Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-5850 State: PUBLISHED Published: 2025-06-08T23:00:20.211Z Last Updated: 2025-06-09T03:09:16.009Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in Tenda AC15 15.03.05.19_multi. It has been declared as critical. This vulnerability affects the function formsetschedled of the file /goform/SetLEDCf of the component HTTP POST Request Handler. The manipulation of the argument Time leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311596 - https://vuldb.com/?ctiid.311596 - https://vuldb.com/?submit.591376 - https://candle-throne-f75.notion.site/Tenda-AC15-formsetschedled-20adf0aa118580d984d8fcdb98d9959c - https://www.tenda.com.cn/
CVE ID: CVE-2025-5851 State: PUBLISHED Published: 2025-06-08T23:31:06.668Z Last Updated: 2025-06-09T03:08:15.838Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in Tenda AC15 15.03.05.19_multi. It has been rated as critical. This issue affects the function fromadvsetlanip of the file /goform/AdvSetLanip of the component HTTP POST Request Handler. The manipulation of the argument lanMask leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311597 - https://vuldb.com/?ctiid.311597 - https://vuldb.com/?submit.591384 - https://candle-throne-f75.notion.site/Tenda-AC15-fromadvsetlanip-20adf0aa118580a09182c1c5c42079fc - https://www.tenda.com.cn/
CVE ID: CVE-2025-5852 State: PUBLISHED Published: 2025-06-09T00:00:18.274Z Last Updated: 2025-06-09T03:05:34.620Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC6 Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311598 - https://vuldb.
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311598 - https://vuldb.com/?ctiid.311598 - https://vuldb.com/?submit.591392 - https://lavender-bicycle-a5a.notion.site/Tenda-AC6-formSetPPTPUserList-20a53a41781f801280e7e2dbdbd8625c?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-5853 State: PUBLISHED Published: 2025-06-09T00:31:06.973Z Last Updated: 2025-06-09T03:03:54.041Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC6 Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical was found in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg. The manipulation of the argument remoteIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311599 - https://vuldb.com/?ctiid.311599 - https://vuldb.com/?submit.591419 - https://lavender-bicycle-a5a.notion.site/Tenda-AC6-formSetSafeWanWebMan-20a53a41781f80f1a3ebc7931f32a29f?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-5854 State: PUBLISHED Published: 2025-06-09T01:00:20.514Z Last Updated: 2025-06-09T03:02:29.951Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC6 Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311600 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311600 - https://vuldb.com/?ctiid.311600 - https://vuldb.com/?submit.591420 - https://lavender-bicycle-a5a.notion.site/Tenda-AC6-fromadvsetlanip-20a53a41781f80a29bdff7dca9a4773e?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-5855 State: PUBLISHED Published: 2025-06-09T01:31:07.688Z Last Updated: 2025-06-09T03:01:14.273Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC6 Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, was found in Tenda AC6 15.03.05.16. This affects the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311601 - https://vuldb.com/?ctiid.311601 - https://vuldb.com/?submit.591422 - https://lavender-bicycle-a5a.notion.site/Tenda-AC6-formsetreboottimer-20a53a41781f80c5b6cac51008556c7e?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-5856 State: PUBLISHED Published: 2025-06-09T02:00:16.705Z Last Updated: 2025-06-09T02:59:42.733Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: BP Monitoring Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /registration.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311602 - https://vuldb.com/?ctiid.311602 - https://vuldb.com/?submit.591426 - https://github.com/Rmy4x/cve/blob/main/cve2.md - https://phpgurukul.com/
CVE ID: CVE-2025-5857 State: PUBLISHED Published: 2025-06-09T02:31:05.393Z Last Updated: 2025-06-09T13:47:34.796Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /urinalysis_record.php. The manipulation of the argument itr_no leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311603 - https://vuldb.com/?ctiid.311603 - https://vuldb.com/?submit.591430 - https://github.com/yuyuchenchen/vuln-pdf0605/blob/main/0605CVE.pdf - https://code-projects.org/
CVE ID: CVE-2025-5858 State: PUBLISHED Published: 2025-06-09T03:00:19.058Z Last Updated: 2025-06-09T13:42:34.792Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Nipah Virus Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /patient-report.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrich
ck remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311604 - https://vuldb.com/?ctiid.311604 - https://vuldb.com/?submit.591440 - https://github.com/f1rstb100d/myCVE/issues/64 - https://phpgurukul.com/
CVE ID: CVE-2025-5859 State: PUBLISHED Published: 2025-06-09T03:31:06.592Z Last Updated: 2025-06-09T13:06:21.016Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Nipah Virus Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /test-details.php. The manipulation of the argument assignto leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA
an be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311605 - https://vuldb.com/?ctiid.311605 - https://vuldb.com/?submit.591443 - https://github.com/f1rstb100d/myCVE/issues/65 - https://phpgurukul.com/
CVE ID: CVE-2025-5860 State: PUBLISHED Published: 2025-06-09T04:00:27.266Z Last Updated: 2025-06-09T13:25:02.241Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Maid Hiring Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Maid Hiring Management System 1.0. This affects an unknown part of the file /admin/search-booking-request.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment
emotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311619 - https://vuldb.com/?ctiid.311619 - https://vuldb.com/?submit.591910 - https://github.com/kakalalaww/CVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-5861 State: PUBLISHED Published: 2025-06-09T04:31:06.939Z Last Updated: 2025-06-09T13:24:28.589Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC7 Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. This vulnerability affects the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311620 - https://
nd may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311620 - https://vuldb.com/?ctiid.311620 - https://vuldb.com/?submit.591960 - https://lavender-bicycle-a5a.notion.site/Tenda-AC7-fromadvsetlanip-20a53a41781f80038f4fc4b9d927eb9a?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-5862 State: PUBLISHED Published: 2025-06-09T05:00:20.243Z Last Updated: 2025-06-09T13:23:57.463Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC7 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. This issue affects the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311621 - https://vuldb.co
e used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311621 - https://vuldb.com/?ctiid.311621 - https://vuldb.com/?submit.591980 - https://lavender-bicycle-a5a.notion.site/Tenda-AC7-formSetPPTPUserList-20a53a41781f806ca124cbdf99bff931?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-5863 State: PUBLISHED Published: 2025-06-09T05:31:07.242Z Last Updated: 2025-06-10T14:44:55.857Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC5 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda AC5 15.03.06.47. It has been classified as critical. Affected is the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id
ed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311622 - https://vuldb.com/?ctiid.311622 - https://vuldb.com/?submit.591981 - https://lavender-bicycle-a5a.notion.site/Tenda-AC5-formSetRebootTimer-20a53a41781f80a6b9a8f6e5915cf256?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-5864 State: PUBLISHED Published: 2025-06-09T06:00:17.407Z Last Updated: 2025-06-17T21:39:16.626Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Tenda Products: TDSEE App Problem Types: CWE-307, CWE-799 Description: A vulnerability was found in Tenda TDSEE App up to 1.7.12. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/ConfirmSmsCode of the component Password Reset Confirmation Code Handler. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be launched remotely. The complexity of an attack is rather high. The exploi
ive authentication attempts. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.7.15 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311623 - https://vuldb.com/?ctiid.311623 - https://vuldb.com/?submit.592074 - https://blog.kevgen.ru/posts/account_takeover_in_tdsee_app/ - https://github.com/k3vg3n/researches/blob/main/Account_takeover_in_TDSEE_app.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-5865 State: PUBLISHED Published: 2025-06-09T06:31:23.530Z Last Updated: 2025-06-09T13:22:44.499Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:C) Vendors: n/a Products: RT-Thread Problem Types: CWE-119 Description: A vulnerability was found in RT-Thread 5.1.0. It has been rated as critical. Affected by this issue is the function sys_select of the file rt-thread/components/lwp/lwp_syscall.c of the component Parameter Handler. The manipulation of the argument timeout leads to memory corruption. The vendor explains, that "[t]he timeout parameter should be checked to check if it can be accessed correctly in kernel mode and used temporarily in ke
e timeout parameter should be checked to check if it can be accessed correctly in kernel mode and used temporarily in kernel memory." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311624 - https://vuldb.com/?ctiid.311624 - https://vuldb.com/?submit.584124 - https://github.com/RT-Thread/rt-thread/issues/10298 - https://github.com/RT-Thread/rt-thread/issues/10298#issuecomment-2894952150
CVE ID: CVE-2025-5866 State: PUBLISHED Published: 2025-06-09T07:00:16.712Z Last Updated: 2025-06-09T13:38:00.468Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:R) Vendors: n/a Products: RT-Thread Problem Types: CWE-129, CWE-119 Description: A vulnerability classified as critical has been found in RT-Thread 5.1.0. This affects the function sys_sigprocmask of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument how leads to improper validation of array index. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311625 - https://vuldb.com/?ctiid.311625 - https://vuldb.com/?submit.584127 - https://gi
rences: - https://vuldb.com/?id.311625 - https://vuldb.com/?ctiid.311625 - https://vuldb.com/?submit.584127 - https://github.com/RT-Thread/rt-thread/issues/10300
CVE ID: CVE-2025-5867 State: PUBLISHED Published: 2025-06-09T07:31:04.833Z Last Updated: 2025-06-09T18:07:33.138Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:R) Vendors: n/a Products: RT-Thread Problem Types: CWE-476, CWE-404 Description: A vulnerability classified as critical was found in RT-Thread 5.1.0. This vulnerability affects the function csys_sendto of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument to leads to null pointer dereference. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311626 - https://vuldb.com/?ctiid.311626 - https://vuldb.com/?submit.584129 - https://github.c
: - https://vuldb.com/?id.311626 - https://vuldb.com/?ctiid.311626 - https://vuldb.com/?submit.584129 - https://github.com/RT-Thread/rt-thread/issues/10299
CVE ID: CVE-2025-5868 State: PUBLISHED Published: 2025-06-09T08:00:17.129Z Last Updated: 2025-06-09T18:08:06.475Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:R) Vendors: n/a Products: RT-Thread Problem Types: CWE-129, CWE-119 Description: A vulnerability, which was classified as critical, has been found in RT-Thread 5.1.0. This issue affects the function sys_thread_sigprocmask of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument how leads to improper validation of array index. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311627 - https://vuldb.com/?ctiid.311627 - https://vuldb.com/?s
SA ADP Vulnrichment: References: - https://vuldb.com/?id.311627 - https://vuldb.com/?ctiid.311627 - https://vuldb.com/?submit.584130 - https://github.com/RT-Thread/rt-thread/issues/10303
CVE ID: CVE-2025-5869 State: PUBLISHED Published: 2025-06-09T08:31:05.517Z Last Updated: 2025-06-09T18:03:36.632Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:R) Vendors: n/a Products: RT-Thread Problem Types: CWE-119 Description: A vulnerability, which was classified as critical, was found in RT-Thread 5.1.0. Affected is the function sys_recvfrom of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument from leads to memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311628 - https://vuldb.com/?ctiid.311628 - https://vuldb.com/?submit.584135 - https://github.com/RT-Thread/rt-
b.com/?id.311628 - https://vuldb.com/?ctiid.311628 - https://vuldb.com/?submit.584135 - https://github.com/RT-Thread/rt-thread/issues/10304
CVE ID: CVE-2025-5870 State: PUBLISHED Published: 2025-06-09T09:00:19.502Z Last Updated: 2025-06-09T18:00:55.756Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: TRENDnet Products: TV-IP121W Problem Types: CWE-287 Description: A vulnerability has been found in TRENDnet TV-IP121W 1.1.1 Build 36 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/setup.cgi of the component Web Interface. The manipulation leads to improper authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in
en disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311629 - https://vuldb.com/?ctiid.311629 - https://vuldb.com/?submit.585435 - https://github.com/zeke2997/CVE_request_TRENDnet
CVE ID: CVE-2025-5871 State: PUBLISHED Published: 2025-06-09T09:31:05.834Z Last Updated: 2025-06-09T17:56:38.273Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:R) Vendors: Papendorf Products: SOL Connect Center Problem Types: CWE-306, CWE-287 Description: A vulnerability was found in Papendorf SOL Connect Center 3.3.0.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Web Interface. The manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in
een disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311630 - https://vuldb.com/?ctiid.311630 - https://vuldb.com/?submit.585459 - https://github.com/zeke2997/CVE_request_Papendorf_Software_Engineering_GmbH
CVE ID: CVE-2025-5872 State: PUBLISHED Published: 2025-06-09T10:00:16.849Z Last Updated: 2025-06-09T17:54:17.005Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:R) Vendors: eGauge Products: EG3000 Energy Monitor Problem Types: CWE-306, CWE-287 Description: A vulnerability was found in eGauge EG3000 Energy Monitor 3.6.3. It has been classified as problematic. This affects an unknown part of the component Setting Handler. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any
disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311631 - https://vuldb.com/?ctiid.311631 - https://vuldb.com/?submit.585486 - https://github.com/zeke2997/CVE_request_eGauge_Systems_LLC
CVE ID: CVE-2025-5873 State: PUBLISHED Published: 2025-06-09T10:31:04.727Z Last Updated: 2025-06-09T17:48:02.495Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: eCharge Hardy Barth Products: Salia PLCC Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in eCharge Hardy Barth Salia PLCC 2.2.0. It has been declared as critical. This vulnerability affects unknown code of the file /firmware.php of the component Web UI. The manipulation of the argument media leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did