rainbutterfly/cve_corpus huggingface dataset:
CVE-2025-47816 
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related to extra content at the end of a document.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: GNU
product: PSPP
default_status: unknown
CVSS v3.1: version: 3.1
baseScore: 2.9
baseSeverity: LOW
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Published: 2025-05-10T00:00:00.000Z
CVE-2025-47817 
In BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role parameter.
Problem types: cwe_id: CWE-472
description: CWE-472 External Control of Assumed-Immutable Web Parameter
Affected products: vendor: BlueWave
product: Checkmate
default_status: unknown
CVSS v3.1: version: 3.1
baseScore: 8.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2025-05-10T00:00:00.000Z
CVE-2025-47818 
Flock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection.
Problem types: cwe_id: CWE-259
description: CWE-259 Use of Hard-coded Password
Affected products: vendor: Flock Safety
product: Gunshot Detection devices
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 2.2
baseSeverity: LOW
vectorString: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
Published: 2025-06-27T00:00:00.000Z
CVE-2025-47819 
Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control.
Problem types: cwe_id: CWE-1191
description: CWE-1191 On-Chip Debug and Test Interface With Improper Access Control
Affected products: vendor: Flock Safety
product: Gunshot Detection devices
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 6.4
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published: 2025-06-27T00:00:00.000Z
CVE-2025-47820 
Flock Safety Gunshot Detection devices before 1.3 have cleartext storage of code.
Problem types: cwe_id: CWE-312
description: CWE-312 Cleartext Storage of Sensitive Information
Affected products: vendor: Flock Safety
product: Gunshot Detection devices
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 2
baseSeverity: LOW
vectorString: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Published: 2025-06-27T00:00:00.000Z
CVE-2025-47821 
Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system.
Problem types: cwe_id: CWE-259
description: CWE-259 Use of Hard-coded Password
Affected products: vendor: Flock Safety
product: Gunshot Detection devices
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 2.2
baseSeverity: LOW
vectorString: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
Published: 2025-06-27T00:00:00.000Z
CVE-2025-47822 
Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper access control.
Problem types: cwe_id: CWE-1191
description: CWE-1191 On-Chip Debug and Test Interface With Improper Access Control
Affected products: vendor: Flock Safety
product: License Plate Reader
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 6.4
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published: 2025-06-27T00:00:00.000Z
CVE-2025-47823 
Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have a hardcoded password for a system.
Problem types: cwe_id: CWE-259
description: CWE-259 Use of Hard-coded Password
Affected products: vendor: Flock Safety
product: License Plate Reader
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 2.2
baseSeverity: LOW
vectorString: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
Published: 2025-06-27T00:00:00.000Z
CVE-2025-47824 
Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have cleartext storage of code.
Problem types: cwe_id: CWE-312
description: CWE-312 Cleartext Storage of Sensitive Information
Affected products: vendor: Flock Safety
product: License Plate Reader
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 2
baseSeverity: LOW
vectorString: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Published: 2025-06-27T00:00:00.000Z
CVE-2025-47827 
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-06-05T00:00:00.000Z
CVE-2025-47828 
Lumi H5P-Nodejs-library before 9.3.3 omits a sanitizeHtml call for plain text strings.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
Affected products: vendor: Lumi
product: H5P-Nodejs-library
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 6.4
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Published: 2025-05-11T00:00:00.000Z
CVE-2025-47849 Apache CloudStack: Insecure access of user's API/Secret Keys in the same domain
A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can get the API key and secret key of user-accounts of Admin role type in the same domain. This operation is not appropriately restricted and allows the attacker to assume control over higher-privileged user-accounts. A malicious Domain Admin attacker can impersonate an Admin user-account and gain access to sensitive APIs and resources that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of infrastructure managed by CloudStack.

Users are recommended to upgrade to Apache CloudStack 4.19.3.0 or 4.20.1.0, which fixes the issue with the following:


  *  Strict validation on Role Type hierarchy: the caller's role must be equal to or higher than the target user's role. 
  *  API privilege comparison: the caller must possess all privileges of the user they are operating on. 
  *  Two new domain-level settings (restricted to the default admin): 
 - role.types.allowed.for.operations.on.accounts.of.same.role.type: Defines which role types are allowed to act on users of the same role type. Default: "Admin, DomainAdmin, ResourceAdmin". 
 - allow.operations.on.users.in.same.account: Allows/disallows user operations within the same account. Default: true.
Problem types: cwe_id: CWE-269
description: CWE-269 Improper Privilege Management
Affected products: vendor: Apache Software Foundation
product: Apache CloudStack
default_status: unaffected
Credits: lang: en
value: Kevin Li <kli74@apple.com>
lang: en
value: Scott Schmitz <sschmitz@ussignal.com>
Published: 2025-06-10T23:07:54.526Z
CVE-2025-47850 
In JetBrains YouTrack before 2025.1.74704 restricted attachments could become visible after issue cloning
Problem types: cwe_id: CWE-306
description: CWE-306
Affected products: vendor: JetBrains
product: YouTrack
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Published: 2025-05-20T17:37:43.234Z
CVE-2025-47851 
In JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possible
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: JetBrains
product: TeamCity
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
baseScore: 4.8
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Published: 2025-05-20T17:37:44.096Z
CVE-2025-47852 
In JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possible
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: JetBrains
product: TeamCity
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
baseScore: 4.8
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Published: 2025-05-20T17:37:44.700Z
CVE-2025-47853 
In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: JetBrains
product: TeamCity
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
baseScore: 4.8
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Published: 2025-05-20T17:37:45.475Z
CVE-2025-47854 
In JetBrains TeamCity before 2025.03.2 open redirect was possible on editing VCS Root page
Problem types: cwe_id: CWE-601
description: CWE-601
Affected products: vendor: JetBrains
product: TeamCity
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Published: 2025-05-20T17:37:46.240Z
CVE-2025-47855 
An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet FortiFone 7.0.0 through 7.0.1, FortiFone 3.0.13 through 3.0.23 allows an unauthenticated attacker to obtain the device configuration via crafted HTTP or HTTPS requests.
Problem types: cwe_id: CWE-200
description: Improper access control
Affected products: vendor: Fortinet
product: FortiFone
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.3
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C
Published: 2026-01-13T16:32:29.539Z
CVE-2025-47856 
Two improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiVoice version 7.2.0, 7.0.0 through 7.0.6 and before 6.4.10 allows a privileged attacker to execute arbitrary code or commands via crafted HTTP/HTTPS or CLI requests.
Problem types: cwe_id: CWE-78
description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: FortiVoice
cpes: cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:7.0.6:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:7.0.5:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:7.0.4:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:6.4.10:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:6.4.9:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:6.4.8:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:6.4.7:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:6.4.6:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:6.4.5:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:6.4.4:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:H/RL:X/RC:C
Published: 2025-10-14T13:42:47.612Z
CVE-2025-47857 
A improper neutralization of special elements used in an os command ('os command injection') vulnerability [CWE-78] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or command via crafted CLI commands.
Problem types: cwe_id: CWE-78
description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: FortiWeb
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C
Published: 2025-08-12T19:00:05.087Z
CVE-2025-47865 
A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations.
Problem types: cwe_id: CWE-475
description: CWE-475: Undefined Behavior for Input to API
Affected products: vendor: Trend Micro, Inc.
product: Trend Micro Apex Central
cpes: cpe:2.3:a:trendmicro:apex_central:6955:*:*:en:*:windows_10:x86_64:1809
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2025-06-17T17:42:30.922Z
CVE-2025-47866 
An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations.
Problem types: cwe_id: CWE-475
description: CWE-475: Undefined Behavior for Input to API
Affected products: vendor: Trend Micro, Inc.
product: Trend Micro Apex Central
cpes: cpe:2.3:a:trendmicro:apex_central:6955:*:*:en:*:windows_10:x86_64:1809
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: NONE
baseSeverity: MEDIUM
baseScore: 4.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Published: 2025-06-17T17:42:42.396Z
CVE-2025-47867 
A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations.
Problem types: cwe_id: CWE-74
description: CWE-74:  Improper Neutralization of Special Elements in Output Used by a Downstream Component
Affected products: vendor: Trend Micro, Inc.
product: Trend Micro Apex Central
cpes: cpe:2.3:a:trendmicro:apex_central:6955:*:*:en:*:windows_10:x86_64:1809
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: 2025-06-17T17:42:55.846Z
CVE-2025-47868 Apache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition.
Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf-converter font conversion utility that is part of Apache NuttX RTOS repository. This standalone program is optional and neither part of NuttX RTOS nor Applications runtime, but active bdf-converter users may be affected when this tool is exposed to external provided user data data (i.e. publicly available automation).

This issue affects Apache NuttX: from 6.9 before 12.9.0.

Users are recommended to upgrade to version 12.9.0, which fixes the issue.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
cwe_id: CWE-122
description: CWE-122 Heap-based Buffer Overflow
Affected products: vendor: Apache Software Foundation
product: Apache NuttX RTOS: tools/bdf-converter.
default_status: unaffected
Credits: lang: en
value: Chánh Phạm <chanhphamviet@gmail.com>
lang: en
value: Nathan Hartman <hartman.nathan@gmail.com>
lang: en
value: Tomek CEDRO <tomek@cedro.info>
lang: en
value: Alan Carvalho de Assis <acassis@gmail.com>
lang: en
value: Alin Jerpelea <jerpelea@gmail.com>
lang: en
value: Lee, Lup Yuen <luppy@appkaki.com>
lang: en
value: Arnout Engelen <engelen@apache.org>
Published: 2025-06-16T11:00:05.293Z
CVE-2025-47869 Apache NuttX RTOS: examples/xmlrpc: Fix calls buffers size.
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability was discovered in Apache NuttX RTOS apps/exapmles/xmlrpc application. In this example application device stats structure that stored remotely provided parameters had hardcoded buffer size which could lead to buffer overflow. Structure members buffers were updated to valid size of CONFIG_XMLRPC_STRINGSIZE+1.

This issue affects Apache NuttX RTOS users that may have used or base their code on example application as presented in releases from 6.22 before 12.9.0.

Users of XMLRPC in Apache NuttX RTOS are advised to review their code 
for this pattern and update buffer sizes as presented in the version of 
the example in release 12.9.0.
Problem types: cwe_id: CWE-119
description: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Apache Software Foundation
product: Apache NuttX RTOS
default_status: unaffected
Credits: lang: en
value: Chánh Phạm <chanhphamviet@gmail.com>
lang: en
value: Arnout Engelen <engelen@apache.org>
lang: en
value: Tomek CEDRO <tomek@cedro.info>
lang: en
value: Alan Carvalho de Assis <acassis@gmail.com>
lang: en
value: Alin Jerpelea <jerpelea@gmail.com>
lang: en
value: Lee, Lup Yuen <luppy@appkaki.com>
lang: en
value: Xiang Xiao <xiaoxiang781216@gmail.com>
lang: en
value: JianyuWang <wangjianyu3@xiaomi.com>
Published: 2025-06-16T11:00:37.755Z
CVE-2025-47870 Team invite ID leaked to team admin with no member invite privileges
Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.9.x <= 10.9.2 fail to sanitize the team invite ID in the  POST /api/v4/teams/:teamId/restore endpoint which allows an team admin with no member invite privileges to get the team’s invite id.
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: Mattermost
product: Mattermost
default_status: unaffected
CVSS v3.1: attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
baseSeverity: MEDIUM
baseScore: 4.3
Credits: lang: en
value: omarAhmed1
Published: 2025-08-21T08:02:44.934Z
CVE-2025-47871 Mattermost Playbooks exposes private channel metadata to unauthorized users via run metadata API
Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly validate channel membership when retrieving playbook run metadata, allowing authenticated users who are playbook members but not channel members to access sensitive information about linked private channels including channel name, display name, and participant count through the run metadata API endpoint.
Problem types: cwe_id: CWE-863
description: CWE-863: Incorrect Authorization
Affected products: vendor: Mattermost
product: Mattermost
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
version: 3.1
Credits: lang: en
value: Leandro Chaves (brdoors3)
Published: 2025-06-30T16:51:13.979Z
CVE-2025-47872 EG4 Electronics EG4 Inverters Observable Discrepancy
The public-facing product registration endpoint server responds 
differently depending on whether the S/N is valid and unregistered, 
valid but already registered, or does not exist in the database. 
Combined with the fact that serial numbers are sequentially assigned, 
this allows an attacker to gain information on the product registration 
status of different S/Ns.
Problem types: cwe_id: CWE-203
description: CWE-203
Affected products: vendor: EG4 Electronics
product: EG4 12kPV
default_status: unaffected
vendor: EG4 Electronics
product: EG4 18kPV
default_status: unaffected
vendor: EG4 Electronics
product: EG4 Flex 21
default_status: unaffected
vendor: EG4 Electronics
product: EG4 Flex 18
default_status: unaffected
vendor: EG4 Electronics
product: EG4 6000XP
default_status: unaffected
vendor: EG4 Electronics
product: EG4 12000XP
default_status: unaffected
vendor: EG4 Electronics
product: EG4 GridBoss
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.8
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Anthony Rose of BC Security reported these vulnerabilities to CISA.
Published: 2025-08-08T16:14:18.901Z
CVE-2025-47873 
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Canva
product: Affinity
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: LOW
baseScore: 6.1
baseSeverity: MEDIUM
Credits: lang: en
value: Discovered by KPC of Cisco Talos.
Published: 2026-03-17T18:52:35.531Z
CVE-2025-47884 
In Jenkins OpenID Connect Provider Plugin 96.vee8ed882ec4d and earlier the generation of build ID Tokens uses potentially overridden values of environment variables, in conjunction with certain other plugins allowing attackers able to configure jobs to craft a build ID Token that impersonates a trusted job, potentially gaining unauthorized access to external services.
Affected products: vendor: Jenkins Project
product: Jenkins OpenID Connect Provider Plugin
default_status: unaffected
Published: 2025-05-14T20:35:54.646Z
CVE-2025-47885 
Jenkins Health Advisor by CloudBees Plugin 374.v194b_d4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses.
Affected products: vendor: Jenkins Project
product: Jenkins Health Advisor by CloudBees Plugin
default_status: unaffected
Published: 2025-05-14T20:35:55.364Z
CVE-2025-47886 
A cross-site request forgery (CSRF) vulnerability in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password.
Affected products: vendor: Jenkins Project
product: Jenkins Cadence vManager Plugin
default_status: unaffected
Published: 2025-05-14T20:35:56.297Z
CVE-2025-47887 
Missing permission checks in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password.
Affected products: vendor: Jenkins Project
product: Jenkins Cadence vManager Plugin
default_status: unaffected
Published: 2025-05-14T20:35:56.876Z