deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-65966
Published: 2025-11-26
Description: OneUptime is a solution for monitoring and managing online services. In version 9.0.5598, a low-permission user can create new accounts through a direct API request instead of being restricted to the intended interface. This issue has been patched in version 9.1.0.
CVSS Score: 8.1 (HIGH)
CWE: CWE-285
References: https://github.com/OneUptime/oneuptime/security/advisories/GHSA-m449-vh5f-574g
CVE: CVE-2025-66028
Published: 2025-11-26
Description: OneUptime is a solution for monitoring and managing online services. Prior to version 8.0.5567, OneUptime is vulnerable to privilege escalation via Login Response Manipulation. During the login process, the server response included a parameter called isMasterAdmin. By intercepting and modifying this parameter value from false to true, it is possible to gain access to the admin dashboard interface. However, an attacker may be unable to view or interact with the data if they still do not have sufficient permissions. This issue has been patched in version 8.0.5567.
CVSS Score: 8.2 (HIGH)
CWE: CWE-284
References: https://github.com/OneUptime/oneuptime/commit/3e72b2a9a4f50f98cf1f6cf13fa3e405715bb370; https://github.com/OneUptime/oneuptime/security/advisories/GHSA-675q-66gf-gqg8
CVE: CVE-2025-12571
Published: 2025-11-26
Description: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an unauthenticated user to cause a Denial of Service condition by sending specifically crafted requests containing malicious JSON payloads.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://about.gitlab.com/releases/2025/11/26/patch-release-gitlab-18-6-1-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/579168; https://hackerone.com/reports/3362239
CVE: CVE-2025-12653
Published: 2025-11-26
Description: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that under specific conditions could have allowed an unauthenticated user to join arbitrary organizations by changing headers on some requests.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://about.gitlab.com/releases/2025/11/26/patch-release-gitlab-18-6-1-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/579372; https://hackerone.com/reports/3370245
CVE: CVE-2025-13611
Published: 2025-11-26
Description: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.5.5 and 18.6 before 18.6.3 that could have allowed an authenticated user with access to certain logs to obtain sensitive tokens under specific conditions.
CVSS Score: 2.0 (LOW)
CWE: CWE-532
References: https://about.gitlab.com/releases/2026/01/07/patch-release-gitlab-18-7-1-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/545947
CVE: CVE-2025-50433
Published: 2025-11-26
Description: An issue was discovered in imonnit.com (2025-04-24) allowing malicious actors to gain escalated privileges via crafted password reset to take over arbitrary user accounts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: http://imonnitcom.com; http://monnit.com; https://github.com/0xMandor/imonnit-ato-advisory/blob/main/CVE-2025-50433.md
CVE: CVE-2025-65276
Published: 2025-11-26
Description: An unauthenticated administrative access vulnerability exists in the open-source HashTech project (https://github.com/henzljw/hashtech) 1.0 thru commit 5919decaff2681dc250e934814fc3a35f6093ee5 (2021-07-02). Due to missing authentication checks on /admin_index.php, an attacker can directly access the admin dashboard without valid credentials. This allows full administrative control including viewing/modifying user accounts, managing orders, changing payments, and editing product listings. Successful exploitation can lead to information disclosure, data manipulation, and privilege escalation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://gist.github.com/whoisrushi/c3bfcd1adf96d80952edbd03d0310836; https://gist.github.com/whoisrushi/c3bfcd1adf96d80952edbd03d0310836
CVE: CVE-2025-65278
Published: 2025-11-26
Description: An issue was discovered in file users.json in GroceryMart commit 21934e6 (2020-10-23) allowing unauthenticated attackers to gain sensitive information including plaintext usernames and passwords.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-312
References: https://gist.github.com/whoisrushi/7e8d15c85221e3f708b7b480e04ab6ca
CVE: CVE-2025-65670
Published: 2025-11-26
Description: An Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating course IDs in URLs, resulting in unauthorized disclosure of sensitive course, admin, and student data. The leak occurs momentarily before the system reverts to a normal state restricting access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://classroomio.com; https://github.com/Rivek619/CVE-2025-65670; https://github.com/classroomio/classroomio
CVE: CVE-2025-6195
Published: 2025-11-26
Description: GitLab has remediated an issue in GitLab EE affecting all versions from 13.7 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an authenticated user to view information from security reports under certain configuration conditions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-425
References: https://about.gitlab.com/releases/2025/11/26/patch-release-gitlab-18-6-1-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/549937; https://hackerone.com/reports/3155693
CVE: CVE-2025-7449
Published: 2025-11-26
Description: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an authenticated user with specific permissions to cause a denial of service condition through HTTP response processing.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://about.gitlab.com/releases/2025/11/26/patch-release-gitlab-18-6-1-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/554938; https://hackerone.com/reports/3215054
CVE: CVE-2025-65202
Published: 2025-11-26
Description: TRENDnet TEW-657BRM 1.00.1 has an authenticated remote OS command injection vulnerability in the setup.cgi binary, exploitable via the HTTP parameters "command", "todo", and "next_file," which allows an attacker to execute arbitrary commands with root privileges.
CVSS Score: 8.0 (HIGH)
CWE: CWE-78
References: https://github.com/WhereisRain/TEW-657BRM
CVE: CVE-2019-25226
Published: 2025-11-26
Description: Dongyoung Media DM-AP240T/W wireless access points contain an unauthenticated configuration disclosure vulnerability in the /cgi-bin/sys_system_config management endpoint. The endpoint allows remote retrieval of a compressed configuration archive without requiring authentication or authorization. The exposed configuration may include administrative credentials and other sensitive settings, enabling an unauthenticated attacker to obtain information that can facilitate further compromise of the device or network.
CWE: CWE-306
References: http://dongyoung.com/; https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstorm.news/files/id/154719/
CVE: CVE-2019-25227
Published: 2025-11-26
Description: Tellion HN-2204AP routers contain an unauthenticated configuration disclosure vulnerability in the /cgi-bin/system_config_file management endpoint. The endpoint allows remote retrieval of a compressed configuration archive without requiring authentication or authorization. The exposed configuration may include administrative credentials, wireless keys, and other sensitive settings, enabling an unauthenticated attacker to obtain information that can facilitate further compromise of the device or network.
CWE: CWE-306
References: https://packetstorm.news/files/id/154752/; https://web.archive.org/web/[PII_REDACTED]0559/https://www.tellion.com/; https://www.vulncheck.com/advisories/tellion-hn2204ap-unauthenticated-config-disclosure
CVE: CVE-2020-36871
Published: 2025-11-26
Description: ESCAM QD-900 WIFI HD cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi3510/backup.cgi endpoint. The endpoint allows remote download of a compressed configuration backup without requiring authentication or authorization. The exposed backup can include administrative credentials and other sensitive device settings, enabling an unauthenticated remote attacker to obtain information that may facilitate further compromise of the camera or connected network.
CWE: CWE-306
References: https://packetstorm.news/files/id/156492/; https://www.exploit-db.com/exploits/48107; https://www.vulncheck.com/advisories/escam-qd900-unauthenticated-config-disclosure
CVE: CVE-2020-36872
Published: 2025-11-26
Description: BACnet Test Server versions up to and including 1.01 contains a remote denial of service vulnerability in its BACnet/IP BVLC packet handling. The server fails to properly validate the BVLC Length field in incoming UDP BVLC frames on the default BACnet port (47808/udp). A remote unauthenticated attacker can send a malformed BVLC Length value to trigger an access violation and crash the application, resulting in a denial of service.
CWE: CWE-400
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstormsecurity.com/files/159504; https://www.bac-test.com/
CVE: CVE-2020-36873
Published: 2025-11-26
Description: Astak CM-818T3 2.4GHz wireless security surveillance cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi3510/backup.cgi endpoint. The endpoint permits remote download of a compressed configuration backup without requiring authentication or authorization. The exposed backup may include administrative credentials and other sensitive device settings, enabling an unauthenticated remote attacker to obtain information that could facilitate further compromise of the camera or connected network.
CWE: CWE-306
References: https://packetstorm.news/files/id/156532/; https://www.vulncheck.com/advisories/astak-cm818t3-unauthenticated-config-disclosure
CVE: CVE-2020-36874
Published: 2025-11-26
Description: ACE SECURITY WIP-90113 HD cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi3510/backup.cgi endpoint. The endpoint permits remote download of a compressed configuration backup without requiring authentication or authorization. The exposed backup may include administrative credentials and other sensitive device settings, enabling an unauthenticated remote attacker to obtain information that could facilitate further compromise of the camera or connected network.
CWE: CWE-306
References: https://acesecurity.jp/support/top/wip_series/wip-90113; https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstorm.news/files/id/156497/
CVE: CVE-2025-40934
Published: 2025-11-26
Description: XML-Sig versions 0.27 through 0.67 for Perl incorrectly validates XML files if signatures are omitted.

An attacker can remove the signature from the XML document to make it pass the verification check.

XML-Sig is a Perl module to validate signatures on XML files.  An unsigned XML file should return an error message.  The affected versions return true when attempting to validate an XML file that contains no signatures.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-347
References: https://github.com/perl-net-saml2/perl-XML-Sig/issues/63; https://github.com/perl-net-saml2/perl-XML-Sig/pull/64
CVE: CVE-2025-62593
Published: 2025-11-26
Description: Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string "Mozilla" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer running Ray who inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This issue has been patched in version 2.52.0.
CWE: CWE-94, CWE-352
References: https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09; https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v
CVE: CVE-2025-64330
Published: 2025-11-26
Description: Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a single byte read heap overflow when logging the verdict in eve.alert and eve.drop records can lead to crashes. This requires the per packet alert queue to be filled with alerts and then followed by a pass rule. This issue has been patched in versions 7.0.13 and 8.0.2. To reduce the likelihood of this issue occurring, the alert queue size a should be increased (packet-alert-max in suricata.yaml) if verdict is enabled.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-787
References: https://github.com/OISF/suricata/commit/482e5eac9218d007adbe2410d6c00173368ce947; https://github.com/OISF/suricata/security/advisories/GHSA-83v7-gm34-f437
CVE: CVE-2025-64331
Published: 2025-11-26
Description: Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow can occur on large HTTP file transfers if the user has increased the HTTP response body limit and enabled the logging of printable http bodies. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves using default HTTP response body limits and/or disabling http-body-printable logging; body logging is disabled by default.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/OISF/suricata/security/advisories/GHSA-v32w-j79x-pfj2
CVE: CVE-2025-64332
Published: 2025-11-26
Description: Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow that causes Suricata to crash can occur if SWF decompression is enabled. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling SWF decompression (swf-decompression in suricata.yaml), it is disabled by default; set decompress-depth to lower than half your stack size if swf-decompression must be enabled.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/OISF/suricata/commit/ad446c9006a77490af51c468aae0ce934f4d2117; https://github.com/OISF/suricata/security/advisories/GHSA-p32q-7wcp-gv92
CVE: CVE-2025-64333
Published: 2025-11-26
Description: Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a large HTTP content type, when logged can cause a stack overflow crashing Suricata. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves limiting stream.reassembly.depth to less then half the stack size. Increasing the process stack size makes it less likely the bug will trigger.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/OISF/suricata/security/advisories/GHSA-537h-xxmx-v87m
CVE: CVE-2025-64334
Published: 2025-11-26
Description: Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, compressed HTTP data can lead to unbounded memory growth during decompression. This issue has been patched in version 8.0.2. A workaround involves disabling LZMA decompression or limiting response-body-limit size.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/OISF/suricata/commit/00f04daa3a44928dfdd0003cb[PII_REDACTED]c94a1; https://github.com/OISF/suricata/security/advisories/GHSA-r5jf-v2gx-gx8w
CVE: CVE-2025-64335
Published: 2025-11-26
Description: Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/OISF/suricata/commit/c935f08cd988600fd0a4f828a585b181dd5de012; https://github.com/OISF/suricata/security/advisories/GHSA-v299-h7p3-q4f2; https://www.vicarius.io/vsociety/posts/cve-2025-64335-detect-suricata-vulnerability
CVE: CVE-2025-64344
Published: 2025-11-26
Description: Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/OISF/suricata/commit/e13fe6a90dba210a478148c4084f6f5db17c5b5a; https://github.com/OISF/suricata/security/advisories/GHSA-93fh-cgmc-w3rx
CVE: CVE-2025-66030
Published: 2025-11-26
Description: Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-190
References: https://github.com/digitalbazaar/forge/commit/3e0c35ace169cfca529a3e547a7848dc7bf57fdb; https://github.com/digitalbazaar/forge/security/advisories/GHSA-65ch-62r8-g69g
CVE: CVE-2025-66031
Published: 2025-11-26
Description: Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://github.com/digitalbazaar/forge/commit/260425c6167a38aae[PII_REDACTED]83b5517b26451; https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27
CVE: CVE-2025-66035
Published: 2025-11-26
Description: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
CWE: CWE-201, CWE-359
References: https://github.com/angular/angular/commit/0276479e7d0e280e0f8d26fa567d3b7aa97a516f; https://github.com/angular/angular/commit/05fe6686a97fa0bcd3cf157805b3612033f975bc; https://github.com/angular/angular/commit/3240d856d942727372a705252f7c8c115394a41e
CVE: CVE-2025-66040
Published: 2025-11-27
Description: Spotipy is a Python library for the Spotify Web API. Prior to version 2.25.2, there is a cross-site scripting (XSS) vulnerability in the OAuth callback server that allows for JavaScript injection through the unsanitized error parameter. Attackers can execute arbitrary JavaScript in the user's browser during OAuth authentication. This issue has been patched in version 2.25.2.
CVSS Score: 3.6 (LOW)
CWE: CWE-79
References: https://github.com/spotipy-dev/spotipy/commit/880b92d7243dcf2b83bf31dc365a858d8b5e6767; https://github.com/spotipy-dev/spotipy/security/advisories/GHSA-r77h-rpp9-w2xm
CVE: CVE-2024-5539
Published: 2025-11-27
Description: The Access Control Bypass vulnerability found in ALC WebCTRL and Carrier i-Vu in versions up to and including 8.5 allows a malicious actor to bypass intended access restrictions and expose sensitive information via the 

web based building automation server.
CWE: CWE-863
References: https://www.corporate.carrier.com/product-security/advisories-resources/
CVE: CVE-2024-5540
Published: 2025-11-27
Description: The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in versions older than 8.0 affects login panels allowing a 

malicious actor to compromise the client browser

.
CWE: CWE-79
References: https://www.corporate.carrier.com/product-security/advisories-resources/
CVE: CVE-2025-0657
Published: 2025-11-27
Description: A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver
  version  drv_gen5_106-01-2380, allows
  malformed packets to be sent through BACnet MS/TP network causing the devices to enter a fault state. This fault state requires a manual power cycle to
  return the device to network visibility.
CWE: CWE-129, CWE-248
References: https://www.corporate.carrier.com/product-security/advisories-resources/
CVE: CVE-2025-0658
Published: 2025-11-27
Description: A vulnerability in Automated Logic and Carrier's Zone Controller via BACnet protocol
causes the device to crash. The device enters a fault state; after a reset,
a second packet can leave it permanently unresponsive until a manual power cycle
is performed.
CWE: CWE-20
References: https://https://www.corporate.carrier.com/product-security/advisories-resources/
CVE: CVE-2025-12578
Published: 2025-11-27
Description: The Reuters Direct plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.0. This is due to missing or incorrect nonce validation on the the 'class-reuters-direct-settings.php' page. This makes it possible for unauthenticated attackers to reset the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wordpress.org/plugins/reuters-direct/; https://www.wordfence.com/threat-intel/vulnerabilities/id/0e98a899-1578-45bf-ba1d-92703e38abd9?source=cve