Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299877 - https://vuldb.com/?ctiid.299877 - https://vuldb.com/?submit.515822 - https://github.com/chenyihao-cyber/CVE/issues/4 - https://phpgurukul.com/
CVE ID: CVE-2025-2379 State: PUBLISHED Published: 2025-03-17T13:31:05.213Z Last Updated: 2025-03-17T17:57:57.183Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Apartment Visitors Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /create-pass.php. The manipulation of the argument visname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299878 - https://vuldb.com/?ctiid.299878 - https://vuldb.com/?submit.515872 - https://github.com/aionman/cve/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-2380 State: PUBLISHED Published: 2025-03-17T14:00:07.240Z Last Updated: 2025-03-17T15:14:35.018Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Apartment Visitors Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299879 - https://vuldb.com/?ctiid.299879 - https://vuldb.com/?submit.515873 - https://github.com/aionman/cve/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-2381 State: PUBLISHED Published: 2025-03-17T14:31:05.103Z Last Updated: 2025-03-17T15:05:07.560Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Curfew e-Pass Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Curfew e-Pass Management System 1.0. Affected is an unknown function of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299880 - https://vuldb.com/?ctiid.299880 - https://vuldb.com/?submit.515896 - https://github.com/aionman/cve/issues/4 - https://phpgurukul.com/
CVE ID: CVE-2025-2382 State: PUBLISHED Published: 2025-03-17T15:00:09.149Z Last Updated: 2025-03-17T15:49:27.783Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Banquet Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Online Banquet Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/booking-search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299881 - https://vuldb.com/?ctiid.299881 - https://vuldb.com/?submit.515911 - https://github.com/aionman/cve/issues/5 - https://phpgurukul.com/
CVE ID: CVE-2025-2383 State: PUBLISHED Published: 2025-03-17T15:31:04.981Z Last Updated: 2025-03-17T18:18:39.120Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Doctor Appointment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some unknown functionality of the file /doctor/search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299882 - https://vuldb.com/?ctiid.299882 - https://vuldb.com/?submit.515913 - https://github.com/aionman/cve/issues/6 - https://phpgurukul.com/
CVE ID: CVE-2025-2384 State: PUBLISHED Published: 2025-03-17T16:00:06.142Z Last Updated: 2025-03-17T17:13:35.797Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Real Estate Property Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /InsertCustomer.php of the component Parameter Handler. The manipulation of the argument txtName/txtAddress/cmbCity/txtEmail/cmbGender/txtBirthDate/txtUserName2/txtPassword2 leads to sql injection. It is possible to initiate the attack remotely. The exploi
xtBirthDate/txtUserName2/txtPassword2 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299883 - https://vuldb.com/?ctiid.299883 - https://vuldb.com/?submit.516282 - https://github.com/yiijiayan/cve/blob/main/sql-cve.md - https://code-projects.org/
CVE ID: CVE-2025-2385 State: PUBLISHED Published: 2025-03-17T16:31:06.468Z Last Updated: 2025-03-17T17:10:42.735Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Modern Bag Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Modern Bag 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument userEmail/userPassword leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299884 - https://vuldb.co
e used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299884 - https://vuldb.com/?ctiid.299884 - https://vuldb.com/?submit.516544 - https://github.com/MiniSweetBeen/src/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-2386 State: PUBLISHED Published: 2025-03-17T17:00:06.791Z Last Updated: 2025-03-17T18:56:59.556Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Local Services Search Engine Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Local Services Search Engine Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /serviceman-search.php. The manipulation of the argument location leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299885 - https://vuldb.com/?ctiid.299885 - https://vuldb.com/?submit.516546 - https://github.com/aionman/cve/issues/7 - https://phpgurukul.com/
CVE ID: CVE-2025-2387 State: PUBLISHED Published: 2025-03-17T17:31:05.462Z Last Updated: 2025-03-17T18:23:27.462Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Food Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/ajax.php?action=add_to_cart. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299886 - https://vuldb.com/?ctiid.299886 - https://vuldb.com/?submit.516681 - https://github.com/aionman/cve/issues/9 - https://www.sourcecodester.com/
CVE ID: CVE-2025-2388 State: PUBLISHED Published: 2025-03-17T18:00:05.264Z Last Updated: 2025-03-17T18:34:14.455Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Keytop Products: 路内停车收费系统 Problem Types: CWE-287 Description: A vulnerability was found in Keytop 路内停车收费系统 2.7.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /saas/commonApi/park/getParks of the component API. The manipulation leads to improper authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299887 - https://
nd may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299887 - https://vuldb.com/?ctiid.299887 - https://vuldb.com/?submit.516710 - https://github.com/K-mxredo/MXdocument/wiki
CVE ID: CVE-2025-2389 State: PUBLISHED Published: 2025-03-17T18:31:04.501Z Last Updated: 2025-03-18T13:36:25.391Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: code-projects Products: Blood Bank Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_city.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299888 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299888 - https://vuldb.com/?ctiid.299888 - https://vuldb.com/?submit.516906 - https://github.com/intercpt/XSS1/blob/main/SQL7.md - https://code-projects.org/
CVE ID: CVE-2025-2390 State: PUBLISHED Published: 2025-03-17T19:00:08.626Z Last Updated: 2025-03-18T14:54:15.479Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Blood Bank Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the file /user_dashboard/add_donor.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299889 - https
c and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299889 - https://vuldb.com/?ctiid.299889 - https://vuldb.com/?submit.516908 - https://github.com/intercpt/XSS1/blob/main/SQL8.md - https://code-projects.org/
CVE ID: CVE-2025-2391 State: PUBLISHED Published: 2025-03-17T19:31:04.386Z Last Updated: 2025-03-18T16:24:41.499Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Blood Bank Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Blood Bank Management System 1.0. This vulnerability affects unknown code of the file /admin/admin_login.php of the component Admin Login Page. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299890 - https://vuldb.com/?ctiid.299890 - https://vuldb.com/?submit.516910 - https://github.com/intercpt/XSS1/blob/main/SQL10.md - https://code-projects.org/
CVE ID: CVE-2025-2392 State: PUBLISHED Published: 2025-03-17T20:00:07.503Z Last Updated: 2025-03-18T16:19:57.036Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: code-projects Products: Online Class and Exam Scheduling System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/activate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299891 - https://vuldb.com/?ctiid.299891 - https://vuldb.com/?submit.516912 - https://github.com/intercpt/XSS1/blob/main/SQL11.md - https://code-projects.org/
CVE ID: CVE-2025-2393 State: PUBLISHED Published: 2025-03-17T20:31:04.900Z Last Updated: 2025-03-18T14:33:24.704Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: code-projects Products: Online Class and Exam Scheduling System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/salut_del.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299892 - https://vuldb.com/?ctiid.299892 - https://vuldb.com/?submit.516917 - https://github.com/intercpt/XSS1/blob/main/SQL12.md - https://code-projects.org/
CVE ID: CVE-2025-2394 State: PUBLISHED Published: 2025-05-23T00:03:32.603Z Last Updated: 2025-09-30T05:50:10.557Z Vendors: Ecovacs Products: Ecovacs Mobile and Android Application Problem Types: CWE-798 Description: Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.themissinglink.com.au/security-advisories/cve-2025-2394 - https://www.ecovacs.com/global/userhelp/dsa20250507001
CVE ID: CVE-2025-2395 State: PUBLISHED Published: 2025-03-17T05:51:02.041Z Last Updated: 2025-03-17T12:55:25.533Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: e-Excellence Products: U-Office Force Problem Types: CWE-565 Description: The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to use a particular API and alter cookies to log in as an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10011-3de72-1.html - https://www.twcert.org.tw/en/cp-139-10012-d5bbc-2.html
CVE ID: CVE-2025-2396 State: PUBLISHED Published: 2025-03-17T05:58:47.989Z Last Updated: 2025-03-17T12:54:14.143Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: e-Excellence Products: U-Office Force Problem Types: CWE-434 Description: The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10013-0d371-1.html - https://www.twcert.org.tw/en/cp-139-10014-69aa5-2.html
CVE ID: CVE-2025-2397 State: PUBLISHED Published: 2025-03-17T21:00:11.859Z Last Updated: 2025-03-18T14:25:59.502Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: China Mobile Products: P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P, GT3200-8G8P Problem Types: CWE-285, CWE-266 Description: A vulnerability was found in China Mobile P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P and GT3200-8G8P up to 20250305. It has been declared as problematic. This vulnerability affects unknown code of the component Telnet Service. The manipulation leads to improper authorization. The attack can only be initiated within the local network. The exploit has been di
tion leads to improper authorization. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299896 - https://vuldb.com/?ctiid.299896 - https://vuldb.com/?submit.514957 - https://github.com/Fizz-L/Vulnerability-report/blob/main/Unauthorized%20access%20to%20execute%20the%20telnet%20command.md
CVE ID: CVE-2025-2398 State: PUBLISHED Published: 2025-03-17T21:31:04.130Z Last Updated: 2025-03-18T14:24:37.754Z Severity: N/A (CVSS 8.3 AV:N/AC:L/Au:M/C:C/I:C/A:C) Vendors: China Mobile Products: P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P, GT3200-8G8P Problem Types: CWE-1392 Description: A vulnerability was found in China Mobile P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P and GT3200-8G8P up to 20250305. It has been rated as critical. This issue affects some unknown processing of the component CLI su Command Handler. The manipulation leads to use of default credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
default credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299897 - https://vuldb.com/?ctiid.299897 - https://github.com/Fizz-L/Vulnerability-report/blob/main/Unauthorized%20access%20to%20execute%20the%20telnet%20command.md
CVE ID: CVE-2025-2400 State: REJECTED Published: N/A Last Updated: 2025-04-16T22:15:46.741Z Description: No description available.
CVE ID: CVE-2025-2401 State: PUBLISHED Published: 2025-03-17T12:23:28.435Z Last Updated: 2025-03-17T15:55:04.345Z Vendors: Immunity Debugger Products: Immunity Debugger Problem Types: CWE-119 Description: Buffer overflow vulnerability in Immunity Debugger affecting version 1.85, its exploitation could allow a local attacker to execute arbitrary code, due to the lack of proper boundary checking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/buffer-overflow-immunity-debugger
CVE ID: CVE-2025-2402 State: PUBLISHED Published: 2025-03-31T06:11:39.805Z Last Updated: 2025-03-31T12:50:47.792Z Vendors: KNIME Products: KNIME Business Hub Problem Types: CWE-259 Description: A hard-coded, non-random password for the object store (minio) of KNIME Business Hub in all versions except the ones listed below allows an unauthenticated remote attacker in possession of the password to read and manipulate swapped jobs or read and manipulate in- and output data of active jobs. It is also possible to cause a denial-of-service of most functionality of KNIME Business Hub by writing large amounts of data to the object store directly. There are no viable workarounds therefore we strongly
Hub by writing large amounts of data to the object store directly. There are no viable workarounds therefore we strongly recommend to update to one of the following versions of KNIME Business Hub: * 1.13.2 or later * 1.12.3 or later * 1.11.3 or later * 1.10.3 or later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.knime.com/security/advisories#CVE-2025-2402
CVE ID: CVE-2025-2403 State: PUBLISHED Published: 2025-06-24T11:33:10.236Z Last Updated: 2025-06-25T12:42:35.650Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Hitachi Energy Products: Relion 670/650 and SAM600-IO Problem Types: CWE-770 Description: A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and SAM600-IO series device that if exploited could potentially cause critical functions like LDCM (Line Distance Communication Module) to malfunction. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://publisher.hitachienergy.com/preview?DocumentID=8DBD00021
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://publisher.hitachienergy.com/preview?DocumentID=8DBD000216&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2025-2404 State: PUBLISHED Published: 2025-09-16T08:33:28.969Z Last Updated: 2025-09-19T08:22:41.474Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Ubit Information Technologies Products: STOYS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ubit Information Technologies STOYS allows Cross-Site Scripting (XSS).This issue affects STOYS: from 2 before 20250916. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0251
CVE ID: CVE-2025-2407 State: PUBLISHED Published: 2025-05-27T07:52:40.619Z Last Updated: 2025-05-27T13:59:38.622Z Vendors: Mobatime Products: AMX MTAPI, AMXGT-100 Problem Types: CWE-306, CWE-862 Description: Missing Authentication & Authorization in Web-API in Mobatime AMX MTAPI v6 on IIS allows adversaries to unrestricted access via the network. The vulnerability is fixed in Version 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mobatimemtsl.github.io/Vulnerability-References/
CVE ID: CVE-2025-2408 State: PUBLISHED Published: 2025-04-10T12:30:48.931Z Last Updated: 2025-04-10T13:03:28.479Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-1220 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 13.12 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions users could bypass IP access restrictions and view sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/525323 - https://hackerone.com/reports/3027775