deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-14965
Published: 2025-12-19
Description: A vulnerability was found in[PII_REDACTED]c yougou-mall up to 0a771fa817c924efe52c8fe0a9a6658eee675f9f. This impacts the function upload/delete of the file src/main/java/per/ccm/ygmall/extra/controller/ResourceController.java. Performing manipulation results in path traversal. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/zyhzheng500-maker/cve/blob/main/yougou-mall%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md; https://github.com/zyhzheng500-maker/cve/blob/main/yougou-mall%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4.md; https://vuldb.com/?ctiid.337600
CVE: CVE-2025-12874
Published: 2025-12-19
Description: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Quest Coexistence Manager for Notes (Free/Busy Connector modules) allows HTTP Request Smuggling via the Content-Length-Transfer-Encoding (CL.TE) attack vector. This could allow an attacker to bypass access controls, poison web caches, hijack sessions, or trigger unintended internal requests. This issue affects Coexistence Manager for Notes 3.8.2045. Other versions may also be affected.
CWE: CWE-444
References: https://sra.io/advisories/; https://support.quest.com/coexistence-manager-for-notes/3.10
CVE: CVE-2025-14966
Published: 2025-12-19
Description: A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file application/common/controller/Backend.php of the component Backend Controller. Executing a manipulation of the argument custom/searchField can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://note-hxlab.wetolink.com/share/1924AEdgGFYu; https://note-hxlab.wetolink.com/share/auEz57nwynMq; https://vuldb.com/?ctiid.337601
CVE: CVE-2025-14967
Published: 2025-12-19
Description: A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidates_report.php. The manipulation of the argument school_year leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/ltranquility/CVE/issues/28; https://itsourcecode.com/; https://vuldb.com/?ctiid.337602
CVE: CVE-2025-14968
Published: 2025-12-19
Description: A security flaw has been discovered in code-projects Simple Stock System 1.0. Affected by this issue is some unknown functionality of the file /market/update.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/z2sw57y/CVE/issues/1; https://vuldb.com/?ctiid.337603
CVE: CVE-2025-67712
Published: 2025-12-19
Description: There is an HTML injection issue in Esri ArcGIS Web AppBuilder developer edition versions prior to 2.30 that allows a remote, unauthenticated attacker to potentially entice a user to click a link that causes arbitrary HTML to render in a victim's browser. There is no evidence of JavaScript execution, which limits the impact. At the time of submission, ArcGIS Web App Builder developer edition is retired and unsupported. ArcGIS Web App Builder 2.30 is not susceptible to this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://support.esri.com/en-us/knowledge-base/deprecation-arcgis-web-appbuilder-000036340; https://www.mdronski.pl/2026/01/CVE-2025-67712-Proof-of-concept-and-technical-analysis.html
CVE: CVE-2023-53945
Published: 2025-12-19
Description: BrainyCP 1.0 contains an authenticated remote code execution vulnerability that allows logged-in users to inject arbitrary commands through the crontab configuration interface. Attackers can exploit the crontab endpoint by adding a malicious command that spawns a reverse shell to a specified IP and port.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://brainycp.io; https://www.exploit-db.com/exploits/51357; https://www.vulncheck.com/advisories/brainycp-remote-code-execution-via-authenticated-crontab-manipulation
CVE: CVE-2023-53946
Published: 2025-12-19
Description: Arcsoft PhotoStudio 6.0.0.172 contains an unquoted service path vulnerability in the ArcSoft Exchange Service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted path and trigger the service to execute arbitrary code with system-level permissions.
CVSS Score: 8.4 (HIGH)
CWE: CWE-428
References: https://www.arcsoft.com/; https://www.exploit-db.com/exploits/51393; https://www.vulncheck.com/advisories/arcsoft-photostudio-unquoted-service-path-privilege-escalation
CVE: CVE-2023-53947
Published: 2025-12-19
Description: OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges to system level. Attackers can place a malicious executable in the unquoted service path and trigger the service restart to execute code with elevated system privileges.
CVSS Score: 8.4 (HIGH)
CWE: CWE-428
References: https://github.com/OCSInventory-NG/WindowsAgent; https://www.exploit-db.com/exploits/51389; https://www.vulncheck.com/advisories/ocs-inventory-ng-unquoted-service-path-privilege-escalation
CVE: CVE-2023-53948
Published: 2025-12-19
Description: Lilac-Reloaded for Nagios 2.0.8 contains a remote code execution vulnerability in the autodiscovery feature that allows attackers to inject arbitrary commands. Attackers can exploit the lack of input filtering in the nmap_binary parameter to execute a reverse shell by sending a crafted POST request to the autodiscovery endpoint.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://exchange.nagios.org/directory/addons/configuration/lilac-2dreloaded/details/; https://www.exploit-db.com/exploits/51374; https://www.vulncheck.com/advisories/lilac-reloaded-for-nagios-remote-code-execution-via-autodiscovery
CVE: CVE-2023-53949
Published: 2025-12-19
Description: AspEmail 5.6.0.2 contains a binary permission vulnerability that allows local users to escalate privileges through the Persits Software EmailAgent service. Attackers can exploit full write permissions in the BIN directory to replace the service executable and gain elevated system access.
CVSS Score: 8.4 (HIGH)
CWE: CWE-732
References: https://www.aspemail.com; https://www.exploit-db.com/exploits/51380; https://www.vulncheck.com/advisories/aspemail-local-privilege-escalation-via-binary-permission-vulnerability
CVE: CVE-2023-53950
Published: 2025-12-19
Description: InnovaStudio WYSIWYG Editor 5.4 contains an unrestricted file upload vulnerability that allows attackers to bypass file extension restrictions through filename manipulation. Attackers can upload malicious ASP shells by using null byte techniques and alternate file extensions to circumvent upload controls in the asset manager.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://innovastudio.com; https://www.exploit-db.com/exploits/51362; https://www.vulncheck.com/advisories/innovastudio-wysiwyg-editor-unrestricted-file-upload-via-filename-manipulation
CVE: CVE-2023-53951
Published: 2025-12-19
Description: Ever Gauzy v0.281.9 contains a JWT authentication vulnerability that allows attackers to exploit weak HMAC secret key implementation. Attackers can leverage the exposed JWT token to authenticate and gain unauthorized access with administrative permissions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347
References: https://github.com/ever-co/ever-gauzy; https://www.exploit-db.com/exploits/51354; https://www.vulncheck.com/advisories/ever-gauzy-jwt-authentication-weakness-via-hmac-secret
CVE: CVE-2023-53952
Published: 2025-12-19
Description: Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension through the blog post creation interface. Attackers can upload files containing PHP system commands that execute when the uploaded file is accessed, enabling arbitrary code execution on the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://dotclear.org/; https://www.exploit-db.com/exploits/51353; https://www.vulncheck.com/advisories/dotclear-authenticated-remote-code-execution-via-file-upload
CVE: CVE-2023-53953
Published: 2025-12-19
Description: WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts when creating web pages. Attackers can craft malicious payloads in page titles that execute arbitrary JavaScript when the page is viewed by other users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://websitebaker.org/pages/en/home.php; https://www.exploit-db.com/exploits/51349; https://www.vulncheck.com/advisories/websitebaker-stored-cross-site-scripting-via-page-creation
CVE: CVE-2023-53954
Published: 2025-12-19
Description: ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration. Attackers with write permissions to Program Files directories can inject a malicious ActSrvNT.exe executable to gain elevated system access when the service restarts.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-428
References: https://www.actfax.com; https://www.exploit-db.com/exploits/51332; https://www.vulncheck.com/advisories/actfax-unquoted-path-services-privilege-escalation-vulnerability
CVE: CVE-2023-53956
Published: 2025-12-19
Description: Flatnux 2021-03.25 contains an authenticated file upload vulnerability that allows administrative users to upload arbitrary PHP files through the file manager. Attackers with admin credentials can upload malicious PHP scripts to the web root directory, enabling remote code execution on the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://flatnux.altervista.org/flatnux.html; https://www.exploit-db.com/exploits/51295; https://www.vulncheck.com/advisories/flatnux-authenticated-file-upload-remote-code-execution
CVE: CVE-2023-53957
Published: 2025-12-19
Description: Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session hijacking.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1275
References: https://github.com/kimai/kimai/releases/tag/1.30.10; https://www.exploit-db.com/exploits/51278; https://www.vulncheck.com/advisories/kimai-samesite-cookie-vulnerability-session-hijacking
CVE: CVE-2023-53958
Published: 2025-12-19
Description: LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation. Attackers can craft malicious password reset requests that generate tokens sent to a controlled server, enabling potential account takeover by intercepting and using stolen reset tokens.
CVSS Score: 7.5 (HIGH)
CWE: CWE-640
References: https://github.com/ltb-project/self-service-password; https://www.exploit-db.com/exploits/51275; https://www.vulncheck.com/advisories/ldap-tool-box-self-service-password-account-takeover-via-http-host-header
CVE: CVE-2023-53959
Published: 2025-12-19
Description: FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory. Attackers can generate a reverse shell payload using msfvenom and replace the missing DLL to achieve remote code execution when the application launches.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-427
References: https://filezilla-project.org/; https://www.exploit-db.com/exploits/51267; https://www.vulncheck.com/advisories/filezilla-client-dll-hijacking-via-missing-textshapingdll
CVE: CVE-2025-68481
Published: 2025-12-19
Description: FastAPI Users allows users to quickly add a registration and authentication system to their FastAPI project. Prior to version 15.0.2, the OAuth login state tokens are completely stateless and carry no per-request entropy or any data that could link them to the session that initiated the OAuth flow. `generate_state_token()` is always called with an empty `state_data` dict, so the resulting JWT only contains the fixed audience claim plus an expiration timestamp. On callback, the library merely checks that the JWT verifies under `state_secret` and is unexpired; there is no attempt to match the state value to the browser that initiated the OAuth request, no correlation cookie, and no server-side cache. Any attacker can hit `/authorize`, capture the server-generated state, finish the upstream OAuth flow with their own provider account, and then trick a victim into loading `.../callback?code=<attacker_code>&state=<attacker_state>`. Because the state JWT is valid for any client for \~1 hour, the victim’s browser will complete the flow. This leads to login CSRF. Depending on the app’s logic, the login CSRF can lead to an account takeover of the victim account or to the victim user getting logged in to the attacker's account. Version 15.0.2 contains a patch for the issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-285, CWE-352
References: https://github.com/fastapi-users/fastapi-users/blob/bcee8c9b884de31decb5d799aead3974a0b5b158/fastapi_users/router/oauth.py#L111; https://github.com/fastapi-users/fastapi-users/blob/bcee8c9b884de31decb5d799aead3974a0b5b158/fastapi_users/router/oauth.py#L57; https://github.com/fastapi-users/fastapi-users/commit/7cf413cd766b9cb0ab323ce424ddab2c0d235932
CVE: CVE-2025-68613
Published: 2025-12-19
Description: n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operations. This issue has been fixed in versions 1.120.4, 1.121.1, and 1.122.0. Users are strongly advised to upgrade to a patched version, which introduces additional safeguards to restrict expression evaluation. If upgrading is not immediately possible, administrators should consider the following temporary mitigations: Limit workflow creation and editing permissions to fully trusted users only; and/or deploy n8n in a hardened environment with restricted operating system privileges and network access to reduce the impact of potential exploitation. These workarounds do not fully eliminate the risk and should only be used as short-term measures.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-913, CWE-913
References: https://github.com/n8n-io/n8n/commit/08f332015153decdda3c37ad4fcb9f7ba13a7c79; https://github.com/n8n-io/n8n/commit/1c933358acef527ff61466e53268b41a04be1000; https://github.com/n8n-io/n8n/commit/39a2d1d60edde89674ca96dcbb3eb076ffff6316
CVE: CVE-2025-14299
Published: 2025-12-20
Description: The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can lead to an integer overflow. An unauthenticated attacker on the same local network segment can send crafted HTTPS requests to trigger excessive memory allocation, causing the device to crash and resulting in denial-of-service (DoS).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770, CWE-190
References: https://www.tp-link.com/us/support/download/tapo-c200/v3/#Firmware-Release-Notes; https://www.tp-link.com/us/support/faq/4849/
CVE: CVE-2025-14300
Published: 2025-12-20
Description: The HTTPS service on Tapo C200 V3 exposes a connectAP interface without proper authentication. An unauthenticated attacker on the same local network segment can exploit this to modify the device’s Wi-Fi configuration, resulting in loss of connectivity and denial-of-service (DoS).
CVSS Score: 8.1 (HIGH)
CWE: CWE-306
References: https://www.tp-link.com/en/support/download/tapo-c100/v5/#Firmware-Release-Notes; https://www.tp-link.com/en/support/download/tapo-c200/v3/#Firmware-Release-Notes; https://www.tp-link.com/us/support/download/tapo-c100/v5/#Firmware-Release-Notes
CVE: CVE-2025-8065
Published: 2025-12-20
Description: A stack-based buffer overflow vulnerability was identified in the ONVIF SOAP XML Parser in Tapo C200 v3 and C520WS v2.6. When processing XML tags with namespace prefixes, the parser fails to validate the prefix length before copying it to a fixed-size stack buffer.  It allowed a crafted SOAP request with an oversized namespace prefix to cause memory corruption in stack. 

An unauthenticated attacker on the same local network may exploit this flaw to enable remote code execution with elevated privileges, leading to full compromise of the device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121, CWE-120
References: https://www.tp-link.com/en/support/download/tapo-c200/v3/#Firmware-Release-Notes; https://www.tp-link.com/en/support/download/tapo-c520ws/#Firmware-Release-Notes; https://www.tp-link.com/us/support/download/tapo-c200/v3/#Firmware-Release-Notes
CVE: CVE-2025-12581
Published: 2025-12-20
Description: The Attachments Handler plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/attachments-handler/trunk/core/admin_table.class.php#L170; https://wordpress.org/plugins/attachments-handler/; https://www.wordfence.com/threat-intel/vulnerabilities/id/dc948f30-2fc2-40dd-878e-28e0eac857c7?source=cve
CVE: CVE-2025-12898
Published: 2025-12-20
Description: The Pretty Google Calendar plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the pgcal_ajax_handler() function in all versions up to, and including, 2.0.0. This makes it possible for unauthenticated attackers to retrieve the Google API key set in the plugin's settings.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3422453%40pretty-google-calendar&new=3422453%40pretty-google-calendar&sfp_email=&sfph_mail=; https://wordpress.org/plugins/pretty-google-calendar/; https://www.wordfence.com/threat-intel/vulnerabilities/id/b3c15924-d430-48e3-9804-fa83605b9c24?source=cve
CVE: CVE-2025-13329
Published: 2025-12-20
Description: The File Uploader for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the callback function for the 'add-image-data' REST API endpoint in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to upload arbitrary files to the Uploadcare service and subsequently download them on the affected site's server which may make remote code execution possible.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/changeset/3423070/file-uploader-for-woocommerce/trunk/src/Helpers/class-uploaderhelper.php; https://wordpress.org/plugins/file-uploader-for-woocommerce/; https://www.wordfence.com/threat-intel/vulnerabilities/id/da0f0e1a-bbf8-42a5-b330-b53134488ebd?source=cve
CVE: CVE-2025-13365
Published: 2025-12-20
Description: The WP Hallo Welt plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce validation on the 'hallo_welt_seite' function. This makes it possible for unauthenticated attackers to update plugin settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Due to the insufficient input sanitization and output escaping, this can lead to Stored Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/wp-hallo-welt/tags/1.4./hallowelt.php#L53; https://plugins.trac.wordpress.org/browser/wp-hallo-welt/trunk/hallowelt.php#L15; https://plugins.trac.wordpress.org/browser/wp-hallo-welt/trunk/hallowelt.php#L27
CVE: CVE-2025-13624
Published: 2025-12-20
Description: The Overstock Affiliate Links plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/overstock-affiliate-links/tags/1.1/sandbox_page.php#L18; https://plugins.trac.wordpress.org/browser/overstock-affiliate-links/trunk/sandbox_page.php#L18; https://wordpress.org/plugins/overstock-affiliate-links/
CVE: CVE-2025-14164
Published: 2025-12-20
Description: The Quran Gateway plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing nonce validation in the quran_gateway_options function. This makes it possible for unauthenticated attackers to modify the plugin's display settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/quran-gateway/tags/1.5/admin.php#L457; https://plugins.trac.wordpress.org/browser/quran-gateway/trunk/admin.php#L457; https://www.wordfence.com/threat-intel/vulnerabilities/id/3e16da38-709a-4b9a-9f00-efe8459a1318?source=cve
CVE: CVE-2025-14168
Published: 2025-12-20
Description: The WP DB Booster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing nonce validation on the cleanup_all AJAX action. This makes it possible for unauthenticated attackers to delete database records including post drafts, revisions, comments, and metadata via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/wp-db-booster/tags/1.0.1/admin/class-wp-db-booster-admin.php#L336; https://plugins.trac.wordpress.org/browser/wp-db-booster/trunk/admin/class-wp-db-booster-admin.php#L336; https://www.wordfence.com/threat-intel/vulnerabilities/id/cc0af0a4-81b5-425e-aba3-0c422aa33634?source=cve
CVE: CVE-2025-14591
Published: 2025-12-20
Description: In Delphix Continuous Compliance version 2025.3.0 and later, following a recent bug fix to correctly handle CR+LF (Windows and DOS) End-of-Record (EOR) characters in delimited files, an issue was identified: using an incorrect EOR configuration can cause inaccurate parsing and leave personally identifiable information (PII) unmasked.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://portal.perforce.com/s/article/TB137; https://portal.perforce.com/s/cve/a91Qi000002fThdIAE/pii-leak-due-to-change-in-eor-handling