Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-1587 State: PUBLISHED Published: 2025-02-23T15:00:08.136Z Last Updated: 2025-04-02T20:49:13.087Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Telecom Billing Management System Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in SourceCodester Telecom Billing Management System 1.0. It has been rated as critical. This issue affects the function addrecords of the file main.cpp of the component Add New Record. The manipulation of the argument name/phonenumber leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. O
rflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296567 - https://vuldb.com/?ctiid.296567 - https://vuldb.com/?submit.505363 - https://github.com/wshRE/CVE/issues/1 - https://www.sourcecodester.com/
CVE ID: CVE-2025-1588 State: PUBLISHED Published: 2025-02-23T16:00:08.337Z Last Updated: 2025-02-24T14:31:38.996Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: PHPGurukul Products: Online Nurse Hiring System Problem Types: CWE-24, CWE-23 Description: A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/manage-nurse.php. The manipulation of the argument profilepic leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradi
emotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting vulnerability classes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296572 - https://vuldb.com/?ctiid.296572 - https://vuldb.com/?submit.505441 - https://github.com/wqywfvc/CVE/issues/16 - https://phpgurukul.com/
CVE ID: CVE-2025-1589 State: PUBLISHED Published: 2025-02-23T18:00:09.904Z Last Updated: 2025-02-24T12:10:18.189Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SourceCodester Products: E-Learning System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some unknown processing of the file /register.php of the component User Registration Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296573 - https://vuldb.com/?ctiid.296573 - https://vuldb.c
- CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296573 - https://vuldb.com/?ctiid.296573 - https://vuldb.com/?submit.504039 - https://www.sourcecodester.com/
CVE ID: CVE-2025-1590 State: PUBLISHED Published: 2025-02-23T18:31:04.234Z Last Updated: 2025-02-24T12:09:13.587Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: E-Learning System Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296574 - https://vuldb.com/?ctiid.29657
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296574 - https://vuldb.com/?ctiid.296574 - https://vuldb.com/?submit.504045 - https://www.sourcecodester.com/
CVE ID: CVE-2025-1591 State: PUBLISHED Published: 2025-02-23T19:00:12.912Z Last Updated: 2025-02-24T12:06:18.404Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Employee Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Name leads to cross site scripting. The attack can be launched remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
ng. The attack can be launched remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296575 - https://vuldb.com/?ctiid.296575 - https://vuldb.com/?submit.504048 - https://www.sourcecodester.com/
CVE ID: CVE-2025-1592 State: PUBLISHED Published: 2025-02-23T19:31:04.850Z Last Updated: 2025-02-24T12:05:21.364Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Best Employee Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/Operations/Role.php of the component Add Role Page. The manipulation of the argument assign_name/description leads to cross site scripting. The attack may be launched remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References
cross site scripting. The attack may be launched remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296576 - https://vuldb.com/?ctiid.296576 - https://vuldb.com/?submit.505210 - https://www.sourcecodester.com/
CVE ID: CVE-2025-1593 State: PUBLISHED Published: 2025-02-23T20:00:08.964Z Last Updated: 2025-02-24T12:04:10.971Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Best Employee Management System Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical has been found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /_hr_soft/assets/uploadImage/Profile/ of the component Profile Picture Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296577 - ht
the attack remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296577 - https://vuldb.com/?ctiid.296577 - https://vuldb.com/?submit.505212 - https://www.sourcecodester.com/
CVE ID: CVE-2025-1594 State: PUBLISHED Published: 2025-02-23T21:00:13.152Z Last Updated: 2025-02-24T12:03:02.141Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: FFmpeg Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296589 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296589 - https://vuldb.com/?ctiid.296589 - https://vuldb.com/?submit.496929 - https://trac.ffmpeg.org/ticket/11418#comment:3 - https://trac.ffmpeg.org/attachment/ticket/11418/poc - https://ffmpeg.org/
CVE ID: CVE-2025-1595 State: PUBLISHED Published: 2025-02-23T22:00:13.196Z Last Updated: 2025-02-24T12:00:41.120Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Anhui Xufan Information Technology Products: EasyCVR Problem Types: CWE-200, CWE-284 Description: A vulnerability has been found in Anhui Xufan Information Technology EasyCVR up to 2.7.0 and classified as problematic. This vulnerability affects unknown code of the file /api/v1/getbaseconfig. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did
exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296590 - https://vuldb.com/?ctiid.296590 - https://vuldb.com/?submit.497485 - https://github.com/MH521/POC/blob/main/EasyCVR-%E8%A7%86%E9%A2%91%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0getbaseconfig%E6%8E%A5%E5%8F%A3%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE.md
CVE ID: CVE-2025-1596 State: PUBLISHED Published: 2025-02-23T23:00:12.852Z Last Updated: 2025-02-24T13:20:54.525Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Best Church Management Software Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Best Church Management Software 1.0 and classified as critical. This issue affects some unknown processing of the file /fpassword.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way
losed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296591 - https://vuldb.com/?ctiid.296591 - https://vuldb.com/?submit.497868 - https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/best-church-management-software-sql.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-1597 State: PUBLISHED Published: 2025-02-23T23:00:15.362Z Last Updated: 2025-02-24T13:16:12.805Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Best Church Management Software Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/redirect.php. The manipulation of the argument a leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not res
t has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296592 - https://vuldb.com/?ctiid.296592 - https://vuldb.com/?submit.497883 - https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/best-church-management-software-xss.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-1598 State: PUBLISHED Published: 2025-02-23T23:31:04.765Z Last Updated: 2025-02-24T13:15:01.537Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Best Church Management Software Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/asset_crud.php. The manipulation of the argument photo1 leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this
unched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296593 - https://vuldb.com/?ctiid.296593 - https://vuldb.com/?submit.497891 - https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/best-church-management-software-Arbitrary-File-Upload.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-1599 State: PUBLISHED Published: 2025-02-24T00:00:13.948Z Last Updated: 2025-02-24T13:07:43.094Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: SourceCodester Products: Best Church Management Software Problem Types: CWE-24, CWE-23 Description: A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/app/profile_crud.php. The manipulation of the argument old_cat_img leads to path traversal: '../filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early ab
ay be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296594 - https://vuldb.com/?ctiid.296594 - https://vuldb.com/?submit.498188 - https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/best-church-management-software-Delete-any-file.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-1606 State: PUBLISHED Published: 2025-02-24T00:00:16.256Z Last Updated: 2025-02-24T12:57:16.992Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SourceCodester Products: Best Employee Management System Problem Types: CWE-200, CWE-284 Description: A vulnerability classified as problematic was found in SourceCodester Best Employee Management System 1.0. This vulnerability affects unknown code of the file /admin/backup/backups.php. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not r
oit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296596 - https://vuldb.com/?ctiid.296596 - https://vuldb.com/?submit.498421 - https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Best-employee-management-system-information-leakage.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-1607 State: PUBLISHED Published: 2025-02-24T00:31:05.135Z Last Updated: 2025-02-24T12:57:44.293Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SourceCodester Products: Best Employee Management System Problem Types: CWE-639, CWE-285 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salary_slip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early a
ay be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296597 - https://vuldb.com/?ctiid.296597 - https://vuldb.com/?submit.498432 - https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Best-employee-management-system-unauthorized-access.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-1608 State: PUBLISHED Published: 2025-02-24T00:31:07.007Z Last Updated: 2025-02-24T11:52:05.400Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: LB-LINK Products: AC1900 Router Problem Types: CWE-78, CWE-77 Description: A vulnerability, which was classified as critical, was found in LB-LINK AC1900 Router 1.0.2. Affected is the function websGetVar of the file /goform/set_manpwd. The manipulation of the argument routepwd leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Note
ay be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296598 - https://vuldb.com/?ctiid.296598 - https://vuldb.com/?submit.501022 - https://noisy-caravel-a9a.notion.site/LBLINK_AC1900_V1-0-2_-set_manpwd-_-bl_do_system-_CI-179898c94eac81b9bf56c1f64db77e2d?pvs=74
CVE ID: CVE-2025-1609 State: PUBLISHED Published: 2025-02-24T01:00:10.512Z Last Updated: 2025-02-24T11:50:41.298Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: LB-LINK Products: AC1900 Router Problem Types: CWE-78, CWE-77 Description: A vulnerability has been found in LB-LINK AC1900 Router 1.0.2 and classified as critical. Affected by this vulnerability is the function websGetVar of the file /goform/set_cmd. The manipulation of the argument cmd leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst No
may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296599 - https://vuldb.com/?ctiid.296599 - https://vuldb.com/?submit.501023 - https://noisy-caravel-a9a.notion.site/LBLINK_AC1900_V1-0-2_-set_cmd-_-bs_SetCmd-_CI-179898c94eac808e8875e0b8e1bee47e?pvs=74
CVE ID: CVE-2025-1610 State: PUBLISHED Published: 2025-02-24T01:31:04.610Z Last Updated: 2025-02-24T11:48:52.997Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: LB-LINK Products: AC1900 Router Problem Types: CWE-78, CWE-77 Description: A vulnerability was found in LB-LINK AC1900 Router 1.0.2 and classified as critical. Affected by this issue is the function websGetVar of the file /goform/set_blacklist. The manipulation of the argument mac/enable leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst No
may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296600 - https://vuldb.com/?ctiid.296600 - https://vuldb.com/?submit.501024 - https://noisy-caravel-a9a.notion.site/LBLINK_AC1900_V1-0-2_-set_blacklist-_-bs_SetMacBlack-_CI-179898c94eac802b9451fcb79aa668c3?pvs=74
CVE ID: CVE-2025-1611 State: PUBLISHED Published: 2025-02-24T02:00:11.502Z Last Updated: 2025-02-24T11:47:40.119Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: ShopXO Problem Types: CWE-74, CWE-707 Description: A vulnerability was found in ShopXO up to 6.4.0. It has been classified as problematic. This affects an unknown part of the file app/service/ThemeAdminService.php of the component Template Handler. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CI
sed. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296601 - https://vuldb.com/?ctiid.296601 - https://vuldb.com/?submit.501211 - https://github.com/jmx0hxq/Vulnerability-learning/blob/main/shopxo-rce.md
CVE ID: CVE-2025-1612 State: PUBLISHED Published: 2025-02-24T02:31:03.813Z Last Updated: 2025-02-24T11:42:22.243Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Edimax Products: BR-6288ACL Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Edimax BR-6288ACL 1.30. It has been declared as problematic. This vulnerability affects unknown code of the file wireless5g_basic.asp. The manipulation of the argument SSID leads to cross site scripting. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296602 - http
respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296602 - https://vuldb.com/?ctiid.296602 - https://vuldb.com/?submit.501309
CVE ID: CVE-2025-1613 State: PUBLISHED Published: 2025-02-24T03:00:12.277Z Last Updated: 2025-02-24T11:41:00.931Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: FiberHome Products: AN5506-01A ONU GPON Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects some unknown processing of the file /goform/URL_filterCfg of the component URL Filtering Submenu. The manipulation of the argument url_IP leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure
ely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296603 - https://vuldb.com/?ctiid.296603 - https://vuldb.com/?submit.501349
CVE ID: CVE-2025-1614 State: PUBLISHED Published: 2025-02-24T03:00:13.961Z Last Updated: 2025-02-24T11:39:40.185Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: FiberHome Products: AN5506-01A ONU GPON Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected is an unknown function of the file /goform/portForwardingCfg of the component Port Forwarding Submenu. The manipulation of the argument pf_Description leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this dis
ck remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296604 - https://vuldb.com/?ctiid.296604 - https://vuldb.com/?submit.501365
CVE ID: CVE-2025-1615 State: PUBLISHED Published: 2025-02-24T03:31:03.569Z Last Updated: 2025-02-24T11:38:36.094Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: FiberHome Products: AN5506-01A ONU GPON Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this vulnerability is an unknown functionality of the component NAT Submenu. The manipulation of the argument Description leads to cross site scripting. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
rly about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296605 - https://vuldb.com/?ctiid.296605 - https://vuldb.com/?submit.501408