Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-21050 State: PUBLISHED Published: 2025-10-10T06:41:32.823Z Last Updated: 2025-10-10T10:18:10.510Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20: Improper Input Validation Description: Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10
CVE ID: CVE-2025-21051 State: PUBLISHED Published: 2025-10-10T06:33:10.202Z Last Updated: 2025-10-10T14:20:32.404Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10
CVE ID: CVE-2025-21052 State: PUBLISHED Published: 2025-10-10T06:33:11.226Z Last Updated: 2025-10-10T17:59:38.354Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10
CVE ID: CVE-2025-21053 State: PUBLISHED Published: 2025-10-10T06:33:12.274Z Last Updated: 2025-10-10T17:57:24.674Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10
CVE ID: CVE-2025-21054 State: PUBLISHED Published: 2025-10-10T06:33:13.296Z Last Updated: 2025-10-10T17:55:02.443Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10
CVE ID: CVE-2025-21055 State: PUBLISHED Published: 2025-10-10T06:33:14.330Z Last Updated: 2025-10-22T20:37:34.038Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10
CVE ID: CVE-2025-21056 State: PUBLISHED Published: 2025-09-25T05:52:47.706Z Last Updated: 2025-09-25T13:48:17.595Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Retail Mode Problem Types: CWE-20 Improper Input Validation Description: Improper input validation in Retail Mode prior to version 5.59.4 allows self attackers to execute privileged commands on their own devices. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=08
CVE ID: CVE-2025-21057 State: PUBLISHED Published: 2025-10-10T06:33:15.620Z Last Updated: 2025-10-10T17:36:58.281Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-927: Use of Implicit Intent for Sensitive Communication Description: Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
CVE ID: CVE-2025-21058 State: PUBLISHED Published: 2025-10-10T06:33:16.754Z Last Updated: 2025-10-10T17:24:41.277Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Samsung Mobile Products: Routines Problem Types: CWE-284: Improper Access Control Description: Improper access control in Routines prior to version 4.8.7.1 in Android 15 and 4.9.6.0 in Android 16 allows local attackers to potentially execute arbitrary code with SystemUI privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
CVE ID: CVE-2025-21059 State: PUBLISHED Published: 2025-10-10T06:33:17.825Z Last Updated: 2025-10-10T17:22:10.992Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Health Problem Types: CWE-285: Improper Authorization Description: Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
CVE ID: CVE-2025-21060 State: PUBLISHED Published: 2025-10-10T06:33:18.848Z Last Updated: 2025-10-10T17:08:02.644Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Smart Switch Problem Types: CWE-312 Cleartext Storage of Sensitive Information Description: Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
CVE ID: CVE-2025-21061 State: PUBLISHED Published: 2025-10-10T06:33:19.858Z Last Updated: 2025-10-10T10:26:53.054Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H) Vendors: Samsung Mobile Products: Smart Switch Problem Types: CWE-312 Cleartext Storage of Sensitive Information Description: Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
CVE ID: CVE-2025-21062 State: PUBLISHED Published: 2025-10-10T06:33:20.889Z Last Updated: 2025-10-22T03:55:23.676Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Smart Switch Problem Types: CWE-327 Use of a Broken or Risky Cryptographic Algorithm Description: Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
CVE ID: CVE-2025-21063 State: PUBLISHED Published: 2025-10-10T06:33:21.908Z Last Updated: 2025-10-10T10:24:41.556Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Voice Recorder Problem Types: CWE-284: Improper Access Control Description: Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16 allows physical attackers to access recording files on the lock screen. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
CVE ID: CVE-2025-21064 State: PUBLISHED Published: 2025-10-10T06:33:22.932Z Last Updated: 2025-10-22T03:55:24.808Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Smart Switch Problem Types: CWE-287 Improper Authentication Description: Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
CVE ID: CVE-2025-21065 State: PUBLISHED Published: 2025-10-10T06:33:23.939Z Last Updated: 2025-10-10T10:22:14.585Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Retail Mode Problem Types: CWE-20 Improper Input Validation Description: Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
CVE ID: CVE-2025-21066 State: PUBLISHED Published: 2025-10-10T06:33:24.956Z Last Updated: 2025-10-10T10:21:06.215Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
CVE ID: CVE-2025-21067 State: PUBLISHED Published: 2025-10-10T06:33:26.036Z Last Updated: 2025-10-10T10:20:46.554Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
CVE ID: CVE-2025-21068 State: PUBLISHED Published: 2025-10-10T06:33:27.266Z Last Updated: 2025-10-10T10:20:26.632Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in the reading of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
CVE ID: CVE-2025-21069 State: PUBLISHED Published: 2025-10-10T06:33:28.291Z Last Updated: 2025-10-10T10:20:06.251Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
CVE ID: CVE-2025-21070 State: PUBLISHED Published: 2025-10-10T06:33:29.373Z Last Updated: 2025-10-10T10:18:32.048Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to write out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
CVE ID: CVE-2025-21071 State: PUBLISHED Published: 2025-11-05T05:40:51.956Z Last Updated: 2025-11-06T04:55:33.154Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=11
CVE ID: CVE-2025-21073 State: PUBLISHED Published: 2025-11-05T05:40:53.213Z Last Updated: 2025-11-05T05:40:53.213Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-1188: Initialization of a Resource with an Insecure Default Description: Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical attackers to access user data. User interaction is required for triggering this vulnerability. References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=11
CVE ID: CVE-2025-21074 State: PUBLISHED Published: 2025-11-05T05:40:54.365Z Last Updated: 2025-11-05T05:40:54.365Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory. References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=11
CVE ID: CVE-2025-21075 State: PUBLISHED Published: 2025-11-05T05:40:55.557Z Last Updated: 2025-11-07T14:26:20.469Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=11
CVE ID: CVE-2025-21076 State: PUBLISHED Published: 2025-11-05T05:40:57.790Z Last Updated: 2025-11-07T14:26:14.798Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Account Problem Types: CWE-280: Improper Handling of Insufficient Permissions or Privileges Description: Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=11
CVE ID: CVE-2025-21077 State: PUBLISHED Published: 2025-11-05T05:40:58.968Z Last Updated: 2025-11-07T14:26:08.837Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Email Problem Types: CWE-20: Improper Input Validation Description: Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=11
CVE ID: CVE-2025-21078 State: PUBLISHED Published: 2025-11-05T05:41:00.294Z Last Updated: 2025-11-06T04:55:33.954Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Smart Switch Problem Types: CWE-330 Use of Insufficiently Random Values Description: Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=11
CVE ID: CVE-2025-21079 State: PUBLISHED Published: 2025-11-05T05:41:01.576Z Last Updated: 2025-11-05T17:09:18.091Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H) Vendors: Samsung Mobile Products: Samsung Members Problem Types: CWE-20: Improper Input Validation Description: Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=11
CVE ID: CVE-2025-21081 State: PUBLISHED Published: 2025-05-13T21:02:30.561Z Last Updated: 2025-05-15T04:02:01.658Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Edge Orchestrator software for Intel(R) Tiber™ Edge Platform Problem Types: Escalation of Privilege, CWE-693 Description: Protection mechanism failure for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE ID: CVE-2025-21082 State: PUBLISHED Published: 2025-06-08T11:46:32.576Z Last Updated: 2025-06-09T03:32:42.811Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-843 Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE ID: CVE-2025-21083 State: PUBLISHED Published: 2025-01-15T16:10:48.325Z Last Updated: 2025-01-15T16:48:49.749Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Mattermost Products: Mattermost Problem Types: CWE-1287 Description: Mattermost Mobile Apps versions <=2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-21084 State: PUBLISHED Published: 2025-03-04T03:44:34.096Z Last Updated: 2025-03-04T14:25:59.154Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-476 Description: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through through NULL pointer dereference.. This vulnerability can be exploited only in restricted scenarios. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md
CVE ID: CVE-2025-21085 State: PUBLISHED Published: 2025-06-15T14:25:39.067Z Last Updated: 2025-06-16T18:08:20.514Z Vendors: Ping Identity Products: PingFederate Problem Types: CWE-462 Description: PingFederate OAuth2 grant duplication in PostgreSQL persistent storage allows OAuth2 requests to use excessive memory utilization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.pingidentity.com/s/article/PingFederate-grant-attribute-duplication-with-PostgreSQL - https://www.pingidentity.com/en/resources/downloads/pingfederate.html
CVE ID: CVE-2025-21086 State: PUBLISHED Published: 2025-08-12T16:58:25.016Z Last Updated: 2025-08-14T03:56:16.267Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) 700 Series Ethernet Problem Types: Escalation of Privilege, CWE-20 Description: Improper input validation in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an authenticated user to potentially enable escalation of privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01335.html
CVE ID: CVE-2025-21087 State: PUBLISHED Published: 2025-02-05T17:30:59.689Z Last Updated: 2025-02-05T18:24:18.086Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP, BIG-IP Next Problem Types: CWE-400 Description: When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000134888
CVE ID: CVE-2025-21088 State: PUBLISHED Published: 2025-01-15T15:51:49.474Z Last Updated: 2025-01-15T16:20:11.778Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Mattermost Products: Mattermost Problem Types: CWE-704 Description: Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the frontend via crafted malicious input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-21089 State: PUBLISHED Published: 2025-03-04T03:44:35.302Z Last Updated: 2025-03-04T14:25:04.733Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-125 Description: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md
CVE ID: CVE-2025-21090 State: PUBLISHED Published: 2025-08-12T16:58:26.621Z Last Updated: 2025-11-03T17:32:07.274Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Xeon(R) processors Problem Types: Denial of Service, CWE-771 Description: Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01313.html
CVE ID: CVE-2025-21091 State: PUBLISHED Published: 2025-02-05T17:31:00.174Z Last Updated: 2025-02-05T18:22:41.726Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-401 Description: When SNMP v1 or v2c are disabled on the BIG-IP, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000140933