Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-25062 State: PUBLISHED Published: 2023-01-01T08:15:00.640Z Last Updated: 2024-08-05T12:26:39.637Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: flar2 Products: ElementalX Problem Types: CWE-404 Description: A vulnerability classified as problematic has been found in flar2 ElementalX up to 6.x on Nexus 9. Affected is the function xfrm_dump_policy_done of the file net/xfrm/xfrm_user.c of the component ipsec. The manipulation leads to denial of service. Upgrading to version 7.00 is able to address this issue. The name of the patch is 1df72c9f0f61304437f4f1037df03b5fb36d5a79. It is recommended to upgrade the affected component. The identifier of
tch is 1df72c9f0f61304437f4f1037df03b5fb36d5a79. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217152. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.217152 - https://vuldb.com/?ctiid.217152 - https://github.com/flar2/ElementalX-N9/commit/1df72c9f0f61304437f4f1037df03b5fb36d5a79
CVE ID: CVE-2018-25063 State: PUBLISHED Published: 2023-01-01T08:32:04.790Z Last Updated: 2024-08-05T12:26:39.627Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Zenoss Products: Dashboard Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTMLString leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.3.5 is able to address this issue. The identifier of the patch is f462285a0a2d7e1a9255b0820240b94a43b00a44
to version 1.3.5 is able to address this issue. The identifier of the patch is f462285a0a2d7e1a9255b0820240b94a43b00a44. It is recommended to upgrade the affected component. The identifier VDB-217153 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217153 - https://vuldb.com/?ctiid.217153 - https://github.com/zenoss/ZenPacks.zenoss.Dashboard/pull/130 - https://github.com/zenoss/ZenPacks.zenoss.Dashboard/commit/f462285a0a2d7e1a9255b0820240b94a43b00a44 - https://github.com/zenoss/ZenPacks.zenoss.Dashboard/releases/tag/1.3.5
CVE ID: CVE-2018-25064 State: PUBLISHED Published: 2023-01-05T08:06:31.642Z Last Updated: 2024-08-05T12:26:39.605Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: OSM Lab Products: show-me-the-way Problem Types: CWE-79 Description: A vulnerability was found in OSM Lab show-me-the-way. It has been rated as problematic. This issue affects some unknown processing of the file js/site.js. The manipulation leads to cross site scripting. The attack may be initiated remotely. The patch is named 4bed3b34dcc01fe6661f39c0e5d2285b340f7cac. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217439. Additional Analyst Notes: - CVE Progra
to fix this issue. The associated identifier of this vulnerability is VDB-217439. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217439 - https://vuldb.com/?ctiid.217439 - https://github.com/osmlab/show-me-the-way/pull/57 - https://github.com/osmlab/show-me-the-way/commit/4bed3b34dcc01fe6661f39c0e5d2285b340f7cac
CVE ID: CVE-2018-25065 State: PUBLISHED Published: 2023-01-05T09:17:20.358Z Last Updated: 2025-04-10T14:16:57.180Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Wikimedia Products: mediawiki-extensions-I18nTags Problem Types: CWE-79 Description: A vulnerability was found in Wikimedia mediawiki-extensions-I18nTags and classified as problematic. This issue affects some unknown processing of the file I18nTags_body.php of the component Unlike Parser. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier of the patch is b4bc3cbbb099eab50cf2b544cf577116f1867b94. It is recommended to apply a patch to fix this issue. The identifier VDB-2174
b4bc3cbbb099eab50cf2b544cf577116f1867b94. It is recommended to apply a patch to fix this issue. The identifier VDB-217445 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217445 - https://vuldb.com/?ctiid.217445 - https://github.com/wikimedia/mediawiki-extensions-I18nTags/commit/b4bc3cbbb099eab50cf2b544cf577116f1867b94
CVE ID: CVE-2018-25066 State: PUBLISHED Published: 2023-01-06T10:33:16.737Z Last Updated: 2024-08-05T12:26:39.661Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: PeterMu Products: nodebatis Problem Types: CWE-89 Description: A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as 6629ff5b7e3d62ad8319007a54589ec1f62c7c35. It is recommended to upgrade the affected component. VDB-217554 is the identifier assigned to this vulnerability. Additional Analyst Notes: - C
grade the affected component. VDB-217554 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217554 - https://vuldb.com/?ctiid.217554 - https://github.com/PeterMu/nodebatis/commit/6629ff5b7e3d62ad8319007a54589ec1f62c7c35 - https://github.com/PeterMu/nodebatis/releases/tag/v2.2.0
CVE ID: CVE-2018-25067 State: PUBLISHED Published: 2023-01-06T20:33:51.687Z Last Updated: 2024-08-05T12:26:39.746Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: JoomGallery Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in JoomGallery up to 3.3.3. This affects an unknown part of the file administrator/components/com_joomgallery/views/config/tmpl/default.php of the component Image Sort Handler. The manipulation leads to sql injection. Upgrading to version 3.3.4 is able to address this issue. The identifier of the patch is dc414ee954e849082260f8613e15a1c1e1d354a1. It is recommended to upgrade the
ss this issue. The identifier of the patch is dc414ee954e849082260f8613e15a1c1e1d354a1. It is recommended to upgrade the affected component. The identifier VDB-217569 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217569 - https://vuldb.com/?ctiid.217569 - https://github.com/JoomGallery/JoomGallery/pull/122 - https://github.com/JoomGallery/JoomGallery/commit/dc414ee954e849082260f8613e15a1c1e1d354a1 - https://github.com/JoomGallery/JoomGallery/releases/tag/v3.3.4
CVE ID: CVE-2018-25068 State: PUBLISHED Published: 2023-01-06T20:37:32.556Z Last Updated: 2025-04-10T13:19:31.271Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: devent Products: globalpom-utils Problem Types: CWE-377 Description: A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function createTmpDir of the file globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileresourcemanager/FileResourceManagerProvider.java. The manipulation leads to insecure temporary file. The attack can be initiated remotely. Upgrading to version 4.5.1 is able to address this issue. The patch is identifie
. The attack can be initiated remotely. Upgrading to version 4.5.1 is able to address this issue. The patch is identified as 77a820bac2f68e662ce261ecb050c643bd7ee560. It is recommended to upgrade the affected component. VDB-217570 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217570 - https://vuldb.com/?ctiid.217570 - https://github.com/devent/globalpom-utils/commit/77a820bac2f68e662ce261ecb050c643bd7ee560 - https://github.com/devent/globalpom-utils/releases/tag/globalpomutils-4.5.1
CVE ID: CVE-2018-25069 State: PUBLISHED Published: 2023-01-07T08:40:57.824Z Last Updated: 2024-11-25T17:23:25.199Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Netis Products: Netcore Router Problem Types: CWE-259 Description: A vulnerability classified as critical has been found in Netis Netcore Router. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The identifier VDB-217593 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217593 - https://vuldb.com/?ctiid.217593 - https://advisories.checkpoint
lnrichment: References: - https://vuldb.com/?id.217593 - https://vuldb.com/?ctiid.217593 - https://advisories.checkpoint.com/advisory/cpai-2018-0721/
CVE ID: CVE-2018-25070 State: PUBLISHED Published: 2023-01-07T10:07:58.190Z Last Updated: 2025-04-09T19:29:28.576Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: polterguy Products: Phosphorus Five Problem Types: CWE-89 Description: A vulnerability has been found in polterguy Phosphorus Five up to 8.2 and classified as critical. This vulnerability affects the function csv.Read of the file plugins/extras/p5.mysql/NonQuery.cs of the component CSV Import. The manipulation leads to sql injection. Upgrading to version 8.3 is able to address this issue. The patch is identified as c179a3d0703db55cfe0cb939b89593f2e7a87246. It is recommended to upgrade the affected
s issue. The patch is identified as c179a3d0703db55cfe0cb939b89593f2e7a87246. It is recommended to upgrade the affected component. VDB-217606 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217606 - https://vuldb.com/?ctiid.217606 - https://github.com/polterguy/phosphorusfive/commit/c179a3d0703db55cfe0cb939b89593f2e7a87246 - https://github.com/polterguy/phosphorusfive/releases/tag/v8.3
CVE ID: CVE-2018-25071 State: PUBLISHED Published: 2023-01-07T11:28:15.497Z Last Updated: 2024-08-05T12:33:47.765Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: roxlukas Products: LMeve Problem Types: CWE-89 Description: A vulnerability was found in roxlukas LMeve up to 0.1.58. It has been rated as critical. Affected by this issue is the function insert_log of the file wwwroot/ccpwgl/proxy.php. The manipulation of the argument fetch leads to sql injection. Upgrading to version 0.1.59-beta is able to address this issue. The patch is identified as c25ff7fe83a2cda1fcb365b182365adc3ffae332. It is recommended to upgrade the affected component. VDB-217610 is the
fied as c25ff7fe83a2cda1fcb365b182365adc3ffae332. It is recommended to upgrade the affected component. VDB-217610 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217610 - https://vuldb.com/?ctiid.217610 - https://github.com/roxlukas/lmeve/commit/c25ff7fe83a2cda1fcb365b182365adc3ffae332 - https://github.com/roxlukas/lmeve/releases/tag/0.1.59-beta
CVE ID: CVE-2018-25072 State: PUBLISHED Published: 2023-01-08T12:24:42.457Z Last Updated: 2024-11-25T16:55:40.264Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: lojban Products: jbovlaste Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in lojban jbovlaste. This affects an unknown part of the file dict/listing.html. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The patch is named 6ff44c2e87b1113eb07d76ea62e1f64193b04d15. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217647. Additional Analyst Notes: - CVE Program Container: - CISA AD
associated identifier of this vulnerability is VDB-217647. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217647 - https://vuldb.com/?ctiid.217647 - https://github.com/lojban/jbovlaste/commit/6ff44c2e87b1113eb07d76ea62e1f64193b04d15
CVE ID: CVE-2018-25073 State: PUBLISHED Published: 2023-01-11T13:54:49.586Z Last Updated: 2024-08-05T12:33:47.851Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Newcomer1989 Products: TSN-Ranksystem Problem Types: CWE-79 Description: A vulnerability has been found in Newcomer1989 TSN-Ranksystem up to 1.2.6 and classified as problematic. This vulnerability affects the function getlog of the file webinterface/bot.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.2.7 is able to address this issue. The patch is identified as b3a3cd8efe2cd3bd3c5b3b7abf2fe80dbee51b77. It is recommended to upgrade the affected component. V
patch is identified as b3a3cd8efe2cd3bd3c5b3b7abf2fe80dbee51b77. It is recommended to upgrade the affected component. VDB-218002 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218002 - https://vuldb.com/?ctiid.218002 - https://github.com/Newcomer1989/TSN-Ranksystem/pull/467 - https://github.com/Newcomer1989/TSN-Ranksystem/commit/b3a3cd8efe2cd3bd3c5b3b7abf2fe80dbee51b77 - https://github.com/Newcomer1989/TSN-Ranksystem/releases/tag/1.2.7
CVE ID: CVE-2018-25074 State: PUBLISHED Published: 2023-01-11T14:49:09.552Z Last Updated: 2024-11-25T16:36:06.912Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Prestaul Products: skeemas Problem Types: CWE-1333 Description: A vulnerability was found in Prestaul skeemas and classified as problematic. This issue affects some unknown processing of the file validators/base.js. The manipulation of the argument uri leads to inefficient regular expression complexity. The patch is named 65e94eda62dc8dc148ab3e59aa2ccc086ac448fd. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218003. Additional Analyst Note
apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218003. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218003 - https://vuldb.com/?ctiid.218003 - https://github.com/Prestaul/skeemas/commit/65e94eda62dc8dc148ab3e59aa2ccc086ac448fd
CVE ID: CVE-2018-25075 State: PUBLISHED Published: 2023-01-15T19:58:03.085Z Last Updated: 2024-11-25T16:56:38.385Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: karsany Products: OBridge Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in karsany OBridge up to 1.3. Affected is the function getAllStandaloneProcedureAndFunction of the file obridge-main/src/main/java/org/obridge/dao/ProcedureDao.java. The manipulation leads to sql injection. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version 1.4 is able to address this issue. The name of the patch is 52eca4ad05f3
y is told to be difficult. Upgrading to version 1.4 is able to address this issue. The name of the patch is 52eca4ad05f3c292aed3178b2f58977686ffa376. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218376. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218376 - https://vuldb.com/?ctiid.218376 - https://github.com/karsany/obridge/commit/52eca4ad05f3c292aed3178b2f58977686ffa376 - https://github.com/karsany/obridge/releases/tag/v1.4
CVE ID: CVE-2018-25076 State: PUBLISHED Published: 2023-01-16T11:58:04.120Z Last Updated: 2024-08-05T12:33:47.854Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Events Extension Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Events Extension on BigTree. Affected by this vulnerability is the function getRandomFeaturedEventByDate/getUpcomingFeaturedEventsInCategoriesWithSubcategories/recacheEvent/searchResults of the file classes/events.php. The manipulation leads to sql injection. The patch is named 11169e48ab1249109485fdb1e0c9fca3d25ba01d. It is recommended to apply a patch to fix this issue. The associ
atch is named 11169e48ab1249109485fdb1e0c9fca3d25ba01d. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218395. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218395 - https://vuldb.com/?ctiid.218395 - https://github.com/timbuckingham/bigtree-events/commit/11169e48ab1249109485fdb1e0c9fca3d25ba01d
CVE ID: CVE-2018-25077 State: PUBLISHED Published: 2023-01-18T00:58:04.325Z Last Updated: 2024-08-05T12:33:47.805Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: melnaron Products: mel-spintax Problem Types: CWE-1333 Description: A vulnerability was found in melnaron mel-spintax. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/spintax.js. The manipulation of the argument text leads to inefficient regular expression complexity. The name of the patch is 37767617846e27b87b63004e30216e8f919637d3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218456. Additiona
7d3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218456. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218456 - https://vuldb.com/?ctiid.218456 - https://github.com/melnaron/mel-spintax/commit/37767617846e27b87b63004e30216e8f919637d3
CVE ID: CVE-2018-25078 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-02T13:31:55.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: man-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. (Also, the owner can strip the setuid and setgid bits.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.gentoo.org/662438 - https://security.gentoo.org/glsa/202310-08
CVE ID: CVE-2018-25079 State: PUBLISHED Published: 2023-02-04T03:57:04.510Z Last Updated: 2024-08-05T12:33:47.846Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Segmentio Products: is-url Problem Types: CWE-1333 Description: A vulnerability was found in Segmentio is-url up to 1.2.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely. Upgrading to version 1.2.3 is able to address this issue. The patch is identified as 149550935c63a98c11f27f694a7c4a9479e53794. It is recommended to upgrade the affec
this issue. The patch is identified as 149550935c63a98c11f27f694a7c4a9479e53794. It is recommended to upgrade the affected component. VDB-220058 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220058 - https://vuldb.com/?ctiid.220058 - https://github.com/segmentio/is-url/pull/18 - https://github.com/segmentio/is-url/commit/149550935c63a98c11f27f694a7c4a9479e53794 - https://github.com/segmentio/is-url/releases/tag/v1.2.3
CVE ID: CVE-2018-25080 State: PUBLISHED Published: 2023-02-04T07:57:04.115Z Last Updated: 2025-04-16T14:42:16.436Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: MobileDetect Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in MobileDetect 2.8.31. This issue affects the function initLayoutType of the file examples/session_example.php of the component Example. The manipulation of the argument $_SERVER['PHP_SELF'] leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.8.32 is able to address this issue. The identifie
s been disclosed to the public and may be used. Upgrading to version 2.8.32 is able to address this issue. The identifier of the patch is 31818a441b095bdc4838602dbb17b8377d1e5cce. It is recommended to upgrade the affected component. The identifier VDB-220061 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220061 - https://vuldb.com/?ctiid.220061 - https://github.com/serbanghita/Mobile-Detect/pull/741 - https://github.com/serbanghita/Mobile-Detect/commit/31818a441b095bdc4838602dbb17b8377d1e5cce - https://github.com/serbanghita/Mobile-Detect/releases/tag/2.8.32
CVE ID: CVE-2018-25081 State: PUBLISHED Published: 2023-03-08T00:00:00 Last Updated: 2024-08-19T16:40:31.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitwarden through 2023.2.1 offers password auto-fill within a cross-domain IFRAME element. NOTE: the vendor's position is that there have been important legitimate cross-domain configurations (e.g., an apple.com IFRAME element on the icloud.com website) and that "Auto-fill on page load" is not enabled by default. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bitwarden/clients/releases - https://flashpoint.io/blog/bitwarden-password-pilfering/ - https://cdn.bitward
//github.com/bitwarden/clients/releases - https://flashpoint.io/blog/bitwarden-password-pilfering/ - https://cdn.bitwarden.net/misc/Bitwarden%20Security%20Assessment%20Report.pdf - https://news.ycombinator.com/item?id=35075861
CVE ID: CVE-2018-25082 State: PUBLISHED Published: 2023-03-21T18:00:05.224Z Last Updated: 2025-02-26T16:37:16.486Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zwczou Products: WeChat SDK Python Problem Types: CWE-611 Description: A vulnerability was found in zwczou WeChat SDK Python 0.3.0 and classified as critical. This issue affects the function validate/to_xml. The manipulation leads to xml external entity reference. The attack may be initiated remotely. Upgrading to version 0.5.5 is able to address this issue. The patch is named e54abadc777715b6dcb545c13214d1dea63df6c9. It is recommended to upgrade the affected component. The associated identifier of this vulnerability i
3214d1dea63df6c9. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-223403. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.223403 - https://vuldb.com/?ctiid.223403 - https://github.com/zwczou/weixin-python/pull/30 - https://github.com/zwczou/weixin-python/commit/e54abadc777715b6dcb545c13214d1dea63df6c9 - https://github.com/zwczou/weixin-python/releases/tag/v0.5.5
CVE ID: CVE-2018-25083 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-24T19:23:58.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pullit package before 1.4.0 for Node.js allows OS Command Injection because eval is used on an attacker-supplied Git branch name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/npm:pullit:20180214 - https://github.com/jkup/pullit/commit/4fec455774ee08f4dce0ef2ef934ffcc37219bfb