Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-26364 State: PUBLISHED Published: 2025-02-12T13:29:28.492Z Last Updated: 2025-02-17T10:09:58.215Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Q-Free Products: MaxTime Problem Types: CWE-306 Description: A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to disable an authentication profile server via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26364
CVE ID: CVE-2025-26365 State: PUBLISHED Published: 2025-02-12T13:29:34.031Z Last Updated: 2025-02-17T10:10:04.322Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Q-Free Products: MaxTime Problem Types: CWE-306 Description: A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enable front panel authentication via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26365
CVE ID: CVE-2025-26366 State: PUBLISHED Published: 2025-02-12T13:29:40.232Z Last Updated: 2025-02-17T10:10:09.730Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Q-Free Products: MaxTime Problem Types: CWE-306 Description: A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to disable front panel authentication via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26366
CVE ID: CVE-2025-26367 State: PUBLISHED Published: 2025-02-12T13:29:46.667Z Last Updated: 2025-02-17T10:10:15.252Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Q-Free Products: MaxTime Problem Types: CWE-862 Description: A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to create arbitrary user groups via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26367
CVE ID: CVE-2025-26368 State: PUBLISHED Published: 2025-02-12T13:29:52.563Z Last Updated: 2025-02-17T10:10:20.793Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Q-Free Products: MaxTime Problem Types: CWE-862 Description: A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to remove user groups via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26368
CVE ID: CVE-2025-26369 State: PUBLISHED Published: 2025-02-12T13:29:57.851Z Last Updated: 2025-02-17T10:10:26.239Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Q-Free Products: MaxTime Problem Types: CWE-862 Description: A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to add privileges to user groups via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26369
CVE ID: CVE-2025-26370 State: PUBLISHED Published: 2025-02-12T13:30:03.737Z Last Updated: 2025-02-17T10:10:31.699Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L) Vendors: Q-Free Products: MaxTime Problem Types: CWE-862 Description: A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to remove privileges from user groups via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26370
CVE ID: CVE-2025-26371 State: PUBLISHED Published: 2025-02-12T13:30:09.435Z Last Updated: 2025-02-17T10:10:38.453Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Q-Free Products: MaxTime Problem Types: CWE-862 Description: A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to add users to groups via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26371
CVE ID: CVE-2025-26372 State: PUBLISHED Published: 2025-02-12T13:30:14.908Z Last Updated: 2025-02-17T10:10:44.082Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L) Vendors: Q-Free Products: MaxTime Problem Types: CWE-862 Description: A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to remove users from groups via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26372
CVE ID: CVE-2025-26373 State: PUBLISHED Published: 2025-02-12T13:30:20.585Z Last Updated: 2025-02-17T10:10:49.489Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Q-Free Products: MaxTime Problem Types: CWE-862 Description: A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua (user endpoint) in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to enumerate users via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26373
CVE ID: CVE-2025-26374 State: PUBLISHED Published: 2025-02-12T13:30:26.260Z Last Updated: 2025-02-17T10:11:24.851Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Q-Free Products: MaxTime Problem Types: CWE-862 Description: A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua (users endpoint) in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to enumerate users via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26374
CVE ID: CVE-2025-26375 State: PUBLISHED Published: 2025-02-12T13:30:31.754Z Last Updated: 2025-02-17T10:11:41.973Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Q-Free Products: MaxTime Problem Types: CWE-862 Description: A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to create users with arbitrary privileges via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26375
CVE ID: CVE-2025-26376 State: PUBLISHED Published: 2025-02-12T13:30:37.368Z Last Updated: 2025-02-17T10:11:47.419Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Q-Free Products: MaxTime Problem Types: CWE-862 Description: A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to modify user data via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26376
CVE ID: CVE-2025-26377 State: PUBLISHED Published: 2025-02-12T13:30:42.982Z Last Updated: 2025-02-17T10:11:53.868Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Q-Free Products: MaxTime Problem Types: CWE-862 Description: A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to remove users via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26377
CVE ID: CVE-2025-26378 State: PUBLISHED Published: 2025-02-12T13:30:48.254Z Last Updated: 2025-02-17T10:11:59.545Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Q-Free Products: MaxTime Problem Types: CWE-862 Description: A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to reset passwords, including the ones of administrator accounts, via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-26378
CVE ID: CVE-2025-26382 State: PUBLISHED Published: 2025-04-24T19:47:33.187Z Last Updated: 2025-04-24T20:09:50.934Z Vendors: Johnson Controls Products: iSTAR Configuration Utility (ICU) Problem Types: CWE-121 Description: Under certain circumstances the iSTAR Configuration Utility (ICU) tool could have a buffer overflow issue Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories - https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-05
CVE ID: CVE-2025-26383 State: PUBLISHED Published: 2025-06-11T15:36:41.067Z Last Updated: 2025-06-11T15:52:19.585Z Vendors: Johnson Controls Products: iSTAR Configuration Utility (ICU) Problem Types: CWE-457 Description: The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories - https://www.cisa.gov/news-events/ics-advisories/icsa-25-146-01
CVE ID: CVE-2025-26389 State: PUBLISHED Published: 2025-05-13T09:38:34.471Z Last Updated: 2025-05-13T18:58:21.917Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Siemens Products: OZW672, OZW772 Problem Types: CWE-78 Description: A vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0). The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html
leges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-047424.html
CVE ID: CVE-2025-26390 State: PUBLISHED Published: 2025-05-13T09:38:35.749Z Last Updated: 2025-05-13T18:56:33.539Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Siemens Products: OZW672, OZW772 Problem Types: CWE-89 Description: A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-04
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-047424.html
CVE ID: CVE-2025-26391 State: PUBLISHED Published: 2025-11-18T08:53:01.036Z Last Updated: 2025-11-18T21:02:45.370Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: SolarWinds Products: SolarWinds Observability Self-Hosted Problem Types: CWE-79 Description: SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. This vulnerability requires authentication from a low-level account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26391 - https://documentation.solarwinds.com/en/su
https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26391 - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2025-4-1_release_notes.htm
CVE ID: CVE-2025-26392 State: PUBLISHED Published: 2025-10-21T07:46:11.503Z Last Updated: 2025-10-21T13:48:20.826Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: SolarWinds Products: Observability Self-Hosted Problem Types: CWE-89 Description: SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may display sensitive data using a low-level account. This vulnerability requires authentication from a low-privilege account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26392 - https://documentation.solarwinds.com/en/success_center/orionplat
s.com/trust-center/security-advisories/CVE-2025-26392 - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2025-4_release_notes.htm
CVE ID: CVE-2025-26393 State: PUBLISHED Published: 2025-03-17T20:07:29.457Z Last Updated: 2025-03-18T14:08:24.085Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: SolarWinds Products: Service Desk Problem Types: CWE-653 Description: SolarWinds Service Desk is affected by a broken access control vulnerability. The issue allows authenticated users to escalate privileges, leading to unauthorized data manipulation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26393
CVE ID: CVE-2025-26394 State: PUBLISHED Published: 2025-06-10T14:39:37.576Z Last Updated: 2025-06-10T15:00:20.452Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: SolarWinds Products: SolarWinds Observability Self-Hosted Problem Types: CWE-601 Description: SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-263
t Notes: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26394 - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2025-2_release_notes.htm
CVE ID: CVE-2025-26395 State: PUBLISHED Published: 2025-06-10T14:41:10.422Z Last Updated: 2025-06-10T15:02:30.679Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L) Vendors: SolarWinds Products: SolarWinds Observability Self-Hosted Problem Types: CWE-79 Description: SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL. The attack requires authentication using an administrator-level account and user interaction is required. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26395 - https://documentation.sol
nt: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26395 - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2025-2_release_notes.htm
CVE ID: CVE-2025-26396 State: PUBLISHED Published: 2025-06-02T13:04:19.648Z Last Updated: 2025-06-04T03:55:59.248Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SolarWinds Products: Dameware Mini Remote Control Service Problem Types: CWE-269 Description: The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability. This vulnerability requires local access and a valid low privilege account to be susceptible to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26396 - https://docu
DP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26396 - https://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_12-3-2_release_notes.htm
CVE ID: CVE-2025-26397 State: PUBLISHED Published: 2025-07-24T07:57:53.475Z Last Updated: 2025-07-24T13:16:37.075Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SolarWinds Products: SolarWinds Observability Self-Hosted Problem Types: CWE-502 Description: SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vulnerability requires authentication from a low-level account and local access to the host server. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
on from a low-level account and local access to the host server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26397 - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-2-1_release_notes.htm
CVE ID: CVE-2025-26398 State: PUBLISHED Published: 2025-08-12T08:10:54.116Z Last Updated: 2025-08-13T15:03:57.855Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: SolarWinds Products: Database Performance Analyzer Problem Types: CWE-798 Description: SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle (MITM) attack against users. This vulnerability requires additional software not installed by default, local access to the server and administrator level privileges on the host. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
nd administrator level privileges on the host. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26398 - https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2025-3_release_notes.htm
CVE ID: CVE-2025-26399 State: PUBLISHED Published: 2025-09-23T05:07:14.702Z Last Updated: 2025-09-24T03:55:11.851Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SolarWinds Products: Web Help Desk Problem Types: CWE-502 Description: SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability is a patch bypass of CVE-2024-28988, which in turn is a patch bypass of CVE-2024-28986. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/
VE-2024-28986. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26399 - https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-8-7-hotfix-1_release_notes.htm
CVE ID: CVE-2025-26400 State: PUBLISHED Published: 2025-07-29T08:07:38.230Z Last Updated: 2025-07-29T13:47:18.609Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: SolarWinds Products: Web Help Desk Problem Types: CWE-611 Description: SolarWinds Web Help Desk was reported to be affected by an XML External Entity Injection (XXE) vulnerability that could lead to information disclosure. A valid, low-privilege access is required unless the attacker had access to the local server to modify configuration files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26400 - https://docume
Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26400 - https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-8-7_release_notes.htm
CVE ID: CVE-2025-26401 State: PUBLISHED Published: 2025-04-04T02:10:17.818Z Last Updated: 2025-04-04T14:20:28.042Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: JTEKT ELECTRONICS CORPORATION Products: HMI ViewJet C-more series Problem Types: CWE-261 Description: Weak encoding for password vulnerability exists in HMI ViewJet C-more series. If this vulnerability is exploited, authentication information may be obtained by a local authenticated attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202503207271/ - https://jvn.jp/en/jp/JVN17260367/
CVE ID: CVE-2025-26402 State: PUBLISHED Published: 2025-11-11T16:50:13.327Z Last Updated: 2025-11-12T20:00:57.990Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) NPU Drivers Problem Types: Denial of Service, CWE-693 Description: Protection mechanism failure for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. Th
access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01304.html
CVE ID: CVE-2025-26403 State: PUBLISHED Published: 2025-08-12T16:59:17.037Z Last Updated: 2025-11-03T17:32:20.977Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) Xeon(R) 6 processors when using Intel(R) SGX or Intel(R) TDX Problem Types: Escalation of Privilege, CWE-787 Description: Out-of-bounds write in the memory subsystem for some Intel(R) Xeon(R) 6 processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/adv
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01367.html