Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311308 - https://vuldb.com/?ctiid.311308 - https://vuldb.com/?submit.590851 - https://github.com/tuooo/CVE/issues/7 - https://code-projects.org/
CVE ID: CVE-2025-5767 State: PUBLISHED Published: 2025-07-18T05:23:59.515Z Last Updated: 2025-07-18T14:23:43.724Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpwham Products: Crowdfunding for WooCommerce Problem Types: CWE-79 Description: The Crowdfunding for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions up to, and including, 3.1.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page
l access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a576f39e-42de-4881-a490-000850ea1d2d?source=cve - https://plugins.trac.wordpress.org/browser/crowdfunding-for-woocommerce/trunk/includes/shortcodes/class-wc-crowdfunding-shortcodes-progress-bar.php#L106 - https://wordpress.org/plugins/crowdfunding-for-woocommerce/#developers
CVE ID: CVE-2025-5770 State: PUBLISHED Published: 2025-11-05T19:02:48.434Z Last Updated: 2025-11-05T20:13:05.330Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: WSO2 Products: WSO2 Identity Server, WSO2 API Manager, WSO2 API Control Plane Problem Types: CWE-79 Description: A reflected cross-site scripting (XSS) vulnerability exists in the authentication endpoints of multiple WSO2 products due to a lack of output encoding. A malicious actor can inject arbitrary JavaScript payloads into the authentication endpoint, which are reflected back in the response, enabling browser-based attacks. Exploitation may result in redirection to malicious websites, UI manipul
n the response, enabling browser-based attacks. Exploitation may result in redirection to malicious websites, UI manipulation, or unauthorized data access from the victim’s browser. However, session-related cookies are protected with the httpOnly flag, which mitigates session hijacking via this vector. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4270/
CVE ID: CVE-2025-5777 State: PUBLISHED Published: 2025-06-17T12:29:34.506Z Last Updated: 2025-10-21T22:45:24.347Z Vendors: NetScaler Products: ADC, Gateway Problem Types: CWE-125 Description: Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420
CVE ID: CVE-2025-5778 State: PUBLISHED Published: 2025-06-06T14:00:18.211Z Last Updated: 2025-07-11T11:53:52.609Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: 1000 Projects Products: ABC Courier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. Affected is an unknown function of the file /admin. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311322 - https://vuldb.com/?ctiid.311322 - https://vuldb.com/?submit.591110 - https://vuldb.com/?submit.610260 - https://github.com/ubfbuz3/cve/issues/18 - https://1000projects.org/
CVE ID: CVE-2025-5779 State: PUBLISHED Published: 2025-06-06T14:31:04.895Z Last Updated: 2025-06-06T14:46:49.771Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /birthing.php. The manipulation of the argument itr_no/comp_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP
e launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311323 - https://vuldb.com/?ctiid.311323 - https://vuldb.com/?submit.591127 - https://github.com/Thiasap/HCPMS_PHP_vulns/blob/main/sql%20injection%20in%20birthing.php.pdf - https://code-projects.org/
CVE ID: CVE-2025-5780 State: PUBLISHED Published: 2025-06-06T15:00:16.869Z Last Updated: 2025-06-09T12:54:32.077Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view_dental.php. The manipulation of the argument itr_no leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311324 - https://vuldb.com/?ctiid.311324 - https://vuldb.com/?submit.591128 - https://github.com/Thiasap/HCPMS_PHP_vulns/blob/main/sql%20injection%20in%20view_dental.php.pdf - https://code-projects.org/
CVE ID: CVE-2025-5782 State: PUBLISHED Published: 2025-06-06T15:00:20.561Z Last Updated: 2025-06-06T15:46:15.585Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Employee Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Employee Record Management System 1.3. Affected by this issue is some unknown functionality of the file /resetpassword.php. The manipulation of the argument newpassword leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP
e launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311330 - https://vuldb.com/?ctiid.311330 - https://vuldb.com/?submit.591202 - https://github.com/f1rstb100d/myCVE/issues/57 - https://phpgurukul.com/
CVE ID: CVE-2025-5783 State: PUBLISHED Published: 2025-06-06T15:31:06.556Z Last Updated: 2025-06-06T15:52:53.126Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Employee Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Employee Record Management System 1.3. This affects an unknown part of the file /editmyexp.php. The manipulation of the argument emp3workduration leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311331 - https://vuldb.com/?ctiid.311331 - https://vuldb.com/?submit.591203 - https://github.com/f1rstb100d/myCVE/issues/58 - https://phpgurukul.com/
CVE ID: CVE-2025-5784 State: PUBLISHED Published: 2025-06-06T16:00:20.445Z Last Updated: 2025-06-06T16:11:19.542Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Employee Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vulnerability affects unknown code of the file /myexp.php. The manipulation of the argument emp3ctc leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311332 - https://vuldb.com/?ctiid.311332 - https://vuldb.com/?submit.591205 - https://github.com/f1rstb100d/myCVE/issues/60 - https://phpgurukul.com/
CVE ID: CVE-2025-5785 State: PUBLISHED Published: 2025-06-06T16:00:25.620Z Last Updated: 2025-06-06T16:09:28.562Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formWirelessTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311333 - https://vuldb.com/?ctiid.311333 - https://vuldb.com/?submit.591210 - https://github.com/Lena-lyy/cve/blob/main/7.md - https://www.totolink.net/
CVE ID: CVE-2025-5786 State: PUBLISHED Published: 2025-06-06T16:31:06.192Z Last Updated: 2025-06-09T15:15:49.844Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formDMZ of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311334 - https://vuldb.com/?ctiid.311334 - https://vuldb.com/?submit.591211 - https://github.com/Lena-lyy/cve/blob/main/8.md - https://www.totolink.net/
CVE ID: CVE-2025-5787 State: PUBLISHED Published: 2025-06-06T16:31:08.511Z Last Updated: 2025-06-09T15:15:17.776Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWsc of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnri
ched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311335 - https://vuldb.com/?ctiid.311335 - https://vuldb.com/?submit.591212 - https://github.com/Lena-lyy/cve/blob/main/9.md - https://www.totolink.net/
CVE ID: CVE-2025-5788 State: PUBLISHED Published: 2025-06-06T17:00:20.212Z Last Updated: 2025-06-06T18:44:02.472Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formReflashClientTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vu
launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311336 - https://vuldb.com/?ctiid.311336 - https://vuldb.com/?submit.591217 - https://github.com/awindog/cve/blob/main/10.md - https://www.totolink.net/
CVE ID: CVE-2025-5789 State: PUBLISHED Published: 2025-06-06T17:31:07.628Z Last Updated: 2025-06-06T18:42:48.076Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311337 - https://vuldb.com/?ctiid.311337 - https://vuldb.com/?submit.591218 - https://github.com/awindog/cve/blob/main/11.md - https://www.totolink.net/
CVE ID: CVE-2025-5790 State: PUBLISHED Published: 2025-06-06T17:31:11.039Z Last Updated: 2025-06-17T21:30:32.960Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. This vulnerability affects unknown code of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311338 - https://vuldb.com/?ctiid.311338 - https://vuldb.com/?submit.591219 - https://github.com/awindog/cve/blob/main/12.md - https://www.totolink.net/
CVE ID: CVE-2025-5791 State: PUBLISHED Published: 2025-06-06T13:10:07.157Z Last Updated: 2025-11-20T07:41:09.666Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: Red Hat OpenShift sandboxed containers 1.1, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4, Red Hat Trusted Profile Analyzer Problem Types: CWE-266 Description: A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list. Additional Analyst Notes
n exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:12359 - https://access.redhat.com/security/cve/CVE-2025-5791 - https://bugzilla.redhat.com/show_bug.cgi?id=2370001 - https://crates.io/crates/users - https://github.com/ogham/rust-users/issues/44 - https://rustsec.org/advisories/RUSTSEC-2025-0040.html
CVE ID: CVE-2025-5792 State: PUBLISHED Published: 2025-06-06T18:00:15.445Z Last Updated: 2025-06-06T18:35:40.134Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue affects some unknown processing of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CIS
may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311339 - https://vuldb.com/?ctiid.311339 - https://vuldb.com/?submit.591220 - https://github.com/byxs0x0/cve2/blob/main/1.md - https://www.totolink.net/
CVE ID: CVE-2025-5793 State: PUBLISHED Published: 2025-06-06T18:00:17.830Z Last Updated: 2025-06-06T18:33:39.202Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is an unknown function of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrich
ck remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311340 - https://vuldb.com/?ctiid.311340 - https://vuldb.com/?submit.591222 - https://github.com/byxs0x0/cve2/blob/main/2.md - https://www.totolink.net/
CVE ID: CVE-2025-5794 State: PUBLISHED Published: 2025-06-06T18:31:07.897Z Last Updated: 2025-06-09T15:11:15.451Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC5 Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in Tenda AC5 15.03.06.47. Affected by this issue is the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311348
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311348 - https://vuldb.com/?ctiid.311348 - https://vuldb.com/?submit.591223 - https://lavender-bicycle-a5a.notion.site/Tenda-AC5-formSetPPTPUserList-20a53a41781f806faf61cef61ed929c0?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-5795 State: PUBLISHED Published: 2025-06-06T18:31:11.459Z Last Updated: 2025-06-09T15:10:44.767Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC5 Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in Tenda AC5 1.0/15.03.06.47. This affects the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311349 - https
c and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311349 - https://vuldb.com/?ctiid.311349 - https://vuldb.com/?submit.591224 - https://lavender-bicycle-a5a.notion.site/Tenda-AC5-fromadvsetlanip-20a53a41781f805389dcd51fa04bc530?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-5796 State: PUBLISHED Published: 2025-06-06T19:00:18.208Z Last Updated: 2025-06-09T15:07:14.507Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Laundry System Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in code-projects Laundry System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /data/edit_type.php. The manipulation of the argument Type leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311350 - https://vuldb.com/?ctiid.311350 - https://vuldb.com/?submit.591267 - https://github.com/tuooo/CVE/issues/8 - https://code-projects.org/
CVE ID: CVE-2025-5797 State: PUBLISHED Published: 2025-06-06T19:00:20.038Z Last Updated: 2025-06-09T15:02:43.310Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Laundry System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in code-projects Laundry System 1.0 and classified as problematic. This issue affects some unknown processing of the file /data/insert_type.php. The manipulation of the argument Type leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311351 - https://vuldb.com/?ctiid.311351 - https://vuldb.com/?submit.591315 - https://github.com/tuooo/CVE/issues/9 - https://code-projects.org/
CVE ID: CVE-2025-5798 State: PUBLISHED Published: 2025-06-06T19:31:07.341Z Last Updated: 2025-06-09T15:10:10.112Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC8 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda AC8 16.03.34.09. It has been classified as critical. Affected is the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument timeType leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311352
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311352 - https://vuldb.com/?ctiid.311352 - https://vuldb.com/?submit.591266 - https://lavender-bicycle-a5a.notion.site/Tenda-AC8-fromSetSysTime-20a53a41781f807b9489fff42f262e11?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-5799 State: PUBLISHED Published: 2025-06-06T19:31:11.477Z Last Updated: 2025-06-09T15:09:23.510Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC8 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda AC8 16.03.34.09. It has been declared as critical. Affected by this vulnerability is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https: