deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-64531
Published: 2025-11-11
Description: Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb25-113.html
CVE: CVE-2025-43205
Published: 2025-11-12
Description: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to bypass ASLR.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/122371; https://support.apple.com/en-us/122372; https://support.apple.com/en-us/122373
CVE: CVE-2025-40110
Published: 2025-11-12
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/vmwgfx: Fix a null-ptr access in the cursor snooper

Check that the resource which is converted to a surface exists before
trying to use the cursor snooper on it.

vmw_cmd_res_check allows explicit invalid (SVGA3D_INVALID_ID) identifiers
because some svga commands accept SVGA3D_INVALID_ID to mean "no surface",
unfortunately functions that accept the actual surfaces as objects might
(and in case of the cursor snooper, do not) be able to handle null
objects. Make sure that we validate not only the identifier (via the
vmw_cmd_res_check) but also check that the actual resource exists before
trying to do something with it.

Fixes unchecked null-ptr reference in the snooping code.
References: https://git.kernel.org/stable/c/13c9e4ed125e19484234c960efe5ac9c55119523; https://git.kernel.org/stable/c/299cfb5a7deabdf9ecd[PII_REDACTED]2af0aced5eb; https://git.kernel.org/stable/c/3332212e93d0f6e24f8fe79f975e077c4e68ca39
CVE: CVE-2025-40111
Published: 2025-11-12
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/vmwgfx: Fix Use-after-free in validation

Nodes stored in the validation duplicates hashtable come from an arena
allocator that is cleared at the end of vmw_execbuf_process. All nodes
are expected to be cleared in vmw_validation_drop_ht but this node escaped
because its resource was destroyed prematurely.
References: https://git.kernel.org/stable/c/1822e5287b7dfa59d0af966756ebf1dc652b60ee; https://git.kernel.org/stable/c/4c918f9d1ccccc0e092f43dcb2d8266f54d7340b; https://git.kernel.org/stable/c/655a2f29bfc21105c80bf8a7d7aafa6eca8b4496
CVE: CVE-2025-54983
Published: 2025-11-12
Description: A health check port on Zscaler Client Connector on Windows, versions 4.6 <  4.6.0.216 and 4.7 < 4.7.0.47, which under specific circumstances was not released after use, allowed traffic to potentially bypass ZCC forwarding controls.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-772
References: https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2025
CVE: CVE-2025-12087
Published: 2025-11-12
Description: The Wishlist and Save for later for Woocommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.22 via the 'awwlm_remove_added_wishlist_page' AJAX action due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete wishlist items from other user's wishlists.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://plugins.trac.wordpress.org/log/aco-wishlist-for-woocommerce/; https://www.wordfence.com/threat-intel/vulnerabilities/id/17e8a743-7985-4b28-b854-ac052a834f3a?source=cve
CVE: CVE-2025-12833
Published: 2025-11-12
Description: The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.139 via the 'post_attachment_upload' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with author-level access and above, to attach arbitrary image files to arbitrary places.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://github.com/AyeCode/geodirectory/commit/db655b04be32a160c0abf73217faf0a50585aa92; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3393024%40geodirectory&new=3393024%40geodirectory&sfp_email=&sfph_mail=; https://wordpress.org/plugins/geodirectory/
CVE: CVE-2025-12901
Published: 2025-11-12
Description: The Asgaros Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing nonce validation on the set_subscription_level() function. This makes it possible for unauthenticated attackers to modify the subscription settings of authenticated users via a forged request granted they can trick a logged-in user into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/Asgaros/asgaros-forum/commit/92305fb8ba4ec0a6c65256915d0a32e5553b74f3; https://plugins.trac.wordpress.org/browser/asgaros-forum/tags/3.2.1/includes/forum-notifications.php#L605; https://plugins.trac.wordpress.org/browser/asgaros-forum/tags/3.2.1/includes/forum-notifications.php#L606
CVE: CVE-2025-11560
Published: 2025-11-12
Description: The Team Members Showcase WordPress plugin before 3.5.0 does not sanitize and escape a parameter before outputting it back in the page, leading to reflected cross-site scripting, which could be used against high-privilege users such as admins.
CVSS Score: 7.1 (HIGH)
References: https://wpscan.com/vulnerability/64d7a074-3f1d-4b09-8e96-d76b9fb3c41e/
CVE: CVE-2025-12018
Published: 2025-11-12
Description: The MembershipWorks – Membership, Events & Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 6.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/zast-ai/vulnerability-reports/blob/main/wordpress/plugin/memberfindme/stored-xss.md; https://plugins.trac.wordpress.org/browser/memberfindme/tags/6.14/memberfindme.php#L103; https://plugins.trac.wordpress.org/browser/memberfindme/tags/6.14/memberfindme.php#L437
CVE: CVE-2025-12113
Published: 2025-11-12
Description: The Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the atgai_delete_api_key() function in all versions up to, and including, 1.8.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the API key connected to the site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3390619%40alt-text-generator&new=3390619%40alt-text-generator&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/5309e891-ced1-496f-8ee5-c089a91a7666?source=cve
CVE: CVE-2025-12633
Published: 2025-11-12
Description: The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bookit/v1/commerce/stripe/return'  REST API Endpoint in all versions up to, and including, 2.5.0. This makes it possible for unauthenticated attackers to connect their Stripe account and receive payments.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/3393159/bookit/tags/2.5.1/src/Bookit/Gateways/StripeConnect/REST/Return_Endpoint.php?old=3121677&old_path=bookit%2Ftags%2F2.5.0%2Fsrc%2FBookit%2FGateways%2FStripeConnect%2FREST%2FReturn_Endpoint.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/2263d356-b2ed-4e16-98ee-b01d4274d1d9?source=cve
CVE: CVE-2025-12869
Published: 2025-11-12
Description: The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administrator privileges to inject persistent JavaScript codes that are executed in users' browsers upon page load.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.twcert.org.tw/en/cp-139-10487-12a32-2.html; https://www.twcert.org.tw/tw/cp-132-10486-a3459-1.html
CVE: CVE-2025-12870
Published: 2025-11-12
Description: The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1390
References: https://www.twcert.org.tw/en/cp-139-10487-12a32-2.html; https://www.twcert.org.tw/tw/cp-132-10486-a3459-1.html; https://www.chtsecurity.com/news/b97e8337-6b0c-43e8-8e8c-187b7c0e13c2
CVE: CVE-2025-12871
Published: 2025-11-12
Description: The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1390
References: https://www.twcert.org.tw/en/cp-139-10487-12a32-2.html; https://www.twcert.org.tw/tw/cp-132-10486-a3459-1.html; https://www.chtsecurity.com/news/b97e8337-6b0c-43e8-8e8c-187b7c0e13c2
CVE: CVE-2025-12872
Published: 2025-11-12
Description: The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to upload files containing malicious JavaScript code, which will execute on the client side when a user is tricked into visiting a specific URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.twcert.org.tw/en/cp-139-10487-12a32-2.html; https://www.twcert.org.tw/tw/cp-132-10486-a3459-1.html
CVE: CVE-2025-13046
Published: 2025-11-12
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-13047
Published: 2025-11-12
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-12732
Published: 2025-11-12
Description: The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sensitive information due to a missing authorization check on the showsetting() function in all versions up to, and including, 7.33. This makes it possible for authenticated attackers, with Author-level access or higher, to extract sensitive information including OpenAI API keys configured through the plugin's admin interface.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/wp-ultimate-csv-importer/trunk/controllers/SendPassword.php#L42; https://plugins.trac.wordpress.org/browser/wp-ultimate-csv-importer/trunk/controllers/SendPassword.php#L72; https://plugins.trac.wordpress.org/changeset/3390161/wp-ultimate-csv-importer/trunk/controllers/SendPassword.php
CVE: CVE-2025-12903
Published: 2025-11-12
Description: The Payment Plugins Braintree For WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wc-braintree/v1/3ds/vaulted_nonce REST API endpoint in all versions up to, and including, 3.2.78. This is due to the endpoint being registered with permission_callback set to __return_true and processing user-supplied token IDs without verifying ownership or authentication. This makes it possible for unauthenticated attackers to retrieve payment method nonces for any stored payment token in the system, which can be used to create fraudulent transactions, charge customer credit cards, or attach payment methods to other subscriptions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: https://developer.wordpress.org/rest-api/using-the-rest-api/authentication/; https://plugins.trac.wordpress.org/browser/woo-payment-gateway/tags/3.2.78/includes/api/class-wc-braintree-controller-3ds.php#L23; https://plugins.trac.wordpress.org/browser/woo-payment-gateway/tags/3.2.78/includes/api/class-wc-braintree-controller-3ds.php#L35
CVE: CVE-2025-64401
Published: 2025-11-12
Description: Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links 
to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used "floating frames" linked to external files would 
load the contents of those frames without prompting the user for 
permission to do so.

This issue affects Apache OpenOffice: through 4.1.15.

Users are recommended to upgrade to version 4.1.16, which fixes the issue.

The LibreOffice suite reported this issue as CVE-2023-2255
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://lists.apache.org/thread/o00dtgvhr9tx8r4y8vf6y2mg7nn6mx6c; https://www.openoffice.org/security/cves/CVE-2025-64401.html
CVE: CVE-2025-64402
Published: 2025-11-12
Description: Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links 
to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used "OLE objects" linked to external files would 
load the contents of those files without prompting the user for 
permission to do so.

This issue affects Apache OpenOffice: through 4.1.15.

Users are recommended to upgrade to version 4.1.16, which fixes the issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://lists.apache.org/thread/tssrl88tygjsgk6csllm6p2fb6tlv8d8; https://www.openoffice.org/security/cves/CVE-2025-64402.html; http://www.openwall.com/lists/oss-security/2025/11/11/5
CVE: CVE-2025-64403
Published: 2025-11-12
Description: Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources". A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause such links 
to be loaded without prompt.

This issue affects Apache OpenOffice: through 4.1.15.

Users are recommended to upgrade to version 4.1.16, which fixes the issue.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://lists.apache.org/thread/t7c6jhvdb00xtgd9vvn7h5sq9f4h5trt; https://www.openoffice.org/security/cves/CVE-2025-64403.html; http://www.openwall.com/lists/oss-security/2025/11/11/6
CVE: CVE-2025-64404
Published: 2025-11-12
Description: Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links 
to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used background fill images, or bullet images, linked to external files would 
load the contents of those files without prompting the user for 
permission to do so.

This issue affects Apache OpenOffice: through 4.1.15.

Users are recommended to upgrade to version 4.1.16, which fixes the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://lists.apache.org/thread/08n4mdx0pnhqsllnkc63d27sdgq3tygc; https://www.openoffice.org/security/cves/CVE-2025-64404.html; http://www.openwall.com/lists/oss-security/2025/11/11/7
CVE: CVE-2025-64405
Published: 2025-11-12
Description: Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links 
to be loaded without prompt. In the affected versions of Apache OpenOffice, Calc spreadsheet containing DDE links to external files would 
load the contents of those files without prompting the user for 
permission to do so.

This issue affects Apache OpenOffice: through 4.1.15.

Users are recommended to upgrade to version 4.1.16, which fixes the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://lists.apache.org/thread/0jjftxkcc4l9kt7jjn630hfrh2ygfcbk; https://www.openoffice.org/security/cves/CVE-2025-64405.html; http://www.openwall.com/lists/oss-security/2025/11/11/8
CVE: CVE-2025-64406
Published: 2025-11-12
Description: An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas.

This issue affects Apache OpenOffice: through 4.1.15.

Users are recommended to upgrade to version 4.1.16, which fixes the issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-787
References: https://lists.apache.org/thread/py89gpogxfb2yo9c5vwv2h9x3m85pfmm; https://www.openoffice.org/security/cves/CVE-2025-64406.html; http://www.openwall.com/lists/oss-security/2025/11/11/9
CVE: CVE-2025-11962
Published: 2025-11-12
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in DivvyDrive Information Technologies Inc. Digital Corporate Warehouse allows Stored XSS.This issue affects Digital Corporate Warehouse: before v.4.8.2.22.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-25-0393
CVE: CVE-2025-12382
Published: 2025-11-12
Description: Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection. This issue affects Algosec Firewall Analyzer: A33.0 (up to build 320), A33.10 (up to build 210).
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://techdocs.algosec.com/en/cves/Content/tech-notes/cves/cve-2025-12382.htm
CVE: CVE-2025-37734
Published: 2025-11-12
Description: Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-346
References: https://discuss.elastic.co/t/kibana-8-19-7-9-1-7-and-9-2-1-security-update-esa-2025-24/383381
CVE: CVE-2025-59118
Published: 2025-11-12
Description: Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz.

This issue affects Apache OFBiz: before 24.09.03.

Users are recommended to upgrade to version 24.09.03, which fixes the issue.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434
References: https://issues.apache.org/jira/browse/OFBIZ-13292; https://lists.apache.org/thread/202263kpy7g76pzsy1fm96h9lcmhsqpt; https://ofbiz.apache.org/download.html
CVE: CVE-2025-61623
Published: 2025-11-12
Description: Reflected cross-site scripting vulnerability in Apache OFBiz.

This issue affects Apache OFBiz: before 24.09.03.

Users are recommended to upgrade to version 24.09.03, which fixes the issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://issues.apache.org/jira/browse/OFBIZ-13295; https://lists.apache.org/thread/sb2mngrg766qbqt5g29fo0qblk3v4x5y; https://ofbiz.apache.org/download.html
CVE: CVE-2025-64407
Published: 2025-11-12
Description: Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links 
to be loaded without prompt. Such links could also be used to transmit system information, such as environment variables or configuration settings.

In the affected versions of Apache OpenOffice, documents that used a certain URI scheme linking to external files would 
load the contents of such files without prompting the user for 
permission to do so. Such URI scheme allows to include system configuration data, that is not supposed to be transmitted externally.

This issue affects Apache OpenOffice: through 4.1.15.

Users are recommended to upgrade to version 4.1.16, which fixes the issue.





The LibreOffice suite reported this issue as CVE-2024-12426.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-201, CWE-862, CWE-862
References: https://lists.apache.org/thread/4yg1gv71f14fw4ky4ds50o6xjq49594g; https://www.openoffice.org/security/cves/CVE-2025-64407.html
CVE: CVE-2025-11454
Published: 2025-11-12
Description: The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eos_scfm_duplicate_post_as_draft() function in all versions up to, and including, 0.5.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with COntributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3387807%40specific-content-for-mobile&new=3387807%40specific-content-for-mobile&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/6ed99dfd-6ca6-41e7-a844-d53eec7068c1?source=cve
CVE: CVE-2025-11994
Published: 2025-11-12
Description: The Easy Email Subscription plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://plugins.svn.wordpress.org/email-subscription-with-secure-captcha/tags/1.3/simple-email-subscription.php; https://plugins.svn.wordpress.org/email-subscription-with-secure-captcha/tags/1.3/subscriber-form.php; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3388578%40email-subscription-with-secure-captcha&new=3388578%40email-subscription-with-secure-captcha&sfp_email=&sfph_mail=
CVE: CVE-2025-40112
Published: 2025-11-12
Description: In the Linux kernel, the following vulnerability has been resolved:

sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara

The referenced commit introduced exception handlers on user-space memory
references in copy_from_user and copy_to_user. These handlers return from
the respective function and calculate the remaining bytes left to copy
using the current register contents. This commit fixes a couple of bad
calculations and a broken epilogue in the exception handlers. This will
prevent crashes and ensure correct return values of copy_from_user and
copy_to_user in the faulting case. The behaviour of memcpy stays unchanged.
References: https://git.kernel.org/stable/c/05440320ea3e249d5f984918f2bf51210c1a7c03; https://git.kernel.org/stable/c/088c5098ec6d6b0396edfbf3dad3e81de8469c1c; https://git.kernel.org/stable/c/0b67c8fc10b13a9090340c5f8a37d308f4e1571c