deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-59669
Published: 2025-11-18
Description: A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticated attacker with shell access to the device to connect to redis service and access its data
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-798
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-843
CVE: CVE-2025-61713
Published: 2025-11-18
Description: A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an authenticated attacker with read-write admin privileges to the CLI to obtain other administrators' credentials via diagnose commands.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-316
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-789
CVE: CVE-2025-63258
Published: 2025-11-18
Description: A remote command execution (RCE) vulnerability was discovered in all H3C ERG3/ERG5 series routers and XiaoBei series routers, cloud gateways, and wireless access points (versions R0162P07, UAP700-WPT330-E2265, UAP672-WPT330-R2262, UAP662E-WPT330-R2262P03, WAP611-WPT330-R1348-OASIS, WAP662-WPT330-R2262, WAP662H-WPT330-R2262, USG300V2-WPT330-R2129, MSG300-WPT330-R1350, and MSG326-WPT330-R2129). Attackers are able to exploit this vulnerability via injecting crafted commands into the sessionid parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: http://h3c.com; https://zhiliao.h3c.com/Theme/details/232571
CVE: CVE-2025-63512
Published: 2025-11-18
Description: kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL query.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/NicatAliyevh/Zero-Days/blob/main/Hospital_Management_System_SQL2.md
CVE: CVE-2025-63513
Published: 2025-11-18
Description: kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the appointment cancellation functionality.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://github.com/NicatAliyevh/Zero-Days/blob/main/Hospital_Management_System_IDOR.md; https://github.com/kishan0725/Hospital-Management-System/issues/55; https://github.com/kishan0725/Hospital-Management-System/issues/55
CVE: CVE-2025-63829
Published: 2025-11-18
Description: eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time_t:: fraction() function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-835
References: https://gist.github.com/lkloliver/b00377bec754d4aa1dc731be210d5889; https://github.com/eProsima/Fast-DDS/blob/master/src/cpp/fastdds/core/Time_t.cpp#L67
CVE: CVE-2025-56643
Published: 2025-11-18
Description: Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, previously issued tokens remain valid and can be reused to access the system, even after logout. This behavior affects session integrity and may allow unauthorized access if a token is compromised. The issue is present in the authentication resolver logic and affects both the GraphQL endpoint and the logout mechanism.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-613
References: https://github.com/0xBS0D27/CVE-2025-56643
CVE: CVE-2025-63514
Published: 2025-11-18
Description: kishan0725 Hospital Management System has a Cross-Site Scripting (XSS) vulnerability in appsearch.php via the email parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/NicatAliyevh/Zero-Days/blob/main/Hospital_Management_System_Stored_XSS.md; https://github.com/kishan0725/Hospital-Management-System/issues/54
CVE: CVE-2025-63694
Published: 2025-11-18
Description: DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Yohane-Mashiro/dzzoffice_sql; https://github.com/zyx0814/dzzoffice/issues/364; https://github.com/Yohane-Mashiro/dzzoffice_sql
CVE: CVE-2025-63695
Published: 2025-11-18
Description: DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/Yohane-Mashiro/dzzoffice_upload; https://github.com/zyx0814/dzzoffice/issues/365; https://github.com/Yohane-Mashiro/dzzoffice_upload
CVE: CVE-2025-63828
Published: 2025-11-18
Description: Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to redirects to malicious domains and potential session hijacking via cookie injection.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/mertdurum06/BackdropCms-1.32.1/; https://github.com/mertdurum06/BackdropCms-1.32.1/blob/main/backdropcms_exploit.txt; https://github.com/mertdurum06/BackdropCms-1.32.1/blob/main/backdropcms_exploit.txt
CVE: CVE-2025-63994
Published: 2025-11-18
Description: An arbitrary file upload vulnerability in the /php/UploadHandler.php component of RichFilemanager v2.7.6 allows attackers to execute arbitrary code via uploading a crafted file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/psolom/RichFilemanager/issues/412
CVE: CVE-2025-64076
Published: 2025-11-18
Description: Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C extension decoder (source/decoder.c): (1) Integer Underflow Leading to Out-of-Bounds Read (CWE-191, CWE-125): An incorrect variable reference and missing state reset in the chunk processing loop causes buffer_length to not be reset to zero after UTF-8 character consumption. This results in subsequent chunk_length calculations producing negative values (e.g., chunk_length = 65536 - buffer_length), which are passed as signed integers to the read() method, potentially triggering unlimited read operations and resource exhaustion. (2) Memory Leak via Missing Reference Count Release (CWE-401): The main processing loop fails to release Python object references (Py_DECREF) for chunk objects allocated in each iteration. For CBOR strings longer than 65536 bytes, this causes cumulative memory leaks proportional to the payload size, enabling memory exhaustion attacks through repeated processing of large CBOR payloads. Both vulnerabilities can be exploited remotely without authentication by sending specially-crafted CBOR data containing definite-length text strings with multi-byte UTF-8 characters positioned at 65536-byte chunk boundaries. Successful exploitation results in denial of service through process crashes (CBORDecodeEOF exceptions) or memory exhaustion. The vulnerabilities affect all applications using cbor2's C extension to process untrusted CBOR data, including web APIs, IoT data collectors, and message queue processors. Fixed in commit[PII_REDACTED]81f82d82560b2368284ef33cf6e8f9 pushed with released version 5.7.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-191
References: https://github.com/agronholm/cbor2/commit/[PII_REDACTED]81f82d82560b2368284ef33cf6e8f9; https://github.com/agronholm/cbor2/issues/264; https://github.com/agronholm/cbor2/pull/265
CVE: CVE-2025-37155
Published: 2025-11-18
Description: A vulnerability in the SSH restricted shell interface of the network management services allows improper access control for authenticated read-only users. If successfully exploited, this vulnerability could allow an attacker with read-only privileges to gain administrator access on the affected system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04888en_us&docLocale=en_US
CVE: CVE-2025-37156
Published: 2025-11-18
Description: A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this vulnerability could allow an attacker with administrative access to execute specific code that renders the switch non-bootable and effectively non-functional.
CVSS Score: 6.8 (MEDIUM)
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04888en_us&docLocale=en_US
CVE: CVE-2025-37157
Published: 2025-11-18
Description: A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution (RCE) on the affected system.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-94, CWE-78
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04888en_us&docLocale=en_US
CVE: CVE-2025-37158
Published: 2025-11-18
Description: A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution (RCE) on the affected system.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04888en_us&docLocale=en_US
CVE: CVE-2025-37159
Published: 2025-11-18
Description: A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session. Successful exploitation may enable the attacker to maintain unauthorized access to the session, potentially leading to the view or modification of sensitive configuration data.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-384
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04888en_us&docLocale=en_US
CVE: CVE-2025-37160
Published: 2025-11-18
Description: A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation of this vulnerability could enable the attacker to disclose sensitive data.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04888en_us&docLocale=en_US
CVE: CVE-2025-37163
Published: 2025-11-18
Description: A command injection vulnerability has been identified in the command line interface of the HPE Aruba Networking Airwave Platform. An authenticated attacker could exploit this vulnerability to execute arbitrary operating system commands with elevated privileges on the underlying  operating system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77, CWE-78
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04971en_us&docLocale=en_US
CVE: CVE-2025-52639
Published: 2025-11-18
Description: HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper rendering of application data.
CVSS Score: 3.5 (LOW)
CWE: CWE-201
References: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124241
CVE: CVE-2025-54320
Published: 2025-11-18
Description: In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770
References: https://github.com/saykino/CVE-2025-54320; https://www.ascertia.com/company/vulnerability-disclosure-policy/
CVE: CVE-2025-54321
Published: 2025-11-18
Description: In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-799
References: https://github.com/saykino/CVE-2025-54321; https://www.ascertia.com/company/vulnerability-disclosure-policy/
CVE: CVE-2025-54770
Published: 2025-11-18
Description: A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused because the net_set_vlan command is not properly unregistered when the network module is unloaded from memory. An attacker who can execute this command can force the system to access memory locations that are no longer valid. Successful exploitation leads directly to system instability, which can result in a complete crash and halt system availability
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-825
References: https://access.redhat.com/security/cve/CVE-2025-54770; https://bugzilla.redhat.com/show_bug.cgi?id=2413813; http://www.openwall.com/lists/oss-security/2025/11/18/4
CVE: CVE-2025-54771
Published: 2025-11-18
Description: A use-after-free vulnerability has been identified in the GNU GRUB (Grand Unified Bootloader). The flaw occurs because the file-closing process incorrectly retains a memory pointer, leaving an invalid reference to a file system structure. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-825
References: https://access.redhat.com/security/cve/CVE-2025-54771; https://bugzilla.redhat.com/show_bug.cgi?id=2413823; http://www.openwall.com/lists/oss-security/2025/11/18/3
CVE: CVE-2025-56499
Published: 2025-11-18
Description: Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the config file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://github.com/Cherrling/CVE-2025-56499; https://github.com/MetaCubeX/mihomo/tree/v1.19.11
CVE: CVE-2025-60455
Published: 2025-11-18
Description: Unsafe Deserialization vulnerability in Modular Max Serve before 25.6, specifically when the "--experimental-enable-kvcache-agent" feature is used allowing attackers to execute arbitrary code.
CVSS Score: 8.4 (HIGH)
CWE: CWE-502
References: https://github.com/modular/modular/blame/main/max/serve/kvcache_agent/kvcache_agent.py#L220; https://github.com/modular/modular/commit/10620059fb5c47fb0c30e5d21a8ff3b8d622fba4; https://github.com/modular/modular/commit/b20e749fa892dbe772e890a268002f732164d9f5
CVE: CVE-2025-61661
Published: 2025-11-18
Description: A vulnerability has been identified in the GRUB (Grand Unified Bootloader) component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a maliciously configured USB device during the boot sequence to trigger this issue. A successful exploitation may lead GRUB to crash, leading to a Denial of Service. Data corruption may be also possible, although given the complexity of the exploit the impact is most likely limited.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-131
References: https://access.redhat.com/security/cve/CVE-2025-61661; https://bugzilla.redhat.com/show_bug.cgi?id=2413827; http://www.openwall.com/lists/oss-security/2025/11/18/8
CVE: CVE-2025-61662
Published: 2025-11-18
Description: A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this condition by invoking the orphaned command, causing the application to access a memory location that is no longer valid. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://access.redhat.com/errata/RHSA-2026:10097; https://access.redhat.com/errata/RHSA-2026:4648; https://access.redhat.com/errata/RHSA-2026:4649
CVE: CVE-2025-61663
Published: 2025-11-18
Description: A vulnerability has been identified in the GRUB2 bootloader's normal command that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this command can force the system to access memory locations that are no longer valid. Successful exploitation leads directly to system instability, which can result in a complete crash and halt system availability. Impact on the data integrity and confidentiality is also not discarded.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-825
References: https://access.redhat.com/security/cve/CVE-2025-61663; https://bugzilla.redhat.com/show_bug.cgi?id=2414684
CVE: CVE-2025-61664
Published: 2025-11-18
Description: A vulnerability in the GRUB2 bootloader has been identified in the normal module. This flaw, a memory Use After Free issue, occurs because the normal_exit command is not properly unregistered when its related module is unloaded. An attacker can exploit this condition by invoking the command after the module has been removed, causing the system to improperly access a previously freed memory location. This leads to a system crash or possible impacts in data confidentiality and integrity.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-825
References: https://access.redhat.com/security/cve/CVE-2025-61664; https://bugzilla.redhat.com/show_bug.cgi?id=2414685
CVE: CVE-2025-63225
Published: 2025-11-18
Description: The Eurolab ELTS100_UBX device (firmware version ELTS100v1.UBX) is vulnerable to Broken Access Control due to missing authentication on critical administrative endpoints. Attackers can directly access and modify sensitive system and network configurations, upload firmware, and execute unauthorized actions without any form of authentication. This vulnerability allows remote attackers to fully compromise the device, control its functionality, and disrupt its operation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://eurolab-srl.com/; https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63225_Eurolab_ELTS100_UBX_Broken_Access_Control
CVE: CVE-2025-63693
Published: 2025-11-18
Description: The comment editing template (dzz/comment/template/edit_form.htm) in DzzOffice 2.3.x lacks adequate security escaping for user-controllable data in multiple contexts, including HTML and JavaScript strings. This allows low-privilege attackers to construct comment content or request parameters and execute arbitrary JavaScript code when the victim opens the editing pop-up.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-94
References: https://github.com/Yohane-Mashiro/dzzoffice_xss; https://github.com/zyx0814/dzzoffice/issues/363
CVE: CVE-2025-63749
Published: 2025-11-18
Description: pnetlab 5.3.11 is vulnerable to Command Injection via the qemu_options parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: https://github.com/XunMInt/cve/blob/main/Pnetlab-20251013.md
CVE: CVE-2025-63955
Published: 2025-11-18
Description: A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to trick an authenticated administrator into submitting a forged request. This leads to the unauthorized deletion of user accounts, causing a Denial of Service (DoS).
CVSS Score: 7.5 (HIGH)
CWE: CWE-352
References: https://github.com/Wayne-arul/CVE-Disclosures/tree/main/CVE-2025-63955; https://phpgurukul.com/student-record-system-php/
CVE: CVE-2025-37161
Published: 2025-11-18
Description: A vulnerability in the web-based management interface of affected products could allow an unauthenticated remote attacker to cause a denial of service.  Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04970en_us&docLocale=en_US
CVE: CVE-2025-37162
Published: 2025-11-18
Description: A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04970en_us&docLocale=en_US
CVE: CVE-2025-63226
Published: 2025-11-18
Description: The Sencore SMP100 SMP Media Platform (firmware versions V4.2.160, V60.1.4, V60.1.29) is vulnerable to session hijacking due to improper session management on the /UserManagement.html endpoint. Attackers who are on the same network as the victim and have access to the target's logged-in session can access the endpoint and add new users without any authentication. This allows attackers to gain unauthorized access to the system and perform malicious activities.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-613
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63226_Sencore_SMP100_Session_Hijacking; https://www.sencore.com/
CVE: CVE-2025-63227
Published: 2025-11-18
Description: The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patch.php endpoint. An attacker with administrative credentials can upload arbitrary files (e.g., PHP webshells), which are stored in the /patch/ directory. This allows the attacker to execute arbitrary commands on the server, potentially leading to full system compromise.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63227_Mozart_FM_Transmitter_authenticated_File_Upload; https://www.dbbroadcast.com/
CVE: CVE-2025-63228
Published: 2025-11-18
Description: The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /upload_file.php endpoint. An attacker can exploit this by sending a crafted POST request with a malicious file (e.g., a PHP webshell) to the server. The uploaded file is stored in the /upload/ directory, enabling remote code execution and full system compromise.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63228_Mozart_FM_Transmitter_Unauthenticated_File_Upload; https://www.dbbroadcast.com/
CVE: CVE-2025-12119
Published: 2025-11-18
Description: A mongoc_bulk_operation_t may read invalid memory if large options are passed.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-825
References: https://github.com/mongodb/mongo-c-driver/releases/tag/1.30.6; https://github.com/mongodb/mongo-c-driver/releases/tag/2.1.2; https://github.com/mongodb/mongo-php-driver/releases/tag/1.21.2
CVE: CVE-2025-63215
Published: 2025-11-18
Description: The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the firmware.
CVSS Score: 7.2 (HIGH)
CWE: CWE-494
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63215%20_%20Sound4%20IMPACT%20%20RCE; https://www.sound4helpdesk.com/; https://www.sound4helpdesk.com/impact-downloads/
CVE: CVE-2025-63216
Published: 2025-11-18
Description: The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-287, CWE-384
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63216_Itel%20DAB%20Gateway%20Authentication%20Bypass; https://www.itel.it/