Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-22881 State: PUBLISHED Published: 2025-02-26T01:44:17.551Z Last Updated: 2025-02-26T15:43:08.047Z Vendors: Delta Electronics Products: CNCSoft-G2 Problem Types: CWE-122 Description: Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00003_CNCSoft-G2%20-%20Heap-based%20Buffer%20Overflow_v1.pdf
CVE ID: CVE-2025-22882 State: PUBLISHED Published: 2025-04-30T07:34:43.503Z Last Updated: 2025-08-25T02:57:29.339Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: ISPSoft Problem Types: cwe-121 Stack-based Buffer Overflow Description: Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to leverage debugging logic to execute arbitrary code when parsing CBDGL file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00004_ISPSoft%20-%20Multiple%20Vulnerabilities_v2.pdf
CVE ID: CVE-2025-22883 State: PUBLISHED Published: 2025-04-30T07:36:13.595Z Last Updated: 2025-04-30T13:04:51.768Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: ISPSoft Problem Types: CWE-787 Description: Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00004_ISPSoft%20-%20Multiple%20Vulnerabilities_v1.pdf
CVE ID: CVE-2025-22884 State: PUBLISHED Published: 2025-04-30T07:37:08.747Z Last Updated: 2025-08-25T02:57:56.078Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: ISPSoft Problem Types: cwe-121 Stack-based Buffer Overflow Description: Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00004_ISPSoft%20-%20Multiple%20Vulnerabilities_v2.pdf
CVE ID: CVE-2025-22886 State: PUBLISHED Published: 2025-05-06T09:03:16.384Z Last Updated: 2025-05-06T15:02:46.649Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-401 Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-05.md
CVE ID: CVE-2025-22888 State: PUBLISHED Published: 2025-02-19T05:52:02.918Z Last Updated: 2025-02-19T14:54:27.745Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Six Apart Ltd. Products: Movable Type (8.4.x series), Movable Type (8.0.x series), Movable Type Advanced (8.4.x series), Movable Type Advanced (8.0.x series), Movable Type Premium (2.x series), Movable Type Premium (Advanced Edition) (2.x series), Movable Type Cloud Edition (8.x series), Movable Type Premium Cloud Edition (2.x series) Problem Types: CWE-79 Description: Movable Type contains a stored cross-site scripting vulnerability in the custom block edit page of MT Block Editor. If exploited, a
e contains a stored cross-site scripting vulnerability in the custom block edit page of MT Block Editor. If exploited, an arbitrary script may be executed on a logged-in user's web browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.movabletype.org/news/2025/02/mt-842-released.html - https://jvn.jp/en/jp/JVN48742353/
CVE ID: CVE-2025-22889 State: PUBLISHED Published: 2025-08-12T16:58:40.909Z Last Updated: 2025-11-03T17:32:13.009Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) Xeon(R) 6 processor with Intel(R) TDX Problem Types: Escalation of Privilege, CWE-1260 Description: Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processor with Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01311.html
CVE ID: CVE-2025-22890 State: PUBLISHED Published: 2025-02-06T07:05:20.725Z Last Updated: 2025-02-12T19:41:05.345Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: Humming Heads Inc. Products: Defense Platform Home Edition Problem Types: CWE-250 Description: Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.hummingheads.co.jp/dep/storelist/ - https://jvn.jp/en/jp/JVN66673020/
CVE ID: CVE-2025-22891 State: PUBLISHED Published: 2025-02-05T17:31:01.627Z Last Updated: 2025-02-05T18:21:12.073Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-772 Description: When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000139778
CVE ID: CVE-2025-22892 State: PUBLISHED Published: 2025-05-13T21:02:45.113Z Last Updated: 2025-05-14T13:54:00.645Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: OpenVINO™ model server software maintained by Intel(R) Problem Types: Denial of Service, CWE-400 Description: Uncontrolled resource consumption for some OpenVINO™ model server software maintained by Intel(R) before version 2024.4 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01272.html
CVE ID: CVE-2025-22893 State: PUBLISHED Published: 2025-08-12T16:58:42.671Z Last Updated: 2025-08-14T03:55:48.485Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) 800 Series Ethernet Problem Types: Escalation of Privilege, CWE-691 Description: Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01296.html
CVE ID: CVE-2025-22894 State: PUBLISHED Published: 2025-02-06T07:05:27.454Z Last Updated: 2025-02-12T19:41:05.151Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: Humming Heads Inc. Products: Defense Platform Home Edition Problem Types: CWE-422 Description: Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a result, an arbitrary DLL may be executed with SYSTEM privilege. Additional Analyst Notes: - CISA ADP Vulnrichm
red. As a result, an arbitrary DLL may be executed with SYSTEM privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.hummingheads.co.jp/dep/storelist/ - https://jvn.jp/en/jp/JVN66673020/
CVE ID: CVE-2025-22895 State: PUBLISHED Published: 2025-05-13T21:02:46.591Z Last Updated: 2025-05-14T13:52:56.794Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: Edge Orchestrator software for Intel(R) Tiber™ Edge Platform Problem Types: Information Disclosure, CWE-200 Description: Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.htm
CVE ID: CVE-2025-22896 State: PUBLISHED Published: 2025-02-13T21:31:37.888Z Last Updated: 2025-02-14T15:47:18.133Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: mySCADA Products: myPRO Manager Problem Types: CWE-312 Description: mySCADA myPRO Manager stores credentials in cleartext, which could allow an attacker to obtain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-16 - https://www.myscada.org/downloads/mySCADAPROManager/ - https://www.myscada.org/contacts/
CVE ID: CVE-2025-22897 State: PUBLISHED Published: 2025-03-04T03:44:44.313Z Last Updated: 2025-03-11T16:10:05.074Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-120 Description: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md
CVE ID: CVE-2025-22900 State: PUBLISHED Published: 2025-04-15T00:00:00.000Z Last Updated: 2025-04-16T14:19:37.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink N600R v4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xyqer1/TOTOLINK-N600R-setWanConfig-StackOverflow
CVE ID: CVE-2025-22903 State: PUBLISHED Published: 2025-04-15T00:00:00.000Z Last Updated: 2025-04-16T18:33:46.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the pin parameter in the function setWiFiWpsConfig. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xyqer1/TOTLINK-N600R-setWiFiWpsConfig-StackOverflow
CVE ID: CVE-2025-22904 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-03-20T13:21:25.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.edimax.com/edimax/global/ - http://re11s.com - https://github.com/xyqer1/RE11S_1.11-setWAN-3-StackOverflow
CVE ID: CVE-2025-22905 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-03-20T15:44:05.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.edimax.com/edimax/global/ - http://re11s.com - https://github.com/xyqer1/RE11S_1.11-mp-CommandInjection
CVE ID: CVE-2025-22906 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-03-24T17:40:39.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.edimax.com/edimax/global/ - http://re11s.com - https://github.com/xyqer1/RE11S_1.11-setWAN-CommandInjection
CVE ID: CVE-2025-22907 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-03-19T18:13:21.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.edimax.com/edimax/global/ - http://re11s.com - https://github.com/xyqer1/RE11S_1.11-formWlSiteSurvey-StackOverflow
CVE ID: CVE-2025-22911 State: PUBLISHED Published: 2025-04-15T00:00:00.000Z Last Updated: 2025-04-16T18:29:09.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formiNICbasicREP function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xyqer1/RE11S_1.11-formiNICbasicREP-StackOverflow - https://gist.github.com/xyqer1/6145c00a51093baad7ab5b8293a06e80
CVE ID: CVE-2025-22912 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-03-20T13:51:11.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.edimax.com/edimax/global/ - http://re11s.com - https://github.com/xyqer1/RE11S_1.11-formAccept-CommandInjection
CVE ID: CVE-2025-22913 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-03-20T13:54:30.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.edimax.com/edimax/global/ - https://github.com/xyqer1/RE11S_1.11-formStaDrvSetup-StackOverflow
CVE ID: CVE-2025-22916 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-03-19T14:12:00.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.edimax.com/edimax/global/ - http://re11s.com - https://github.com/xyqer1/RE11S_1.11-formPPPoESetup-StackOverflow
CVE ID: CVE-2025-22917 State: PUBLISHED Published: 2025-01-28T00:00:00.000Z Last Updated: 2025-01-29T16:03:43.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in Audemium ERP <=0.9.0 allows remote attackers to execute an arbitrary JavaScript payload in the web browser of a user by including a malicious payload into the 'type' parameter of list.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/timosarkar/vulnerabilities/blob/main/CVE-2025-22917/README.md
CVE ID: CVE-2025-22918 State: PUBLISHED Published: 2025-02-03T00:00:00.000Z Last Updated: 2025-03-18T18:24:11.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Polycom RealPresence Group 500 <=20 has Insecure Permissions due to automatically loaded cookies. This allows for the use of administrator functions, resulting in the leakage of sensitive user information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MinggongKs/Polycom/blob/main/README.md
CVE ID: CVE-2025-22919 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-11-03T21:00:10.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service (DoS) via opening a crafted AAC file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/11385
CVE ID: CVE-2025-22920 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-02-19T21:14:51.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via supplying a crafted media file in avformat when processing tile grid group streams. This can lead to a Denial of Service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/4bf784c0e5615c3f934e677d5de093a8be7da7ae - https://trac.ffmpeg.org/ticket/11389
CVE ID: CVE-2025-22921 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-11-03T21:00:12.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/11393
CVE ID: CVE-2025-22923 State: PUBLISHED Published: 2025-04-02T00:00:00.000Z Last Updated: 2025-04-03T15:20:57.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sending a crafted POST request to /Modules.php?modname=users/Staff.php&removefile. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OS4ED/openSIS-Classic - https://github.com/esusalla/vulnerability-research/tree/main/CVE-2025-22923
CVE ID: CVE-2025-22924 State: PUBLISHED Published: 2025-04-02T00:00:00.000Z Last Updated: 2025-04-03T15:19:21.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS4ED openSIS v7.0 through v9.1 contains a SQL injection vulnerability via the stu_id parameter at /modules/students/Student.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OS4ED/openSIS-Classic - https://github.com/esusalla/vulnerability-research/tree/main/CVE-2025-22924
CVE ID: CVE-2025-22925 State: PUBLISHED Published: 2025-04-02T00:00:00.000Z Last Updated: 2025-04-03T13:25:28.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the table parameter at /attendance/AttendanceCodes.php. The remote, authenticated attacker requires the admin role to successfully exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OS4ED/openSIS-Classic - https://github.com/esusalla/vulnerability-research/tree/main/CVE-2025-22925
CVE ID: CVE-2025-22926 State: PUBLISHED Published: 2025-04-03T00:00:00.000Z Last Updated: 2025-04-10T20:38:57.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal by sending a crafted POST request to /Modules.php?modname=messaging/Inbox.php&modfunc=save&filename. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OS4ED/openSIS-Classic - https://github.com/esusalla/vulnerability-research/tree/main/CVE-2025-22926
CVE ID: CVE-2025-22927 State: PUBLISHED Published: 2025-04-03T00:00:00.000Z Last Updated: 2025-04-21T18:34:54.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal by sending a crafted POST request to /Modules.php?modname=messaging/Inbox.php&modfunc=save&filename. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OS4ED/openSIS-Classic - https://github.com/esusalla/vulnerability-research/tree/main/CVE-2025-22927
CVE ID: CVE-2025-22928 State: PUBLISHED Published: 2025-04-03T00:00:00.000Z Last Updated: 2025-04-21T18:33:52.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the cp_id parameter at /modules/messages/Inbox.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OS4ED/openSIS-Classic - https://github.com/esusalla/vulnerability-research/tree/main/CVE-2025-22928
CVE ID: CVE-2025-22929 State: PUBLISHED Published: 2025-04-03T00:00:00.000Z Last Updated: 2025-04-21T18:32:23.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the filter_id parameter at /students/StudentFilters.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OS4ED/openSIS-Classic - https://github.com/esusalla/vulnerability-research/tree/main/CVE-2025-22929
CVE ID: CVE-2025-22930 State: PUBLISHED Published: 2025-04-03T00:00:00.000Z Last Updated: 2025-04-21T18:31:14.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the groupid parameter at /messaging/Group.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OS4ED/openSIS-Classic - https://github.com/esusalla/vulnerability-research/tree/main/CVE-2025-22930
CVE ID: CVE-2025-22931 State: PUBLISHED Published: 2025-04-03T00:00:00.000Z Last Updated: 2025-04-21T18:26:32.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: An insecure direct object reference (IDOR) in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attackers to access files uploaded by staff members. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OS4ED/openSIS-Classic - https://github.com/esusalla/vulnerability-research/tree/main/CVE-2025-22931
CVE ID: CVE-2025-22936 State: PUBLISHED Published: 2025-02-06T00:00:00.000Z Last Updated: 2025-02-12T14:05:46.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Smartcom Bulgaria AD Smartcom Ralink CPE/WiFi router SAM-4G1G-TT-W-VC, SAM-4F1F-TT-W-A1 allows a remote attacker to obtain sensitive information via the Weak default WiFi password generation algorithm in WiFi routers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://smartcom.com - https://sec.stanev.org/advisories/Smartcom_default_WPA_password.txt
CVE ID: CVE-2025-22937 State: PUBLISHED Published: 2025-03-31T00:00:00.000Z Last Updated: 2025-08-18T16:31:00.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Adtran 411 ONT vL80.00.0011.M2 allows attackers to escalate privileges via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1levaZk5aC6g6a2zPW8xlOIVAu9MFYvAz/view - https://lanrat.com/posts/adtran-isp-hacking/
CVE ID: CVE-2025-22938 State: PUBLISHED Published: 2025-03-31T00:00:00.000Z Last Updated: 2025-08-18T16:32:07.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1levaZk5aC6g6a2zPW8xlOIVAu9MFYvAz/view - https://lanrat.com/posts/adtran-isp-hacking/