deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-20661
Published: 2025-04-07
Description: In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3185.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://corp.mediatek.com/product-security-bulletin/April-2025
CVE: CVE-2025-20662
Published: 2025-04-07
Description: In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04428276; Issue ID: MSV-3184.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://corp.mediatek.com/product-security-bulletin/April-2025
CVE: CVE-2025-20663
Published: 2025-04-07
Description: In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00408868; Issue ID: MSV-3031.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://corp.mediatek.com/product-security-bulletin/April-2025
CVE: CVE-2025-20664
Published: 2025-04-07
Description: In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-2773.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://corp.mediatek.com/product-security-bulletin/April-2025
CVE: CVE-2025-31170
Published: 2025-04-07
Description: Access control vulnerability in the security verification module
Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
CVSS Score: 8.4 (HIGH)
CWE: CWE-290, CWE-290
References: https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE: CVE-2025-31171
Published: 2025-04-07
Description: File read permission bypass vulnerability in the kernel file system module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-862
References: https://consumer.huawei.com/en/support/bulletin/2025/6/
CVE: CVE-2025-31172
Published: 2025-04-07
Description: Memory write permission bypass vulnerability in the kernel futex module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.8 (HIGH)
CWE: CWE-280
References: https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE: CVE-2025-31173
Published: 2025-04-07
Description: Memory write permission bypass vulnerability in the kernel futex module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 8.8 (HIGH)
CWE: CWE-280
References: https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE: CVE-2025-31174
Published: 2025-04-07
Description: Path traversal vulnerability in the DFS module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE: CVE-2025-31175
Published: 2025-04-07
Description: Deserialization mismatch vulnerability in the DSoftBus module
Impact: Successful exploitation of this vulnerability may affect service integrity.
CVSS Score: 8.4 (HIGH)
CWE: CWE-502, CWE-502
References: https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE: CVE-2025-3334
Published: 2025-04-07
Description: A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/category_save.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/p1026/CVE/issues/48; https://vuldb.com/?ctiid.303548; https://vuldb.com/?id.303548
CVE: CVE-2025-3335
Published: 2025-04-07
Description: A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/category_update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/p1026/CVE/issues/49; https://vuldb.com/?ctiid.303549; https://vuldb.com/?id.303549
CVE: CVE-2025-3336
Published: 2025-04-07
Description: A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/member_save.php. The manipulation of the argument last leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/p1026/CVE/issues/50; https://vuldb.com/?ctiid.303550; https://vuldb.com/?id.303550
CVE: CVE-2025-3337
Published: 2025-04-07
Description: A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/member_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/p1026/CVE/issues/51; https://vuldb.com/?ctiid.303551; https://vuldb.com/?id.303551
CVE: CVE-2024-11071
Published: 2025-04-07
Description: Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solution(versions described below) which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery (CSRF) attack, which probabilistically enables JSON Hijacking (aka JavaScript Hijacking) via forgery web page.* Due to product customization, version information may differ from the following version description. For further inquiries, please contact the vendor.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-942
References: https://cyberdigm.co.kr/destinyEcm
CVE: CVE-2025-3338
Published: 2025-04-07
Description: A vulnerability classified as critical has been found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the file /admin/user_save.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/p1026/CVE/issues/52; https://vuldb.com/?ctiid.303552; https://vuldb.com/?id.303552
CVE: CVE-2025-3339
Published: 2025-04-07
Description: A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user_update.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/p1026/CVE/issues/53; https://vuldb.com/?ctiid.303553; https://vuldb.com/?id.303553
CVE: CVE-2025-3340
Published: 2025-04-07
Description: A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/combo_update.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/p1026/CVE/issues/55; https://vuldb.com/?ctiid.303554; https://vuldb.com/?id.303554
CVE: CVE-2025-3341
Published: 2025-04-07
Description: A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. This affects an unknown part of the file /admin/reservation_view.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/p1026/CVE/issues/56; https://vuldb.com/?ctiid.303555; https://vuldb.com/?id.303555
CVE: CVE-2025-3342
Published: 2025-04-07
Description: A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/payment_save.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/p1026/CVE/issues/57; https://vuldb.com/?ctiid.303556; https://vuldb.com/?id.303556
CVE: CVE-2025-3343
Published: 2025-04-07
Description: A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/reservation_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/p1026/CVE/issues/58; https://vuldb.com/?ctiid.303557; https://vuldb.com/?id.303557
CVE: CVE-2024-11859
Published: 2025-04-07
Description: DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code.
CWE: CWE-427
References: https://support.eset.com/en/ca8810-dll-search-order-hijacking-vulnerability-in-eset-products-for-windows-fixed
CVE: CVE-2025-30473
Published: 2025-04-07
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow Common SQL Provider.

When using the partition clause in SQLTableCheckOperator as parameter (which was a recommended pattern), Authenticated UI User could inject arbitrary SQL command when triggering DAG exposing partition_clause to the user.
This allowed the DAG Triggering user to escalate privileges to execute those arbitrary commands which they normally would not have.


This issue affects Apache Airflow Common SQL Provider: before 1.24.1.

Users are recommended to upgrade to version 1.24.1, which fixes the issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/apache/airflow/pull/48098; https://lists.apache.org/thread/53klkv790cylqcop0350w7nfq1y6h0t2; http://www.openwall.com/lists/oss-security/2025/04/04/2
CVE: CVE-2025-3344
Published: 2025-04-07
Description: A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/assign_save.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/p1026/CVE/issues/59; https://vuldb.com/?ctiid.303558; https://vuldb.com/?id.303558
CVE: CVE-2025-3345
Published: 2025-04-07
Description: A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/combo.php. The manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/p1026/CVE/issues/60; https://vuldb.com/?ctiid.303559; https://vuldb.com/?id.303559
CVE: CVE-2025-3346
Published: 2025-04-07
Description: A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument pptp_server_start_ip/pptp_server_end_ip leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120, CWE-120
References: https://github.com/CH13hh/tmp_store_cc/blob/main/AC7formSetPPTPServer/formSetPPTPServer.md; https://vuldb.com/?ctiid.303560; https://vuldb.com/?id.303560
CVE: CVE-2025-3347
Published: 2025-04-07
Description: A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /dental_pending.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/hyx123123/cve1/blob/main/README.md; https://vuldb.com/?ctiid.303561
CVE: CVE-2024-33058
Published: 2025-04-07
Description: Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1220
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2024-43046
Published: 2025-04-07
Description: There may be information disclosure during memory re-allocation in TZ Secure OS.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2024-43058
Published: 2025-04-07
Description: Memory corruption while processing IOCTL calls.
CVSS Score: 7.8 (HIGH)
CWE: CWE-704
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2024-43065
Published: 2025-04-07
Description: Cryptographic issues while generating an asymmetric key pair for RKP use cases.
CVSS Score: 7.1 (HIGH)
CWE: CWE-749
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2024-43066
Published: 2025-04-07
Description: Memory corruption while handling file descriptor during listener registration/de-registration.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2024-43067
Published: 2025-04-07
Description: Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-367
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2024-45540
Published: 2025-04-07
Description: Memory corruption while invoking IOCTL map buffer request from userspace.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2024-45543
Published: 2025-04-07
Description: Memory corruption while accessing MSM channel map and mixer functions.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2024-45544
Published: 2025-04-07
Description: Memory corruption while processing IOCTL calls to add route entry in the HW.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2024-45549
Published: 2025-04-07
Description: Information disclosure while creating MQ channels.
CVSS Score: 7.7 (HIGH)
CWE: CWE-497
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2024-45551
Published: 2025-04-07
Description: Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-1390
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2024-45552
Published: 2025-04-07
Description: Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.
CVSS Score: 8.2 (HIGH)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2024-45556
Published: 2025-04-07
Description: Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1262
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2024-45557
Published: 2025-04-07
Description: Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-823
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2024-49848
Published: 2025-04-07
Description: Memory corruption while processing multiple IOCTL calls from HLOS to DSP.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21421
Published: 2025-04-07
Description: Memory corruption while processing escape code in API.
CVSS Score: 7.8 (HIGH)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21423
Published: 2025-04-07
Description: Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21425
Published: 2025-04-07
Description: Memory corruption may occur due top improper access control in HAB process.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21428
Published: 2025-04-07
Description: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21429
Published: 2025-04-07
Description: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21430
Published: 2025-04-07
Description: Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21431
Published: 2025-04-07
Description: Information disclosure may be there when a guest VM is connected.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-367
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21434
Published: 2025-04-07
Description: Transient DOS may occur while parsing EHT operation IE or EHT capability IE.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21435
Published: 2025-04-07
Description: Transient DOS may occur while parsing extended IE in beacon.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21436
Published: 2025-04-07
Description: Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21437
Published: 2025-04-07
Description: Memory corruption while processing memory map or unmap IOCTL operations simultaneously.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21438
Published: 2025-04-07
Description: Memory corruption while IOCTL call is invoked from user-space to read board data.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21439
Published: 2025-04-07
Description: Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21440
Published: 2025-04-07
Description: Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21441
Published: 2025-04-07
Description: Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21442
Published: 2025-04-07
Description: Memory corruption while transmitting packet mapping information with invalid header payload size.
CVSS Score: 7.8 (HIGH)
CWE: CWE-680
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21443
Published: 2025-04-07
Description: Memory corruption while processing message content in eAVB.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21447
Published: 2025-04-07
Description: Memory corruption may occur while processing device IO control call for session control.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-21448
Published: 2025-04-07
Description: Transient DOS may occur while parsing SSID in action frames.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2025-bulletin.html
CVE: CVE-2025-3348
Published: 2025-04-07
Description: A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. This vulnerability affects unknown code of the file /edit_dpatient.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/hyx123123/cve1/blob/main/cve2.md; https://vuldb.com/?ctiid.303562