Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-6196 State: PUBLISHED Published: 2025-06-17T14:29:42.228Z Last Updated: 2025-11-06T23:36:57.672Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 7 Problem Types: CWE-190 Description: A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when opening specially crafted EPUB files, leading to incorrect memory allocations. This issue causes the application to crash. Known affected usage includes desktop services like Tumbler, which may process malicious files automatically when browsing directories. While no direct remote attack vectors are confi
ich may process malicious files automatically when browsing directories. While no direct remote attack vectors are confirmed, any application using libgepub to parse user-supplied EPUB content could be vulnerable to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-6196 - https://bugzilla.redhat.com/show_bug.cgi?id=2373117 - https://gitlab.gnome.org/GNOME/libgepub/-/issues/18
CVE ID: CVE-2025-6197 State: PUBLISHED Published: 2025-07-18T07:48:22.523Z Last Updated: 2025-07-18T13:46:01.307Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Grafana Products: Grafana Problem Types: CWE-601 Description: An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://grafana.com/security/security-advisories/cve-2025-6197/ - https://grafana.com/blog/2025/07/17/
nt: References: - https://grafana.com/security/security-advisories/cve-2025-6197/ - https://grafana.com/blog/2025/07/17/grafana-security-release-medium-and-high-severity-fixes-for-cve-2025-6197-and-cve-2025-6023/
CVE ID: CVE-2025-6198 State: PUBLISHED Published: 2025-09-19T01:45:39.133Z Last Updated: 2025-09-25T09:15:44.032Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: SMCI Products: X13SEM-F Problem Types: CWE-347 Description: There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can update the system firmware with a specially crafted image. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.supermicro.com/en/support/security_BMC_IPMI_Sept_2025
CVE ID: CVE-2025-6199 State: PUBLISHED Published: 2025-06-17T14:30:42.665Z Last Updated: 2025-11-07T00:42:13.323Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-200 Description: A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being inc
ther than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2025-6199 - https://bugzilla.redhat.com/show_bug.cgi?id=2373147
CVE ID: CVE-2025-6200 State: PUBLISHED Published: 2025-07-11T06:00:11.028Z Last Updated: 2025-07-11T14:18:53.113Z Vendors: Unknown Products: GeoDirectory Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The GeoDirectory WordPress plugin before 2.8.120 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/27c35255-4963-4d93-85e7-9e7688e5eb2e/
CVE ID: CVE-2025-6201 State: PUBLISHED Published: 2025-06-19T02:10:36.805Z Last Updated: 2025-06-20T13:12:16.184Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: alekv Products: Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more Problem Types: CWE-79 Description: The Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's conversion-pixel in all versions up to, and including, 1.49.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for aut
0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/170a4cf2-d379-4c4e-b9e5-fb3b3bd91a40?source=cve - https://plugins.trac.wordpress.org/browser/woocommerce-google-adwords-conversion-tracking-tag/trunk/includes/pixels/class-shortcodes.php#L289 - https://wordpress.org/plugins/woocommerce-google-adwords-conversion-tracking-tag/ - https://plugin
shortcodes.php#L289 - https://wordpress.org/plugins/woocommerce-google-adwords-conversion-tracking-tag/ - https://plugins.trac.wordpress.org/changeset/3313714/woocommerce-google-adwords-conversion-tracking-tag/trunk/includes/pixels/class-shortcodes.php
CVE ID: CVE-2025-6202 State: PUBLISHED Published: 2025-09-15T15:06:22.635Z Last Updated: 2025-09-15T18:04:47.567Z Vendors: SK Hynix Products: DDR5 Description: Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhammer bit flips impacting the Hardware Integrity and the system's security. This issue affects DDR5: DIMMs produced from 2021-1 until 2024-12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://comsec.ethz.ch/phoenix - https://security.googleblog.com/2025/09/supporting-rowhammer-research-to.html
CVE ID: CVE-2025-6203 State: PUBLISHED Published: 2025-08-28T19:36:09.870Z Last Updated: 2025-10-23T18:18:34.361Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: HashiCorp Products: Vault, Vault Enterprise Problem Types: CWE-770 Description: A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit which results in excessive memory and CPU consumption of Vault. This may lead to a timeout in Vault’s auditing subroutine, potentially resulting in the Vault server to become unresponsive. This vulnerability, CVE-2025-6203, is fixed in Vault Community Edition 1.20.3 and Vault Enterprise 1.20.3, 1.19.9, 1.18.1
his vulnerability, CVE-2025-6203, is fixed in Vault Community Edition 1.20.3 and Vault Enterprise 1.20.3, 1.19.9, 1.18.14, and 1.16.25. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2025-24-vault-denial-of-service-though-complex-json-payloads/76393
CVE ID: CVE-2025-6204 State: PUBLISHED Published: 2025-08-04T09:14:08.343Z Last Updated: 2025-10-28T22:20:24.276Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: DELMIA Apriso Problem Types: CWE-94 Description: An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6204
CVE ID: CVE-2025-6205 State: PUBLISHED Published: 2025-08-04T09:14:42.308Z Last Updated: 2025-10-28T22:20:24.625Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: DELMIA Apriso Problem Types: CWE-862 Description: A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6205
CVE ID: CVE-2025-6206 State: PUBLISHED Published: 2025-06-24T08:23:55.136Z Last Updated: 2025-06-24T13:29:37.447Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CodeRevolution Products: Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit Problem Types: CWE-434 Description: The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aiomatic_image_editor_ajax_submit' function in all versions up to, and including, 2.5.0. This makes it possible for authenticated attackers, with Subs
mit' function in all versions up to, and including, 2.5.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. In order to exploit the vulnerability, there must be a value entered for the Stability.AI API key. The value can be arbitrary. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8e0ff2d6-65d2-4a54-b3e5-64b424013313?source=cve - https://codecanyon.net/item/aiomatic-automatic-ai-content-writer/38877369#item-description__changelog
CVE ID: CVE-2025-6207 State: PUBLISHED Published: 2025-08-05T07:24:14.925Z Last Updated: 2025-08-05T15:52:50.063Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: vjinfotech Products: WP Import Export Lite Problem Types: CWE-434 Description: The WP Import Export Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpie_tempalte_import' function in all versions up to, and including, 3.9.28. This makes it possible for authenticated attackers, with Subscriber-level access and above, and permissions granted by an Administrator, to upload arbitrary files on the affected site's server which may make remote code
missions granted by an Administrator, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/188eef67-de66-49c2-aa6c-2cf3b886ff66?source=cve - https://plugins.trac.wordpress.org/browser/wp-import-export-lite/trunk/includes/classes/class-wpie-common-action.php#L386 - https://plugins.trac.wordpress.org/changeset/3323402/
CVE ID: CVE-2025-6209 State: PUBLISHED Published: 2025-07-07T12:21:10.767Z Last Updated: 2025-07-07T13:45:55.539Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: run-llama Products: run-llama/llama_index Problem Types: CWE-29 Description: A path traversal vulnerability exists in run-llama/llama_index versions 0.12.27 through 0.12.40, specifically within the `encode_image` function in `generic_utils.py`. This vulnerability allows an attacker to manipulate the `image_path` input to read arbitrary files on the server, including sensitive system files. The issue arises due to improper validation or sanitization of the file path, enabling path traversal sequences t
files. The issue arises due to improper validation or sanitization of the file path, enabling path traversal sequences to access files outside the intended directory. The vulnerability is fixed in version 0.12.41. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/e89d14f8-bfe8-4c9a-bb2a-656c01cc9a68 - https://github.com/run-llama/llama_index/commit/cdeaab91a204d1c3527f177dac37390327aef274
CVE ID: CVE-2025-6210 State: PUBLISHED Published: 2025-07-07T09:55:46.893Z Last Updated: 2025-07-07T12:17:09.857Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: run-llama Products: run-llama/llama_index Problem Types: CWE-22 Description: A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. The vulnerability arises from inadequate handling of hardlinks in the load_data() method, where the security checks fail to differ
ability arises from inadequate handling of hardlinks in the load_data() method, where the security checks fail to differentiate between real files and hardlinks. This issue is resolved in version 0.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/a654b322-a509-4448-a1f5-0f22850b4687 - https://github.com/run-llama/llama_index/commit/a86c96ae0e662492eeb471b658ae849a93f628ff
CVE ID: CVE-2025-6211 State: PUBLISHED Published: 2025-07-10T13:04:34.401Z Last Updated: 2025-07-10T15:13:12.599Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: run-llama Products: run-llama/llama_index Problem Types: CWE-440 Description: A vulnerability in the DocugamiReader class of the run-llama/llama_index repository, up to version 0.12.28, involves the use of MD5 hashing to generate IDs for document chunks. This approach leads to hash collisions when structurally distinct chunks contain identical text, resulting in one chunk overwriting another. This can cause loss of semantically or legally important document content, breakage of parent-child chunk hi
ng another. This can cause loss of semantically or legally important document content, breakage of parent-child chunk hierarchies, and inaccurate or hallucinated responses in AI outputs. The issue is resolved in version 0.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/1a48a011-a3c5-4979-9ffc-9652280bc389 - https://github.com/run-llama/llama_index/commit/29b2e07e64ed7d302b1cc058185560b28eaa1352
CVE ID: CVE-2025-6212 State: PUBLISHED Published: 2025-06-26T09:22:03.276Z Last Updated: 2025-06-26T13:02:55.136Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: themefic Products: Ultra Addons for Contact Form 7 Problem Types: CWE-79 Description: The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Database module in versions 3.5.11 to 3.5.19 due to insufficient input sanitization and output escaping. The unfiltered field names are stored alongside the sanitized values. Later, the admin-side AJAX endpoint ajax_get_table_data() returns those raw names as JSON column headers, and the client-side DataTable
n-side AJAX endpoint ajax_get_table_data() returns those raw names as JSON column headers, and the client-side DataTables renderer injects them directly into the DOM without any HTML encoding. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f49e48cb-7d0b-4bcf-9090-869472b8442a?source=cve - https://plugins.trac.wordpress.org/browser/ultimate-addons-for-contact-form-7/trunk/addons/database/database.php - https://plugins.trac.wordpress.org/browser/ultimate-addons-for-c
for-contact-form-7/trunk/addons/database/database.php - https://plugins.trac.wordpress.org/browser/ultimate-addons-for-contact-form-7/trunk/addons/database/assets/js/database-pro-main.js - https://wordpress.org/plugins/ultimate-addons-for-contact-form-7/#developers - https://plugins.trac.wordpress.org/changeset/3316177/
CVE ID: CVE-2025-6213 State: PUBLISHED Published: 2025-07-22T09:22:44.147Z Last Updated: 2025-08-01T18:59:07.537Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: psauxit Products: Nginx Cache Purge Preload Problem Types: CWE-94 Description: The Nginx Cache Purge Preload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.1.1 via the 'nppp_preload_cache_on_update' function. This is due to insufficient sanitization of the $_SERVER['HTTP_REFERERER'] parameter passed from the 'nppp_handle_fastcgi_cache_actions_admin_bar' function. This makes it possible for authenticated attackers, with Administrator-level access and
che_actions_admin_bar' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bbe8c101-5e0a-4ba7-8ff7-4c8ed01e9ef5?source=cve - https://wordpress.org/plugins/fastcgi-cache-purge-and-preload-nginx/ - https://github.com/psaux-it/nginx-fastcgi-cache-purge-and-preload - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3332176%40fastcgi-cache-purge-and-preload-nginx&new=3332176%40fastcgi-cache-purge-and-preload-nginx&sfp_email=&sfph_mail=#file15
CVE ID: CVE-2025-6214 State: PUBLISHED Published: 2025-07-23T02:24:39.397Z Last Updated: 2025-07-23T18:28:29.460Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: omnishop Products: Omnishop – Mobile shop apps complementing your WooCommerce webshop Problem Types: CWE-352 Description: The Omnishop plugin for WordPress is vulnerable to Cross-Site Request Forgery on its /users/delete REST route in all versions up to, and including, 1.0.9. The route’s permission_callback only verifies that the requester is logged in, but fails to require any nonce or other proof of intent. This makes it possible for unauthenticated attackers to delete arbitrary user accounts via
ce or other proof of intent. This makes it possible for unauthenticated attackers to delete arbitrary user accounts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e7c936b8-3132-45e1-92ed-32ecdc9cbb1e?source=cve - https://wordpress.org/plugins/omnishop/#developers
CVE ID: CVE-2025-6215 State: PUBLISHED Published: 2025-07-23T02:24:37.162Z Last Updated: 2025-07-23T15:14:36.730Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: omnishop Products: Omnishop – Mobile shop apps complementing your WooCommerce webshop Problem Types: CWE-862 Description: The Omnishop plugin for WordPress is vulnerable to Unauthenticated Registration Bypass in all versions up to, and including, 1.0.9. Its /users/register endpoint is exposed to the public (permission_callback always returns true) and invokes wp_create_user() unconditionally, ignoring the site’s users_can_register option and any nonce or CAPTCHA checks. This makes it possible for un
ditionally, ignoring the site’s users_can_register option and any nonce or CAPTCHA checks. This makes it possible for unauthenticated attackers to create arbitrary user accounts (customer) on sites where registrations should be closed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/12d465d2-cd89-476e-b70a-743151a23053?source=cve - https://wordpress.org/plugins/omnishop/#developers
CVE ID: CVE-2025-6216 State: PUBLISHED Published: 2025-06-21T00:08:15.716Z Last Updated: 2025-06-23T16:14:45.285Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Allegra Products: Allegra Problem Types: CWE-640 Description: Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the password recovery mechanism. The issue results from reliance upon a predictable value when generating a password reset token. An attacker can leverage
e issue results from reliance upon a predictable value when generating a password reset token. An attacker can leverage this vulnerability to bypass authentication on the application. Was ZDI-CAN-27104. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-410/ - https://alltena.com/en/resources/release-notes/release-notes-for-release-8-1-4-and-release-7-5-2
CVE ID: CVE-2025-6217 State: PUBLISHED Published: 2025-06-21T00:08:40.255Z Last Updated: 2025-06-23T20:16:06.443Z Severity: LOW (CVSS 3.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: PEAK-System Products: Driver Problem Types: CWE-367 Description: PEAK-System Driver PCANFD_ADD_FILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of PEAK-System Driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the PCANFD_ADD_FILTERS IOCTL. The
n order to exploit this vulnerability. The specific flaw exists within the handling of the PCANFD_ADD_FILTERS IOCTL. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the kernel. Was ZDI-CAN-24161. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-408/
CVE ID: CVE-2025-6218 State: PUBLISHED Published: 2025-06-21T00:09:02.884Z Last Updated: 2025-06-23T20:15:40.017Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: RARLAB Products: WinRAR Problem Types: CWE-22 Description: RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of file paths within archive files. A crafted file path can cause the process to trave
c flaw exists within the handling of file paths within archive files. A crafted file path can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27198. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-409/ - https://www.win-rar.com/singlenewsview.html?&tx_ttnews%5Btt_news%5D=276&cHash=388885bd3908a40726f535c026f94eb6
CVE ID: CVE-2025-6220 State: PUBLISHED Published: 2025-06-18T11:16:31.235Z Last Updated: 2025-06-18T13:18:09.355Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: themefic Products: Ultra Addons for Contact Form 7 Problem Types: CWE-434 Description: The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_options' function in all versions up to, and including, 3.5.12. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional