deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-49137
Published: 2025-06-09
Description: HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, the application does not sufficiently sanitize user input, allowing for the execution of arbitrary JavaScript code. The 'saveNode' and 'saveManifest' endpoints take user input and store it in the JSON schema for the site. This content is then rendered in the generated HAX site. Although the application does not allow users to supply a `script` tag, it does allow the use of other HTML tags to run JavaScript. Version 11.0.0 fixes the issue.
CVSS Score: 8.5 (HIGH)
CWE: CWE-79, CWE-80, CWE-87, CWE-79
References: https://github.com/haxtheweb/haxcms-php/commit/0dd3e98fe2fadd0793b667d4af2aac230980e0f8; https://github.com/haxtheweb/issues/security/advisories/GHSA-2vc4-3hx7-v7v7; https://github.com/haxtheweb/issues/security/advisories/GHSA-2vc4-3hx7-v7v7
CVE: CVE-2025-49138
Published: 2025-06-09
Description: HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, an authenticated Local File Inclusion (LFI) vulnerability in the HAXCMS saveOutline endpoint allows a low-privileged user to read arbitrary files on the server by manipulating the location field written into site.json. This enables attackers to exfiltrate sensitive system files such as /etc/passwd, application secrets, or configuration files accessible to the web server (www-data). The vulnerability stems from the way the HAXCMS backend handles the location field in the site's outline. When a user sends a POST request to /system/api/saveOutline, the backend stores the provided location value directly into the site.json file associated with the site, without validating or sanitizing the input. Later the location parameter is interpreted by the CMS to resolve and load the content for a given node. If the location field contains a relative path like `../../../etc/passwd`, the application will attempt to read and render that file. Version 11.0.0 fixes the issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-73
References: https://github.com/haxtheweb/haxcms-php/blob/b158d8ba1f9602af92ab084fd03b418f953079fd/system/backend/php/lib/HAXCMSSite.php#L1248; https://github.com/haxtheweb/issues/security/advisories/GHSA-hxrr-x32w-cg8g; https://github.com/haxtheweb/issues/security/advisories/GHSA-hxrr-x32w-cg8g
CVE: CVE-2025-49139
Published: 2025-06-09
Description: HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, in the HAX site editor, users can create a website block to load another site in an iframe. The application allows users to supply a target URL in the website block. When the HAX site is visited, the client's browser will query the supplied URL. An authenticated attacker can create a HAX site with a website block pointing at an attacker-controlled server running Responder or a similar tool. The attacker can then conduct a phishing attack by convincing another user to visit their malicious HAX site to harvest credentials. Version 11.0.0 contains a patch for the issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1021
References: https://github.com/haxtheweb/haxcms-nodejs/commit/5368eb9b278ca47cd9a83b8d3e[PII_REDACTED]b8f5; https://github.com/haxtheweb/issues/security/advisories/GHSA-v3ph-2q5q-cg88; https://github.com/haxtheweb/issues/security/advisories/GHSA-v3ph-2q5q-cg88
CVE: CVE-2025-49141
Published: 2025-06-09
Description: HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.3, the `gitImportSite` functionality obtains a URL string from a POST request and insufficiently validates user input. The `set_remote` function later passes this input into `proc_open`, yielding OS command injection. An authenticated attacker can craft a URL string that bypasses the validation checks employed by the `filter_var` and `strpos` functions in order to execute arbitrary OS commands on the backend server. The attacker can exfiltrate command output via an HTTP request. Version 11.0.3 contains a patch for the issue.
CVSS Score: 8.5 (HIGH)
CWE: CWE-78
References: https://github.com/haxtheweb/haxcms-nodejs/commit/5131fea6b6be611db76a618f89bd2e164752e9b3; https://github.com/haxtheweb/issues/security/advisories/GHSA-g4cf-pp4x-hqgw; https://github.com/haxtheweb/issues/security/advisories/GHSA-g4cf-pp4x-hqgw
CVE: CVE-2025-5896
Published: 2025-06-09
Description: A vulnerability was found in tarojs taro up to 4.1.1. It has been declared as problematic. This vulnerability affects unknown code of the file taro/packages/css-to-react-native/src/index.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. Upgrading to version 4.1.2 is able to address this issue. The name of the patch is c2e321a8b6fc873427c466c69f41ed0b5e8814bf. It is recommended to upgrade the affected component.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400, CWE-1333, CWE-1333
References: https://github.com/NervJS/taro/commit/c2e321a8b6fc873427c466c69f41ed0b5e8814bf; https://github.com/NervJS/taro/pull/17619; https://github.com/NervJS/taro/releases/tag/v4.1.2
CVE: CVE-2025-5897
Published: 2025-06-09
Description: A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400, CWE-1333, CWE-1333
References: https://github.com/vuejs/vue-cli/pull/7478; https://vuldb.com/?ctiid.311669; https://vuldb.com/?id.311669
CVE: CVE-2025-30184
Published: 2025-06-09
Description: CyberData 011209 Intercom could allow an unauthenticated user access to the Web Interface through an alternate path.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-01
CVE: CVE-2025-49140
Published: 2025-06-09
Description: Pion Interceptor is a framework for building RTP/RTCP communication software. Versions v0.1.36 through v0.1.38 contain a bug in a RTP packet factory that can be exploited to trigger a panic with Pion based SFU via crafted RTP packets, This only affect users that use pion/interceptor. Users should upgrade to v0.1.39 or later, which validates that: `padLen > 0 && padLen <= payloadLength` and return error  on overflow, avoiding panic. If upgrading is not possible, apply the patch from the pull request manually or drop packets whose P-bit is set but whose padLen is zero or larger than the remaining payload.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/pion/interceptor/commit/fa5b35ea867389cec33a9c82fffbd459ca8958e5; https://github.com/pion/interceptor/pull/338; https://github.com/pion/interceptor/security/advisories/GHSA-f26w-gh5m-qq77
CVE: CVE-2025-5898
Published: 2025-06-09
Description: A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected is the function parse_variables_option of the file utilities/pspp-convert.c. The manipulation leads to out-of-bounds write. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://drive.google.com/file/d/1ZigqDFZQn5YUWFLu1V2juDGWQgbJFAtX/view?usp=sharing; https://savannah.gnu.org/bugs/index.php?67071; https://vuldb.com/?ctiid.311670
CVE: CVE-2025-5899
Published: 2025-06-09
Description: A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected by this vulnerability is the function parse_variables_option of the file utilities/pspp-convert.c. The manipulation leads to free of memory not on the heap. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-590
References: https://drive.google.com/file/d/1YPJLiBzOwVTcc2FzdawYxBJWGujwqy7o/view?usp=sharing; https://savannah.gnu.org/bugs/index.php?67072; https://vuldb.com/?ctiid.311671
CVE: CVE-2025-5900
Published: 2025-06-09
Description: A vulnerability, which was classified as problematic, was found in Tenda AC9 15.03.02.13. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862, CWE-352
References: https://candle-throne-f75.notion.site/Tenda-AC9-fromSysToolReboot-20adf0aa1185806a9d20ee5c355c08a6?pvs=73; https://candle-throne-f75.notion.site/Tenda-AC9-fromSysToolRestoreSet-20adf0aa11858094a25ae21f9b4203da; https://vuldb.com/?ctiid.311673
CVE: CVE-2025-26468
Published: 2025-06-09
Description: CyberData 
011209 


Intercom exposes features that could allow an unauthenticated to gain 
access and cause a denial-of-service condition or system disruption.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-01
CVE: CVE-2025-30183
Published: 2025-06-09
Description: CyberData 011209 Intercom
 does not properly store or protect web server admin credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-01
CVE: CVE-2025-30507
Published: 2025-06-09
Description: CyberData 011209 Intercom could allow an unauthenticated user to gather sensitive information through blind SQL injections.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-89
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-01
CVE: CVE-2025-30515
Published: 2025-06-09
Description: CyberData 011209 Intercom
 
could allow an authenticated attacker to upload arbitrary files to multiple locations within the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-35
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-01
CVE: CVE-2025-5901
Published: 2025-06-09
Description: A vulnerability has been found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This vulnerability affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument File leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120, CWE-120
References: https://candle-throne-f75.notion.site/TOTOLINK-T10-UploadCustomModule-20bdf0aa118580d59961cd545582c118; https://vuldb.com/?ctiid.311674; https://vuldb.com/?id.311674
CVE: CVE-2025-5902
Published: 2025-06-09
Description: A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This issue affects the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument slaveIpList leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120, CWE-120
References: https://candle-throne-f75.notion.site/TOTOLINK-T10-setUpgradeFW-20bdf0aa11858089bc28f634bb140d00; https://vuldb.com/?ctiid.311675; https://vuldb.com/?id.311675
CVE: CVE-2025-0036
Published: 2025-06-10
Description: In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post-boot) cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data.
CVSS Score: 3.2 (LOW)
CWE: CWE-497, CWE-682, CWE-772, CWE-940, CWE-941
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8011.html
CVE: CVE-2025-0037
Published: 2025-06-10
Description: In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaces, resulting in the loss of integrity and confidentiality.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-20
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8010.html
CVE: CVE-2025-5903
Published: 2025-06-10
Description: A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120, CWE-120
References: https://candle-throne-f75.notion.site/TOTOLINK-T10-setWiFiAclRules-20bdf0aa118580399a8df6ba2a44c197; https://vuldb.com/?ctiid.311676; https://vuldb.com/?id.311676
CVE: CVE-2025-5904
Published: 2025-06-10
Description: A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setWiFiMeshName of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument device_name leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120, CWE-120
References: https://candle-throne-f75.notion.site/TOTOLINK-T10-setWiFiMeshName-20bdf0aa1185806eb922dbd496c4a4b4; https://vuldb.com/?ctiid.311677; https://vuldb.com/?id.311677
CVE: CVE-2025-5905
Published: 2025-06-10
Description: A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been rated as critical. Affected by this issue is the function setWiFiRepeaterCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument Password leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120, CWE-120
References: https://candle-throne-f75.notion.site/TOTOLINK-T10-setWiFiRepeaterCfg-20bdf0aa118580bd8cd0da62d4d2e47f?pvs=73; https://vuldb.com/?ctiid.311678; https://vuldb.com/?id.311678
CVE: CVE-2025-23192
Published: 2025-06-10
Description: SAP BusinessObjects Business Intelligence (BI Workspace) allows an unauthenticated attacker to craft and store malicious script within a workspace. When the victim accesses the workspace, the script will execute in their browser enabling the attacker to potentially access sensitive session information, modify or make browser information unavailable. This leads to a high impact on confidentiality and low impact on integrity, availability.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://me.sap.com/notes/3560693; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-31325
Published: 2025-06-10
Description: Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an unauthenticated attacker could inject malicious JavaScript into a web page through an unprotected parameter. When a victim accesses the affected page, the script executes in their browser, providing the attacker limited access to restricted information. The vulnerability does not affect data integrity or availability and operates entirely within the context of the client's browser.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3590887; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42977
Published: 2025-06-10
Description: SAP NetWeaver Visual Composer contains a Directory Traversal vulnerability caused by insufficient validation of input paths provided by a high-privileged user. This allows an attacker to read or modify arbitrary files, resulting in a high impact on confidentiality and a low impact on integrity.
CVSS Score: 7.6 (HIGH)
CWE: CWE-22
References: https://me.sap.com/notes/3610591; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42982
Published: 2025-06-10
Description: SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials. This causes high impact on confidentiality, integrity and availability of the application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://me.sap.com/notes/3609271; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42983
Published: 2025-06-10
Description: SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the system unusable. On successful exploitation, an attacker can completely delete database entries but is not able to read any data.
CVSS Score: 8.5 (HIGH)
CWE: CWE-862
References: https://me.sap.com/notes/3606484; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42984
Published: 2025-06-10
Description: SAP S/4HANA Manage Central Purchase Contract does not perform necessary authorization checks for an authenticated user. Due to this, an attacker could execute the function import on the entity making it inaccessible for unrestricted user. This has low impact on confidentiality and availability of the application.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3441087; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42987
Published: 2025-06-10
Description: SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit shared rules of any user by tampering the request parameter. Due to missing authorization check, the attacker can edit rules that should be restricted, compromising the integrity of the application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3596850; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42988
Published: 2025-06-10
Description: Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no impact on integrity and availability of the application.
CVSS Score: 3.7 (LOW)
CWE: CWE-918
References: https://me.sap.com/notes/3585545; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42989
Published: 2025-06-10
Description: RFC inbound processing�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation the attacker could critically impact both integrity and availability of the application.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-862
References: https://me.sap.com/notes/3600840; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42990
Published: 2025-06-10
Description: Unprotected SAPUI5 applications allow an attacker with basic privileges to inject malicious HTML code into a webpage, with the goal of redirecting users to the attacker controlled URL. This issue could impact the integrity of the application. Confidentiality or Availability are not impacted.
CVSS Score: 3.0 (LOW)
CWE: CWE-79
References: https://me.sap.com/notes/3601169; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42991
Published: 2025-06-10
Description: SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3608058; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42993
Published: 2025-06-10
Description: Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement), an attacker with access to the Inbound Binding Configuration could create an RFC destination and assign an arbitrary high-privilege user. This allows the attacker to consume events via the RFC destination, leading to code execution under the privileges of the assigned high-privilege user. While the vulnerability has a low impact on Availability, it significantly poses a high risk to both Confidentiality and Integrity.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3580384; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42994
Published: 2025-06-10
Description: SAP MDM Server ReadString function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit unexpectedly causing high impact on availability with no impact on confidentiality and integrity of the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-590
References: https://me.sap.com/notes/3610006; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42995
Published: 2025-06-10
Description: SAP MDM Server Read function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit unexpectedly causing high impact on availability with no impact on confidentiality and integrity of the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-590
References: https://me.sap.com/notes/3610006; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42996
Published: 2025-06-10
Description: SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain functions without having to re-authenticate giving the ability to access or modify non-sensitive information or consume sufficient resources which could degrade the performance of the server causing low impact on confidentiality, integrity and availibility of the application.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-590
References: https://me.sap.com/notes/3610006; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42998
Published: 2025-06-10
Description: The security settings in the SAP Business One Integration Framework are not adequately checked, allowing attackers to bypass the 403 Forbidden error and access restricted pages. This leads to low impact on confidentiality of the application, there is no impact on integrity and availability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-346
References: https://me.sap.com/notes/3594258; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-5906
Published: 2025-06-10
Description: A vulnerability classified as critical has been found in code-projects Laundry System 1.0. This affects an unknown part of the file /data/. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287, CWE-306, CWE-306
References: https://code-projects.org/; https://github.com/tuooo/CVE/issues/11; https://vuldb.com/?ctiid.311679
CVE: CVE-2025-5907
Published: 2025-06-10
Description: A vulnerability classified as critical was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120, CWE-120
References: https://github.com/byxs0x0/cve2/blob/main/3.md; https://vuldb.com/?ctiid.311680; https://vuldb.com/?id.311680
CVE: CVE-2025-5908
Published: 2025-06-10
Description: A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This issue affects some unknown processing of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120, CWE-120
References: https://github.com/byxs0x0/cve2/blob/main/4.md; https://vuldb.com/?ctiid.311681; https://vuldb.com/?id.311681