Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Upload Attachments). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpuoct2025.html
CVE ID: CVE-2025-53072 State: PUBLISHED Published: 2025-10-21T20:03:07.687Z Last Updated: 2025-10-23T03:55:24.227Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Oracle Corporation Products: Oracle Marketing Problem Types: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. Description: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthe
dministration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpuoct2025.html
CVE ID: CVE-2025-53073 State: PUBLISHED Published: 2025-06-24T00:00:00.000Z Last Updated: 2025-06-24T19:18:26.715Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Sentry Products: Sentry Problem Types: CWE-425 Description: In Sentry 25.1.0 through 25.5.1, an authenticated attacker can access a project's issue endpoint and perform unauthorized actions (such as adding a comment) without being a member of the project's team. A seven-digit issue ID must be known (it is not treated as a secret and might be mentioned publicly, or it could be predicted). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nikolas-ch/CVEs/tree/main/Se
icted). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nikolas-ch/CVEs/tree/main/Sentry_Version%3E%3D25.1.0 - https://github.com/nikolas-ch/CVEs/blob/main/Sentry_Version%3E%3D25.1.0/Sentry_%3E%3D25.1.0_WeakAuthorizationControl.txt - https://github.com/getsentry/self-hosted/releases
CVE ID: CVE-2025-53074 State: PUBLISHED Published: 2025-06-30T01:48:54.197Z Last Updated: 2025-06-30T13:31:56.701Z Vendors: Samsung Open Source Products: rLottie Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Samsung/rlottie/pull/571
CVE ID: CVE-2025-53075 State: PUBLISHED Published: 2025-06-30T01:47:05.766Z Last Updated: 2025-06-30T13:53:37.611Z Vendors: Samsung Open Source Products: rLottie Problem Types: CWE-20 Description: Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Samsung/rlottie/pull/571
CVE ID: CVE-2025-53076 State: PUBLISHED Published: 2025-06-30T01:48:25.071Z Last Updated: 2025-06-30T13:32:03.795Z Vendors: Samsung Open Source Products: rLottie Problem Types: CWE-20 Description: Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Samsung/rlottie/pull/573
CVE ID: CVE-2025-53077 State: PUBLISHED Published: 2025-07-29T05:03:41.034Z Last Updated: 2025-07-29T15:06:50.737Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Electronics Products: DMS(Data Management Server) Problem Types: CWE-698 Description: An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungda.com/securityUpdates.html
CVE ID: CVE-2025-53078 State: PUBLISHED Published: 2025-07-29T05:04:18.477Z Last Updated: 2025-07-29T15:02:48.207Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Electronics Products: Data Management Server Problem Types: CWE-502 Description: Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via write file to system Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungda.com/securityUpdates.html
CVE ID: CVE-2025-53079 State: PUBLISHED Published: 2025-07-29T05:04:48.482Z Last Updated: 2025-07-29T14:51:16.460Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Electronics Products: Data Management Server Problem Types: CWE-36 Description: Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungda.com/securityUpdates.html
CVE ID: CVE-2025-53080 State: PUBLISHED Published: 2025-07-29T05:05:14.690Z Last Updated: 2025-07-29T14:44:48.824Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H) Vendors: Samsung Electronics Products: Data Management Server Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) allows authenticated attackers to create arbitrary files in unintended locations on the filesystem Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungda.com/securityUpdates.html
CVE ID: CVE-2025-53081 State: PUBLISHED Published: 2025-07-29T05:06:47.194Z Last Updated: 2025-07-29T14:39:26.258Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: Samsung Electronics Products: Data Management Server Problem Types: CWE-22 Description: An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungda.com/securityUpdates.html
CVE ID: CVE-2025-53082 State: PUBLISHED Published: 2025-07-29T05:08:25.846Z Last Updated: 2025-07-29T14:37:47.223Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Samsung Electronics Products: Data Management Server Problem Types: CWE-23 Description: An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungda.com/securityUpdates.html
CVE ID: CVE-2025-53084 State: PUBLISHED Published: 2025-07-24T15:11:04.747Z Last Updated: 2025-11-03T20:06:19.663Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: WWBN Products: AVideo Problem Types: CWE-79 Description: A cross-site scripting (xss) vulnerability exists in the videosList page parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/T
s: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2206
CVE ID: CVE-2025-53085 State: PUBLISHED Published: 2025-08-25T14:17:40.119Z Last Updated: 2025-11-03T18:13:11.165Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: SAIL Image Decoding Library Products: SAIL Image Decoding Library Problem Types: CWE-122 Description: A memory corruption vulnerability exists in the PSD RLE Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decompressing the image data from a specially crafted .psd file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vul
will need to convince the library to read a file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2219
CVE ID: CVE-2025-53091 State: PUBLISHED Published: 2025-06-27T15:08:34.306Z Last Updated: 2025-06-27T15:46:13.293Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in version 3.3.3 the almox parameter of the `/controle/getProdutosPorAlmox.php` endpoint. This issue allows any unauthenticated attacker to inject arbitrary SQL queries, potentially leading to unauthorized data access or further exploitation depending on database configuration. Version 3.4.0 fixes the issue. Additional Analyst Notes: - CISA
urther exploitation depending on database configuration. Version 3.4.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-pmf9-2rc3-vvxx
CVE ID: CVE-2025-53092 State: PUBLISHED Published: 2025-10-16T16:29:35.246Z Last Updated: 2025-10-16T18:13:08.618Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: strapi Products: strapi Problem Types: CWE-200, CWE-284, CWE-364, CWE-942 Description: Strapi is an open source headless content management system. Strapi versions prior to 5.20.0 contain a CORS misconfiguration vulnerability in default installations. By default, Strapi reflects the value of the Origin header back in the Access-Control-Allow-Origin response header without proper validation or whitelisting. This allows an attacker-controlled site to send credentialed requests to the Strapi backend.
alidation or whitelisting. This allows an attacker-controlled site to send credentialed requests to the Strapi backend. An attacker can exploit this by hosting a malicious site on a different origin (e.g., different port) and sending requests with credentials to the Strapi API. The vulnerability is fixed in version 5.20.0. No known workarounds exist. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/strapi/strapi/security/advisories/GHSA-9329-mxxw-qwf8
CVE ID: CVE-2025-53093 State: PUBLISHED Published: 2025-06-27T17:43:24.107Z Last Updated: 2025-06-27T17:56:37.678Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: StarCitizenTools Products: mediawiki-extensions-TabberNeue Problem Types: CWE-79, CWE-80 Description: TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Starting in version 3.0.0 and prior to version 3.1.1, any user can insert arbitrary HTMLinto the DOM by inserting a payload into any allowed attribute of the `<tabber>` tag. Version 3.1.1 contains a patch for the bug. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/StarCitizenTools/mediawiki-e
he bug. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/security/advisories/GHSA-jfj7-249r-7j2m - https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/commit/4cdf217ef96da74a1503d1dd0bb0ed898fc2a612 - https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/commit/62ce0fcdf32bd3cfa77f92ff6b940459a14315fa - https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/blob/3a23b703ce36cfc4128e7921841f68230be4059a/includes/Components/TabberComponentTabs.php#L15-L31 - https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/blob/3a23b703ce36cfc4128e7921841f68230be4059a
-L31 - https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/blob/3a23b703ce36cfc4128e7921841f68230be4059a/includes/Tabber.php#L76 - https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/blob/3a23b703ce36cfc4128e7921841f68230be4059a/includes/templates/Tabs.mustache#L1
CVE ID: CVE-2025-53094 State: PUBLISHED Published: 2025-06-27T19:57:15.032Z Last Updated: 2025-06-27T20:19:14.457Z Vendors: ESP32Async Products: ESPAsyncWebServer Problem Types: CWE-93, CWE-113 Description: ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. In versions up to and including 3.7.8, a CRLF (Carriage Return Line Feed) injection vulnerability exists in the construction and output of HTTP headers within `AsyncWebHeader.cpp`. Unsanitized input allows attackers to inject CR (`\r`) or LF (`\n`) characters into header names or values, leading to arbitrary header or response manipulation. Manipulation of HTTP headers and respons
o header names or values, leading to arbitrary header or response manipulation. Manipulation of HTTP headers and responses can enable a wide range of attacks, making the severity of this vulnerability high. A fix is available at pull request 211 and is expected to be part of version 3.7.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ESP32Async/ESPAsyncWebServer/security/advisories/GHSA-87j8-6f7g-h8wh - https://github.com/ESP32Async/ESPAsyncWebServer/pull/211 - https://github.com/ESP32Async/ESPAsyncWebServer/blob/1095dfd1ecf1a903aede29854232af1b24f089b1/src/AsyncWebHeader.cpp#L6-L32
CVE ID: CVE-2025-53095 State: PUBLISHED Published: 2025-07-01T01:33:22.331Z Last Updated: 2025-07-01T13:21:15.143Z Severity: CRITICAL (CVSS 9.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: LizardByte Products: Sunshine Problem Types: CWE-352 Description: Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.628.4510, the web UI of Sunshine lacks protection against Cross-Site Request Forgery (CSRF) attacks. This vulnerability allows an attacker to craft a malicious web page that, when visited by an authenticated user, can trigger unintended actions within the Sunshine application on behalf of that user. Specifically, since the application does OS command ex
d actions within the Sunshine application on behalf of that user. Specifically, since the application does OS command execution by design, this issue can be exploited to abuse the "Command Preparations" feature, enabling an attacker to inject arbitrary commands that will be executed with Administrator privileges when an application is launched. This issue has been patched in version 2025.628.4510. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LizardByte/Sunshine/security/advisories/GHSA-39hj-fxvw-758m - https://github.com/LizardByte/Sunshine/commit/738ac93a0ec1cd10412d1f339968775f53bfefe0
CVE ID: CVE-2025-53096 State: PUBLISHED Published: 2025-07-01T01:33:01.336Z Last Updated: 2025-07-01T13:21:41.271Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: LizardByte Products: Sunshine Problem Types: CWE-1021 Description: Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.628.4510, the web UI of Sunshine lacks protection against Clickjacking attacks. This vulnerability allows an attacker to embed the Sunshine interface within a malicious website using an invisible or disguised iframe. If a user is tricked into interacting (one or multiple clicks) with the malicious page while authenticated, they may unknowingly perform ac
d into interacting (one or multiple clicks) with the malicious page while authenticated, they may unknowingly perform actions within the Sunshine application without their consent. This issue has been patched in version 2025.628.4510. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LizardByte/Sunshine/security/advisories/GHSA-x97g-h2vp-g2c5 - https://github.com/LizardByte/Sunshine/commit/2f27a57d01911436017f87bf08b9e36dcfaa86cc
CVE ID: CVE-2025-53097 State: PUBLISHED Published: 2025-06-27T21:43:31.678Z Last Updated: 2025-06-30T16:22:40.734Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: RooCodeInc Products: Roo-Code Problem Types: CWE-74 Description: Roo Code is an AI-powered autonomous coding agent. Prior to version 3.20.3, there was an issue where the Roo Code agent's `search_files` tool did not respect the setting to disable reads outside of the VS Code workspace. This means that an attacker who was able to inject a prompt into the agent could potentially read a sensitive file and then write the information to a JSON schema. Users have the option to disable schema fetching in V
a sensitive file and then write the information to a JSON schema. Users have the option to disable schema fetching in VS Code, but the feature is enabled by default. For users with this feature enabled, writing to the schema would trigger a network request without the user having a chance to deny. This issue is of moderate severity, since it requires the attacker to already be able to submit prompts to the agent. Version 3.20.3 fixed the issue where `search_files` did not respect the setting to limit it to the workspace. This reduces the scope of the damage if an attacker is able to take control of the agent through prompt injection or another vector. Additional Analyst Notes: - CISA ADP Vu
is able to take control of the agent through prompt injection or another vector. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-wr2q-46pg-f228 - https://github.com/RooCodeInc/Roo-Code/commit/10b2fb32ed047bbd7b8d10ef185c1ed345efcc92 - https://github.com/RooCodeInc/Roo-Code/commit/7d0b22f9e659dc6c26aab0bacbea27874986e772
CVE ID: CVE-2025-53098 State: PUBLISHED Published: 2025-06-27T21:43:35.031Z Last Updated: 2025-07-03T14:27:54.220Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: RooCodeInc Products: Roo-Code Problem Types: CWE-77 Description: Roo Code is an AI-powered autonomous coding agent. The project-specific MCP configuration for the Roo Code agent is stored in the `.roo/mcp.json` file within the VS Code workspace. Because the MCP configuration format allows for execution of arbitrary commands, prior to version 3.20.3, it would have been possible for an attacker with access to craft a prompt to ask the agent to write a malicious command to the MCP configuration file. If
n attacker with access to craft a prompt to ask the agent to write a malicious command to the MCP configuration file. If the user had opted-in to auto-approving file writes within the project, this would have led to arbitrary command execution. This issue is of moderate severity, since it requires the attacker to already be able to submit prompts to the agent (for instance through a prompt injection attack), for the user to have MCP enabled (on by default), and for the user to have enabled auto-approved file writes (off by default). Version 3.20.3 fixes the issue by adding an additional layer of opt-in configuration for auto-approving writing to Roo's configuration files, including all files
an additional layer of opt-in configuration for auto-approving writing to Roo's configuration files, including all files within the `.roo/` folder. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-5x8h-m52g-5v54 - https://github.com/RooCodeInc/Roo-Code/commit/7d0b22f9e659dc6c26aab0bacbea27874986e772
CVE ID: CVE-2025-53099 State: PUBLISHED Published: 2025-07-01T14:53:16.878Z Last Updated: 2025-07-01T15:06:29.774Z Vendors: getsentry Products: sentry Problem Types: CWE-288 Description: Sentry is a developer-first error tracking and performance monitoring tool. Prior to version 25.5.0, an attacker with a malicious OAuth application registered with Sentry can take advantage of a race condition and improper handling of authorization code within Sentry to maintain persistence to a user's account. With a specially timed requests and redirect flows, an attacker could generate multiple authorization codes that could be used to exchange for access and refresh tokens. This was possible even after d
ultiple authorization codes that could be used to exchange for access and refresh tokens. This was possible even after de-authorizing the particular application. This issue has been patched in version 25.5.0. Self-hosted Sentry users should upgrade to version 25.5.0 or higher. Sentry SaaS users do not need to take any action. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/getsentry/sentry/security/advisories/GHSA-mgh8-h4xc-pfmj - https://github.com/getsentry/sentry/pull/85570 - https://github.com/getsentry/sentry/pull/85571 - https://github.com/getsentry/sentry/pull/86069 - https://github.com/getsentry/sentry/pull/86532 - https://github.com/getsentry/sent
hub.com/getsentry/sentry/pull/86069 - https://github.com/getsentry/sentry/pull/86532 - https://github.com/getsentry/sentry/commit/57f0129e1e977b76fe8d16667a586578791a3dcd - https://github.com/getsentry/sentry/commit/ab5fd932ca6bd46529ba3308b4669e3cee719b8f - https://github.com/getsentry/sentry/commit/e6241254aead969e6c8490a81cde9a01335df19d
CVE ID: CVE-2025-53100 State: PUBLISHED Published: 2025-07-01T17:49:54.733Z Last Updated: 2025-07-01T18:43:43.383Z Vendors: RestDB Products: codehooks-mcp-server Problem Types: CWE-78 Description: RestDB's Codehooks.io MCP Server is an MCP server on the Codehooks.io platform. Prior to version 0.2.2, the MCP server is written in a way that is vulnerable to command injection attacks as part of some of its MCP Server tools definition and implementation. This could result in a user initiated remote command injection attack on a running MCP Server. This issue has been patched in version 0.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RestDB/codehooks-mcp
version 0.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RestDB/codehooks-mcp-server/security/advisories/GHSA-fhq6-jf5q-qxvq - https://github.com/RestDB/codehooks-mcp-server/commit/62f918a6fde6a8c700521b542b85315c70f05794 - https://github.com/RestDB/codehooks-mcp-server/commit/83db1d1b4c856cbe4a1b961d315706198bb0ffb8
CVE ID: CVE-2025-53101 State: PUBLISHED Published: 2025-07-14T19:51:53.338Z Last Updated: 2025-11-03T18:13:12.129Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: ImageMagick Products: ImageMagick Problem Types: CWE-124 Description: ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick mogrify` command, specifying multiple consecutive `%d` format specifiers in a filename template causes internal pointer arithmetic to generate an address below the beginning of the stack buffer, resulting in a stack overflow through `vsnprintf()`. Versions 7.1.2-0 and 6.