auren-research/cyber-sec huggingface dataset:
cveID: CVE-2025-55177
vendorProject: Meta Platforms
product: WhatsApp
vulnerabilityName: Meta Platforms WhatsApp Incorrect Authorization Vulnerability
dateAdded: 2025-09-02
shortDescription: Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-09-23
knownRansomwareCampaignUse: Unknown
notes: https://www.whatsapp.com/security/advisories/2025/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-55177
cwes: CWE-863
cveID: CVE-2025-57819
vendorProject: Sangoma
product: FreePBX
vulnerabilityName: Sangoma FreePBX Authentication Bypass Vulnerability
dateAdded: 2025-08-29
shortDescription: Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-09-19
knownRansomwareCampaignUse: Unknown
notes: https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h ; https://nvd.nist.gov/vuln/detail/CVE-2025-57819
cwes: CWE-89
CWE-288
cveID: CVE-2025-7775
vendorProject: Citrix
product: NetScaler
vulnerabilityName: Citrix NetScaler Memory Overflow Vulnerability
dateAdded: 2025-08-26
shortDescription: Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-08-28
knownRansomwareCampaignUse: Unknown
notes: https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938 ; https://nvd.nist.gov/vuln/detail/CVE-2025-7775
cwes: CWE-119
cveID: CVE-2025-48384
vendorProject: Git
product: Git
vulnerabilityName: Git Link Following Vulnerability
dateAdded: 2025-08-25
shortDescription: Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-09-15
knownRansomwareCampaignUse: Unknown
notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9 ; https://access.redhat.com/errata/RHSA-2025:13933 ; https://alas.aws.amazon.com/AL2/ALAS2-2025-2941.html ; https://linux.oracle.com/errata/ELSA-2025-11534.html ; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48384 ; https://nvd.nist.gov/vuln/detail/CVE-2025-48384
cwes: CWE-59
CWE-436
cveID: CVE-2024-8068
vendorProject: Citrix
product: Session Recording
vulnerabilityName: Citrix Session Recording Improper Privilege Management Vulnerability
dateAdded: 2025-08-25
shortDescription: Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-09-15
knownRansomwareCampaignUse: Unknown
notes: https://support.citrix.com/external/article/691941/citrix-session-recording-security-bullet.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-8068
cwes: CWE-269
cveID: CVE-2024-8069
vendorProject: Citrix
product: Session Recording
vulnerabilityName: Citrix Session Recording Deserialization of Untrusted Data Vulnerability
dateAdded: 2025-08-25
shortDescription: Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-09-15
knownRansomwareCampaignUse: Unknown
notes: https://support.citrix.com/external/article/691941/citrix-session-recording-security-bullet.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-8069
cwes: CWE-502
cveID: CVE-2025-43300
vendorProject: Apple
product: iOS, iPadOS, and macOS
vulnerabilityName: Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
dateAdded: 2025-08-21
shortDescription: Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-09-11
knownRansomwareCampaignUse: Unknown
notes: https://support.apple.com/en-us/124925 ; https://support.apple.com/en-us/124926 ; https://support.apple.com/en-us/124927 ; https://support.apple.com/en-us/124928 ; https://support.apple.com/en-us/124929 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43300
cwes: CWE-787
cveID: CVE-2025-54948
vendorProject: Trend Micro
product: Apex One
vulnerabilityName: Trend Micro Apex One OS Command Injection Vulnerability
dateAdded: 2025-08-18
shortDescription: Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-09-08
knownRansomwareCampaignUse: Unknown
notes: https://success.trendmicro.com/en-US/solution/KA-0020652 ; N/A ; https://nvd.nist.gov/vuln/detail/CVE-2025-54948
cwes: CWE-78
cveID: CVE-2025-8876
vendorProject: N-able
product: N-Central
vulnerabilityName: N-able N-Central Command Injection Vulnerability
dateAdded: 2025-08-13
shortDescription: N-able N-Central contains a command injection vulnerability via improper sanitization of user input.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-08-20
knownRansomwareCampaignUse: Unknown
notes: https://status.n-able.com/2025/08/13/announcing-the-ga-of-n-central-2025-3-1/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-8876
cveID: CVE-2025-8875
vendorProject: N-able
product: N-Central
vulnerabilityName: N-able N-Central Insecure Deserialization Vulnerability
dateAdded: 2025-08-13
shortDescription: N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-08-20
knownRansomwareCampaignUse: Unknown
notes: https://status.n-able.com/2025/08/13/announcing-the-ga-of-n-central-2025-3-1/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-8875
cveID: CVE-2025-8088
vendorProject: RARLAB
product: WinRAR
vulnerabilityName: RARLAB WinRAR Path Traversal Vulnerability
dateAdded: 2025-08-12
shortDescription: RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-09-02
knownRansomwareCampaignUse: Unknown
notes: https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5 ; https://nvd.nist.gov/vuln/detail/CVE-2025-8088
cwes: CWE-35
cveID: CVE-2007-0671
vendorProject: Microsoft
product: Office
vulnerabilityName: Microsoft Office Excel Remote Code Execution Vulnerability
dateAdded: 2025-08-12
shortDescription: Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-09-02
knownRansomwareCampaignUse: Unknown
notes: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015 ; https://nvd.nist.gov/vuln/detail/CVE-2007-0671
cveID: CVE-2013-3893
vendorProject: Microsoft
product: Internet Explorer
vulnerabilityName: Microsoft Internet Explorer Resource Management Errors Vulnerability
dateAdded: 2025-08-12
shortDescription: Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-09-02
knownRansomwareCampaignUse: Unknown
notes: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-080 ; https://nvd.nist.gov/vuln/detail/CVE-2013-3893
cwes: CWE-399
cveID: CVE-2020-25078
vendorProject: D-Link
product: DCS-2530L and DCS-2670L Devices
vulnerabilityName: D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
dateAdded: 2025-08-05
shortDescription: D-Link DCS-2530L and DCS-2670L devices contains an unspecified vulnerability that could allow for remote administrator password disclosure. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-08-26
knownRansomwareCampaignUse: Unknown
notes: https://support.dlink.com/productinfo.aspx?m=DCS-2530L ; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180 ; https://nvd.nist.gov/vuln/detail/CVE-2020-25078
cveID: CVE-2020-25079
vendorProject: D-Link
product: DCS-2530L and DCS-2670L Devices
vulnerabilityName: D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
dateAdded: 2025-08-05
shortDescription: D-Link DCS-2530L and DCS-2670L devices contains a command injection vulnerability in the cgi-bin/ddns_enc.cgi. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-08-26
knownRansomwareCampaignUse: Unknown
notes: https://support.dlink.com/productinfo.aspx?m=DCS-2530L ; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180 ; https://nvd.nist.gov/vuln/detail/CVE-2020-25079
cwes: CWE-77
cveID: CVE-2022-40799
vendorProject: D-Link
product: DNR-322L
vulnerabilityName: D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
dateAdded: 2025-08-05
shortDescription: D-Link DNR-322L contains a download of code without integrity check vulnerability that could allow an authenticated attacker to execute OS level commands on the device. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-08-26
knownRansomwareCampaignUse: Unknown
notes: https://www.dlink.com/uk/en/products/dnr-322l-cloud-network-video-recorder ; https://nvd.nist.gov/vuln/detail/CVE-2022-40799
cwes: CWE-494
cveID: CVE-2023-2533
vendorProject: PaperCut
product: NG/MF
vulnerabilityName: PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability
dateAdded: 2025-07-28
shortDescription: PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. 
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-08-18
knownRansomwareCampaignUse: Unknown
notes: https://www.papercut.com/kb/Main/SecurityBulletinJune2023 ; https://nvd.nist.gov/vuln/detail/CVE-2023-2533
cwes: CWE-352
cveID: CVE-2025-20337
vendorProject: Cisco
product: Identity Services Engine
vulnerabilityName: Cisco Identity Services Engine Injection Vulnerability
dateAdded: 2025-07-28
shortDescription: Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-08-18
knownRansomwareCampaignUse: Unknown
notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6 ; https://nvd.nist.gov/vuln/detail/CVE-2025-20337
cwes: CWE-74
cveID: CVE-2025-20281
vendorProject: Cisco
product: Identity Services Engine
vulnerabilityName: Cisco Identity Services Engine Injection Vulnerability
dateAdded: 2025-07-28
shortDescription: Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-08-18
knownRansomwareCampaignUse: Unknown
notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6 ; https://nvd.nist.gov/vuln/detail/CVE-2025-20281
cwes: CWE-74
cveID: CVE-2025-2775
vendorProject: SysAid
product: SysAid On-Prem
vulnerabilityName: SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
dateAdded: 2025-07-22
shortDescription: SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-08-12
knownRansomwareCampaignUse: Unknown
notes: https://documentation.sysaid.com/docs/24-40-60 ; https://nvd.nist.gov/vuln/detail/CVE-2025-2775
cwes: CWE-611
cveID: CVE-2025-2776
vendorProject: SysAid
product: SysAid On-Prem
vulnerabilityName: SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
dateAdded: 2025-07-22
shortDescription: SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-08-12
knownRansomwareCampaignUse: Unknown
notes: https://documentation.sysaid.com/docs/24-40-60 ; https://nvd.nist.gov/vuln/detail/CVE-2025-2776
cwes: CWE-611
cveID: CVE-2025-6558
vendorProject: Google
product: Chromium
vulnerabilityName: Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
dateAdded: 2025-07-22
shortDescription: Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-08-12
knownRansomwareCampaignUse: Unknown
notes: https://chromereleases.googleblog.com/2025/07/stable-channel-update-for-desktop_15.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-6558
cwes: CWE-20
cveID: CVE-2025-54309
vendorProject: CrushFTP
product: CrushFTP
vulnerabilityName:  CrushFTP Unprotected Alternate Channel Vulnerability
dateAdded: 2025-07-22
shortDescription: CrushFTP contains an unprotected alternate channel vulnerability. When the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers to obtain admin access via HTTPS.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2025-08-12
knownRansomwareCampaignUse: Unknown
notes: https://www.crushftp.com/crush11wiki/Wiki.jsp?page=CompromiseJuly2025 ; https://nvd.nist.gov/vuln/detail/CVE-2025-54309 
cwes: CWE-420
cveID: CVE-2025-49704
vendorProject: Microsoft
product: SharePoint
vulnerabilityName: Microsoft SharePoint Code Injection Vulnerability
dateAdded: 2025-07-22
shortDescription: Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.
requiredAction: Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
dueDate: 2025-07-23
knownRansomwareCampaignUse: Known
notes: CISA Mitigation Instructions: https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770; https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/ ; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704 ; https://nvd.nist.gov/vuln/detail/CVE-2025-49704
cwes: CWE-94
cveID: CVE-2025-49706
vendorProject: Microsoft
product: SharePoint
vulnerabilityName: Microsoft SharePoint Improper Authentication Vulnerability
dateAdded: 2025-07-22
shortDescription: Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some changes to disclosed information. This vulnerability could be chained with CVE-2025-49704. CVE-2025-53771 is a patch bypass for CVE-2025-49706, and the updates for CVE-2025-53771 include more robust protection than those for CVE-2025-49706.
requiredAction: Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
dueDate: 2025-07-23
knownRansomwareCampaignUse: Known
notes: CISA Mitigation Instructions: https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770 ; https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/ ; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49706 ; https://nvd.nist.gov/vuln/detail/CVE-2025-49706
cwes: CWE-287
cveID: CVE-2025-53770
vendorProject: Microsoft
product: SharePoint
vulnerabilityName: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
dateAdded: 2025-07-20
shortDescription: Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-53771. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.
requiredAction: Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
dueDate: 2025-07-21
knownRansomwareCampaignUse: Known
notes: CISA Mitigation Instructions: https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770; https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/ ; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53770 ; https://nvd.nist.gov/vuln/detail/CVE-2025-53770
cwes: CWE-502