Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-0245 State: PUBLISHED Published: 2025-01-07T16:07:05.265Z Last Updated: 2025-01-08T15:44:53.357Z Vendors: Mozilla Products: Firefox Problem Types: Lock screen setting bypass in Firefox Focus for Android Description: Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed. This vulnerability affects Firefox < 134. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1895342 - https://www.mozilla.org/security/advisories/mfsa2025-01/
CVE ID: CVE-2025-0246 State: PUBLISHED Published: 2025-01-07T16:07:05.551Z Last Updated: 2025-01-08T15:54:25.771Z Vendors: Mozilla Products: Firefox Problem Types: Address bar spoofing using an invalid protocol scheme on Firefox for Android Description: When using an invalid protocol scheme, an attacker could spoof the address bar. *Note: This issue only affected Android operating systems. Other operating systems are unaffected.* *Note: This issue is a different issue from CVE-2025-0244. This vulnerability affects Firefox < 134. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1912709 - https://www.mozilla.org/security/advisories/m
ment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1912709 - https://www.mozilla.org/security/advisories/mfsa2025-01/
CVE ID: CVE-2025-0247 State: PUBLISHED Published: 2025-01-07T16:07:07.636Z Last Updated: 2025-01-14T16:32:10.790Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 134 and Thunderbird 134 Description: Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 134 and Thunderbird < 134. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1835193%2C1910021%2C1919803%2C1931576%2C1931948%2C19
ment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1835193%2C1910021%2C1919803%2C1931576%2C1931948%2C1932173 - https://www.mozilla.org/security/advisories/mfsa2025-01/ - https://www.mozilla.org/security/advisories/mfsa2025-04/
CVE ID: CVE-2025-0249 State: PUBLISHED Published: 2025-07-24T23:19:20.328Z Last Updated: 2025-07-25T13:28:25.687Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: HCL Software Products: IEM Problem Types: CWE-287 Description: HCL IEM is affected by an improper invalidation of access or JWT token vulnerability. A token was not invalidated which may allow attackers to access sensitive data without authorization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122368
CVE ID: CVE-2025-0250 State: PUBLISHED Published: 2025-07-24T23:28:00.736Z Last Updated: 2025-07-25T13:28:04.704Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: IEM Problem Types: CWE-319 Description: HCL IEM is affected by an authorization token sent in cookie vulnerability. A token used for authentication and authorization is being handled in a manner that may increase its exposure to security risks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122368
CVE ID: CVE-2025-0251 State: PUBLISHED Published: 2025-07-25T00:06:08.416Z Last Updated: 2025-07-25T13:20:11.490Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: IEM Problem Types: CWE-384 Description: HCL IEM is affected by a concurrent login vulnerability. The application allows multiple concurrent sessions using the same user credentials, which may introduce security risks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122368
CVE ID: CVE-2025-0252 State: PUBLISHED Published: 2025-07-25T00:08:13.901Z Last Updated: 2025-07-25T13:19:00.610Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: IEM Problem Types: CWE-319 Description: HCL IEM is affected by a password in cleartext vulnerability. Sensitive information is transmitted without adequate protection, potentially exposing it to unauthorized access during transit. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122368
CVE ID: CVE-2025-0253 State: PUBLISHED Published: 2025-07-25T00:16:19.560Z Last Updated: 2025-07-25T13:18:29.775Z Severity: LOW (CVSS 2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: IEM Problem Types: CWE-384 Description: HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain security-related configurations which could increase exposure to potential vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122368
CVE ID: CVE-2025-0254 State: PUBLISHED Published: 2025-03-20T14:02:37.826Z Last Updated: 2025-03-20T15:02:17.242Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: HCL Software Products: HCL Digital Experience Problem Types: CWE-295 Description: HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to 9.5 CF226. An attacker could intercept and potentially alter communication between two parties. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120000
CVE ID: CVE-2025-0255 State: PUBLISHED Published: 2025-03-24T16:32:21.022Z Last Updated: 2025-03-24T17:59:23.661Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: HCL Software Products: HCL DevOps Deploy / HCL Launch Problem Types: CWE-78 Description: HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119060
CVE ID: CVE-2025-0256 State: PUBLISHED Published: 2025-03-24T15:35:38.160Z Last Updated: 2025-03-31T18:12:48.412Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: HCL DevOps Deploy / HCL Launch Problem Types: CWE-306 Description: HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119059
CVE ID: CVE-2025-0257 State: PUBLISHED Published: 2025-04-02T22:04:02.098Z Last Updated: 2025-04-03T19:17:23.547Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: HCL Software Products: HCL DevOps Deploy / HCL Launch Problem Types: CWE-306 Description: HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119061
CVE ID: CVE-2025-0272 State: PUBLISHED Published: 2025-04-03T14:56:13.459Z Last Updated: 2025-04-04T20:22:05.908Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: HCL Software Products: HCL DevOps Deploy / HCL Launch Problem Types: CWE-80 Description: HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120137
CVE ID: CVE-2025-0273 State: PUBLISHED Published: 2025-03-27T05:03:12.079Z Last Updated: 2025-03-27T14:37:02.362Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: HCL Software Products: HCL DevOps Deploy / HCL Launch Problem Types: CWE-532 Description: HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120138
CVE ID: CVE-2025-0274 State: PUBLISHED Published: 2025-10-16T04:56:49.062Z Last Updated: 2025-10-16T14:32:54.597Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: HCL Software Products: BigFix Modern Client Management Problem Types: CWE-306 Description: HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124512
CVE ID: CVE-2025-0275 State: PUBLISHED Published: 2025-10-16T05:14:24.512Z Last Updated: 2025-10-16T14:31:36.999Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: HCL Software Products: BigFix Mobile Problem Types: CWE-306 Description: HCL BigFix Mobile 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124512
CVE ID: CVE-2025-0276 State: PUBLISHED Published: 2025-10-16T08:25:49.925Z Last Updated: 2025-10-16T14:10:55.323Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: HCL Software Products: BigFix Modern Client Management Problem Types: CWE-693, CWE-79, CWE-80 Description: HCL BigFix Modern Client Management (MCM) 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_art
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124513
CVE ID: CVE-2025-0277 State: PUBLISHED Published: 2025-10-16T08:27:54.725Z Last Updated: 2025-10-16T14:08:36.372Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: HCL Software Products: BigFix Mobile Problem Types: CWE-693, CWE-79, CWE-80 Description: HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124513
CVE ID: CVE-2025-0278 State: PUBLISHED Published: 2025-04-03T22:07:59.761Z Last Updated: 2025-04-04T18:32:44.020Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: HCL Traveler Problem Types: CWE-497 Description: HCL Traveler is affected by an internal path disclosure in a Windows application when the application inadvertently reveals internal file paths, in error messages, debug logs, or responses to user requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120335
CVE ID: CVE-2025-0279 State: PUBLISHED Published: 2025-04-03T21:48:01.004Z Last Updated: 2025-04-07T16:31:57.411Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: HCL Traveler Problem Types: CWE-209 Description: HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack traces. Attackers could exploit this information to gain insights into the system's architecture and potentially launch targeted attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm
targeted attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120336
CVE ID: CVE-2025-0280 State: PUBLISHED Published: 2025-09-03T15:21:04.829Z Last Updated: 2025-09-03T17:17:49.198Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: HCL Software Products: Compass Problem Types: CWE-257 Description: A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123627
CVE ID: CVE-2025-0281 State: PUBLISHED Published: 2025-03-20T10:10:44.872Z Last Updated: 2025-03-20T18:17:22.606Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in lunary-ai/lunary versions 1.6.7 and earlier. An attacker can inject malicious JavaScript into the SAML IdP XML metadata, which is used to generate the SAML login redirect URL. This URL is then set as the value of `window.location.href` without proper validation or sanitization. This vulnerability allows the attacker to execute arbitrary JavaScript in the context of the us
idation or sanitization. This vulnerability allows the attacker to execute arbitrary JavaScript in the context of the user's browser, potentially leading to session hijacking, data theft, or other malicious actions. The issue is fixed in version 1.7.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/b3f4a655-5b08-4fef-be2c-aac8703ad5d0 - https://github.com/lunary-ai/lunary/commit/fa0fd7742ae029ed934690d282519263f5d838de
CVE ID: CVE-2025-0282 State: PUBLISHED Published: 2025-01-08T22:15:09.386Z Last Updated: 2025-10-21T22:55:33.039Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Ivanti Products: Connect Secure, Policy Secure, Neurons for ZTA gateways Problem Types: CWE-121 Description: A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://forums.ivanti.com/s/article/Security
lyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283
CVE ID: CVE-2025-0283 State: PUBLISHED Published: 2025-01-08T22:15:59.822Z Last Updated: 2025-01-09T17:41:24.544Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Connect Secure, Policy Secure, Neurons for ZTA gateways Problem Types: CWE-121 Description: A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Poli
- CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283
CVE ID: CVE-2025-0285 State: PUBLISHED Published: 2025-03-03T16:25:38.704Z Last Updated: 2025-09-09T13:57:18.211Z Vendors: Paragon Software Products: Migrate OS to SSD, Disk Wiper, Paragon Drive Copy, Backup and Recovery, Hard Disk Manager, Partition Manager Problem Types: CWE-1287: Improper Validation of Specified Type of Input Description: Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://paragon-software.ze
vilege escalation exploits. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys - https://www.kb.cert.org/vuls/id/726882 - https://www.paragon-software.com/support/#patches
CVE ID: CVE-2025-0286 State: PUBLISHED Published: 2025-03-03T16:25:25.767Z Last Updated: 2025-09-09T13:59:49.755Z Vendors: Paragon Software Products: Partition Manager, Hard Disk Manager, Backup and Recovery, Drive Copy, Disk Wiper, Migrate OS to SSD Problem Types: CWE-787 Out-of-bounds Write Description: Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to execute arbitrary code on the victim machine. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kb.cert.org/vuls/id/726882 - https://paragon-so
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kb.cert.org/vuls/id/726882 - https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys - https://www.paragon-software.com/support/#patches
CVE ID: CVE-2025-0287 State: PUBLISHED Published: 2025-03-03T16:25:08.481Z Last Updated: 2025-09-05T12:08:03.175Z Vendors: Paragon Software Products: Migrate OS to SSD, Disk Wiper, Drive Copy, Backup and Recovery, Hard Disk Manager, Partition Manager Problem Types: CWE-476 NULL Pointer Dereference Description: Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://paragon-software.zendesk.com/hc/en-us/
alation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys - https://www.kb.cert.org/vuls/id/726882 - https://www.paragon-software.com/support/#patches
CVE ID: CVE-2025-0288 State: PUBLISHED Published: 2025-03-03T16:24:54.853Z Last Updated: 2025-09-09T14:00:21.687Z Vendors: Paragon Software Products: Migrate OS to SSD, Disk Wiper, Drive Copy, Backup and Recovery, Hard Disk Manager, Partition Manager Problem Types: CWE-131 Incorrect Calculation of Buffer Size Description: Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to write arbitrary kernel memory and perform privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www
el memory and perform privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kb.cert.org/vuls/id/726882 - https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys - https://www.paragon-software.com/support/#patches
CVE ID: CVE-2025-0289 State: PUBLISHED Published: 2025-03-03T16:24:38.134Z Last Updated: 2025-09-09T14:03:26.472Z Vendors: Paragon Software Products: Migrate OS to SSD, Disk Wiper, Drive Copy, Hard Disk Manager, Backup and Recovery, Partition Manager Problem Types: CWE-1287: Improper Validation of Specified Type of Input Description: Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://paragon-software.zende
compromise the service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys - https://www.kb.cert.org/vuls/id/726882 - https://www.paragon-software.com/support/#patches
CVE ID: CVE-2025-0290 State: PUBLISHED Published: 2025-01-28T08:45:09.560Z Last Updated: 2025-01-28T14:41:52.667Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: CWE-835 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing of CI artifacts metadata could cause background jobs to become unresponsive. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/372134
CVE ID: CVE-2025-0291 State: PUBLISHED Published: 2025-01-08T18:42:28.608Z Last Updated: 2025-01-08T19:46:25.866Z Vendors: Google Products: Chrome Problem Types: CWE-843 Description: Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/383356864
CVE ID: CVE-2025-0292 State: PUBLISHED Published: 2025-07-08T15:33:24.245Z Last Updated: 2025-07-09T20:48:09.166Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: Ivanti Products: Connect Secure, Policy Secure Problem Types: CWE-918 Description: SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to access internal network services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/July-Security-Advisory-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Multiple-CVEs