deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-9315
Published: 2025-12-10
Description: An unauthenticated device registration vulnerability, caused by Improperly Controlled Modification of Dynamically-Determined Object Attributes, has been identified in the MXsecurity Series. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted JSON payload to the device's registration endpoint /api/v1/devices/register, allowing the attacker to register unauthorized devices without authentication. Although exploiting this vulnerability has limited modification of data, there is no impact to the confidentiality and availability of the affected device, as well as no loss of confidentiality, integrity, and availability within any subsequent systems.
CWE: CWE-915
References: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-252631-cve-2025-9315-unauthenticated-device-registration-vulnerability-in-mxsecurity-series
CVE: CVE-2025-14390
Published: 2025-12-10
Description: The Video Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in version <= 5.0.4. This is due to missing or incorrect nonce validation on the video_merchant_add_video_file() function. This makes it possible for unauthenticated attackers to upload arbitrary files that make remote code execution possible via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://wordpress.org/plugins/video-merchant; https://www.wordfence.com/threat-intel/vulnerabilities/id/7cbe39ae-d10b-432f-afab-682948de2521?source=cve
CVE: CVE-2025-66675
Published: 2025-12-10
Description: Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion.

This issue affects Apache Struts: from 2.0.0 through 6.7.4, from 7.0.0 through 7.0.3.

Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue.

It's related to  https://cve.org/CVERecord?id=CVE-2025-64775  - this CVE addresses missing affected version 6.7.4
CVSS Score: 8.2 (HIGH)
CWE: CWE-459
References: https://cve.org/CVERecord?id=CVE-2025-64775; https://cwiki.apache.org/confluence/display/WW/S2-068
CVE: CVE-2025-7073
Published: 2025-12-10
Description: A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges. The issue arises from bdservicehost.exe deleting files from a user-writable directory (C:\ProgramData\Atc\Feedback) without proper symbolic link validation, enabling arbitrary file deletion. This issue is chained with a file copy operation during network events and a filter driver bypass via DLL injection to achieve arbitrary file copy and code execution as elevated user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://www.bitdefender.com/support/security-advisories/local-privilege-escalation-via-arbitrary-file-operation-in-bitdefender-atc-va-12590
CVE: CVE-2025-41730
Published: 2025-12-10
Description: An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_account() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://certvde.com/de/advisories/VDE-2025-095
CVE: CVE-2025-41732
Published: 2025-12-10
Description: An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://certvde.com/de/advisories/VDE-2025-095
CVE: CVE-2025-13953
Published: 2025-12-10
Description: Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory (LDAP) login method.

Authentication is performed through a local WebSocket, but the web application does not properly validate the authenticity or origin of the data received, allowing an attacker with access to the local machine or internal network to impersonate the legitimate WebSocket and inject manipulated information.

Exploiting this vulnerability could allow an attacker to authenticate as any user in the domain, without the need for valid credentials, compromising the confidentiality, integrity, and availability of the application and its data.
CWE: CWE-290
References: https://www.incibe.es/en/incibe-cert/notices/aviso/bypass-authentication-method-gtt-sistema-de-informacion-tributario
CVE: CVE-2025-41358
Published: 2025-12-10
Description: Direct Object Reference Vulnerability (IDOR) in i2A's CronosWeb, in versions prior to 25.00.00.12, inclusive. This vulnerability could allow an authenticated attacker to access other users' documents by manipulating the ‘documentCode’ parameter in '/CronosWeb/Modulos/Personas/DocumentosPersonales/AdjuntarDocumentosPersonas'.
CWE: CWE-639
References: https://www.incibe.es/en/incibe-cert/notices/aviso/direct-reference-insecure-objects-idor-cronosweb-cronosweb-i2a
CVE: CVE-2024-2104
Published: 2025-12-10
Description: Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://certvde.com/en/advisories/VDE-2024-076; https://harman.csaf-tp.certvde.com/.well-known/csaf/white/2025/hbsa-2025-0001.json
CVE: CVE-2024-2105
Published: 2025-12-10
Description: An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1287
References: https://certvde.com/en/advisories/VDE-2025-089; https://harman.csaf-tp.certvde.com/.well-known/csaf/white/2025/hbsa-2025-0002.json
CVE: CVE-2025-13184
Published: 2025-12-10
Description: Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password on factory/reset X5000R V9.1.0u.6369_B20230113 (arbitrary command execution). Earlier versions that share the same implementation, may also be affected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://hackingbydoing.wixsite.com/hackingbydoing/post/totolink-x5000r-ax1800-router-authentication-bypass; https://www.kb.cert.org/vuls/id/821724
CVE: CVE-2025-13127
Published: 2025-12-10
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in TAC Information Services Internal and External Trade Inc. GoldenHorn allows Cross-Site Scripting (XSS).This issue affects GoldenHorn: before 4.25.1121.1.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-25-0441
CVE: CVE-2025-8110
Published: 2025-12-10
Description: Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://wiz.io/blog/wiz-research-gogs-cve-2025-8110-rce-exploit; http://www.openwall.com/lists/oss-security/2025/12/11/3; http://www.openwall.com/lists/oss-security/2025/12/11/4
CVE: CVE-2025-12046
Published: 2025-12-10
Description: A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://iknow.lenovo.com.cn/detail/435004
CVE: CVE-2025-13125
Published: 2025-12-10
Description: Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers.This issue affects DijiDemi: through 28.11.2025.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://www.usom.gov.tr/bildirim/tr-25-0442
CVE: CVE-2025-13152
Published: 2025-12-10
Description: A potential DLL hijacking vulnerability was reported in Lenovo One Client during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://iknow.lenovo.com.cn/detail/435007; https://one.lenovo.com/
CVE: CVE-2025-13155
Published: 2025-12-10
Description: An improper permissions vulnerability was reported in Lenovo Baiying Client that could allow a local authenticated user to execute code with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://iknow.lenovo.com.cn/detail/435005
CVE: CVE-2025-34392
Published: 2025-12-10
Description: Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application. This can lead to arbitrary file write and remote code execution via webshell upload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-36
References: https://download.mw-rmm.barracudamsp.com/PDF/2025.1.1/RN_BRMM_2025.1.1_EN.pdf; https://labs.watchtowr.com/soapwn-pwning-net-framework-applications-through-http-client-proxies-and-wsdl/; https://www.barracuda.com/products/msp/network-protection/rmm
CVE: CVE-2025-34393
Published: 2025-12-10
Description: Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection. This can result in remote code execution through either invocation of arbitrary methods or deserialization of untrusted types.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-470
References: https://download.mw-rmm.barracudamsp.com/PDF/2025.1.1/RN_BRMM_2025.1.1_EN.pdf; https://www.barracuda.com/products/msp/network-protection/rmm; https://www.vulncheck.com/advisories/barracuda-rmm-service-center-insecure-reflection-rce
CVE: CVE-2025-34394
Published: 2025-12-10
Description: Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against deserialization of arbitrary types. This can lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://download.mw-rmm.barracudamsp.com/PDF/2025.1.1/RN_BRMM_2025.1.1_EN.pdf; https://www.barracuda.com/products/msp/network-protection/rmm; https://www.vulncheck.com/advisories/barracuda-rmm-service-center-net-remoting-deserialization-rce
CVE: CVE-2025-34395
Published: 2025-12-10
Description: Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthenticated attacker can invoke a method vulnerable to path traversal to read arbitrary files. This vulnerability can be escalated to remote code execution by retrieving the .NET machine keys.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://download.mw-rmm.barracudamsp.com/PDF/2025.1.1/RN_BRMM_2025.1.1_EN.pdf; https://www.barracuda.com/products/msp/network-protection/rmm; https://www.vulncheck.com/advisories/barracuda-rmm-service-center-net-remoting-path-traversal-rce
CVE: CVE-2025-34410
Published: 2025-12-10
Description: 1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available from the settings panel (/settings/panel). The endpoint does not implement CSRF protections such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a malicious webpage that submits a username-change request; when a victim visits the page while authenticated, the browser includes valid session cookies and the request succeeds. This allows an attacker to change the victim’s 1Panel username without consent. After the change, the victim is logged out and unable to log in with the previous username, resulting in account lockout and denial of service.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://1panel.pro/; https://github.com/1Panel-dev/1Panel/releases; https://www.vulncheck.com/advisories/1panel-csrf-in-change-username-functionality-allows-account-lockout
CVE: CVE-2025-34416
Published: 2025-12-10
Description: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIPO.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAIPO.DLL, which is then loaded when the executable starts, resulting in execution of attacker-controlled code with the privileges of the process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://mailenable.com/Standard-ReleaseNotes.txt; https://www.mailenable.com/; https://www.vulncheck.com/advisories/mailenable-dll-hijacking-via-unsafe-loading-of-meaipo-dll
CVE: CVE-2025-34417
Published: 2025-12-10
Description: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAISO.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAISO.DLL, which is then loaded when the executable starts, resulting in execution of attacker-controlled code with the privileges of the process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://mailenable.com/Standard-ReleaseNotes.txt; https://www.mailenable.com/; https://www.vulncheck.com/advisories/mailenable-dll-hijacking-via-unsafe-loading-of-meaiso-dll
CVE: CVE-2025-34418
Published: 2025-12-10
Description: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIMF.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAIMF.DLL, which is then loaded when the executable starts, resulting in execution of attacker-controlled code with the privileges of the process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://mailenable.com/Standard-ReleaseNotes.txt; https://www.mailenable.com/; https://www.vulncheck.com/advisories/mailenable-dll-hijacking-via-unsafe-loading-of-meaimf-dll
CVE: CVE-2025-34419
Published: 2025-12-10
Description: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAISM.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAISM.DLL, which is then loaded when the executable starts, resulting in execution of attacker-controlled code with the privileges of the process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://mailenable.com/Standard-ReleaseNotes.txt; https://www.mailenable.com/; https://www.vulncheck.com/advisories/mailenable-dll-hijacking-via-unsafe-loading-of-meaism-dll
CVE: CVE-2025-34420
Published: 2025-12-10
Description: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAM.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAIAM.DLL, which is then loaded on execution, resulting in attacker-controlled code running with the privileges of the process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://mailenable.com/Standard-ReleaseNotes.txt; https://www.mailenable.com/; https://www.vulncheck.com/advisories/mailenable-dll-hijacking-via-unsafe-loading-of-meaiam-dll
CVE: CVE-2025-34421
Published: 2025-12-10
Description: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAISP.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAISP.DLL, which is then loaded on execution, resulting in attacker-controlled code running with the privileges of the process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://mailenable.com/Standard-ReleaseNotes.txt; https://www.mailenable.com/; https://www.vulncheck.com/advisories/mailenable-dll-hijacking-via-unsafe-loading-of-meaisp-dll
CVE: CVE-2025-34422
Published: 2025-12-10
Description: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIPC.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAIPC.DLL, which is then loaded on execution, resulting in attacker-controlled code running with the privileges of the process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://mailenable.com/Standard-ReleaseNotes.txt; https://www.mailenable.com/; https://www.vulncheck.com/advisories/mailenable-dll-hijacking-via-unsafe-loading-of-meaipc-dll
CVE: CVE-2025-34423
Published: 2025-12-10
Description: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAU.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAIAU.DLL, which is then loaded on execution, resulting in attacker-controlled code running with the privileges of the process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://mailenable.com/Standard-ReleaseNotes.txt; https://www.mailenable.com/; https://www.vulncheck.com/advisories/mailenable-dll-hijacking-via-unsafe-loading-of-meaiau-dll
CVE: CVE-2025-34424
Published: 2025-12-10
Description: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIDP.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAIDP.DLL, which is then loaded on execution, resulting in attacker-controlled code running with the privileges of the process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://mailenable.com/Standard-ReleaseNotes.txt; https://www.mailenable.com/; https://www.vulncheck.com/advisories/mailenable-dll-hijacking-via-unsafe-loading-of-meaidp-dll
CVE: CVE-2025-65803
Published: 2025-12-10
Description: An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service (DoS) via supplying a crafted PSD file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://freeimage.sourceforge.io/download.html; https://gist.github.com/1mxml/cabd6d972557d9d992fe5f4f6ca1dd87
CVE: CVE-2025-65807
Published: 2025-12-10
Description: An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command.
CVSS Score: 8.4 (HIGH)
CWE: CWE-266
References: http://sd.com; https://gist.github.com/faabbi/827f10e144fdd342e13a3dd838902e83; https://github.com/chmln/sd
CVE: CVE-2025-52493
Published: 2025-12-10
Description: PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Although these secrets appear masked as password fields, the actual secret values are present in the page source and can be revealed by simply modifying the input field type from "password" to "text" using browser developer tools. This vulnerability is exploitable by administrative users who have access to the configuration page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/carterross2/Vulnerability-Research/tree/main/CVE-2025-52493; https://www.pagerduty.com/platform/automation/; https://www.pagerduty.com/security/disclosure/
CVE: CVE-2025-65792
Published: 2025-12-10
Description: DataGear v5.5.0 is vulnerable to Arbitrary File Deletion.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://gist.github.com/X3J1n/82b047efdbfd74c414a6d63339ad12fb; https://github.com/X3J1n/datagear/issues/1
CVE: CVE-2025-65814
Published: 2025-12-10
Description: A lack of security checks in the file import process of RHOPHI Analytics LLP Office App-Edit Word v6.4.1 allows attackers to execute a directory traversal.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://developer.android.com/privacy-and-security/risks/untrustworthy-contentprovider-provided-filename; https://github.com/Secsys-FDU/AF_CVEs/issues/6
CVE: CVE-2025-65815
Published: 2025-12-10
Description: A lack of security checks in the file import process of AB TECHNOLOGY Document Reader: PDF, DOC, PPT v65.0 allows attackers to execute a directory traversal.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://developer.android.com/privacy-and-security/risks/untrustworthy-contentprovider-provided-filename; https://github.com/Secsys-FDU/AF_CVEs/issues/7
CVE: CVE-2025-67635
Published: 2025-12-10
Description: Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://www.jenkins.io/security/advisory/2025-12-10/#SECURITY-3630
CVE: CVE-2025-67636
Published: 2025-12-10
Description: A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://www.jenkins.io/security/advisory/2025-12-10/#SECURITY-1809
CVE: CVE-2025-67637
Published: 2025-12-10
Description: Jenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-312
References: https://www.jenkins.io/security/advisory/2025-12-10/#SECURITY-783
CVE: CVE-2025-67638
Published: 2025-12-10
Description: Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-312
References: https://www.jenkins.io/security/advisory/2025-12-10/#SECURITY-783
CVE: CVE-2025-67639
Published: 2025-12-10
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account.
CVSS Score: 3.5 (LOW)
CWE: CWE-352
References: https://www.jenkins.io/security/advisory/2025-12-10/#SECURITY-1166
CVE: CVE-2025-67640
Published: 2025-12-10
Description: Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell script generated by the plugin, allowing attackers able to control the workspace directory name to inject arbitrary OS commands.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-78
References: https://www.jenkins.io/security/advisory/2025-12-10/#SECURITY-3614