Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-4846 State: PUBLISHED Published: 2025-05-18T01:00:06.928Z Last Updated: 2025-05-19T15:23:11.477Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component MPUT Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309315 - https://vuldb.com/?ctiid.309315 - https://
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309315 - https://vuldb.com/?ctiid.309315 - https://vuldb.com/?submit.572486 - https://fitoxs.com/exploit/exploit-e7cb64fdddd4ab031f57007e733602f76b425cd10f6f4859f27767c3657c0a49.txt
CVE ID: CVE-2025-4847 State: PUBLISHED Published: 2025-05-18T01:31:04.633Z Last Updated: 2025-05-19T15:23:06.175Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. This vulnerability affects unknown code of the component MLS Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309316 - https://vuldb.com/?ctiid.309316 - https://vul
tes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309316 - https://vuldb.com/?ctiid.309316 - https://vuldb.com/?submit.572487 - https://fitoxs.com/exploit/exploit-6f163f955398f8c30e5a268549120ae07caea315e65a6af636072064b431c94f.txt
CVE ID: CVE-2025-4848 State: PUBLISHED Published: 2025-05-18T02:00:05.621Z Last Updated: 2025-05-19T14:34:03.620Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. This issue affects some unknown processing of the component RECV Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309317 - https://vuldb.com/?ctiid.309317 - https://vuld
es: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309317 - https://vuldb.com/?ctiid.309317 - https://vuldb.com/?submit.572492 - https://fitoxs.com/exploit/exploit-3f3419055fcb21a0a640dd7b8d10d4167188d325652b9242eb38079a76d0bf57.txt
CVE ID: CVE-2025-4849 State: PUBLISHED Published: 2025-05-18T02:31:07.150Z Last Updated: 2025-05-19T14:33:20.620Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: TOTOLINK Products: N300RH Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101. It has been rated as critical. Affected by this issue is the function CloudACMunualUpdateUserdata of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument url leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309320
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309320 - https://vuldb.com/?ctiid.309320 - https://vuldb.com/?submit.575072 - https://github.com/CH13hh/tmp_store_cc/blob/main/tt/ta/m1.md - https://www.totolink.net/
CVE ID: CVE-2025-4850 State: PUBLISHED Published: 2025-05-18T03:00:09.448Z Last Updated: 2025-05-19T14:29:39.205Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: TOTOLINK Products: N300RH Problem Types: CWE-77, CWE-74 Description: A vulnerability classified as critical has been found in TOTOLINK N300RH 6.1c.1390_B20191101. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument plugin_name leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309321 - https
c and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309321 - https://vuldb.com/?ctiid.309321 - https://vuldb.com/?submit.575073 - https://github.com/CH13hh/tmp_store_cc/blob/main/tt/ta/m2.md - https://www.totolink.net/
CVE ID: CVE-2025-4851 State: PUBLISHED Published: 2025-05-18T03:31:05.521Z Last Updated: 2025-05-19T14:28:55.806Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: TOTOLINK Products: N300RH Problem Types: CWE-77, CWE-74 Description: A vulnerability classified as critical was found in TOTOLINK N300RH 6.1c.1390_B20191101. This vulnerability affects the function setUploadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309322 - https://v
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309322 - https://vuldb.com/?ctiid.309322 - https://vuldb.com/?submit.575074 - https://github.com/CH13hh/tmp_store_cc/blob/main/tt/ta/m3.md - https://www.totolink.net/
CVE ID: CVE-2025-4852 State: PUBLISHED Published: 2025-05-18T03:50:12.393Z Last Updated: 2025-05-19T14:27:57.265Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: TOTOLINK Products: A3002R Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in TOTOLINK A3002R 2.1.1-B20230720.1011. This issue affects some unknown processing of the component VPN Page. The manipulation of the argument Comment leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309323 - https://
nd may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309323 - https://vuldb.com/?ctiid.309323 - https://vuldb.com/?submit.575099 - https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/A3002RU_V2/XSS_VPN - https://www.totolink.net/
CVE ID: CVE-2025-4855 State: PUBLISHED Published: 2025-07-08T23:22:49.550Z Last Updated: 2025-07-09T13:14:58.196Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Schiocco Products: Support Board Problem Types: CWE-639 Description: The Support Board plugin for WordPress is vulnerable to unauthorized access/modification/deletion of data due to use of hardcoded default secrets in the sb_encryption() function in all versions up to, and including, 3.8.0. This makes it possible for unauthenticated attackers to bypass authorization and execute arbitrary AJAX actions defined in the sb_ajax_execute() function. An attacker can use this vulnerability to exploit CVE-2
rbitrary AJAX actions defined in the sb_ajax_execute() function. An attacker can use this vulnerability to exploit CVE-2025-4828 and various other functions unauthenticated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/afd48bc8-d490-4a3e-97fc-70cf008cbf66?source=cve - https://codecanyon.net/item/support-board-help-desk-and-chat/20359943
CVE ID: CVE-2025-4857 State: PUBLISHED Published: 2025-05-31T11:18:54.139Z Last Updated: 2025-06-02T15:48:25.525Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: contrid Products: Newsletters Problem Types: CWE-22 Description: The Newsletters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.9.9 via the 'file' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code executi
any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/33c0838a-5f86-4368-8bf9-da0582acbabf?source=cve - https://plugins.trac.wordpress.org/browser/newsletters-lite/trunk/wp-mailinglist.php#L1584 - https://plugins.trac.wordpress.org/changeset/3303758/
CVE ID: CVE-2025-4858 State: PUBLISHED Published: 2025-05-18T04:00:06.059Z Last Updated: 2025-05-19T14:27:25.381Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: D-Link Products: DAP-2695 Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in D-Link DAP-2695 120b36r137_ALL_en_20210528. It has been declared as problematic. This vulnerability affects unknown code of the file /adv_arpspoofing.php of the component ARP Spoofing Prevention Page. The manipulation of the argument harp_mac leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. This vuln
ely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309400 - https://vuldb.com/?ctiid.309400 - https://vuldb.com/?submit.575100 - https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/DAP-2695/XSS_ARP_Spoofing_Prevention - https://www.dlink.com/
CVE ID: CVE-2025-4859 State: PUBLISHED Published: 2025-05-18T04:31:04.770Z Last Updated: 2025-05-19T14:26:47.992Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: D-Link Products: DAP-2695 Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in D-Link DAP-2695 120b36r137_ALL_en_20210528. It has been rated as problematic. This issue affects some unknown processing of the file /adv_macbypass.php of the component MAC Bypass Settings Page. The manipulation of the argument f_mac leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. This vulnerability
exploit has been disclosed to the public and may be used. Other parameters might be affected as well. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309401 - https://vuldb.com/?ctiid.309401 - https://vuldb.com/?submit.575101 - https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/DAP-2695/XSS_MAC_Bypass - https://www.dlink.com/
CVE ID: CVE-2025-4860 State: PUBLISHED Published: 2025-05-18T05:00:08.702Z Last Updated: 2025-05-19T14:26:13.329Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: D-Link Products: DAP-2695 Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in D-Link DAP-2695 120b36r137_ALL_en_20210528. Affected is an unknown function of the file /adv_dhcps.php of the component Static Pool Settings Page. The manipulation of the argument f_mac leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. This vulnerability only aff
as been disclosed to the public and may be used. Other parameters might be affected as well. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309402 - https://vuldb.com/?ctiid.309402 - https://vuldb.com/?submit.575103 - https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/DAP-2695/XSS_Static_Pool_Settings - https://www.dlink.com/
CVE ID: CVE-2025-4861 State: PUBLISHED Published: 2025-05-18T05:31:05.603Z Last Updated: 2025-05-19T14:24:09.702Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Beauty Parlour Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analy
e exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309403 - https://vuldb.com/?ctiid.309403 - https://vuldb.com/?submit.575230 - https://github.com/Schatten-42/MyCVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-4862 State: PUBLISHED Published: 2025-05-18T06:00:07.894Z Last Updated: 2025-05-20T14:01:55.287Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: PHPGurukul Products: Directory Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in PHPGurukul Directory Management System 2.0. Affected by this issue is some unknown functionality of the file /searchdata.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309404 - https://vuldb.com/?ctiid.309404 - https://vuldb.com/?submit.575355 - https://github.com/Schatten-42/MyCVE/issues/4 - https://phpgurukul.com/
CVE ID: CVE-2025-4863 State: PUBLISHED Published: 2025-05-18T06:31:04.305Z Last Updated: 2025-05-20T13:46:32.595Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Advaya Softech Products: GEMS ERP Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in Advaya Softech GEMS ERP Portal 2.1. This affects an unknown part of the file /studentLogin/studentLogin.action. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3094
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309405 - https://vuldb.com/?ctiid.309405 - https://vuldb.com/?submit.575384 - https://github.com/kuppamjohari/advaya-gems-sql-injection-poc - https://github.com/kuppamjohari/advaya-gems-sql-injection-poc/blob/main/GEMS_POC.py
CVE ID: CVE-2025-4864 State: PUBLISHED Published: 2025-05-18T07:00:11.231Z Last Updated: 2025-05-19T18:38:57.428Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Restaurant Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/finished.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.30
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309406 - https://vuldb.com/?ctiid.309406 - https://vuldb.com/?submit.575465 - https://github.com/swws141/CVE/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-4865 State: PUBLISHED Published: 2025-05-18T07:31:04.817Z Last Updated: 2025-05-19T18:31:19.529Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Restaurant Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/member_save.php. The manipulation of the argument last leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnr
ed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309407 - https://vuldb.com/?ctiid.309407 - https://vuldb.com/?submit.575466 - https://github.com/swws141/CVE/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-4866 State: PUBLISHED Published: 2025-05-18T08:00:09.819Z Last Updated: 2025-05-19T18:27:42.200Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: weibocom Products: rill-flow Problem Types: CWE-94, CWE-74 Description: A vulnerability was found in weibocom rill-flow 0.1.18. It has been classified as critical. Affected is an unknown function of the component Management Console. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309408 - https://vuldb.com/?ctiid.309408 - https://vuld
es: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309408 - https://vuldb.com/?ctiid.309408 - https://vuldb.com/?submit.575478 - https://github.com/weibocom/rill-flow/issues/102 - https://github.com/weibocom/rill-flow/issues/102#issue-2933822293
CVE ID: CVE-2025-4867 State: PUBLISHED Published: 2025-05-18T08:31:05.785Z Last Updated: 2025-05-19T15:22:59.553Z Severity: N/A (CVSS 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C) Vendors: Tenda Products: A15 Problem Types: CWE-404 Description: A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309409 - https://vuldb.com/?ctiid.309409 - https:
st Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309409 - https://vuldb.com/?ctiid.309409 - https://vuldb.com/?submit.575501 - https://github.com/xubeining/Cve_report/blob/main/Notification%20of%20Denial%20of%20Service%20Vulnerability%20in%20Tenda%20A15%20Router%20(Version%20V15.13.07.13)%20by%20Shenzhen%20Jixiang%20Tenda%20Technology.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-4868 State: PUBLISHED Published: 2025-05-18T09:00:06.147Z Last Updated: 2025-05-19T15:22:53.857Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: merikbest Products: ecommerce-spring-reactjs Problem Types: CWE-22 Description: A vulnerability was found in merikbest ecommerce-spring-reactjs up to 464e610bb11cc2619cf6ce8212ccc2d1fd4277fd. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/v1/admin/ of the component File Upload Endpoint. The manipulation of the argument filename leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delive
al. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309410 - https://vuldb.com/?ctiid.309410 - https://vuldb.com/?submit.575506 - https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250512-01.md
CVE ID: CVE-2025-4869 State: PUBLISHED Published: 2025-05-18T09:31:05.102Z Last Updated: 2025-05-19T15:22:49.083Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Restaurant Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in itsourcecode Restaurant Management System 1.0. This affects an unknown part of the file /admin/member_update.php. The manipulation of the argument menu leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309411 - https://vuldb.com/?ctiid.309411 - https://vuldb.com/?submit.575552 - https://github.com/wuquwuquwuqu/CVE/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-4870 State: PUBLISHED Published: 2025-05-18T10:00:08.146Z Last Updated: 2025-05-19T14:23:36.921Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Restaurant Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in itsourcecode Restaurant Management System 1.0. This vulnerability affects unknown code of the file /admin/menu_save.php. The manipulation of the argument menu leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309412 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309412 - https://vuldb.com/?ctiid.309412 - https://vuldb.com/?submit.575553 - https://github.com/wuquwuquwuqu/CVE/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-4871 State: PUBLISHED Published: 2025-05-18T10:31:04.462Z Last Updated: 2025-05-19T14:22:57.984Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component REST Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309413 - https://vuldb.com/?ctiid.309413 - https
yst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309413 - https://vuldb.com/?ctiid.309413 - https://vuldb.com/?submit.575624 - https://github.com/Blu3B3ard/PoC-Pacman-FTP-Server-2.0.7/blob/main/exploit.txt
CVE ID: CVE-2025-4872 State: PUBLISHED Published: 2025-05-18T11:00:05.920Z Last Updated: 2025-05-19T14:22:13.726Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component CCC Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309414 - https://vuldb.com/?ctiid.309414 - https://