Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310658 - https://vuldb.com/?ctiid.310658 - https://vuldb.com/?submit.586699 - https://github.com/yuanchaoxxxxx/CVE/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-5365 State: PUBLISHED Published: 2025-05-31T00:31:04.861Z Last Updated: 2025-06-02T15:50:33.654Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Online Hospital Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310659 - https://vuldb.com/?ctiid.310659 - https://vuldb.com/?submit.586700 - https://github.com/yuanchaoxxxxx/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-5366 State: PUBLISHED Published: 2025-06-26T12:21:02.567Z Last Updated: 2025-06-26T12:54:40.737Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: ManageEngine Products: Exchange Reporter Plus Problem Types: CWE-79 Description: Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Folder-wise read mails with subject report. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/exchange-reports/advisory/CVE-2025-5366.html
CVE ID: CVE-2025-5367 State: PUBLISHED Published: 2025-05-31T01:31:05.682Z Last Updated: 2025-06-02T15:50:27.846Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Shopping Portal Project Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Online Shopping Portal Project 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument Product leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310660 - https://vuldb.com/?ctiid.310660 - https://vuldb.com/?submit.586814 - https://github.com/shanranne/myCVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-5368 State: PUBLISHED Published: 2025-05-31T04:00:08.341Z Last Updated: 2025-06-02T15:50:15.183Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Daily Expense Tracker System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. This issue affects some unknown processing of the file /expense-yearwise-reports-detailed.php. The manipulation of the argument todate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310661 - https://vuldb.com/?ctiid.310661 - https://vuldb.com/?submit.586911 - https://github.com/f1rstb100d/myCVE/issues/25 - https://phpgurukul.com/
CVE ID: CVE-2025-5369 State: PUBLISHED Published: 2025-05-31T05:00:08.430Z Last Updated: 2025-06-02T15:50:08.193Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: PHP Display Username After Login Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in SourceCodester PHP Display Username After Login 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310662 - https://vuldb.com/?ctiid.310662 - https://vuldb.com/?submit.587234 - https://github.com/shanranne/myCVE/issues/2 - https://www.sourcecodester.com/
CVE ID: CVE-2025-5370 State: PUBLISHED Published: 2025-05-31T05:31:05.427Z Last Updated: 2025-06-02T15:49:58.789Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: News Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310663 - https://v
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310663 - https://vuldb.com/?ctiid.310663 - https://vuldb.com/?submit.587365 - https://github.com/GarminYoung/myCVE/issues/5 - https://phpgurukul.com/
CVE ID: CVE-2025-5371 State: PUBLISHED Published: 2025-05-31T08:00:11.607Z Last Updated: 2025-06-02T15:48:49.786Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Health Center Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Health Center Patient Record Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes:
ttack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310664 - https://vuldb.com/?ctiid.310664 - https://vuldb.com/?submit.587382 - https://github.com/shanranne/myCVE/issues/4 - https://www.sourcecodester.com/
CVE ID: CVE-2025-5372 State: PUBLISHED Published: 2025-07-04T06:01:27.954Z Last Updated: 2025-11-24T21:03:17.673Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-682 Description: A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for succes
ue to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success—the function may mistakenly return a success status even when key derivation fails. This results in uninitialized cryptographic key buffers being used in subsequent communication, potentially compromising SSH sessions' confidentiality, integrity, and availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:21977 - https://access.redhat.com/security/cve/CVE-2025-5372 - https://bugzilla.redhat.com/show_bug.cgi?id=2369388
CVE ID: CVE-2025-5373 State: PUBLISHED Published: 2025-05-31T08:31:06.038Z Last Updated: 2025-06-02T15:48:42.927Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Birth Certificate System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This vulnerability affects unknown code of the file /admin/users-applications.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310666 - https://vuldb.com/?ctiid.310666 - https://vuldb.com/?submit.587392 - https://github.com/f1rstb100d/myCVE/issues/27 - https://phpgurukul.com/
CVE ID: CVE-2025-5374 State: PUBLISHED Published: 2025-05-31T10:00:09.562Z Last Updated: 2025-06-02T15:48:36.886Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Birth Certificate System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This issue affects some unknown processing of the file /admin/all-applications.php. The manipulation of the argument del leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310667 - https://vuldb.com/?ctiid.310667 - https://vuldb.com/?submit.587393 - https://github.com/f1rstb100d/myCVE/issues/28 - https://phpgurukul.com/
CVE ID: CVE-2025-5375 State: PUBLISHED Published: 2025-05-31T10:31:05.968Z Last Updated: 2025-06-02T15:48:31.170Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: HPGurukul Online Birth Certificate System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul HPGurukul Online Birth Certificate System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/registered-users.php. The manipulation of the argument del leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310668 - https://vuldb.com/?ctiid.310668 - https://vuldb.com/?submit.587394 - https://github.com/f1rstb100d/myCVE/issues/29 - https://phpgurukul.com/
CVE ID: CVE-2025-5376 State: PUBLISHED Published: 2025-05-31T11:31:07.453Z Last Updated: 2025-06-02T15:48:14.019Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Health Center Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Health Center Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /patient.php. The manipulation of the argument itr_no leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA
can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310669 - https://vuldb.com/?ctiid.310669 - https://vuldb.com/?submit.587405 - https://github.com/shanranne/myCVE/issues/5 - https://www.sourcecodester.com/
CVE ID: CVE-2025-5377 State: PUBLISHED Published: 2025-05-31T12:31:04.281Z Last Updated: 2025-06-02T15:48:08.784Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Astun Technology Products: iShare Maps Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Astun Technology iShare Maps 5.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file historic1.asp. The manipulation of the argument Zoom leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional An
blic and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310670 - https://vuldb.com/?ctiid.310670 - https://vuldb.com/?submit.582835
CVE ID: CVE-2025-5378 State: PUBLISHED Published: 2025-05-31T13:00:06.594Z Last Updated: 2025-06-02T15:48:00.212Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Astun Technology Products: iShare Maps Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in Astun Technology iShare Maps 5.4.0. This affects an unknown part of the file mycouncil2.aspx. The manipulation of the argument atTxtStreet leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst N
d may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310671 - https://vuldb.com/?ctiid.310671 - https://vuldb.com/?submit.582841
CVE ID: CVE-2025-5379 State: PUBLISHED Published: 2025-05-31T13:31:04.543Z Last Updated: 2025-06-02T15:47:52.713Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: NuCom Products: NC-WR744G Problem Types: CWE-798, CWE-259 Description: A vulnerability classified as critical was found in NuCom NC-WR744G 8.5.5 Build 20200530.307. This vulnerability affects unknown code of the component Console Application. The manipulation of the argument CMCCAdmin/useradmin/CUAdmin leads to hard-coded credentials. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnric
r was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310672 - https://vuldb.com/?ctiid.310672 - https://vuldb.com/?submit.582868
CVE ID: CVE-2025-5380 State: PUBLISHED Published: 2025-05-31T14:00:13.164Z Last Updated: 2025-06-02T15:47:46.671Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: ashinigit 天青一白 Products: XueShengZhuSu 学生住宿管理系统 Problem Types: CWE-22 Description: A vulnerability, which was classified as critical, has been found in ashinigit 天青一白 XueShengZhuSu 学生住宿管理系统 up to 4d3f0ada0e71482c1e51fd5f5615e5a3d8bcbfbb. This issue affects some unknown processing of the file /upload/ of the component Image File Upload. The manipulation of the argument File leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the a
attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310673 - https://vuldb.com/?ctiid.310673 - https://vuldb.com/?submit.583119 - https://gitee.com/ashinigit/XueShengZhuSu/issues/IC9VZD
CVE ID: CVE-2025-5381 State: PUBLISHED Published: 2025-05-31T14:31:10.103Z Last Updated: 2025-06-02T15:47:39.708Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:P/I:N/A:N) Vendors: Yifang Products: CMS Problem Types: CWE-22 Description: A vulnerability, which was classified as problematic, was found in Yifang CMS up to 2.0.2. Affected is the function downloadFile of the file /api/File/downloadFile of the component Admin Panel. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310674 - https://
nd may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310674 - https://vuldb.com/?ctiid.310674 - https://gitee.com/wanglongcn/yifang/issues/IC0RCX
CVE ID: CVE-2025-5382 State: PUBLISHED Published: 2025-06-05T13:37:05.463Z Last Updated: 2025-06-05T13:58:59.736Z Vendors: Devolutions Products: Server Problem Types: CWE-284 Description: Improper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows a user with user management permission to remove or change administrators MFA. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2025-0011/
CVE ID: CVE-2025-5383 State: PUBLISHED Published: 2025-05-31T15:00:16.412Z Last Updated: 2025-06-02T15:47:33.395Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Yifang Products: CMS Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Yifang CMS up to 2.0.2 and classified as problematic. Affected by this issue is some unknown functionality of the component Article Management Module. The manipulation of the argument Default Value leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310676 - https://
nd may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310676 - https://vuldb.com/?ctiid.310676 - https://gitee.com/wanglongcn/yifang/issues/IC41YQ
CVE ID: CVE-2025-5384 State: PUBLISHED Published: 2025-05-31T16:00:09.839Z Last Updated: 2025-06-02T15:47:27.144Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: JeeWMS Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in JeeWMS up to 20250504. It has been classified as critical. This affects the function CgAutoListController of the file /cgAutoListController.do?datagrid. The manipulation leads to sql injection. It is possible to initiate the attack remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Additional Analyst Notes:
ous delivery. Therefore, version details for affected and updated releases are not available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310677 - https://vuldb.com/?ctiid.310677 - https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNV
CVE ID: CVE-2025-5385 State: PUBLISHED Published: 2025-05-31T16:31:06.803Z Last Updated: 2025-06-02T15:47:21.636Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: JeeWMS Problem Types: CWE-22 Description: A vulnerability was found in JeeWMS up to 20250504. It has been declared as critical. This vulnerability affects the function doAdd of the file /cgformTemplateController.do?doAdd. The manipulation leads to path traversal. The attack can be initiated remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
details of affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310678 - https://vuldb.com/?ctiid.310678 - https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNV
CVE ID: CVE-2025-5386 State: PUBLISHED Published: 2025-05-31T17:00:07.691Z Last Updated: 2025-06-02T15:47:15.106Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: JeeWMS Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in JeeWMS up to 20250504. It has been rated as critical. This issue affects the function transEditor of the file /cgformTransController.do?transEditor. The manipulation leads to sql injection. The attack may be initiated remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id
ffected releases are unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310679 - https://vuldb.com/?ctiid.310679 - https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNV
CVE ID: CVE-2025-5387 State: PUBLISHED Published: 2025-05-31T17:31:06.860Z Last Updated: 2025-06-02T15:47:09.497Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: JeeWMS Problem Types: CWE-284, CWE-266 Description: A vulnerability classified as critical has been found in JeeWMS up to 20250504. Affected is the function dogenerate of the file /generateController.do?dogenerate of the component File Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analys
de continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310680 - https://vuldb.com/?ctiid.310680 - https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNV
CVE ID: CVE-2025-5388 State: PUBLISHED Published: 2025-05-31T18:00:09.009Z Last Updated: 2025-06-02T15:47:03.627Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: JeeWMS Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in JeeWMS up to 20250504. Affected by this vulnerability is the function dogenerate of the file /generateController.do?dogenerate. The manipulation leads to sql injection. The attack can be launched remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Additional Analyst Notes: - CISA ADP Vu
Therefore, version details for affected and updated releases are not available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310681 - https://vuldb.com/?ctiid.310681 - https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNV
CVE ID: CVE-2025-5389 State: PUBLISHED Published: 2025-05-31T18:31:06.868Z Last Updated: 2025-06-02T15:46:55.361Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: JeeWMS Problem Types: CWE-284, CWE-266 Description: A vulnerability, which was classified as critical, has been found in JeeWMS up to 20250504. Affected by this issue is the function dogenerateOne2Many of the file /generateController.do?dogenerateOne2Many of the component File Handler. The manipulation leads to improper access controls. The attack may be launched remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are a
very with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310682 - https://vuldb.com/?ctiid.310682 - https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNV