Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-46394 State: PUBLISHED Published: 2025-04-23T00:00:00.000Z Last Updated: 2025-04-24T20:03:24.126Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: BusyBox Products: BusyBox Problem Types: CWE-451 Description: In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugs.busybox.net/show_bug.cgi?id=16018 - https://www.busybox.net/downloads/ - https://www.busybox.net
CVE ID: CVE-2025-46397 State: PUBLISHED Published: 2025-04-23T20:55:09.795Z Last Updated: 2025-11-21T11:52:40.935Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-120 Description: A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2025-46397 - https://bugzilla.redhat.com/show_bug.cgi?id=2362058 - https:/
- https://access.redhat.com/security/cve/CVE-2025-46397 - https://bugzilla.redhat.com/show_bug.cgi?id=2362058 - https://sourceforge.net/p/mcj/tickets/192/
CVE ID: CVE-2025-46398 State: PUBLISHED Published: 2025-04-23T20:55:13.458Z Last Updated: 2025-11-06T23:14:13.277Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-121 Description: In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2025-46398 - https://bugzilla.redhat.com/show_bug.cgi?id=23
er: References: - https://access.redhat.com/security/cve/CVE-2025-46398 - https://bugzilla.redhat.com/show_bug.cgi?id=2362055 - https://sourceforge.net/p/mcj/tickets/191/
CVE ID: CVE-2025-46399 State: PUBLISHED Published: 2025-04-23T20:55:15.407Z Last Updated: 2025-11-06T23:14:16.261Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-476 Description: A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2025-46399 - https://bugzilla.redhat.com/show_bug.cgi?id=2362053 - https://so
https://access.redhat.com/security/cve/CVE-2025-46399 - https://bugzilla.redhat.com/show_bug.cgi?id=2362053 - https://sourceforge.net/p/mcj/tickets/190/
CVE ID: CVE-2025-46400 State: PUBLISHED Published: 2025-04-23T20:55:17.239Z Last Updated: 2025-11-06T23:14:19.602Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-476 Description: In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2025-46400 - https://bugzilla.redhat.com/sh
Program Container: References: - https://access.redhat.com/security/cve/CVE-2025-46400 - https://bugzilla.redhat.com/show_bug.cgi?id=2362054 - https://sourceforge.net/p/mcj/tickets/187/
CVE ID: CVE-2025-46404 State: PUBLISHED Published: 2025-11-05T14:56:59.671Z Last Updated: 2025-11-05T22:36:18.932Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Entr'ouvert Products: Lasso Problem Types: CWE-476 Description: A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr&#39;ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2194
CVE ID: CVE-2025-46405 State: PUBLISHED Published: 2025-08-13T14:46:54.288Z Last Updated: 2025-08-13T15:06:01.091Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-121 Description: When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000151546
CVE ID: CVE-2025-46406 State: PUBLISHED Published: 2025-07-10T03:10:03.557Z Last Updated: 2025-07-10T20:02:29.195Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L) Vendors: Gallagher Products: Command Centre Server Problem Types: CWE-270 Description: A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a privileged Operator with high level access in one Division to perform limited privileged activities across the Division boundary. This issue affects Command Centre Server: 9.30 prior to 9.30.1874 (MR1), 9.20 prior to 9.20.2337 (MR3), 9.10 prior to 9.10.3194 (MR6), 9.00 prior to 9.00.3371 (MR7), all versions of 8.90 and prior. Addition
9.20.2337 (MR3), 9.10 prior to 9.10.3194 (MR6), 9.00 prior to 9.00.3371 (MR7), all versions of 8.90 and prior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-46406
CVE ID: CVE-2025-46407 State: PUBLISHED Published: 2025-08-25T14:17:47.494Z Last Updated: 2025-11-03T18:12:54.615Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: SAIL Image Decoding Library Products: SAIL Image Decoding Library Problem Types: CWE-680 Description: A memory corruption vulnerability exists in the BMPv3 Palette Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur which will cause a heap-based buffer to overflow when reading the palette from the image. These conditions can allow for remote code execution. An attacker will need to convince the library
tte from the image. These conditions can allow for remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2215
CVE ID: CVE-2025-46408 State: PUBLISHED Published: 2025-09-15T00:00:00.000Z Last Updated: 2025-09-17T13:40:32.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0. The methods set ALLOW_ALL_HOSTNAME_VERIFIER, bypassing domain validation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/shinyColumn/CVE-2025-46408
CVE ID: CVE-2025-46409 State: PUBLISHED Published: 2025-08-28T08:27:44.793Z Last Updated: 2025-08-28T14:17:54.161Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: DOS Co., Ltd. Products: SS1 Problem Types: CWE-326 Description: Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, a function that requires authentication may be accessed by a remote unauthenticated attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dos-osaka.co.jp/news/2025/08/250827.html - https://jvn.jp/en/jp/JVN99577552/
CVE ID: CVE-2025-46410 State: PUBLISHED Published: 2025-07-24T15:11:06.165Z Last Updated: 2025-11-03T20:04:32.680Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: WWBN Products: AVideo Problem Types: CWE-79 Description: A cross-site scripting (xss) vulnerability exists in the managerPlaylists PlaylistOwnerUsersId parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2205
CVE ID: CVE-2025-46411 State: PUBLISHED Published: 2025-08-25T13:53:41.126Z Last Updated: 2025-11-03T18:12:55.575Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: The Biosig Project Products: libbiosig Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_rep
t Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2236
CVE ID: CVE-2025-46412 State: PUBLISHED Published: 2025-05-21T19:20:00.513Z Last Updated: 2025-05-21T19:51:02.992Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Vertiv Products: Liebert RDU101, Liebert IS-UNITY Problem Types: CWE-288 Description: Affected Vertiv products do not properly protect webserver functions that could allow an attacker to bypass authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-10 - https://www.vertiv.com/en-us/support/security-support-center/
CVE ID: CVE-2025-46413 State: PUBLISHED Published: 2025-11-07T08:51:52.847Z Last Updated: 2025-11-07T13:15:18.610Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: BUFFALO INC. Products: WSR-1800AX4, WSR-1800AX4S, WSR-1800AX4B, WSR-1800AX4-KH Problem Types: CWE-916 Description: Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.buffalo.jp/news/detail/20251107-01.html - https://jvn.jp/en/jp/JVN13754005/
CVE ID: CVE-2025-46414 State: PUBLISHED Published: 2025-08-08T16:17:43.727Z Last Updated: 2025-08-08T19:13:44.835Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: EG4 Electronics Products: EG4 12kPV, EG4 18kPV, EG4 Flex 21, EG4 Flex 18, EG4 6000XP, EG4 12000XP, EG4 GridBoss Problem Types: CWE-307 Description: The affected product does not limit the number of attempts for inputting the correct PIN for a registered product, which may allow an attacker to gain unauthorized access using brute-force methods if they possess a valid device serial number. The API provides clear feedback when the correct PIN is entered. This vulnerability was patched in a server-side u
mber. The API provides clear feedback when the correct PIN is entered. This vulnerability was patched in a server-side update on April 6, 2025. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-07 - https://eg4electronics.com/contact/
CVE ID: CVE-2025-46415 State: PUBLISHED Published: 2025-06-27T00:00:00.000Z Last Updated: 2025-06-27T19:57:56.693Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: NixOS Products: Nix Problem Types: CWE-367 Description: A race condition in the Nix, Lix, and Guix package managers allows the removal of content from arbitrary folders. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017 - https://lix.systems/blog/2025-06-24-lix
.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017 - https://lix.systems/blog/2025-06-24-lix-cves/ - https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/ - https://labs.snyk.io - https://security.snyk.io/vuln/?search=CVE-2025-46415 - https://security-tracker.debian.org/tracker/CVE-2025-46415
CVE ID: CVE-2025-46416 State: PUBLISHED Published: 2025-06-27T00:00:00.000Z Last Updated: 2025-06-27T15:49:08.285Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: NixOS Products: Nix Problem Types: CWE-282 Description: The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user can elevate their privileges to the build user account (e.g., nixbld or guixbuild). This affects Nix through 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix through 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-ni
otes: - CISA ADP Vulnrichment: References: - https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017 - https://lix.systems/blog/2025-06-24-lix-cves/ - https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/ - https://labs.snyk.io - https://security.snyk.io/vuln/?search=CVE-2025-46416 - https://security-tracker.debian.org/tracker/CVE-2025-46416
CVE ID: CVE-2025-46417 State: PUBLISHED Published: 2025-04-24T00:00:00.000Z Last Updated: 2025-04-24T14:51:19.232Z Vendors: Picklescan Products: Picklescan Problem Types: CWE-184 Description: The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/advisories/GHSA-93mv-x874-956g - https://github.com/mmaitre314/picklescan/pull/40
CVE ID: CVE-2025-46419 State: PUBLISHED Published: 2025-04-24T00:00:00.000Z Last Updated: 2025-04-24T14:50:34.633Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Westermo Products: WeOS Problem Types: CWE-1286 Description: Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.westermo.com/-/media/Files/Cyber-security/westermo_sa_25-02_malformed_esp_packet_could_cause_denial_vulnerability_in_weos.pdf?rev=9af5c93194f343a0b4fad2d24d032df2&hash=87F4AD7F74C2BE69CA1B4C24F29B82EA
CVE ID: CVE-2025-46420 State: PUBLISHED Published: 2025-04-24T12:58:01.121Z Last Updated: 2025-11-18T09:06:51.708Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red H
prise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-401 Description: A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elements with all zeroes. Additional Analyst Notes: - CISA
ity_list() function when parsing a quality list that contains elements with all zeroes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:4439 - https://access.redhat.com/errata/RHSA-2025:4440 - https://access.redhat.com/errata/RHSA-2025:4508 - https://access.redhat.com/errata/RHSA-2025:4538 - https://access.redhat.com/errata/RHSA-2025:4560 - https://access.redhat.com/errata/RHSA-2025:4568 - https://access.redhat.com/errata/RHSA-2025:4609 - https://access.redhat.com/errata/RHSA-2025:4624 - https://access.redhat.com/errata/RHSA-2025:7436 - https://access.redhat.com/security/cve/CVE-2025-46420 - https://bugzilla.redhat.com/show_bug.cgi?
rrata/RHSA-2025:7436 - https://access.redhat.com/security/cve/CVE-2025-46420 - https://bugzilla.redhat.com/show_bug.cgi?id=2361963 - https://gitlab.gnome.org/GNOME/libsoup/-/issues/438
CVE ID: CVE-2025-46421 State: PUBLISHED Published: 2025-04-24T13:01:24.589Z Last Updated: 2025-11-18T08:35:16.184Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Serv
Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-497 Description: A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impers
ly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:4439 - https://access.redhat.com/errata/RHSA-2025:4440 - https://access.redhat.com/errata/RHSA-2025:4508 - https://access.redhat.com/errata/RHSA-2025:4538 - https://access.redhat.com/errata/RHSA-2025:4560 - https://access.redhat.com/errata/RHSA-2025:4568 - https://access.redhat.com/errata/RHSA-2025:4609 - https://access.redhat.com/errata/RHSA-2025:4624 - https://access.redhat.com/errata/RHSA-2025:7436 - htt
RHSA-2025:4609 - https://access.redhat.com/errata/RHSA-2025:4624 - https://access.redhat.com/errata/RHSA-2025:7436 - https://access.redhat.com/errata/RHSA-2025:7505 - https://access.redhat.com/security/cve/CVE-2025-46421 - https://bugzilla.redhat.com/show_bug.cgi?id=2361962 - https://gitlab.gnome.org/GNOME/libsoup/-/issues/439
CVE ID: CVE-2025-46422 State: PUBLISHED Published: 2025-10-30T14:19:34.880Z Last Updated: 2025-10-31T03:55:23.625Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Unity Problem Types: CWE-78 Description: Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000385307/dsa-2025-379-security-update-for-d
SA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000385307/dsa-2025-379-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2025-46423 State: PUBLISHED Published: 2025-10-30T14:14:47.745Z Last Updated: 2025-10-31T03:55:24.553Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Unity Problem Types: CWE-78 Description: Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000385307/dsa-2025-379-security-update-for-d
CVE ID: CVE-2025-46424 State: PUBLISHED Published: 2025-11-05T16:46:25.707Z Last Updated: 2025-11-06T04:55:40.938Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: CloudLink Problem Types: CWE-1240 Description: Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability. A high privileged attacker could potentially exploit this vulnerability leading to Denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000384363/dsa-2025-374-security-update-for-dell-cloudlink-multiple-security-vulnerabilities
CVE ID: CVE-2025-46425 State: PUBLISHED Published: 2025-10-24T14:04:03.635Z Last Updated: 2025-10-25T03:56:08.661Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Dell Storage Manager Problem Types: CWE-611 Description: Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000382899/dsa-2025-393-security-update-for-storage-cent
richment: References: - https://www.dell.com/support/kbdoc/en-us/000382899/dsa-2025-393-security-update-for-storage-center-dell-storage-manager-vulnerabilities
CVE ID: CVE-2025-46427 State: PUBLISHED Published: 2025-11-12T20:01:32.594Z Last Updated: 2025-11-13T04:55:39.176Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: SmartFabric OS10 Software Problem Types: CWE-77 Description: Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-