deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-8765
Published: 2025-08-09
Description: A vulnerability classified as problematic was found in Datacom DM955 5GT [PII_REDACTED].00. Affected by this vulnerability is an unknown functionality of the component Wireless Basic Settings. The manipulation of the argument SSID leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://vuldb.com/?ctiid.319267; https://vuldb.com/?id.319267; https://vuldb.com/?submit.624545
CVE: CVE-2025-8772
Published: 2025-08-09
Description: A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06. This issue affects some unknown processing of the file /admin/index.php?language=en&nv=upload of the component Module Handler. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://hkohi.ca/vulnerability/19; https://vuldb.com/?ctiid.319295; https://vuldb.com/?id.319295
CVE: CVE-2025-8773
Published: 2025-08-09
Description: A vulnerability, which was classified as critical, was found in Dinstar Monitoring Platform 甘肃省危险品库监控平台 1.0. Affected is an unknown function of the file /itc/$%7BappPath%7D/login_getPasswordErrorNum.action. The manipulation of the argument userBean.loginName leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/qiantx/cve/blob/main/cve6.md; https://vuldb.com/?ctiid.319296; https://vuldb.com/?id.319296
CVE: CVE-2025-8774
Published: 2025-08-09
Description: A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.5 (LOW)
CWE: CWE-203, CWE-208, CWE-203
References: https://github.com/fizz-is-on-the-way/vuls_cpu/tree/master/MSHRush; https://vuldb.com/?ctiid.319297; https://vuldb.com/?id.319297
CVE: CVE-2025-8775
Published: 2025-08-09
Description: A vulnerability was found in Qiyuesuo Eelectronic Signature Platform up to 4.34 and classified as critical. Affected by this issue is the function execute of the file /api/code/upload of the component Scheduled Task Handler. The manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://github.com/nn0nkey/nn0nkey/blob/main/QYS/QYS_task.md; https://vuldb.com/?ctiid.319298; https://vuldb.com/?id.319298
CVE: CVE-2025-8784
Published: 2025-08-09
Description: A vulnerability classified as problematic was found in Portabilis i-Educar up to 2.9. This vulnerability affects unknown code of the file /intranet/funcionario_vinculo_cad.php of the component Cadastrar Vínculo Page. The manipulation of the argument nome leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-8784.md; https://github.com/marcelomulder/CVE/blob/main/i-educar/Stored%20XSS%20funcionario_vinculo_cad.php%20parameter%20nome.md; https://vuldb.com/?ctiid.319312
CVE: CVE-2025-8785
Published: 2025-08-10
Description: A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9. This issue affects some unknown processing of the file /intranet/educar_usuario_lst.php. The manipulation of the argument nm_pessoa/matricula/matricula_interna leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-8785.md; https://github.com/marcelomulder/CVE/blob/main/i-educar/Reflected_XSS_endpoint_educar_usuario_lst.php_parameters_nm_pessoa,_matricula_and_matricula_interna.md; https://vuldb.com/?ctiid.319313
CVE: CVE-2025-8786
Published: 2025-08-10
Description: A vulnerability, which was classified as problematic, was found in Portabilis i-Diario up to 1.5.0. Affected is an unknown function of the file /registros-de-conteudos-por-areas-de-conhecimento/ of the component Registro das atividades. The manipulation of the argument Registro de atividades/Conteúdos leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-8786.md; https://github.com/marcelomulder/CVE/blob/main/i-diario/Stored%20XSS%20endpoint%20registros-de-conteudos-por-areas-de-conhecimento.(ID)%20in%20multiples%20parameters.md; https://vuldb.com/?ctiid.319314
CVE: CVE-2025-8787
Published: 2025-08-10
Description: A vulnerability has been found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /registros-de-conteudos-por-disciplina/ of the component Registro das atividades. The manipulation of the argument Registro de atividades/Conteúdos leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-8787.md; https://github.com/marcelomulder/CVE/blob/main/i-diario/Stored%20XSS%20endpoint%20registros-de-conteudos-por-disciplina.(ID)%20in%20multiples%20parameters.md; https://vuldb.com/?ctiid.319315
CVE: CVE-2025-8788
Published: 2025-08-10
Description: A vulnerability was found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /planos-de-aula-por-areas-de-conhecimento/ of the component Informações adicionais. The manipulation of the argument Parecer/Conteúdos/Objetivos leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-8788.md; https://github.com/marcelomulder/CVE/blob/main/i-diario/Stored%20XSS%20endpoint%20planos-de-aula-por-areas-de-conhecimento.(ID)%20in%20multiples%20parameters.md; https://vuldb.com/?ctiid.319316
CVE: CVE-2025-8789
Published: 2025-08-10
Description: A vulnerability was found in Portabilis i-Educar up to 2.9.0. It has been classified as problematic. This affects an unknown part of the file /module/Api/Diario of the component API Endpoint. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285, CWE-639
References: https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8789.md; https://vuldb.com/?ctiid.319317; https://vuldb.com/?id.319317
CVE: CVE-2025-8790
Published: 2025-08-10
Description: A vulnerability was found in Portabilis i-Educar up to 2.9.0. It has been declared as critical. This vulnerability affects unknown code of the file /module/Api/pessoa of the component API Endpoint. The manipulation of the argument ID leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8790.md; https://vuldb.com/?ctiid.319318; https://vuldb.com/?id.319318
CVE: CVE-2025-52136
Published: 2025-08-10
Description: In EMQX before 5.8.6, administrators can install arbitrary novel plugins via the Dashboard web interface. NOTE: the Supplier's position is that this is the intended behavior; however, 5.8.6 adds a defense-in-depth feature in which a plugin's acceptability (for later Dashboard installation) is set by the "emqx ctl plugins allow" CLI command.
CVSS Score: 3.0 (LOW)
CWE: CWE-754
References: https://docs.emqx.com/en/emqx/latest/dashboard/introduction.html; https://docs.emqx.com/en/emqx/latest/deploy/install-docker.html; https://github.com/ricardojoserf/emqx-RCE
CVE: CVE-2025-8791
Published: 2025-08-10
Description: A vulnerability was found in LitmusChaos Litmus up to 3.19.0. It has been rated as critical. This issue affects some unknown processing of the file /auth/list_projects. The manipulation of the argument role leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://github.com/MaiqueSilva/VulnDB/blob/main/readmi1.md; https://vuldb.com/?ctiid.319319; https://vuldb.com/?id.319319
CVE: CVE-2025-8792
Published: 2025-08-10
Description: A vulnerability classified as problematic has been found in LitmusChaos Litmus up to 3.19.0. Affected is an unknown function. The manipulation leads to client-side enforcement of server-side security. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-602
References: https://github.com/MaiqueSilva/VulnDB/blob/main/README02.md; https://vuldb.com/?ctiid.319320; https://vuldb.com/?id.319320
CVE: CVE-2025-8793
Published: 2025-08-10
Description: A vulnerability classified as problematic was found in LitmusChaos Litmus up to 3.19.0. Affected by this vulnerability is an unknown functionality. The manipulation of the argument projectID leads to improper control of resource identifiers. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-99
References: https://github.com/MaiqueSilva/VulnDB/blob/main/readme03.md; https://vuldb.com/?ctiid.319321; https://vuldb.com/?id.319321
CVE: CVE-2025-8794
Published: 2025-08-10
Description: A vulnerability, which was classified as problematic, has been found in LitmusChaos Litmus up to 3.19.0. Affected by this issue is some unknown functionality of the component LocalStorage Handler. The manipulation of the argument projectID leads to authorization bypass. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285, CWE-639
References: https://github.com/MaiqueSilva/VulnDB/blob/main/readme04.md; https://vuldb.com/?ctiid.319322; https://vuldb.com/?id.319322
CVE: CVE-2025-8795
Published: 2025-08-10
Description: A vulnerability, which was classified as critical, was found in LitmusChaos Litmus up to 3.19.0. This affects an unknown part of the file /auth/login. The manipulation of the argument projectID leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://github.com/MaiqueSilva/VulnDB/blob/main/readme05.md; https://vuldb.com/?ctiid.319323; https://vuldb.com/?id.319323
CVE: CVE-2025-8796
Published: 2025-08-10
Description: A vulnerability has been found in LitmusChaos Litmus up to 3.19.0 and classified as problematic. This vulnerability affects unknown code of the file /auth/delete_project/ of the component Delete Request Handler. The manipulation of the argument projectID leads to missing authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862, CWE-863
References: https://github.com/MaiqueSilva/VulnDB/blob/main/readme06.md; https://vuldb.com/?ctiid.319324; https://vuldb.com/?id.319324
CVE: CVE-2025-8797
Published: 2025-08-10
Description: A vulnerability was found in LitmusChaos Litmus up to 3.19.0 and classified as critical. This issue affects some unknown processing of the component LocalStorage Handler. The manipulation leads to permission issues. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-275
References: https://github.com/MaiqueSilva/VulnDB/blob/main/readme07.md; https://vuldb.com/?ctiid.319325; https://vuldb.com/?id.319325
CVE: CVE-2025-8798
Published: 2025-08-10
Description: A vulnerability was found in oitcode samarium up to 0.9.6. It has been classified as critical. Affected is an unknown function of the file /dashboard/product of the component Create Product Page. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284, CWE-434, CWE-79
References: https://github.com/MaiqueSilva/VulnDB/blob/main/readme08.md; https://vuldb.com/?ctiid.319326; https://vuldb.com/?id.319326
CVE: CVE-2025-8799
Published: 2025-08-10
Description: A vulnerability was identified in Open5GS up to 2.7.5. Affected by this vulnerability is the function amf_npcf_am_policy_control_build_create/amf_nsmf_pdusession_build_create_sm_context of the file src/amf/npcf-build.c of the component AMF. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The patch is named cf63dd63197bf61a4b041aa364ba6a6199ab15e4. It is recommended to upgrade the affected component.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404
References: https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-8799; https://github.com/open5gs/open5gs/commit/cf63dd63197bf61a4b041aa364ba6a6199ab15e4; https://github.com/open5gs/open5gs/issues/3979
CVE: CVE-2025-8800
Published: 2025-08-10
Description: A vulnerability has been found in Open5GS up to 2.7.5. Affected by this issue is the function esm_handle_pdn_connectivity_request of the file src/mme/esm-handler.c of the component AMF Component. The manipulation leads to denial of service. The attack may be launched remotely. Upgrading to version 2.7.6 is able to address this issue. The name of the patch is 701505102f514cbde2856cd2ebc9bedb7efc820d. It is recommended to upgrade the affected component.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404
References: https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-8800; https://github.com/open5gs/open5gs/commit/701505102f514cbde2856cd2ebc9bedb7efc820d; https://github.com/open5gs/open5gs/issues/3980
CVE: CVE-2025-8801
Published: 2025-08-10
Description: A vulnerability was found in Open5GS up to 2.7.5. This affects the function gmm_state_exception of the file src/amf/gmm-sm.c of the component AMF. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The identifier of the patch is f47f2bd4f7274295c5fbb19e2f806753d183d09a. It is recommended to upgrade the affected component.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404
References: https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-8801; https://github.com/open5gs/open5gs/commit/f47f2bd4f7274295c5fbb19e2f806753d183d09a; https://github.com/open5gs/open5gs/issues/3977
CVE: CVE-2025-8802
Published: 2025-08-10
Description: A vulnerability was determined in Open5GS up to 2.7.5. This vulnerability affects the function smf_state_operational of the file src/smf/smf-sm.c of the component SMF. The manipulation of the argument stream leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version v2.7.6 is able to address this issue. The patch is identified as f168f7586a4fa536cee95ae60ac437d997f15b97. It is recommended to upgrade the affected component.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404
References: https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-8802; https://github.com/open5gs/open5gs/commit/f168f7586a4fa536cee95ae60ac437d997f15b97; https://github.com/open5gs/open5gs/issues/3978
CVE: CVE-2025-8803
Published: 2025-08-10
Description: A vulnerability has been found in Open5GS up to 2.7.5. Affected is the function gmm_state_de_registered/gmm_state_exception of the file src/amf/gmm-sm.c of the component AMF. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 2.7.6 is able to address this issue. The name of the patch is 1f30edac27f69f61cff50162e980fe58fdeb30ca. It is recommended to upgrade the affected component.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404
References: https://github.com/ZHENGHAOHELLO/BugReport; https://github.com/open5gs/open5gs/commit/1f30edac27f69f61cff50162e980fe58fdeb30ca; https://github.com/open5gs/open5gs/issues/3948
CVE: CVE-2025-8804
Published: 2025-08-10
Description: A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ngap_build_downlink_nas_transport of the component AMF. The manipulation leads to reachable assertion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The identifier of the patch is bca0a7b6e01d254f4223b[PII_REDACTED]6d4626428. It is recommended to upgrade the affected component.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-617
References: https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-8804; https://github.com/open5gs/open5gs/commit/bca0a7b6e01d254f4223b[PII_REDACTED]6d4626428; https://github.com/open5gs/open5gs/issues/3950
CVE: CVE-2025-8805
Published: 2025-08-10
Description: A vulnerability was determined in Open5GS up to 2.7.5. Affected by this issue is the function smf_gsm_state_wait_pfcp_deletion of the file src/smf/gsm-sm.c of the component SMF. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The patch is identified as c58b8f081986aaf2a312d73a0a17985518b47fe6. It is recommended to upgrade the affected component.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404
References: https://github.com/ZHENGHAOHELLO/BugReport; https://github.com/open5gs/open5gs/commit/c58b8f081986aaf2a312d73a0a17985518b47fe6; https://github.com/open5gs/open5gs/issues/4000
CVE: CVE-2025-8806
Published: 2025-08-10
Description: A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. It has been classified as critical. This affects an unknown part of the file /adpweb/a/sys/office/treeData. The manipulation of the argument extId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://vuldb.com/?ctiid.319335; https://vuldb.com/?id.319335; https://vuldb.com/?submit.626189
CVE: CVE-2025-8807
Published: 2025-08-10
Description: A vulnerability was found in xujeff tianti 天梯 up to 2.3. It has been declared as critical. This vulnerability affects unknown code of the file /tianti-module-admin/user/ajax/save. The manipulation leads to missing authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-862, CWE-863, CWE-862
References: https://github.com/N1n3b9S/cve/issues/15; https://github.com/N1n3b9S/cve/issues/15#issue[PII_REDACTED]; https://vuldb.com/?ctiid.319336
CVE: CVE-2025-8808
Published: 2025-08-10
Description: A vulnerability was found in xujeff tianti 天梯 up to 2.3. It has been rated as problematic. This issue affects the function exportOrder of the file /tianti-module-admin/user/ajax/save of the component com.jeff.tianti.controller. The manipulation leads to csv injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-74, CWE-1236
References: https://github.com/N1n3b9S/cve/issues/16; https://vuldb.com/?ctiid.319337; https://vuldb.com/?id.319337
CVE: CVE-2025-8809
Published: 2025-08-10
Description: A vulnerability classified as critical has been found in code-projects Online Medicine Guide 1.0. Affected is an unknown function of the file /addelidetails.php. The manipulation of the argument del leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/Find33-3/cve/issues/1; https://vuldb.com/?ctiid.319338
CVE: CVE-2025-8810
Published: 2025-08-10
Description: A vulnerability classified as critical was found in Tenda AC20 16.03.08.05. Affected by this vulnerability is the function strcpy of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/LaiwanHundun/CVE/blob/main/cve1; https://vuldb.com/?ctiid.319339; https://vuldb.com/?id.319339
CVE: CVE-2025-8811
Published: 2025-08-10
Description: A vulnerability, which was classified as critical, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file /Admin/registration.php. The manipulation of the argument fname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/Darlingzero2/cve/issues/3; https://vuldb.com/?ctiid.319340