314b1a207c9?source=cve - https://plugins.trac.wordpress.org/browser/login-me-now/tags/1.7.2/app/Logins/BrowserTokenLogin/AutoLogin.php#L24
CVE ID: CVE-2025-1718 State: PUBLISHED Published: 2025-06-24T11:24:17.579Z Last Updated: 2025-06-25T12:42:41.525Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Hitachi Energy Products: Relion 670/650 and SAM600-IO Problem Types: CWE-754 Description: An authenticated user with file access privilege via FTP access can cause the Relion 670/650 and SAM600-IO series device to reboot due to improper disk space management. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://publisher.hitachienergy.com/preview?DocumentID=8DBD000174&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2025-1723 State: PUBLISHED Published: 2025-03-03T07:40:10.789Z Last Updated: 2025-03-03T14:24:12.072Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: ManageEngine Products: ADSelfService Plus Problem Types: CWE-287 Description: Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account holders in the setup only have the potential to exploit this bug. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html
CVE ID: CVE-2025-1724 State: PUBLISHED Published: 2025-03-17T06:57:44.497Z Last Updated: 2025-03-17T14:38:10.240Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Zohocorp Products: Analytics Plus Problem Types: CWE-798 Description: Zohocorp's ManageEngine Analytics Plus and Zoho Analytics on-premise versions older than 6130 are vulnerable to an AD only account takeover because of a hardcoded sensitive token. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/analytics-plus/CVE-2025-1724.html - https://www.zoho.com/analytics/onpremise/CVE-2025-1724.html
CVE ID: CVE-2025-1725 State: PUBLISHED Published: 2025-06-03T08:21:52.457Z Last Updated: 2025-06-03T13:28:41.470Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: bitpressadmin Products: Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress Problem Types: CWE-434 Description: The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level acces
input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/84ddb481-f989-4ba8-9925-e8327c30de38?source=cve - https://plugins.trac.wordpress.org/browser/file-manager/tags/6.6.3/backend/app/Http/Controllers/FileManagerController.php#L112
CVE ID: CVE-2025-1726 State: PUBLISHED Published: 2025-02-26T19:28:51.480Z Last Updated: 2025-02-27T20:48:55.628Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Esri Products: ArcGIS Monitor Problem Types: CWE-89 Description: There is a SQL injection issue in Esri ArcGIS Monitor versions 2023.0 through 2024.x on Windows and Linux that allows a remote, authenticated attacker with low privileges to improperly read limited database schema information by passing crafted queries. While it is possible to enumerate some internal database identifiers, the impact to the confidentiality vector is "LOW' because any sensitive data returned in a response is encrypted. T
ers, the impact to the confidentiality vector is "LOW' because any sensitive data returned in a response is encrypted. There is no evidence of impact to the integrity or availability vectors. This issue is addressed in ArcGIS Monitor 2024.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/monitor/administration/whats-new-in-arcgis-monitor-2024-1/
CVE ID: CVE-2025-1727 State: PUBLISHED Published: 2025-07-10T22:59:34.802Z Last Updated: 2025-07-11T14:06:28.251Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: End-of-Train and Head-of-Train remote linking protocol Products: End-of-Train and Head-of-Train remote linking protocol Problem Types: CWE-1390 Description: The protocol used for remote linking over RF for End-of-Train and Head-of-Train (also known as a FRED) relies on a BCH checksum for packet creation. It is possible to create these EoT and HoT packets with a software defined radio and issue brake control commands to the EoT device, disrupting operations or potentially overwhelming the brake systems
and issue brake control commands to the EoT device, disrupting operations or potentially overwhelming the brake systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-10
CVE ID: CVE-2025-1728 State: REJECTED Published: N/A Last Updated: 2025-02-26T21:32:32.272Z Description: No description available.
CVE ID: CVE-2025-1729 State: PUBLISHED Published: 2025-07-17T19:17:11.439Z Last Updated: 2025-07-17T20:10:45.709Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: TrackPoint Quick Menu Problem Types: CWE-427 Description: A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-189489
CVE ID: CVE-2025-1730 State: PUBLISHED Published: 2025-03-01T06:39:28.498Z Last Updated: 2025-03-03T20:57:03.920Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: specialk Products: Simple Download Counter Problem Types: CWE-73 Description: The Simple Download Counter plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.0 via the 'simple_download_counter_download_handler'. This makes it possible for authenticated attackers, with Author-level access and above, to extract sensitive data including any local file on the server, such as wp-config.php or /etc/passwd. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
y local file on the server, such as wp-config.php or /etc/passwd. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d0eafb20-4ef2-448b-9da7-ad8aa9e45215?source=cve - https://plugins.trac.wordpress.org/browser/simple-download-counter/tags/2.0/inc/functions-core.php#L328 - https://plugins.trac.wordpress.org/browser/simple-download-counter/tags/2.0/inc/functions-core.php#L354 - https://plugins.trac.wordpress.org/changeset/3247987/
CVE ID: CVE-2025-1731 State: PUBLISHED Published: 2025-04-22T01:52:04.064Z Last Updated: 2025-06-12T07:06:19.271Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: USG FLEX H series uOS firmware Problem Types: CWE-732 Description: An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an authenticated local attacker with low privileges to gain access to the Linux shell and escalate their privileges by crafting malicious scripts or modifying system configurations with administrator-level access through a stolen token. Modifying the system
scripts or modifying system configurations with administrator-level access through a stolen token. Modifying the system configuration is only possible if the administrator has not logged out and the token remains valid. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-incorrect-permission-assignment-and-improper-privilege-management-vulnerabilities-in-usg-flex-h-series-firewalls-04-22-2025
CVE ID: CVE-2025-1732 State: PUBLISHED Published: 2025-04-22T01:57:35.395Z Last Updated: 2025-06-12T07:05:39.793Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: USG FLEX H series uOS firmware Problem Types: CWE-269 Description: An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attacker with administrator privileges to upload a crafted configuration file and escalate privileges on a vulnerable device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advi
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-incorrect-permission-assignment-and-improper-privilege-management-vulnerabilities-in-usg-flex-h-series-firewalls-04-22-2025
CVE ID: CVE-2025-1734 State: PUBLISHED Published: 2025-03-30T05:43:35.771Z Last Updated: 2025-11-03T20:57:09.506Z Vendors: PHP Group Products: PHP Problem Types: CWE-20 Description: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when receiving headers from HTTP server, the headers missing a colon (:) are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/php/php-src/security/advisories/GHSA-pcmh-g36c-qc44
CVE ID: CVE-2025-1735 State: PUBLISHED Published: 2025-07-13T22:27:48.299Z Last Updated: 2025-11-04T21:09:33.172Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: PHP Group Products: PHP Problem Types: CWE-89, CWE-476 Description: In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/php/php-src/security/advisories/GHSA-hrwm-9436-5mv3