Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-33082 State: PUBLISHED Published: 2025-09-01T14:22:55.516Z Last Updated: 2025-09-02T20:14:11.755Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Concert Software Problem Types: CWE-79 Description: IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7243699
CVE ID: CVE-2025-33083 State: PUBLISHED Published: 2025-09-01T14:22:14.739Z Last Updated: 2025-09-02T20:24:24.372Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Concert Software Problem Types: CWE-79 Description: IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7243699
CVE ID: CVE-2025-33084 State: PUBLISHED Published: 2025-09-01T14:20:52.366Z Last Updated: 2025-09-02T20:25:16.590Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Concert Software Problem Types: CWE-327 Description: IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7243699
CVE ID: CVE-2025-33090 State: PUBLISHED Published: 2025-08-18T14:01:32.418Z Last Updated: 2025-08-18T14:09:20.940Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Concert Software Problem Types: CWE-1333 Description: IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to cause a denial of service using a specially crafted regular expression that would cause excessive resource consumption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7242354
CVE ID: CVE-2025-33092 State: PUBLISHED Published: 2025-07-29T18:36:58.168Z Last Updated: 2025-07-31T03:55:58.310Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Db2 Problem Types: CWE-121 Description: IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7240940
CVE ID: CVE-2025-33093 State: PUBLISHED Published: 2025-05-07T11:04:31.838Z Last Updated: 2025-08-28T14:21:26.785Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Sterling Partner Engagement Manager Problem Types: CWE-260 Description: IBM Sterling Partner Engagement Manager 6.1.0, 6.2.0, 6.2.2 JWT secret is stored in public Helm Charts and is not stored as a Kubernetes secret. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7232762
CVE ID: CVE-2025-33096 State: PUBLISHED Published: 2025-10-12T13:31:04.723Z Last Updated: 2025-10-14T15:26:02.178Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Engineering Requirements Management Doors Next Problem Types: CWE-674 Description: IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a denial of service by uploading specially crafted files using uncontrolled recursion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7247716
CVE ID: CVE-2025-33097 State: PUBLISHED Published: 2025-07-15T14:29:54.224Z Last Updated: 2025-08-18T01:34:37.793Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: QRadar SIEM Problem Types: CWE-79 Description: IBM QRadar SIEM 7.5 - 7.5.0 UP12 IF02 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7239755
CVE ID: CVE-2025-33099 State: PUBLISHED Published: 2025-09-01T14:19:45.777Z Last Updated: 2025-09-02T20:26:00.195Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Concert Software Problem Types: CWE-295 Description: IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7243699
CVE ID: CVE-2025-33100 State: PUBLISHED Published: 2025-08-18T14:02:24.726Z Last Updated: 2025-08-18T14:33:23.105Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Concert Software Problem Types: CWE-798 Description: IBM Concert Software 1.0.0 through 1.1.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7242354
CVE ID: CVE-2025-33102 State: PUBLISHED Published: 2025-09-01T14:18:37.636Z Last Updated: 2025-09-02T20:26:30.270Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Concert Software Problem Types: CWE-327 Description: IBM Concert Software 1.0.0 through 1.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7243699
CVE ID: CVE-2025-33103 State: PUBLISHED Published: 2025-05-17T16:02:29.639Z Last Updated: 2025-08-26T15:06:05.252Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: IBM Products: i Problem Types: CWE-250 Description: IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 product IBM TCP/IP Connectivity Utilities for i contains a privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7233799
CVE ID: CVE-2025-33104 State: PUBLISHED Published: 2025-05-14T19:01:09.876Z Last Updated: 2025-08-20T15:47:41.244Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: WebSphere Application Server Problem Types: CWE-79 Description: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7233438
CVE ID: CVE-2025-33108 State: PUBLISHED Published: 2025-06-14T00:25:23.830Z Last Updated: 2025-08-24T11:53:15.783Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: IBM Products: Backup Recovery and Media Services for i Problem Types: CWE-250 Description: IBM Backup, Recovery and Media Services for i 7.4 and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to a library unqualified call made by a BRMS program. A malicious actor could cause user-controlled code to run with component access to the host operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/supp
to the host operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7236663
CVE ID: CVE-2025-33109 State: PUBLISHED Published: 2025-07-24T15:06:49.888Z Last Updated: 2025-08-18T01:28:18.727Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: i Problem Types: CWE-250 Description: IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to a privilege escalation caused by an invalid database authority check. A bad actor could execute a database procedure or function without having all required permissions, in addition to causing denial of service for some database actions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7240410
CVE ID: CVE-2025-33110 State: PUBLISHED Published: 2025-11-06T20:43:16.690Z Last Updated: 2025-11-06T21:11:53.167Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: OpenPages Problem Types: CWE-80 Description: IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7250321
CVE ID: CVE-2025-33112 State: PUBLISHED Published: 2025-06-10T16:28:44.355Z Last Updated: 2025-08-24T11:57:38.663Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: AIX, VIOS Problem Types: CWE-23 Description: IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7236103
CVE ID: CVE-2025-33114 State: PUBLISHED Published: 2025-07-29T18:41:15.788Z Last Updated: 2025-07-29T18:47:53.548Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 Problem Types: CWE-943 Description: IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to denial of service with a specially crafted query under certain non-default conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7240943
CVE ID: CVE-2025-33116 State: PUBLISHED Published: 2025-09-25T15:10:22.592Z Last Updated: 2025-09-25T16:05:53.022Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Watson Studio on Cloud Pak for Data Problem Types: CWE-79 Description: IBM Watson Studio 4.0 through 5.2.0 on Cloud Pak for Data is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7246140
CVE ID: CVE-2025-33117 State: PUBLISHED Published: 2025-06-19T17:16:41.195Z Last Updated: 2025-08-24T11:46:22.642Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: IBM Products: QRadar SIEM Problem Types: CWE-73 Description: IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that would allow the upload of a malicious autoupdate file to execute arbitrary commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7237317
CVE ID: CVE-2025-33118 State: PUBLISHED Published: 2025-08-01T17:21:16.808Z Last Updated: 2025-08-01T17:34:02.243Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: QRadar SIEM Problem Types: CWE-79 Description: IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 12 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7241303
CVE ID: CVE-2025-33119 State: PUBLISHED Published: 2025-11-12T21:19:55.966Z Last Updated: 2025-11-13T15:03:22.671Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: QRadar Security Information and Event Management Problem Types: CWE-260 Description: IBM QRadar SIEM 7.5 through 7.5.0 UP14 stores user credentials in configuration files in source control which can be read by an authenticated user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7250932
CVE ID: CVE-2025-33120 State: PUBLISHED Published: 2025-08-22T14:54:02.504Z Last Updated: 2025-08-23T03:55:11.148Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: QRadar SIEM Problem Types: CWE-250 Description: IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7242869
CVE ID: CVE-2025-33121 State: PUBLISHED Published: 2025-06-19T17:14:42.786Z Last Updated: 2025-08-24T11:45:56.274Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: IBM Products: QRadar SIEM Problem Types: CWE-611 Description: IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7237317
CVE ID: CVE-2025-33122 State: PUBLISHED Published: 2025-06-17T17:13:00.835Z Last Updated: 2025-08-24T11:51:42.054Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: i Problem Types: CWE-427 Description: IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 could allow a user to gain elevated privileges due to an unqualified library call in IBM Advanced Job Scheduler for i. A malicious actor could cause user-controlled code to run with administrator privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7237040
CVE ID: CVE-2025-33126 State: PUBLISHED Published: 2025-10-27T23:56:06.271Z Last Updated: 2025-10-28T14:02:57.632Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: DB2 High Performance Unload Problem Types: CWE-131 Description: IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of a buffer size. Additional Analyst
authenticated user to cause the program to crash due to the incorrect calculation of a buffer size. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7249336
CVE ID: CVE-2025-33131 State: PUBLISHED Published: 2025-10-27T23:56:34.181Z Last Updated: 2025-10-28T13:57:38.628Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: DB2 High Performance Unload Problem Types: CWE-120 Description: IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on the stack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7249336
CVE ID: CVE-2025-33132 State: PUBLISHED Published: 2025-10-27T23:57:12.201Z Last Updated: 2025-10-28T13:53:31.618Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: DB2 High Performance Unload Problem Types: CWE-467 Description: IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7249336
CVE ID: CVE-2025-33133 State: PUBLISHED Published: 2025-10-27T23:57:31.927Z Last Updated: 2025-10-28T13:51:03.512Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: DB2 High Performance Unload Problem Types: CWE-787 Description: IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due an out of bounds write. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7249336
CVE ID: CVE-2025-33136 State: PUBLISHED Published: 2025-05-22T16:14:02.649Z Last Updated: 2025-08-26T15:04:47.668Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-471 Description: IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to improper protection of assumed immutable data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7234114
CVE ID: CVE-2025-33137 State: PUBLISHED Published: 2025-05-22T16:36:04.256Z Last Updated: 2025-08-26T15:05:04.735Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-602 Description: IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-side enforcement of server-side security. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7234114
CVE ID: CVE-2025-33138 State: PUBLISHED Published: 2025-05-22T16:37:28.698Z Last Updated: 2025-08-26T15:04:09.662Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-80 Description: IBM Aspera Faspex 5.0.0 through 5.0.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7234114
CVE ID: CVE-2025-33142 State: PUBLISHED Published: 2025-08-14T15:41:59.719Z Last Updated: 2025-08-14T19:55:56.651Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: IBM Products: WebSphere Application Server Problem Types: CWE-295 Description: IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for TLS connections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7242172
CVE ID: CVE-2025-33150 State: PUBLISHED Published: 2025-11-10T19:33:55.421Z Last Updated: 2025-11-10T19:40:32.545Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Cognos Analytics Certified Containers Problem Types: CWE-552 Description: IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7250395
CVE ID: CVE-2025-33176 State: PUBLISHED Published: 2025-11-04T19:46:41.310Z Last Updated: 2025-11-04T20:10:14.826Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N) Vendors: NVIDIA Products: RunAI Problem Types: CWE-923 Description: NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communications channels on an adjacent network. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-33176 - https://www.cve.org/CVERecord?id=CVE-2025-3317
richment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-33176 - https://www.cve.org/CVERecord?id=CVE-2025-33176 - https://nvidia.custhelp.com/app/answers/detail/a_id/5719
CVE ID: CVE-2025-33177 State: PUBLISHED Published: 2025-10-14T19:22:16.897Z Last Updated: 2025-10-14T19:30:32.759Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: Jetson Orin Series, Jetson Thor Series, IGX Orin Problem Types: CWE-400 Description: NVIDIA Jetson Linux and IGX OS contain a vulnerability in NvMap, where improper tracking of memory allocations could allow a local attacker to cause memory overallocation. A successful exploitation of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5716
CVE ID: CVE-2025-33178 State: PUBLISHED Published: 2025-11-11T16:18:39.568Z Last Updated: 2025-11-12T04:58:03.063Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NeMo Framework Problem Types: CWE-94 Description: NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-33178 - https://www.cv
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-33178 - https://www.cve.org/CVERecord?id=CVE-2025-33178 - https://nvidia.custhelp.com/app/answers/detail/a_id/5718
CVE ID: CVE-2025-33182 State: PUBLISHED Published: 2025-10-14T19:09:39.664Z Last Updated: 2025-10-14T19:57:06.742Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L) Vendors: NVIDIA Products: Jetson Orin Series, Jetson Xavier Series Problem Types: CWE-862 Description: NVIDIA Jetson Linux contains a vulnerability in UEFI, where improper authentication may allow a privileged user to cause corruption of the Linux Device Tree. A successful exploitation of this vulnerability might lead to data tampering, denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5716