Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ffer to accept the next character. During this process, with a line big enough it's possible to make this variable to overflow leading to a out-of-bounds write in the heap based buffer. This flaw may be leveraged to corrupt grub's internal critical data and secure boot bypass is not discarded as consequence. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:6990 - https://access.redhat.com/security/cve/CVE-2025-0690 - https://bugzilla.redhat.com/show_bug.cgi?id=2346123 - https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
CVE ID: CVE-2025-0691 State: PUBLISHED Published: 2025-06-05T13:41:42.695Z Last Updated: 2025-06-05T14:06:43.685Z Vendors: Devolutions Products: Server Problem Types: CWE-284 Description: Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the "Edit permission" permission by bypassing the client side validation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2025-0011/
CVE ID: CVE-2025-0692 State: PUBLISHED Published: 2025-02-13T06:00:12.915Z Last Updated: 2025-02-19T21:31:07.982Z Vendors: Unknown Products: Simple Video Management System Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Simple Video Management System WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/176f329b-a861-4ab0-ad1d-02f750f9b691/
CVE ID: CVE-2025-0693 State: PUBLISHED Published: 2025-01-23T21:22:25.699Z Last Updated: 2025-10-14T18:42:46.835Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: AWS Products: AWS Sign-in IAM Login Flow Problem Types: CWE-204, CWE-208 Description: Variable response times in the AWS Sign-in IAM user login flow allowed for the use of brute force enumeration techniques to identify valid IAM usernames in an arbitrary AWS account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://aws.amazon.com/security/security-bulletins/AWS-2025-002/
CVE ID: CVE-2025-0694 State: PUBLISHED Published: 2025-03-18T11:04:06.167Z Last Updated: 2025-03-18T13:09:54.473Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux ARM SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Win (SL), CODESYS Runtime Toolkit, CODESYS Virtual Control
or Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Win (SL), CODESYS Runtime Toolkit, CODESYS Virtual Control SL Problem Types: CWE-22 Description: Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full filesystem access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2025-015
CVE ID: CVE-2025-0695 State: PUBLISHED Published: 2025-01-27T11:11:50.239Z Last Updated: 2025-02-12T20:01:13.392Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Cesanta Products: Frozen Problem Types: CWE-770 Description: An Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-0695
CVE ID: CVE-2025-0696 State: PUBLISHED Published: 2025-01-27T11:12:00.703Z Last Updated: 2025-02-12T20:01:13.272Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Cesanta Products: Frozen Problem Types: CWE-476 Description: A NULL Pointer Dereference vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-0696
CVE ID: CVE-2025-0697 State: PUBLISHED Published: 2025-01-24T15:00:19.053Z Last Updated: 2025-02-12T20:01:20.391Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Telstra Products: Smart Modem Gen 2 Problem Types: CWE-74, CWE-707 Description: A vulnerability, which was classified as problematic, was found in Telstra Smart Modem Gen 2 up to 20250115. This affects an unknown part of the component HTTP Header Handler. The manipulation of the argument Content-Disposition leads to injection. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnr
dor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293223 - https://vuldb.com/?ctiid.293223 - https://vuldb.com/?submit.480045 - https://github.com/bloodbile/Telstra-RHI
CVE ID: CVE-2025-0698 State: PUBLISHED Published: 2025-01-24T15:31:04.899Z Last Updated: 2025-02-12T20:01:19.781Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: JoeyBling Products: bootplus Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been classified as critical. Affected is an unknown function of the file /admin/sys/menu/list. The manipulation of the argument sort/order leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, n
disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293226 - https://vuldb.com/?ctiid.293226 - https://vuldb.com/?submit.480827 - https://github.com/JoeyBling/bootplus/issues/19 - https://github.com/JoeyBling/bootplus/issues/19#issue-2786879797
CVE ID: CVE-2025-0699 State: PUBLISHED Published: 2025-01-24T15:31:06.643Z Last Updated: 2025-02-12T20:01:19.655Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: JoeyBling Products: bootplus Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/sys/role/list. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about a
has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293227 - https://vuldb.com/?ctiid.293227 - https://vuldb.com/?submit.480836 - https://github.com/JoeyBling/bootplus/issues/21 - https://github.com/JoeyBling/bootplus/issues/21#issue-2786893665
CVE ID: CVE-2025-0700 State: PUBLISHED Published: 2025-01-24T17:00:18.119Z Last Updated: 2025-01-24T20:58:44.975Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: JoeyBling Products: bootplus Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/sys/log/list. The manipulation of the argument logId leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Theref
disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293228 - https://vuldb.com/?ctiid.293228 - https://vuldb.com/?submit.480838 - https://github.com/JoeyBling/bootplus/issues/22 - https://github.com/JoeyBling/bootplus/issues/22#issue-2786899884
CVE ID: CVE-2025-0701 State: PUBLISHED Published: 2025-01-24T17:00:20.037Z Last Updated: 2025-01-24T20:58:52.785Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: JoeyBling Products: bootplus Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This affects an unknown part of the file /admin/sys/user/list. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore,
e public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293229 - https://vuldb.com/?ctiid.293229 - https://vuldb.com/?submit.480839 - https://github.com/JoeyBling/bootplus/issues/23 - https://github.com/JoeyBling/bootplus/issues/23#issue-2786909921
CVE ID: CVE-2025-0702 State: PUBLISHED Published: 2025-01-24T18:00:15.266Z Last Updated: 2025-01-24T18:22:10.105Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: JoeyBling Products: bootplus Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This vulnerability affects unknown code of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the argument portraitFile leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is
ed remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293230 - https://vuldb.com/?ctiid.293230 - https://vuldb.com/?submit.480841 - https://github.com/JoeyBling/bootplus/issues/24 - https://github.com/JoeyBling/bootplus/issues/24#issue-2786919432
CVE ID: CVE-2025-0703 State: PUBLISHED Published: 2025-01-24T18:31:06.470Z Last Updated: 2025-01-24T20:59:02.283Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: JoeyBling Products: bootplus Problem Types: CWE-22 Description: A vulnerability, which was classified as problematic, has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This issue affects some unknown processing of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not us
attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293231 - https://vuldb.com/?ctiid.293231 - https://vuldb.com/?submit.480842 - https://github.com/JoeyBling/bootplus/issues/25 - https://github.com/JoeyBling/bootplus/issues/25#issue-2786928618
CVE ID: CVE-2025-0704 State: PUBLISHED Published: 2025-01-24T18:31:07.998Z Last Updated: 2025-01-24T20:57:42.050Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: JoeyBling Products: bootplus Problem Types: CWE-400, CWE-404 Description: A vulnerability, which was classified as problematic, was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. Affected is the function qrCode of the file src/main/java/io/github/controller/QrCodeController.java. The manipulation of the argument w/h leads to resource consumption. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is us
possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293232 - https://vuldb.com/?ctiid.293232 - https://vuldb.com/?submit.480843 - https://github.com/JoeyBling/bootplus/issues/26 - https://github.com/JoeyBling/bootplus/issues/26#issue-2786934642
CVE ID: CVE-2025-0705 State: PUBLISHED Published: 2025-01-24T19:00:18.692Z Last Updated: 2025-01-24T19:18:34.266Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: JoeyBling Products: bootplus Problem Types: CWE-601 Description: A vulnerability has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d and classified as problematic. Affected by this vulnerability is the function qrCode of the file src/main/java/io/github/controller/QrCodeController.java. The manipulation of the argument text leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling rel
d remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293233 - https://vuldb.com/?ctiid.293233 - https://vuldb.com/?submit.480844 - https://github.com/JoeyBling/bootplus/issues/27 - https://github.com/JoeyBling/bootplus/issues/27#issue-2786941847
CVE ID: CVE-2025-0706 State: PUBLISHED Published: 2025-01-24T19:31:10.101Z Last Updated: 2025-01-24T19:49:51.699Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: JoeyBling Products: bootplus Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/sys/admin.html. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version det
the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293234 - https://vuldb.com/?ctiid.293234 - https://vuldb.com/?submit.480845 - https://github.com/JoeyBling/bootplus/issues/28 - https://github.com/JoeyBling/bootplus/issues/28#issue-2786945699
CVE ID: CVE-2025-0707 State: PUBLISHED Published: 2025-01-24T20:00:15.448Z Last Updated: 2025-02-12T20:41:31.424Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Rise Group Products: Rise Mode Temp CPU Problem Types: CWE-426 Description: A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as critical. This affects an unknown part in the library CRYPTBASE.dll of the component Startup. The manipulation leads to untrusted search path. The attack needs to be approached locally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293235 - https://vuldb.com/?ctiid.293235 - https://vuldb.com/?submi
DP Vulnrichment: References: - https://vuldb.com/?id.293235 - https://vuldb.com/?ctiid.293235 - https://vuldb.com/?submit.481088
CVE ID: CVE-2025-0708 State: PUBLISHED Published: 2025-01-24T20:00:21.259Z Last Updated: 2025-02-12T20:41:31.308Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: fumiao Products: opencms Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in fumiao opencms 2.2. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/model/addOrUpdate of the component Add Model Management Page. The manipulation of the argument 模板前缀 leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293236 - https://vuldb.com/?ctiid.293236 - https://vuldb.com/?submit.482662 - https://gitee.com/fumiao/opencms/issues/IBI2XM
CVE ID: CVE-2025-0709 State: PUBLISHED Published: 2025-01-24T20:31:05.748Z Last Updated: 2025-01-24T20:42:28.624Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: Dcat-Admin Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Dcat-Admin 2.2.1-beta. It has been rated as problematic. This issue affects some unknown processing of the file /admin/auth/roles of the component Roles Page. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293237 - https://vuldb.com/?ctiid.
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293237 - https://vuldb.com/?ctiid.293237 - https://vuldb.com/?submit.483364 - https://github.com/taynes-llllzt/taynes/issues/7 - https://github.com/taynes-llllzt/taynes/issues/7#issue-2792259251
CVE ID: CVE-2025-0710 State: PUBLISHED Published: 2025-01-24T21:00:21.431Z Last Updated: 2025-02-12T20:41:31.557Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: CampCodes Products: School Management Software Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /notice-list of the component Notice Board Page. The manipulation of the argument Notice leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.293238 - https://vuldb.com/?ctiid.293238 - https://vuldb.com/?submit.484934 - https://github.com/anamika126/Stackofvulnerabilities/blob/main/Stored%20Cross%20Site%20Scripting%20-%20Notice%20Board.pdf - https://www.campcodes.com/
CVE ID: CVE-2025-0712 State: PUBLISHED Published: 2025-07-30T00:12:43.639Z Last Updated: 2025-07-30T14:06:16.977Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Elastic Products: APM Server Problem Types: CWE-427 Description: An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files, potentially gaining SYSTEM privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.elastic.co/t/beats-windows-ins
vileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.elastic.co/t/beats-windows-installer-9-1-0-security-update-esa-2025-12/380558
CVE ID: CVE-2025-0714 State: PUBLISHED Published: 2025-02-17T11:56:45.283Z Last Updated: 2025-02-19T08:29:49.252Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Mobatek Products: MobaXterm Problem Types: CWE-1204 Description: The vulnerability exists in the password storage of Mobateks MobaXterm in versions below 25.0. MobaXTerm uses an initialisation vector (IV) consisting only of zero bytes and a master key to encrypt each password individually. In the default configuration, on opening MobaXTerm, the user is prompted for their password. A derivative of the password is used as the master key. As both the master key and the IV are the same for each stored p
A derivative of the password is used as the master key. As both the master key and the IV are the same for each stored password, the AES CFB ciphertext depends only on the plaintext (the password). The static IV and master key make it easier to obtain sensitive information and to decrypt data when it is stored at rest. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cirosec.de/sa/sa-2024-012
CVE ID: CVE-2025-0716 State: PUBLISHED Published: 2025-04-29T16:26:19.591Z Last Updated: 2025-11-03T19:35:06.971Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Google Products: AngularJS Problem Types: CWE-791 Description: Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively affect the application's performance and behavior by using too large or slow-to-load images. This issue affects all versions of AngularJS. Note
s performance and behavior by using too large or slow-to-load images. This issue affects all versions of AngularJS. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status . Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.herodevs.com/vulnerability-directory/cve-2025-0716 - https://codepen.io/herodevs/pen/qEWQmpd/a86a0d29310e12c7a3756768e6c7b915
CVE ID: CVE-2025-0717 State: PUBLISHED Published: 2025-03-25T06:00:14.221Z Last Updated: 2025-03-25T14:14:03.266Z Vendors: Unknown Products: Social Slider Feed Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: To exploit the vulnerability, it is necessary: Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/31f734fc-d474-46b3-98eb-04761cab8878/