Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-8920 State: PUBLISHED Published: 2025-08-13T18:02:05.795Z Last Updated: 2025-08-15T21:09:43.139Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Diario Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in Portabilis i-Diario 1.6. Affected by this vulnerability is an unknown functionality of the file /dicionario-de-termos-bncc of the component Dicionário de Termos BNCC Page. The manipulation of the argument Planos de ensino leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclo
remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319879 - https://vuldb.com/?ctiid.319879 - https://vuldb.com/?submit.629168 - https://github.com/CVE-Hunters/CVE/blob/main/i-diario/CVE-2025-8920.md - https://github.com/FeMarb/CVEs/blob/6eeefb2749bb6165557ed4664a0680456131e4de/I-diario/Cross-Site%20Scripting%20(XSS)%20Storage%20in%20endpoint%20_dicionario-de-termos-bncc%20parameter%20Planos%20de%20ensino%20input%20field.md
CVE ID: CVE-2025-8921 State: PUBLISHED Published: 2025-08-13T18:02:07.771Z Last Updated: 2025-08-13T18:22:11.587Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Job Diary Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Job Diary 1.0. Affected by this issue is some unknown functionality of the file /user-apply.php. The manipulation of the argument job_title leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319880 - https://vuldb.com/?ctii
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319880 - https://vuldb.com/?ctiid.319880 - https://vuldb.com/?submit.631294 - https://github.com/caesar-power/CVE/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-8922 State: PUBLISHED Published: 2025-08-13T18:32:05.409Z Last Updated: 2025-08-13T19:39:32.268Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Job Diary Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Job Diary 1.0. This affects an unknown part of the file /admin-inbox.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319881 - https://vuldb.com/?ctiid.319881 - https://vuldb
s: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319881 - https://vuldb.com/?ctiid.319881 - https://vuldb.com/?submit.631295 - https://github.com/caesar-power/CVE/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-8923 State: PUBLISHED Published: 2025-08-13T18:32:07.347Z Last Updated: 2025-08-13T18:58:44.549Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Job Diary Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in code-projects Job Diary 1.0. This vulnerability affects unknown code of the file /edit-details.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319882 - https://vuldb.com/?ctiid.319882 - https:
st Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319882 - https://vuldb.com/?ctiid.319882 - https://vuldb.com/?submit.631296 - https://github.com/caesar-power/CVE/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-8924 State: PUBLISHED Published: 2025-08-13T19:02:06.367Z Last Updated: 2025-08-13T20:38:07.618Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Water Billing System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in Campcodes Online Water Billing System 1.0. This issue affects some unknown processing of the file /viewbill.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319883 - https://vuldb
y be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319883 - https://vuldb.com/?ctiid.319883 - https://vuldb.com/?submit.631543 - https://github.com/jue22/cve/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-8925 State: PUBLISHED Published: 2025-08-13T19:02:08.749Z Last Updated: 2025-08-13T20:38:48.961Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Sports Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Sports Management System 1.0. Affected is an unknown function of the file /Admin/match.php. The manipulation of the argument code leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319884 - https://vul
may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319884 - https://vuldb.com/?ctiid.319884 - https://vuldb.com/?submit.631551 - https://github.com/Kerjo01/day1/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-8926 State: PUBLISHED Published: 2025-08-13T19:32:07.691Z Last Updated: 2025-08-14T13:31:12.556Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: COVID 19 Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319885 - https://vuldb.com/?ctiid.319885 - https://vuldb.com/?submit.631603 - https://github.com/lrjbsyh/CVE_Hunter/issues/2#issue-3307768438 - https://www.sourcecodester.com/
CVE ID: CVE-2025-8927 State: PUBLISHED Published: 2025-08-13T20:02:11.088Z Last Updated: 2025-08-13T20:13:14.628Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: mtons Products: mblog Problem Types: CWE-307, CWE-799 Description: A vulnerability was determined in mtons mblog up to 3.5.0. Affected by this issue is some unknown functionality of the file /email/send_code of the component Verification Code Handler. The manipulation of the argument email leads to improper restriction of excessive authentication attempts. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploi
be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319886 - https://vuldb.com/?ctiid.319886 - https://vuldb.com/?submit.631654 - https://gitee.com/mtons/mblog/issues/ICPMJR
CVE ID: CVE-2025-8928 State: PUBLISHED Published: 2025-08-13T22:02:09.058Z Last Updated: 2025-08-14T14:51:24.015Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Medical Store Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in code-projects Medical Store Management System 1.0. This affects an unknown part of the file UpdateMedicines.java of the component Update Medicines Page. The manipulation of the argument productNameTxt leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vu
e attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319887 - https://vuldb.com/?ctiid.319887 - https://vuldb.com/?submit.631661 - https://www.yuque.com/gongzi-jsnek/xb2q3a/ktz2n3ywyt85zct3?singleDoc - https://www.yuque.com/gongzi-jsnek/xb2q3a/ktz2n3ywyt85zct3#vulnerability-details-and-poc - https://code-projects.org/
CVE ID: CVE-2025-8929 State: PUBLISHED Published: 2025-08-13T22:02:13.731Z Last Updated: 2025-08-14T14:51:18.220Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Medical Store Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Medical Store Management System 1.0. This vulnerability affects unknown code of the file MainPanel.java. The manipulation of the argument searchTxt leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319888 - https://vuldb.com/?ctiid.319888 - https://vuldb.com/?submit.631662 - https://www.yuque.com/gongzi-jsnek/xb2q3a/peapz0yqgga5b3q2?singleDoc - https://www.yuque.com/gongzi-jsnek/xb2q3a/peapz0yqgga5b3q2#vulnerability-details-and-poc - https://code-projects.org/
CVE ID: CVE-2025-8930 State: PUBLISHED Published: 2025-08-14T02:32:08.630Z Last Updated: 2025-08-14T14:50:24.833Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Medical Store Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Medical Store Management System 1.0. This issue affects some unknown processing of the file UpdateCompany.java of the component Update Company Page. The manipulation of the argument companyNameTxt leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnric
ted remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319889 - https://vuldb.com/?ctiid.319889 - https://vuldb.com/?submit.631663 - https://www.yuque.com/gongzi-jsnek/xb2q3a/uv3gmxc8tpmbg4vw?singleDoc - https://www.yuque.com/gongzi-jsnek/xb2q3a/uv3gmxc8tpmbg4vw#vulnerability-details-and-poc - https://code-projects.org/
CVE ID: CVE-2025-8931 State: PUBLISHED Published: 2025-08-14T02:32:12.949Z Last Updated: 2025-08-14T14:50:18.679Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Medical Store Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in code-projects Medical Store Management System 1.0. Affected is an unknown function of the file ChangePassword.java. The manipulation of the argument newPassTxt leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319890 - https://vuldb.com/?ctiid.319890 - https://vuldb.com/?submit.631664 - https://www.yuque.com/gongzi-jsnek/xb2q3a/tdgsgs7k1wrhc20v?singleDoc - https://www.yuque.com/gongzi-jsnek/xb2q3a/tdgsgs7k1wrhc20v#vulnerability-details-and-poc - https://code-projects.org/
CVE ID: CVE-2025-8932 State: PUBLISHED Published: 2025-08-14T03:02:05.245Z Last Updated: 2025-08-14T14:50:12.328Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: 1000 Projects Products: Sales Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in 1000 Projects Sales Management System 1.0. This vulnerability affects unknown code of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3198
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319894 - https://vuldb.com/?ctiid.319894 - https://vuldb.com/?submit.631703 - https://github.com/lan041221/cvec/issues/3 - https://1000projects.org/
CVE ID: CVE-2025-8933 State: PUBLISHED Published: 2025-08-14T03:32:05.751Z Last Updated: 2025-08-15T21:38:30.012Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: 1000 Projects Products: Sales Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in 1000 Projects Sales Management System 1.0. This issue affects some unknown processing of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319895 - https://vuldb.com/?ctiid.319895 - https://vuldb.com/?submit.631708 - https://github.com/lan041221/cvec/issues/4 - https://1000projects.org/
CVE ID: CVE-2025-8934 State: PUBLISHED Published: 2025-08-14T04:02:06.332Z Last Updated: 2025-08-15T21:37:27.597Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: 1000 Projects Products: Sales Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in 1000 Projects Sales Management System 1.0. Affected is an unknown function of the file /sales.php. The manipulation of the argument select2112 leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319896 - https:
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319896 - https://vuldb.com/?ctiid.319896 - https://vuldb.com/?submit.631727 - https://github.com/lan041221/cvec/issues/5 - https://1000projects.org/
CVE ID: CVE-2025-8935 State: PUBLISHED Published: 2025-08-14T04:02:08.460Z Last Updated: 2025-08-15T21:36:35.567Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: 1000 Projects Products: Sales Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319897 - https://vuldb.com/?ctiid.319897 - https://vuldb.com/?submit.631729 - https://github.com/lan041221/cvec/issues/6 - https://1000projects.org/
CVE ID: CVE-2025-8936 State: PUBLISHED Published: 2025-08-14T04:32:05.980Z Last Updated: 2025-08-15T21:35:30.105Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: 1000 Projects Products: Sales Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in 1000 Projects Sales Management System 1.0. Affected by this issue is some unknown functionality of the file /superstore/dist/dordupdate.php. The manipulation of the argument select2 leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319898 - https://vuldb.com/?ctiid.319898 - https://vuldb.com/?submit.631748 - https://github.com/lan041221/cvec/issues/7 - https://1000projects.org/
CVE ID: CVE-2025-8937 State: PUBLISHED Published: 2025-08-14T04:32:11.130Z Last Updated: 2025-08-15T21:35:41.077Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: N350R Problem Types: CWE-77, CWE-74 Description: A vulnerability has been found in TOTOLINK N350R 1.2.3-B20130826. This vulnerability affects unknown code of the file /boafrm/formSysCmd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319900 - https://vuldb.com/?ctiid.319900 - https://vuldb.com/?submit.
Vulnrichment: References: - https://vuldb.com/?id.319900 - https://vuldb.com/?ctiid.319900 - https://vuldb.com/?submit.631826 - https://vuldb.com/?submit.631838 - https://github.com/rew1X/CVE/blob/main/TOTOLINK/N350R_formSysCmd.pdf - https://github.com/rew1X/CVE/blob/main/TOTOLINK/formSysCmd/formSysCmd.md - https://www.totolink.net/
CVE ID: CVE-2025-8938 State: PUBLISHED Published: 2025-08-14T05:02:09.169Z Last Updated: 2025-08-15T12:58:21.913Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:W/RC:UR) Vendors: TOTOLINK Products: N350R Problem Types: CWE-912 Description: A vulnerability was found in TOTOLINK N350R 1.2.3-B20130826. This issue affects the function formSysTel of the file /boafrm/formSysTel of the component Telnet Service. The manipulation of the argument TelEnabled leads to backdoor. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319901 - https://vuldb.com/?c
ed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319901 - https://vuldb.com/?ctiid.319901 - https://vuldb.com/?submit.631837 - https://github.com/rew1X/CVE/blob/main/TOTOLINK/formSysTel/formSysTel.md - https://github.com/rew1X/CVE/blob/main/TOTOLINK/formSysTel/formSysTel.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-8939 State: PUBLISHED Published: 2025-08-14T05:32:07.802Z Last Updated: 2025-08-15T12:58:16.253Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC20 Problem Types: CWE-120, CWE-119 Description: A vulnerability was determined in Tenda AC20 up to 16.03.08.12. Affected is an unknown function of the file /goform/WifiGuestSet. The manipulation of the argument shareSpeed leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319902 - https://vuldb.com/?ctiid.319902 - https
yst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319902 - https://vuldb.com/?ctiid.319902 - https://vuldb.com/?submit.631829 - https://github.com/lin-3-start/lin-cve/blob/main/Tenda%20AC20/Tenda%20AC20.md - https://github.com/lin-3-start/lin-cve/blob/main/Tenda%20AC20/Tenda%20AC20.md#3-poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-8940 State: PUBLISHED Published: 2025-08-14T05:32:11.901Z Last Updated: 2025-08-15T12:58:09.232Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC20 Problem Types: CWE-120, CWE-119 Description: A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this vulnerability is the function strcpy of the file /goform/saveParentControlInfo. The manipulation of the argument Time leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319903 - https://vuldb.com/?ctii
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319903 - https://vuldb.com/?ctiid.319903 - https://vuldb.com/?submit.631836 - https://github.com/lin-3-start/lin-cve/blob/main/Tenda%20AC20-2/Tenda%20AC20-2.md - https://github.com/lin-3-start/lin-cve/blob/main/Tenda%20AC20-2/Tenda%20AC20-2.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-8941 State: PUBLISHED Published: 2025-08-13T14:42:37.570Z Last Updated: 2025-11-20T20:47:52.029Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat En
Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Web Terminal 1.11 on RHEL 9, Red Hat Web Terminal 1.12 on RHEL 9, cert-manager operator for Red Hat OpenShift 1.16, Compliance Operator 1, Red Hat Discovery 2, Red Hat Insights proxy 1.5, Red Hat OpenShift sandboxed containers 1.1 Problem Types
ce Operator 1, Red Hat Discovery 2, Red Hat Insights proxy 1.5, Red Hat OpenShift sandboxed containers 1.1 Problem Types: CWE-22 Description: A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:14557 - https://access.redhat.com/errata/RHSA-2025:15099 - https://access.redhat.com/errata/RHSA-2025:15100 - https://access.redhat.com/errata/RHSA-2025:15101 - https://access.redhat.com/err
ess.redhat.com/errata/RHSA-2025:15100 - https://access.redhat.com/errata/RHSA-2025:15101 - https://access.redhat.com/errata/RHSA-2025:15102 - https://access.redhat.com/errata/RHSA-2025:15103 - https://access.redhat.com/errata/RHSA-2025:15104 - https://access.redhat.com/errata/RHSA-2025:15105 - https://access.redhat.com/errata/RHSA-2025:15106 - https://access.redhat.com/errata/RHSA-2025:15107 - https://access.redhat.com/errata/RHSA-2025:15709 - https://access.redhat.com/errata/RHSA-2025:15827 - https://access.redhat.com/errata/RHSA-2025:15828 - https://access.redhat.com/errata/RHSA-2025:16524 - https://access.redhat.com/errata/RHSA-2025:17181 - https://access.redhat.com/errata/RHSA-2025:18219