Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-2479 State: PUBLISHED Published: 2025-03-22T06:41:09.171Z Last Updated: 2025-03-24T15:13:58.024Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: duogeek Products: Easy Custom Admin Bar Problem Types: CWE-79 Description: The Easy Custom Admin Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘msg’ parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additiona
pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/140f633c-c2e4-4b3c-befc-d870e06be970?source=cve - https://plugins.trac.wordpress.org/browser/easy-custom-admin-bar/trunk/adminbar.php#L198 - https://wordpress.org/plugins/easy-custom-admin-bar/#developers
CVE ID: CVE-2025-2480 State: PUBLISHED Published: 2025-03-20T16:49:07.713Z Last Updated: 2025-03-20T17:51:02.902Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Santesoft Products: Sante DICOM Viewer Pro Problem Types: CWE-787 Description: Santesoft Sante DICOM Viewer Pro is vulnerable to an out-of-bounds write, which requires a user to open a malicious DCM file, resulting in execution of arbitrary code by a local attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-079-01 - https://santesoft.com/win/sante-dicom-viewer-pro/download.html
CVE ID: CVE-2025-2481 State: PUBLISHED Published: 2025-03-27T01:48:04.231Z Last Updated: 2025-03-27T13:46:07.400Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: dman25560 Products: MediaView Problem Types: CWE-79 Description: The MediaView plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id' parameter in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CI
they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ca2d687f-0358-4642-849b-100bf40cbbf1?source=cve - https://plugins.trac.wordpress.org/browser/mediaview/tags/1.1.2/inc/forms/addMedia.inc.php#L48 - https://wordpress.org/plugins/mediaview/#developers
CVE ID: CVE-2025-2482 State: PUBLISHED Published: 2025-03-22T06:41:11.639Z Last Updated: 2025-04-01T16:25:28.341Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: pienaro Products: Gotcha | Gesture-based Captcha Problem Types: CWE-79 Description: The Gotcha | Gesture-based Captcha plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'menu' parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking
trary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6e7f1fe6-0a23-48e1-a75f-f8c1c8d4f8e0?source=cve - https://plugins.trac.wordpress.org/browser/gotcha-gesture-based-captcha/trunk/admin/libs/setting.php#L223 - https://wordpress.org/plugins/gotcha-gesture-based-captcha/#developers
CVE ID: CVE-2025-2483 State: PUBLISHED Published: 2025-04-02T09:21:45.192Z Last Updated: 2025-04-02T14:26:22.128Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: bobcares_plugins Products: Gift Certificate Creator Problem Types: CWE-79 Description: The Gift Certificate Creator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘receip_address’ parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as c
ct arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/adbebe61-3adc-4ba1-8767-863dc2310cad?source=cve - https://plugins.trac.wordpress.org/browser/gift-certificate-creator/trunk/giftcertificates.php#L312 - https://wordpress.org/plugins/gift-certificate-creator/#developers
CVE ID: CVE-2025-2484 State: PUBLISHED Published: 2025-03-22T06:41:10.774Z Last Updated: 2025-04-01T16:26:39.590Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: skustes Products: Multi Video Box Problem Types: CWE-79 Description: The Multi Video Box plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'video_id' and 'group_id' parameters in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link
scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/433e5ba3-c07e-48a1-a28b-781121d892ae?source=cve - https://plugins.trac.wordpress.org/browser/multi-video-box/tags/1.5.2/views/video/get_shortcode.php#L10 - https://plugins.trac.wordpress.org/browser/multi-video-box/tags/1.5.2/views/group/get_shortcode.php#L10 - https://wordpress.org/plugins/multi-video-box/#developers
CVE ID: CVE-2025-2485 State: PUBLISHED Published: 2025-03-28T06:51:46.034Z Last Updated: 2025-05-07T15:41:06.948Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: glenwpcoder Products: Drag and Drop Multiple File Upload for Contact Form 7 Problem Types: CWE-502 Description: The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.8.7 via deserialization of untrusted input from the 'dnd_upload_cf7_upload' function. This makes it possible for attackers to inject a PHP Object through a PHAR file. No known POP chain is present in the vulnerable software, which mean
tackers to inject a PHP Object through a PHAR file. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. This vulnerability may be exploited by unauthenticated attackers when a form is present on the site with the file upload action. The Flamingo plugin must be installed and activated in order to exploit the vulnerability. Th
th the file upload action. The Flamingo plugin must be installed and activated in order to exploit the vulnerability. The vulnerability was partially patched in version 1.3.8.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/79ffe548-0005-4f5e-873f-a1afec64a251?source=cve - https://plugins.trac.wordpress.org/browser/drag-and-drop-multiple-file-upload-contact-form-7/trunk/inc/dnd-upload-cf7.php#L25 - https://plugins.trac.wordpress.org/browser/drag-and-drop-multiple-file-upload-contact-form-7/trunk/inc/dnd-upload-cf7.php#L844 - https://plugins.trac.wordpress.org/changeset/3261964/ - https://plugins.trac.wordpress.org/c
c/dnd-upload-cf7.php#L844 - https://plugins.trac.wordpress.org/changeset/3261964/ - https://plugins.trac.wordpress.org/changeset/3288132/
CVE ID: CVE-2025-2487 State: PUBLISHED Published: 2025-03-18T16:25:43.712Z Last Updated: 2025-11-20T21:01:11.704Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Directory Server 12.4 EUS for RHEL 9, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Directory Server 12, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-476 Description: A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested an
ccurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:3663 - https://access.redhat.com/errata/RHSA-2025:3670 - https://access.redhat.com/errata/RHSA-2025:4491 - https://access.redhat.com/errata/RHSA-2025:7395 - https://access.redhat.com/security/cve/CVE-2025-2487 - https://bugzilla.redhat.com/show_bug.cgi?id=2353071
CVE ID: CVE-2025-2488 State: PUBLISHED Published: 2025-05-02T11:30:10.742Z Last Updated: 2025-09-12T07:15:36.237Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Profelis Informatics Products: SambaBox Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Profelis Informatics SambaBox allows Cross-Site Scripting (XSS).This issue affects SambaBox: before 5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0101 - https://sambabox.io/2025/04/14/version-5-1/
CVE ID: CVE-2025-2489 State: PUBLISHED Published: 2025-03-18T11:26:32.899Z Last Updated: 2025-03-18T13:06:22.200Z Vendors: NTFS Tool Products: Ntfs tool Problem Types: CWE-922 Description: Insecure information storage vulnerability in NTFS Tools version 3.5.1. Exploitation of this vulnerability could allow an attacker to know the application password, stored in /Users/user/Library/Application Support/ntfs-tool/config.json. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/insecure-storage-sensitive-information-ntfs-tool
CVE ID: CVE-2025-2490 State: PUBLISHED Published: 2025-03-18T14:00:07.337Z Last Updated: 2025-03-18T14:13:20.110Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Dromara Products: ujcms Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Dromara ujcms 9.7.5. It has been rated as problematic. Affected by this issue is the function uploadZip/upload of the file /main/java/com/ujcms/cms/ext/web/backendapi/WebFileUploadController.java of the component File Upload. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299996 - https://vuldb.com/?ctiid.299996 - https://vuldb.com/?submit.517267 - https://github.com/dromara/ujcms/issues/12 - https://github.com/dromara/ujcms/issues/13
CVE ID: CVE-2025-2491 State: PUBLISHED Published: 2025-03-18T14:31:03.965Z Last Updated: 2025-03-18T14:54:02.247Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Dromara Products: ujcms Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in Dromara ujcms 9.7.5. This affects the function update of the file /main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component Edit Template File Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.299997 - https://vuldb.com/?ctiid.299997 - https://vuldb.com/?submit.517269 - https://github.com/dromara/ujcms/issues/14
CVE ID: CVE-2025-2492 State: PUBLISHED Published: 2025-04-18T08:57:23.793Z Last Updated: 2025-05-20T08:21:39.574Z Vendors: ASUS Products: Router Problem Types: CWE-288 Description: An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions. Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.asus.com/content/asus-product-security-advisory/
CVE ID: CVE-2025-2493 State: PUBLISHED Published: 2025-03-18T11:20:15.330Z Last Updated: 2025-03-18T13:08:11.898Z Vendors: Sytel Ltd Products: Softdial Contact Center Problem Types: CWE-22 Description: Path Traversal vulnerability in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to manipulate the ‘id’ parameter of the ‘/softdial/scheduler/load.php’ endpoint to navigate beyond the intended directory. This can allow unauthorised access to sensitive files outside the expected scope, posing a security risk. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-softdial-contact-cen
richment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-softdial-contact-center
CVE ID: CVE-2025-2494 State: PUBLISHED Published: 2025-03-18T11:27:07.636Z Last Updated: 2025-03-18T13:02:27.241Z Vendors: Sytel Ltd Products: Softdial Contact Center Problem Types: CWE-434 Description: Unrestricted file upload to Softdial Contact Center of Sytel Ltd. This vulnerability could allow an attacker to upload files to the server via the ‘/softdial/phpconsole/upload.php’ endpoint, which is protected by basic HTTP authentication. The files are uploaded to a directory exposed by the web application, which could result in code execution, giving the attacker full control over the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-ce
rol over the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-softdial-contact-center
CVE ID: CVE-2025-2495 State: PUBLISHED Published: 2025-03-18T11:28:28.483Z Last Updated: 2025-03-18T13:00:38.233Z Vendors: Sytel Ltd Products: Softdial Contact Center Problem Types: CWE-79 Description: Stored Cross-Site Scripting (XSS) in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to upload XML files to the server with JavaScript code injected via the ‘/softdial/scheduler/save.php’ resource. The injected code will execute when the uploaded file is loaded via the ‘/softdial/scheduler/load.php’ resource and can redirect the victim to malicious sites or steal their login information to spoof their identity. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
sites or steal their login information to spoof their identity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-softdial-contact-center
CVE ID: CVE-2025-2496 State: REJECTED Published: N/A Last Updated: 2025-03-26T22:16:00.685Z Description: No description available.
CVE ID: CVE-2025-2497 State: PUBLISHED Published: 2025-04-15T20:55:34.931Z Last Updated: 2025-08-19T13:14:29.322Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Autodesk Products: Revit Problem Types: CWE-122 Description: A maliciously crafted DWG file, when parsed through Autodesk Revit, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/products/autodesk-access/overview - https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0005
CVE ID: CVE-2025-2498 State: PUBLISHED Published: 2025-08-13T17:27:10.511Z Last Updated: 2025-08-13T20:02:26.796Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-1220 Description: An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP restrictions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/525515 - https://hackerone.com/reports/3037722
CVE ID: CVE-2025-2499 State: PUBLISHED Published: 2025-03-26T17:14:59.457Z Last Updated: 2025-03-26T19:31:19.517Z Vendors: Devolutions Products: Remote Desktop Manager Problem Types: CWE-284 Description: Client side access control bypass in the permission component in Devolutions Remote Desktop Manager on Windows. An authenticated user can exploit this flaw to bypass certain permission restrictions—specifically View Password, Edit Asset, and Edit Permissions by performing specific actions. This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://devolutions.n
and all versions up to 2024.3.29. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2025-0005/
CVE ID: CVE-2025-2500 State: PUBLISHED Published: 2025-05-30T12:29:21.370Z Last Updated: 2025-05-30T13:22:19.268Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Hitachi Energy Products: Asset Suite Problem Types: CWE-256 Description: A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://publisher.hitachienergy.com/preview?DocumentID=8DBD000212&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2025-2501 State: PUBLISHED Published: 2025-05-30T19:14:14.040Z Last Updated: 2025-06-03T03:55:12.585Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: PC Manager Problem Types: CWE-426 Description: An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/428586
CVE ID: CVE-2025-2502 State: PUBLISHED Published: 2025-05-30T19:14:24.858Z Last Updated: 2025-06-03T03:55:13.651Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: PC Manager Problem Types: CWE-276 Description: An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/428586
CVE ID: CVE-2025-2503 State: PUBLISHED Published: 2025-05-30T19:14:37.321Z Last Updated: 2025-08-21T15:33:31.394Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Lenovo Products: PC Manager Problem Types: CWE-732 Description: An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/428586
CVE ID: CVE-2025-2504 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:38.791Z Description: No description available.
CVE ID: CVE-2025-2505 State: PUBLISHED Published: 2025-03-20T07:29:57.851Z Last Updated: 2025-03-20T14:51:26.885Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: philsbury Products: Age Gate Problem Types: CWE-22 Description: The Age Gate plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 3.5.3 via the 'lang' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files on the server, allowing the execution of code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” fi
ed to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d6ac2996-098f-474c-b44e-78d5af7b503a?source=cve - https://plugins.trac.wordpress.org/browser/age-gate/trunk/vendor/agegate/common/src/Settings.php#L27 - https://plugins.trac.wordpress.org/changeset/3258075/
CVE ID: CVE-2025-2506 State: PUBLISHED Published: 2025-05-22T15:22:20.041Z Last Updated: 2025-08-26T19:26:48.602Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: EnterpriseDB Products: pglogical, BDR/PGD Problem Types: CWE-862 Description: When pglogical attempts to replicate data, it does not verify it is using a replication connection, which means a user with CONNECT access to a database configured for replication can execute the pglogical command to obtain read access to replicated tables. When pglogical runs it should verify it is running on a replication connection but does not perform this check. This vulnerability was introduced in the pglogical 3.x c
ng on a replication connection but does not perform this check. This vulnerability was introduced in the pglogical 3.x codebase, which is proprietary to EDB. The same code base has been integrated into BDR/PGD 4 and 5. To exploit the vulnerability the attacker needs at least CONNECT permissions to a database configured for replication and must understand a number of pglogical3/BDR specific commands and be able to decode the binary protocol. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.enterprisedb.com/docs/security/advisories/cve20252506/
CVE ID: CVE-2025-2509 State: PUBLISHED Published: 2025-05-06T00:59:32.231Z Last Updated: 2025-05-08T19:15:07.601Z Vendors: Google Products: ChromeOS Problem Types: Memory Corruption Description: Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process, potentially leading to VM escape via crafted vertex elements data triggering an out-of-bounds read in util_format_description. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issuetracker.google.com/issues/385851796 - https://issues.chromium.org/issues/b/385851796