Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
oit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299289 - https://vuldb.com/?ctiid.299289 - https://vuldb.com/?submit.512333 - https://github.com/Rain1er/report/blob/main/skWMX/5.md
CVE ID: CVE-2025-2218 State: PUBLISHED Published: 2025-03-12T00:31:04.872Z Last Updated: 2025-03-12T16:13:30.486Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: LoveCards Products: LoveCardsV2 Problem Types: CWE-284, CWE-266 Description: A vulnerability has been found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This vulnerability affects unknown code of the file /api/system/other of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in
een disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299290 - https://vuldb.com/?ctiid.299290 - https://vuldb.com/?submit.512351 - https://ctf-n0el4kls.notion.site/LoveCardsV2-Unauthentication-to-RCE-Vulnerability-19841990f44780de8263c1f77a007a83?pvs=4
CVE ID: CVE-2025-2219 State: PUBLISHED Published: 2025-03-12T00:31:07.135Z Last Updated: 2025-03-12T15:41:32.762Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: LoveCards Products: LoveCardsV2 Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This issue affects some unknown processing of the file /api/upload/image. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CI
sed. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299291 - https://vuldb.com/?ctiid.299291 - https://ctf-n0el4kls.notion.site/LoveCardsV2-Unauthentication-to-RCE-Vulnerability-19841990f44780de8263c1f77a007a83
CVE ID: CVE-2025-2220 State: PUBLISHED Published: 2025-03-12T01:00:06.163Z Last Updated: 2025-03-12T14:56:55.846Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Odyssey Products: CMS Problem Types: CWE-320 Description: A vulnerability was found in Odyssey CMS up to 10.34. It has been classified as problematic. Affected is an unknown function of the file /modules/odyssey_contact_form/odyssey_contact_form.php of the component reCAPTCHA Handler. The manipulation of the argument g-recaptcha-response leads to key management error. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted
required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299292 - https://vuldb.com/?ctiid.299292 - https://vuldb.com/?submit.512367 - https://github.com/secuserx/CVE/blob/main/%5BHardcoded%20reCAPTCHA%20secret%20key%5D%20found%20in%20Odyssey%20CMS%2010.35%20-%20(odyssey_contact_form.php).md
CVE ID: CVE-2025-2221 State: PUBLISHED Published: 2025-03-14T06:43:17.622Z Last Updated: 2025-03-14T15:06:32.874Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: whyun Products: WPCOM Member Problem Types: CWE-89 Description: The WPCOM Member plugin for WordPress is vulnerable to time-based SQL Injection via the ‘user_phone’ parameter in all versions up to, and including, 1.7.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information
tackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8f491d48-935c-4fd9-a342-44d98c5601b3?source=cve - https://plugins.trac.wordpress.org/browser/wpcom-member/tags/1.7.6/includes/class-sesstion.php#L35 - https://plugins.trac.wordpress.org/changeset/3255171/
CVE ID: CVE-2025-2222 State: PUBLISHED Published: 2025-04-09T10:12:33.428Z Last Updated: 2025-04-09T14:05:05.060Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: ConneXium Network Manager Problem Types: CWE-552 Description: CWE-552: Files or Directories Accessible to External Parties vulnerability over https exists that could leak information and potential privilege escalation following man in the middle attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-098-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-098-01.pdf
CVE ID: CVE-2025-2223 State: PUBLISHED Published: 2025-04-09T10:16:04.119Z Last Updated: 2025-04-09T14:00:53.724Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: ConneXium Network Manager Problem Types: CWE-20 Description: CWE-20: Improper Input Validation vulnerability exists that could cause a loss of Confidentiality, Integrity and Availability of engineering workstation when a malicious project file is loaded by a user from the local system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-098-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=S
://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-098-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-098-01.pdf
CVE ID: CVE-2025-2224 State: PUBLISHED Published: 2025-03-25T05:22:48.169Z Last Updated: 2025-03-31T18:18:28.816Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: wpwax Products: Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings Problem Types: CWE-862 Description: The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'parse_query' function in all versions up to, and including, 8.2. This makes it possible for unauthenticated attackers to update the post_status of any post to 'publi
and including, 8.2. This makes it possible for unauthenticated attackers to update the post_status of any post to 'publish'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/684e6a97-b884-4d25-99f1-81c2a43f1239?source=cve - https://plugins.trac.wordpress.org/browser/directorist/trunk/includes/classes/class-add-listing.php#L912 - https://plugins.trac.wordpress.org/browser/directorist/trunk/includes/classes/class-add-listing.php#L942 - https://plugins.trac.wordpress.org/browser/directorist/trunk/includes/classes/class-add-listing.php#L960 - https://plugins.trac.wordpress.org/changeset/3260639/
CVE ID: CVE-2025-2225 State: PUBLISHED Published: 2025-04-15T05:23:27.613Z Last Updated: 2025-04-15T14:00:51.876Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: cyberchimps Products: Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates Problem Types: CWE-79 Description: The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘rael_title_tag' parameter in all versions up to, and including, 1.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contrib
to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 1.6.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f5ace7fb-530e-4a69-bbf7-e2c66491dd75?source=cve - https://plugins.trac.wordpress.org/browser/responsive-addons-for-elementor/trunk/includes/widgets-manager/widgets/class-responsive-addons-for-elementor-icon-box.php#L2499 - https://plugins.trac.wordpress.org/changeset/
manager/widgets/class-responsive-addons-for-elementor-icon-box.php#L2499 - https://plugins.trac.wordpress.org/changeset/3261241/ - https://plugins.trac.wordpress.org/changeset/3263280/
CVE ID: CVE-2025-2228 State: PUBLISHED Published: 2025-03-26T12:41:17.240Z Last Updated: 2025-03-26T13:11:34.848Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: cyberchimps Products: Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates Problem Types: CWE-200 Description: The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.8 the 'register_user' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data includ
makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including usernames and passwords of any users who register via the Edit Login | Registration Form widget, as long as that user opens the email notification for successful registration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/659ef2e8-589c-4901-88ce-1d674c056ece?source=cve - https://plugins.trac.wordpress.org/browser/responsive-addons-for-elementor/trunk/includes/modules-manager/login-register/class-login-register.php#L369 - https://plugins.trac.wordpress.org/changeset/3261241/
CVE ID: CVE-2025-2229 State: PUBLISHED Published: 2025-03-13T18:17:31.256Z Last Updated: 2025-03-17T20:04:56.100Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Philips Products: Intellispace Cardiovascular (ISCV) Problem Types: CWE-1391 Description: A token is created using the username, current date/time, and a fixed AES-128 encryption key, which is the same across all installations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-072-01 - https://www.philips.com/a-w/security/security-advisories.html
CVE ID: CVE-2025-2230 State: PUBLISHED Published: 2025-03-13T18:14:43.573Z Last Updated: 2025-03-17T20:05:56.939Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Philips Products: Intellispace Cardiovascular (ISCV) Problem Types: CWE-287 Description: A flaw exists in the Windows login flow where an AuthContext token can be exploited for replay attacks and authentication bypass. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-072-01 - https://www.philips.com/a-w/security/security-advisories.html
CVE ID: CVE-2025-2231 State: PUBLISHED Published: 2025-03-24T19:45:42.198Z Last Updated: 2025-03-24T20:05:31.236Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: PDF-XChange Products: PDF-XChange Editor Problem Types: CWE-125 Description: PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RTF files. The issue results from the la
s page or open a malicious file. The specific flaw exists within the parsing of RTF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25473. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-129/ - https://www.pdf-xchange.com/support/security-bulletins.html
CVE ID: CVE-2025-2232 State: PUBLISHED Published: 2025-03-14T11:15:52.827Z Last Updated: 2025-03-14T12:42:27.868Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: PureThemes Products: Realteo Problem Types: CWE-269 Description: The Realteo - Real Estate Plugin by Purethemes plugin for WordPress, used by the Findeo Theme, is vulnerable to authentication bypass in all versions up to, and including, 1.2.8. This is due to insufficient role restrictions in the 'do_register_user' function. This makes it possible for unauthenticated attackers to register an account with the Administrator role. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
register an account with the Administrator role. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/abe73ecd-1325-4d6d-8545-d27f6116ca43?source=cve - https://docs.purethemes.net/findeo/knowledge-base/changelog-findeo/
CVE ID: CVE-2025-2233 State: PUBLISHED Published: 2025-03-11T22:30:44.003Z Last Updated: 2025-03-13T03:55:18.474Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Products: SmartThings Problem Types: CWE-347 Description: Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Samsung SmartThings. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Hub Local API service, which listens on TCP port 8766 by default. The issue results from the lack of proper
within the Hub Local API service, which listens on TCP port 8766 by default. The issue results from the lack of proper verification of a cryptographic signature. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-25615. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-127/
CVE ID: CVE-2025-2236 State: PUBLISHED Published: 2025-05-27T15:00:30.910Z Last Updated: 2025-05-27T15:17:27.699Z Vendors: OpenText Products: Advanced Authentication Problem Types: CWE-497 Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services. This issue affects Advanced Authentication versions before 6.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000039947
CVE ID: CVE-2025-2237 State: PUBLISHED Published: 2025-04-01T11:12:28.902Z Last Updated: 2025-04-01T13:30:57.157Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ApusThemes Products: WP RealEstate Problem Types: CWE-269 Description: The WP RealEstate plugin for WordPress, used by the Homeo theme, is vulnerable to authentication bypass in all versions up to, and including, 1.6.26. This is due to insufficient role restrictions in the 'process_register' function. This makes it possible for unauthenticated attackers to register an account with the Administrator role. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/thr
h the Administrator role. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f6f7bff6-3bc3-4572-97fd-a039d54ac0ff?source=cve - https://themeforest.net/item/homeo-real-estate-wordpress-theme/26372986#item-description__updates-history
CVE ID: CVE-2025-2238 State: PUBLISHED Published: 2025-04-25T06:45:28.836Z Last Updated: 2025-04-25T16:01:45.691Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Odin_Design Products: Vikinger Problem Types: CWE-269 Description: The Vikinger theme for WordPress is vulnerable to privilege in all versions up to, and including, 1.9.30. This is due to insufficient user_meta restrictions in the 'vikinger_user_meta_update_ajax' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to escalate their privileges to Administrator-level. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.
ivileges to Administrator-level. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9e0cba5b-5833-4c02-ac17-830994b0f207?source=cve - https://themeforest.net/item/vikinger-buddypress-and-gamipress-social-community/28612259
CVE ID: CVE-2025-2239 State: PUBLISHED Published: 2025-03-12T09:53:35.677Z Last Updated: 2025-03-12T14:18:30.762Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Hillstone Networks Products: Hillstone Next Generation FireWall Problem Types: CWE-209 Description: Generation of Error Message Containing Sensitive Information vulnerability in Hillstone Networks Hillstone Next Generation FireWall.This issue affects Hillstone Next Generation FireWall: from 5.5R8P1 before 5.5R8P23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.hillstonenet.com.cn/security-notification/2025/02/17/stoneosjd/
CVE ID: CVE-2025-2240 State: PUBLISHED Published: 2025-03-12T14:55:15.889Z Last Updated: 2025-11-24T09:19:31.181Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat build of Apache Camel 4.8.5 for Spring Boot, Red Hat Build of Apache Camel 4.8 for Quarkus 3.15, Red Hat build of Quarkus 3.15.4, Red Hat build of Apicurio Registry 2, Red Hat build of Apicurio Registry 3, Red Hat build of Quarkus, Red Hat Fuse 7, Red Hat Integration Camel K 1, Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack Problem Types: CWE-1325 Description: A fla
tion Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack Problem Types: CWE-1325 Description: A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory (OOM) issue. This vulnerability is externally triggered when calling the metrics URI. Every call creates a new object within meterMap and may lead to a denial of service (DoS) issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:3376 - https://access.redhat.com/errata/RHSA-2025:3541 - https://access.redhat.com/errata/RHSA-2025:3543 - https://access.redhat.com/security/cve/CVE-2025-2240 - https://bugzilla.redhat.com/show_bug.
com/errata/RHSA-2025:3543 - https://access.redhat.com/security/cve/CVE-2025-2240 - https://bugzilla.redhat.com/show_bug.cgi?id=2351452 - https://github.com/advisories/GHSA-gfh6-3pqw-x2j4
CVE ID: CVE-2025-2241 State: PUBLISHED Published: 2025-03-17T16:27:20.598Z Last Updated: 2025-11-20T07:26:22.963Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: Red Hat Products: Multicluster Engine for Kubernetes, Red Hat Advanced Cluster Management for Kubernetes 2 Problem Types: CWE-922 Description: A flaw was found in Hive, a component of Multicluster Engine (MCE) and Advanced Cluster Management (ACM). This vulnerability causes VCenter credentials to be exposed in the ClusterProvision object after provisioning a VSphere cluster. Users with read access to ClusterProvision objects can extract sensitive credentials even if they do not have direct access to K
th read access to ClusterProvision objects can extract sensitive credentials even if they do not have direct access to Kubernetes Secrets. This issue can lead to unauthorized VCenter access, cluster management, and privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-2241 - https://bugzilla.redhat.com/show_bug.cgi?id=2351350
CVE ID: CVE-2025-2242 State: PUBLISHED Published: 2025-03-27T12:30:57.479Z Last Updated: 2025-03-27T13:11:00.331Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: An improper access control vulnerability in GitLab CE/EE affecting all versions from 17.4 prior to 17.8.6, 17.9 prior to 17.9.3, and 17.10 prior to 17.10.1 allows a user who was an instance admin before but has since been downgraded to a regular user to continue to maintain elevated privileges to groups and projects. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/516271
CVE ID: CVE-2025-2243 State: PUBLISHED Published: 2025-04-04T09:53:25.476Z Last Updated: 2025-04-04T14:21:05.194Z Vendors: Bitdefender Products: GravityZone Console Problem Types: CWE-918 Description: A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests. Paired with other potential vulnerabilities, this bypass could be used for execution of third party code. This issue affects GravityZone Console: before 6.41.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.bitdefender.com/support/security-advisories/ssrf-in-gravityzone-console-via-dns
Vulnrichment: References: - https://www.bitdefender.com/support/security-advisories/ssrf-in-gravityzone-console-via-dns-truncation-va-12634
CVE ID: CVE-2025-2244 State: PUBLISHED Published: 2025-04-04T09:52:48.684Z Last Updated: 2025-04-04T14:26:11.160Z Vendors: Bitdefender Products: GravityZone Console Problem Types: CWE-502 Description: A vulnerability in the sendMailFromRemoteSource method in Emails.php as used in Bitdefender GravityZone Console unsafely uses php unserialize() on user-supplied input without validation. By crafting a malicious serialized payload, an attacker can trigger PHP object injection, perform a file write, and gain arbitrary command execution on the host system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://bitdefender.com/support/security-advisories/insecure-php-deserializatio
s: - CISA ADP Vulnrichment: References: - http://bitdefender.com/support/security-advisories/insecure-php-deserialization-issue-in-gravityzone-console-va-12634
CVE ID: CVE-2025-2245 State: PUBLISHED Published: 2025-04-04T09:54:03.681Z Last Updated: 2025-04-04T12:57:26.616Z Vendors: Bitdefender Products: GravityZone Update Server Problem Types: CWE-918 Description: A server-side request forgery (SSRF) vulnerability exists in the Bitdefender GravityZone Update Server when operating in Relay Mode. The HTTP proxy component on port 7074 uses a domain allowlist to restrict outbound requests, but fails to properly sanitize hostnames containing null-byte (%00) sequences. By crafting a request to a domain such as evil.com%00.bitdefender.com, an attacker can bypass the allowlist check, causing the proxy to forward requests to arbitrary external or internal s