rainbutterfly/cve_corpus huggingface dataset:
CVE-2025-15276 FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of SFD files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28198.
Problem types: cwe_id: CWE-502
description: CWE-502: Deserialization of Untrusted Data
Affected products: vendor: FontForge
product: FontForge
default_status: unknown
Published: 2025-12-31T06:59:24.595Z
CVE-2025-15277 FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of scanlines within SGI files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27920.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: FontForge
product: FontForge
default_status: unknown
Published: 2025-12-31T06:59:29.183Z
CVE-2025-15278 FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability
FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of pixels within XBM files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27865.
Problem types: cwe_id: CWE-190
description: CWE-190: Integer Overflow or Wraparound
Affected products: vendor: FontForge
product: FontForge
default_status: unknown
Published: 2025-12-31T06:59:33.188Z
CVE-2025-15279 FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of pixels within BMP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27517.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: FontForge
product: FontForge
default_status: unknown
Published: 2025-12-31T06:59:37.307Z
CVE-2025-15280 FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability
FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of SFD files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-28525.
Problem types: cwe_id: CWE-416
description: CWE-416: Use After Free
Affected products: vendor: FontForge
product: FontForge
default_status: unknown
Published: 2025-12-31T06:59:18.875Z
CVE-2025-15281 wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.
Problem types: cwe_id: CWE-908
description: CWE-908 Use of Uninitialized Resource
Affected products: vendor: The GNU C Library
product: glibc
default_status: unaffected
Credits: lang: en
value: Vitaly Simonovich
Published: 2026-01-20T13:22:46.495Z
CVE-2025-15282 Header injection via newlines in data URL mediatype
User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype.
Problem types: cwe_id: CWE-93
description: CWE-93
Affected products: vendor: Python Software Foundation
product: CPython
default_status: unaffected
Credits: lang: en
value: Omar M. Hasan
Published: 2026-01-20T21:35:13.865Z
CVE-2025-15283 Name Directory <= 1.30.3 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters
The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name_directory_name' and  'name_directory_description' parameters in all versions up to, and including, 1.30.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: jeroenpeters1986
product: Name Directory
default_status: unaffected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
baseScore: 7.2
baseSeverity: HIGH
Credits: lang: en
value: D.Sim
Published: 2026-01-14T05:28:07.374Z
CVE-2025-15284 arrayLimit bypass in bracket notation allows DoS via memory exhaustion
Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: < 6.14.1.


Summary

The arrayLimit option in qs did not enforce limits for bracket notation (a[]=1&a[]=2), only for indexed notation (a[0]=1). This is a consistency bug; arrayLimit should apply uniformly across all array notations.

Note: The default parameterLimit of 1000 effectively mitigates the DoS scenario originally described. With default options, bracket notation cannot produce arrays larger than parameterLimit regardless of arrayLimit, because each a[]=valueconsumes one parameter slot. The severity has been reduced accordingly.

Details

The arrayLimit option only checked limits for indexed notation (a[0]=1&a[1]=2) but did not enforce it for bracket notation (a[]=1&a[]=2).

Vulnerable code (lib/parse.js:159-162):

if (root === '[]' && options.parseArrays) {
    obj = utils.combine([], leaf);  // No arrayLimit check
}





Working code (lib/parse.js:175):

else if (index <= options.arrayLimit) {  // Limit checked here
    obj = [];
    obj[index] = leaf;
}





The bracket notation handler at line 159 uses utils.combine([], leaf) without validating against options.arrayLimit, while indexed notation at line 175 checks index <= options.arrayLimit before creating arrays.



PoC

const qs = require('qs');
const result = qs.parse('a[]=1&a[]=2&a[]=3&a[]=4&a[]=5&a[]=6', { arrayLimit: 5 });
console.log(result.a.length);  // Output: 6 (should be max 5)





Note on parameterLimit interaction: The original advisory's "DoS demonstration" claimed a length of 10,000, but parameterLimit (default: 1000) caps parsing to 1,000 parameters. With default options, the actual output is 1,000, not 10,000.

Impact

Consistency bug in arrayLimit enforcement. With default parameterLimit, the practical DoS risk is negligible since parameterLimit already caps the total number of parsed parameters (and thus array elements from bracket notation). The risk increases only when parameterLimit is explicitly set to a very high value.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.7
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2025-12-29T22:56:45.240Z
CVE-2025-15285 SEO Flow by LupsOnline <= 2.2.1 - Unauthenticated Arbitrary Post/Category Modification
The SEO Flow by LupsOnline plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the checkBlogAuthentication() and checkCategoryAuthentication() functions in all versions up to, and including, 2.2.1. These authorization functions only implement basic API key authentication but fail to implement WordPress capability checks. This makes it possible for unauthenticated attackers to create, modify, and delete blog posts and categories.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: lupsonline
product: SEO Flow by LupsOnline
default_status: unaffected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
baseScore: 7.5
baseSeverity: HIGH
Credits: lang: en
value: Tarcísio Luchesi De Almeida Silva
Published: 2026-02-04T08:25:29.295Z
CVE-2025-15288 Tanium addressed an improper access controls vulnerability in Interact.
Tanium addressed an improper access controls vulnerability in Interact.
Problem types: cwe_id: CWE-863
description: Incorrect Authorization
Affected products: vendor: Tanium
product: Interact
cpes: cpe:2.3:a:tanium:service_interact:3.5.89:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 3.1
baseSeverity: LOW
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Published: 2026-01-29T20:10:48.480Z
CVE-2025-15289 Tanium addressed an improper access controls vulnerability in Interact.
Tanium addressed an improper access controls vulnerability in Interact.
Problem types: cwe_id: CWE-862
description: Missing Authorization
Affected products: vendor: Tanium
product: Interact
cpes: cpe:2.3:a:tanium:service_interact:3.1.336:*:*:*:*:*:*:*
cpe:2.3:a:tanium:service_interact:3.2.184:*:*:*:*:*:*:*
cpe:2.3:a:tanium:service_interact:3.5.89:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 3.1
baseSeverity: LOW
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Published: 2026-02-05T18:10:28.261Z
CVE-2025-15310 Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.
Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.
Problem types: cwe_id: CWE-59
description: Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: Tanium
product: Patch Endpoint Tools
cpes: cpe:2.3:a:tanium:endpoint_patch:3.17.10194:*:*:*:*:*:*:*
cpe:2.3:a:tanium:endpoint_patch:10.1.32:*:*:*:*:*:*:*
cpe:2.3:a:tanium:endpoint_patch:10.2.21:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 7.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Credits: lang: en
value: Filip Magic
Published: 2026-02-09T23:00:51.789Z
CVE-2025-15311 Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.
Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.
Problem types: cwe_id: CWE-150
description: Improper Neutralization of Escape, Meta, or Control Sequences
Affected products: vendor: Tanium
product: Tanium Appliance
cpes: cpe:2.3:a:tanium:tanos:1.8.3.0145:*:*:*:*:*:*:*
cpe:2.3:a:tanium:tanos:1.8.4.0148:*:*:*:*:*:*:*
cpe:2.3:a:tanium:tanos:1.8.5.0211:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 7.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2026-02-05T18:26:23.251Z
CVE-2025-15312 Tanium addressed an improper output sanitization vulnerability in TanOS.
Tanium addressed an improper output sanitization vulnerability in Tanium Appliance.
Problem types: cwe_id: CWE-116
description: Improper Encoding or Escaping of Output
Affected products: vendor: Tanium
product: Tanium Appliance
cpes: cpe:2.3:a:tanium:tanos:1.8.3.0145:*:*:*:*:*:*:*
cpe:2.3:a:tanium:tanos:1.8.4.0156:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 6.6
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Published: 2026-02-05T18:26:06.378Z
CVE-2025-15313 Tanium addressed an arbitrary file deletion vulnerability in Tanium EUSS.
Tanium addressed an arbitrary file deletion vulnerability in Tanium EUSS.
Problem types: cwe_id: CWE-59
description: Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: Tanium
product: Tanium EUSS
cpes: cpe:2.3:a:tanium:endpoint_euss:1.17.40:*:*:*:*:*:*:*
cpe:2.3:a:tanium:endpoint_euss:1.18.27:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 5.5
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Published: 2026-02-09T23:05:16.158Z
CVE-2025-15314 Tanium addressed an arbitrary file deletion vulnerability in end-user-cx.
Tanium addressed an arbitrary file deletion vulnerability in end-user-cx.
Problem types: cwe_id: CWE-59
description: Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: Tanium
product: end-user-cx
cpes: cpe:2.3:a:tanium:endpoint_end-user-cx:1.4.1174:*:*:*:*:*:*:*
cpe:2.3:a:tanium:endpoint_end-user-cx:1.6.925:*:*:*:*:*:*:*
cpe:2.3:a:tanium:endpoint_end-user-cx:1.8.20:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 5.5
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Published: 2026-02-09T23:05:16.503Z
CVE-2025-15315 Tanium addressed a local privilege escalation vulnerability in Tanium Module Server.
Tanium addressed a local privilege escalation vulnerability in Tanium Module Server.
Problem types: cwe_id: CWE-88
description: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Affected products: vendor: Tanium
product: Tanium Module Server
cpes: cpe:2.3:a:tanium:moduleserver:7.5.6.1160:*:*:*:*:*:*:*
cpe:2.3:a:tanium:moduleserver:7.4.6.1150:*:*:*:*:*:*:*
cpe:2.3:a:tanium:moduleserver:7.6.2.1292:*:*:*:*:*:*:*
cpe:2.3:a:tanium:moduleserver:7.6.4.2113:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 6.7
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Published: 2026-02-09T21:48:49.693Z
CVE-2025-15316 Tanium addressed a local privilege escalation vulnerability in Tanium Server.
Tanium addressed a local privilege escalation vulnerability in Tanium Server.
Problem types: cwe_id: CWE-88
description: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Affected products: vendor: Tanium
product: Tanium Server
cpes: cpe:2.3:a:tanium:server:7.4.6.1150:*:*:*:*:*:*:*
cpe:2.3:a:tanium:server:7.5.6.1160:*:*:*:*:*:*:*
cpe:2.3:a:tanium:server:7.6.2.1292:*:*:*:*:*:*:*
cpe:2.3:a:tanium:server:7.6.4.2113:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 6.7
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Published: 2026-02-09T21:48:49.471Z
CVE-2025-15317 Tanium addressed an uncontrolled resource consumption vulnerability in Tanium Server.
Tanium addressed an uncontrolled resource consumption vulnerability in Tanium Server.
Problem types: cwe_id: CWE-770
description: Allocation of Resources Without Limits or Throttling
Affected products: vendor: Tanium
product: Tanium Server
cpes: cpe:2.3:a:tanium:server:7.4.6.1153:*:*:*:*:*:*:*
cpe:2.3:a:tanium:server:7.5.6.1163:*:*:*:*:*:*:*
cpe:2.3:a:tanium:server:7.6.2.1302:*:*:*:*:*:*:*
cpe:2.3:a:tanium:server:7.6.4.2123:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 6.5
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published: 2026-02-09T21:43:41.258Z
CVE-2025-15318 Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools.
Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools.
Problem types: cwe_id: CWE-59
description: Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: Tanium
product: End-User Notifications Endpoint Tools
cpes: cpe:2.3:a:tanium:endpoint_end-user-notifications:1.18.10078:*:*:*:*:*:*:*
cpe:2.3:a:tanium:endpoint_end-user-notifications:10.0.13:*:*:*:*:*:*:*
cpe:2.3:a:tanium:endpoint_end-user-notifications:10.1.19:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 5.1
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Published: 2026-02-09T22:56:27.343Z
CVE-2025-15319 Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.
Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.
Problem types: cwe_id: CWE-59
description: Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: Tanium
product: Patch Endpoint Tools
cpes: cpe:2.3:a:tanium:endpoint_patch:3.17.10206:*:*:*:*:*:*:*
cpe:2.3:a:tanium:endpoint_patch:10.1.49:*:*:*:*:*:*:*
cpe:2.3:a:tanium:endpoint_patch:10.7.24:*:*:*:*:*:*:*
cpe:2.3:a:tanium:endpoint_patch:10.9.30:*:*:*:*:*:*:*
cpe:2.3:a:tanium:endpoint_patch:10.10.26:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 7.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Credits: lang: en
value: Owen Jeanes
Published: 2026-02-09T22:52:32.693Z
CVE-2025-15320 Tanium addressed a denial of service vulnerability in Tanium Client.
Tanium addressed a denial of service vulnerability in Tanium Client.
Problem types: cwe_id: CWE-605
description: Multiple Binds to the Same Port
Affected products: vendor: Tanium
product: Tanium Client
cpes: cpe:2.3:a:tanium:client:7.4.10.1116:*:*:*:*:*:*:*
cpe:2.3:a:tanium:client:7.6.2.1326:*:*:*:*:*:*:*
cpe:2.3:a:tanium:client:7.6.4.2159:*:*:*:*:*:*:*
cpe:2.3:a:tanium:client:7.7.3.8230:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 3.3
baseSeverity: LOW
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Credits: lang: en
value: Filip Waeytens
lang: en
value: Frank Lycops
lang: en
value: Jean-Michel Huguet
lang: en
value: Jorge Escabias
lang: en
value: Justin Hocquel from NCIA/NCSC
Published: 2026-02-06T19:18:13.493Z
CVE-2025-15321 Tanium addressed an improper input validation vulnerability in Tanium Appliance.
Tanium addressed an improper input validation vulnerability in Tanium Appliance.
Problem types: cwe_id: CWE-426
description: Untrusted Search Path
Affected products: vendor: Tanium
product: Tanium Appliance
cpes: cpe:2.3:a:tanium:tanos:1.8.3.0195:*:*:*:*:*:*:*
cpe:2.3:a:tanium:tanos:1.8.5.0198:*:*:*:*:*:*:*
cpe:2.3:a:tanium:tanos:1.8.5.0226:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 2.7
baseSeverity: LOW
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Credits: lang: en
value: Filip Waeytens
lang: en
value: Frank Lycops
lang: en
value: Jean-Michel Huguet
lang: en
value: Jorge Escabias
lang: en
value: Justin Hocquel from NCIA/NCSC
Published: 2026-02-05T18:20:39.404Z
CVE-2025-15322 Tanium addressed an improper access controls vulnerability in Tanium Server.
Tanium addressed an improper access controls vulnerability in Tanium Server.
Problem types: cwe_id: CWE-863
description: Incorrect Authorization
Affected products: vendor: Tanium
product: Tanium Server
cpes: cpe:2.3:a:tanium:server:7.6.2.1326:*:*:*:*:*:*:*
cpe:2.3:a:tanium:server:7.6.4.2159:*:*:*:*:*:*:*
cpe:2.3:a:tanium:server:7.7.3.8230:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 4.3
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Published: 2026-01-30T00:20:57.307Z
CVE-2025-15323 Tanium addressed an improper certificate validation vulnerability in Tanium Appliance.
Tanium addressed an improper certificate validation vulnerability in Tanium Appliance.
Problem types: cwe_id: CWE-295
description: Improper Certificate Validation
Affected products: vendor: Tanium
product: Tanium Appliance
cpes: cpe:2.3:a:tanium:tanos:1.8.3.0198:*:*:*:*:*:*:*
cpe:2.3:a:tanium:tanos:1.8.4.0204:*:*:*:*:*:*:*
cpe:2.3:a:tanium:tanos:1.8.5.0235:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 3.7
baseSeverity: LOW
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Published: 2026-02-05T18:12:21.517Z
CVE-2025-15324 Tanium addressed a local privilege escalation vulnerability in Engage.
Tanium addressed a documentation issue in Engage.
Problem types: cwe_id: CWE-59
description: Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: Tanium
product: Engage
cpes: cpe:2.3:a:tanium:service_engage:1.3.36:*:*:*:*:*:*:*
cpe:2.3:a:tanium:service_engage:1.6.192:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 6.6
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Published: 2026-02-05T18:25:52.474Z
CVE-2025-15325 Tanium addressed an improper input validation vulnerability in Discover.
Tanium addressed an improper input validation vulnerability in Discover.
Problem types: cwe_id: CWE-89
description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Tanium
product: Discover
cpes: cpe:2.3:a:tanium:service_discover:4.10.89:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 6.3
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Published: 2026-02-05T18:25:29.908Z
CVE-2025-15326 Tanium addressed an improper access controls vulnerability in Patch.
Tanium addressed an improper access controls vulnerability in Patch.
Problem types: cwe_id: CWE-862
description: Missing Authorization
Affected products: vendor: Tanium
product: Patch
cpes: cpe:2.3:a:tanium:service_patch:3.17.2261:*:*:*:*:*:*:*
cpe:2.3:a:tanium:service_patch:3.19.194:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 4.3
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Published: 2026-02-05T18:25:11.487Z
CVE-2025-15327 Tanium addressed an improper access controls vulnerability in Deploy.
Tanium addressed an improper access controls vulnerability in Deploy.
Problem types: cwe_id: CWE-862
description: Missing Authorization
Affected products: vendor: Tanium
product: Deploy
cpes: cpe:2.3:a:tanium:service_deploy:2.26.1252:*:*:*:*:*:*:*
cpe:2.3:a:tanium:service_deploy:2.30.149:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 4.3
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Published: 2026-02-05T18:25:11.258Z
CVE-2025-15328 Tanium addressed an improper link resolution before file access vulnerability in Enforce.
Tanium addressed an improper link resolution before file access vulnerability in Enforce.
Problem types: cwe_id: CWE-59
description: Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: Tanium
product: Enforce
cpes: cpe:2.3:a:tanium:service_enforce:2.7.313:*:*:*:*:*:*:*
cpe:2.3:a:tanium:service_enforce:2.8.543:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseScore: 5
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Published: 2026-02-05T18:24:42.534Z