deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-53899
Published: 2025-12-16
Description: PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in the episode upload form. Attackers can manipulate the 'shortdesc' parameter to trigger external HTTP requests to arbitrary endpoints during podcast episode creation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://github.com/PodcastGenerator/PodcastGenerator; https://podcastgenerator.net/; https://www.exploit-db.com/exploits/51565
CVE: CVE-2023-53901
Published: 2025-12-16
Description: WBCE CMS 1.6.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML and CSS to capture user keystrokes. Attackers can upload a crafted HTML file with CSS-based keylogging techniques to intercept password characters through background image requests.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://wbce-cms.org/; https://www.exploit-db.com/exploits/51566; https://www.vulncheck.com/advisories/wbce-cms-cross-site-scripting-and-open-redirect-vulnerability
CVE: CVE-2023-53902
Published: 2025-12-16
Description: WebsiteBaker 2.13.3 contains a directory traversal vulnerability that allows authenticated attackers to delete arbitrary files by manipulating directory path parameters. Attackers can send crafted GET requests to /admin/media/delete.php with directory traversal sequences to delete files outside the intended directory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://websitebaker.org/pages/en/home.php; https://www.exploit-db.com/exploits/51554; https://www.vulncheck.com/advisories/websitebaker-directory-traversal-via-media-delete-endpoint
CVE: CVE-2023-53903
Published: 2025-12-16
Description: WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with embedded JavaScript. Attackers can upload crafted SVG files with script tags that execute when the file is viewed, enabling persistent cross-site scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://websitebaker.org/pages/en/home.php; https://www.exploit-db.com/exploits/51553; https://www.vulncheck.com/advisories/websitebaker-stored-cross-site-scripting-via-svg-file-upload
CVE: CVE-2025-29231
Published: 2025-12-16
Description: A stored cross-site scripting (XSS) vulnerability in the page_save component of Linksys E5600 V1.1.0.26 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the hostname and domainName parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/JZP018/Vuln/blob/main/linsys/E5600/XSS_wan_name/XSS_wan_name.md; https://github.com/Suryaandave/CVES/tree/main/CVE-2025-29231
CVE: CVE-2025-37164
Published: 2025-12-16
Description: A remote code execution issue exists in HPE OneView.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-94
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04985en_us&docLocale=en_US; https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/hpe_oneview_rce.rb; https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04985en_us&docLocale=en_US#vulnerability-summary-1
CVE: CVE-2025-50398
Published: 2025-12-16
Description: Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter fac_password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/sezangel/IOT-vul/tree/main/Mercury/D196G/2; https://github.com/sezangel/IOT-vul/tree/main/Mercury/D196G/2
CVE: CVE-2025-50401
Published: 2025-12-16
Description: Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/sezangel/IOT-vul/tree/main/Mercury/D196G/1; https://github.com/sezangel/IOT-vul/tree/main/Mercury/D196G/1
CVE: CVE-2025-59935
Published: 2025-12-16
Description: GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.21, an unauthenticated user can store an XSS payload through the inventory endpoint. Users should upgrade to 10.0.21 to receive a patch.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-j8vv-9f8m-r7jx
CVE: CVE-2025-62862
Published: 2025-12-16
Description: Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM Boot Error Record Table driver that could result in (1) an out-of-bounds read which leaks Secure-EL0 information to a process running in Non-Secure state or (2) an out-of-bounds write which corrupts Secure or Non-Secure memory, limited to memory mapped to UEFI-MM Secure Partition by the Secure Partition Manager.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-125, CWE-787
References: https://amperecomputing.com/products/product-security; https://amperecomputing.com/products/security-bulletins/amp-sb-0007
CVE: CVE-2025-63414
Published: 2025-12-16
Description: A Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an unauthenticated remote attacker to achieve arbitrary command execution. By sending a crafted HTTP request to the /html/execute.php endpoint with a malicious payload in the id parameter, an attacker can execute arbitrary commands on the underlying operating system, leading to full remote code execution (RCE).
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-22, CWE-78
References: https://gh0stmezh.wordpress.com/2025/12/02/cve-2025-63414/; https://github.com/AllskyTeam/allsky; https://github.com/AllskyTeam/allsky/blob/master/html/execute.php
CVE: CVE-2025-68116
Published: 2025-12-16
Description: FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 2.7.1 are vulnerable to Stored Cross-Site Scripting (XSS) due to unsafe handling of browser-renderable user uploads when served through the sharing and download endpoints. An attacker who can get a crafted SVG (primary) or HTML (secondary) file stored in a FileRise instance can cause JavaScript execution when a victim opens a generated share link (and in some cases via the direct download endpoint). This impacts share links (`/api/file/share.php`) and direct file access / download path (`/api/file/download.php`), depending on browser/content-type behavior. Version 2.7.1 fixes the issue.
CVSS Score: 8.9 (HIGH)
CWE: CWE-79
References: https://github.com/error311/FileRise/security/advisories/GHSA-35pp-ggh6-c59c
CVE: CVE-2025-68130
Published: 2025-12-16
Description: tRPC allows users to build and consume fully typesafe APIs without schemas or code generation. Starting in version 10.27.0 and prior to versions 10.45.3 and 11.8.0, a A prototype pollution vulnerability exists in `@trpc/server`'s `formDataToObject` function, which is used by the Next.js App Router adapter. An attacker can pollute `Object.prototype` by submitting specially crafted FormData field names, potentially leading to authorization bypass, denial of service, or other security impacts. Note that this vulnerability is only present when using `experimental_caller` / `experimental_nextAppDirCaller`. Versions 10.45.3 and 11.8.0 fix the issue.
CWE: CWE-1321
References: https://github.com/trpc/trpc/security/advisories/GHSA-43p4-m455-4f4j
CVE: CVE-2023-53896
Published: 2025-12-16
Description: D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allows unauthenticated attackers to download device configuration settings without authentication. Attackers can exploit the /cgi-bin/ExportSettings.sh endpoint to retrieve sensitive configuration information by directly accessing the export settings script.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://www.dlink.com/hr/hr/products/dap-1325-n300-wifi-range-extender; https://www.exploit-db.com/exploits/51556; https://www.vulncheck.com/advisories/d-link-dap-hardware-a-unauthenticated-configuration-download
CVE: CVE-2023-53900
Published: 2025-12-16
Description: Spip 4.1.10 contains a file upload vulnerability that allows attackers to upload malicious SVG files with embedded external links. Attackers can trick administrators into clicking a crafted SVG logo that redirects to a potentially dangerous URL through improper file upload filtering.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/51557; https://www.spip.net/en_rubrique25.html; https://www.vulncheck.com/advisories/spip-admin-account-spoofing-via-malicious-svg-upload
CVE: CVE-2025-33210
Published: 2025-12-16
Description: NVIDIA Isaac Lab contains a deserialization vulnerability.  A successful exploit of this vulnerability might lead to code execution.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-502
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33210; https://nvidia.custhelp.com/app/answers/detail/a_id/5733; https://www.cve.org/CVERecord?id=CVE-2025-33210
CVE: CVE-2025-33212
Published: 2025-12-16
Description: NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a user loads a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, and data tampering.
CVSS Score: 7.3 (HIGH)
CWE: CWE-502
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33212; https://nvidia.custhelp.com/app/answers/detail/a_id/5736; https://www.cve.org/CVERecord?id=CVE-2025-33212
CVE: CVE-2025-33225
Published: 2025-12-16
Description: NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data tampering.
CVSS Score: 8.4 (HIGH)
CWE: CWE-61
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33225; https://nvidia.custhelp.com/app/answers/detail/a_id/5746; https://www.cve.org/CVERecord?id=CVE-2025-33225
CVE: CVE-2025-33226
Published: 2025-12-16
Description: NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33226; https://nvidia.custhelp.com/app/answers/detail/a_id/5736; https://www.cve.org/CVERecord?id=CVE-2025-33226
CVE: CVE-2025-33235
Published: 2025-12-16
Description: NVIDIA Resiliency Extension for Linux contains a vulnerability in the checkpointing core, where an attacker may cause a race condition. A successful exploit of this vulnerability might lead to information disclosure, data tampering, denial of service, or escalation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33235; https://nvidia.custhelp.com/app/answers/detail/a_id/5746; https://www.cve.org/CVERecord?id=CVE-2025-33235
CVE: CVE-2025-46294
Published: 2025-12-16
Description: To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsDisable8dot3NameCreation in the Windows registry. This prevents attackers from using the tilde character to discover hidden files and directories. This vulnerability has been fully addressed in FileMaker Server 22.0.4. The IIS Shortname Vulnerability exploits how Microsoft IIS handles legacy 8.3 short filenames, allowing attackers to infer the existence of files or directories by crafting requests with the tilde (~) character.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://support.claris.com/s/answerview?anum=000048450&language=en_US
CVE: CVE-2025-46295
Published: 2025-12-16
Description: Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input into the text-substitution API. Because some interpolators could trigger actions like executing commands or accessing external resources, an attacker could potentially achieve remote code execution. This vulnerability has been fully addressed in FileMaker Server 22.0.4.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://support.claris.com/s/answerview?anum=000049059&language=en_US
CVE: CVE-2025-46296
Published: 2025-12-16
Description: An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerability has been fully addressed in FileMaker Server 22.0.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-285
References: https://support.claris.com/s/answerview?anum=000049056&language=en_US
CVE: CVE-2025-52196
Published: 2025-12-16
Description: Server-Side Request Forgery (SSRF) vulnerability in Ctera Portal 8.1.x (8.1.1417.24) allows remote attackers to induce the server to make arbitrary HTTP requests via a crafted HTML file containing an iframe.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://gist.github.com/simonecris/99baeb07fe6e1803d461e44031819cd3; https://kb.ctera.com/docs/81x-portal
CVE: CVE-2025-62863
Published: 2025-12-16
Description: Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM PCIe driver that could result in an out-of-bounds write within PCIe driver’s S-EL0 address space.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://amperecomputing.com/products/product-security; https://amperecomputing.com/products/security-bulletins/amp-sb-0007
CVE: CVE-2025-62864
Published: 2025-12-16
Description: Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM MMCommunicate service that could result in an out-of-bounds write within the UEFI-MM Secure Partition context.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://amperecomputing.com/products/product-security; https://amperecomputing.com/products/security-bulletins/amp-sb-0007
CVE: CVE-2025-65581
Published: 2025-12-16
Description: An open redirect vulnerability exists in the Account module in Volosoft ABP Framework >= 5.1.0 and < 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-601
References: https://github.com/abpframework/abp/commit/44a2dc14e933f3ce1ca93f9313d836694ab77d1d; https://github.com/abpframework/abp/commit/a01adc58464d278ca817c4bbb6cbce30f155d0d1
CVE: CVE-2025-65589
Published: 2025-12-16
Description: nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Attributes functionality.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://seclists.org/fulldisclosure/2025/Dec/16; https://www.nopcommerce.com/; http://seclists.org/fulldisclosure/2025/Dec/16
CVE: CVE-2025-68142
Published: 2025-12-16
Description: PyMdown Extensions is a set of extensions for the `Python-Markdown` markdown project. Versions prior to 10.16.1 have a ReDOS bug found within the figure caption extension (`pymdownx.blocks.caption`). In systems that take unchecked user content, this could cause long hanges when processing the data if a malicious payload was crafted. This issue is patched in Release 10.16.1. As a workaround, those who process unknown user content without timeouts or other safeguards in place to prevent really large, malicious content being aimed at systems may avoid the use of `pymdownx.blocks.caption` until they're able to upgrade.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333
References: https://github.com/facelessuser/pymdown-extensions/commit/b50d15a56850ed1408a284bba81cc019c6bd72e8; https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-r6h4-mm7h-8pmq; https://pypi.org/project/pymdown-extensions/10.16.1
CVE: CVE-2025-14553
Published: 2025-12-16
Description: Exposure of password hashes through an unauthenticated API response in TP-Link Tapo app on iOS and Android for Tapo cameras, allowing attackers to brute force the password in the local network. Issue can be mitigated through mobile application updates. Device firmware remains unchanged.
CWE: CWE-200
References: https://apps.apple.com/us/app/tp-link-tapo/id[PII_REDACTED]; https://play.google.com/store/apps/details?id=com.tplink.iot; https://www.tp-link.com/us/support/faq/4840/
CVE: CVE-2025-65590
Published: 2025-12-16
Description: nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Blog posts functionality in the Content Management area.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://seclists.org/fulldisclosure/2025/Dec/17; https://www.nopcommerce.com/; http://seclists.org/fulldisclosure/2025/Dec/17
CVE: CVE-2025-65591
Published: 2025-12-16
Description: nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Currencies functionality.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://seclists.org/fulldisclosure/2025/Dec/18; https://www.nopcommerce.com/; http://seclists.org/fulldisclosure/2025/Dec/18
CVE: CVE-2025-65592
Published: 2025-12-16
Description: nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality. Malicious payloads inserted into the "Product Name" and "Short Description" fields are stored in the backend database and executed automatically whenever a user views the affected pages.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://seclists.org/fulldisclosure/2025/Dec/19; https://www.nopcommerce.com/; http://seclists.org/fulldisclosure/2025/Dec/19
CVE: CVE-2025-65593
Published: 2025-12-16
Description: nopCommerce 4.90.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Schedule Tasks functionality.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://seclists.org/fulldisclosure/2025/Dec/20; https://www.nopcommerce.com/; http://seclists.org/fulldisclosure/2025/Dec/20
CVE: CVE-2025-68146
Published: 2025-12-16
Description: filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local attackers to corrupt or truncate arbitrary user files through symlink attacks. The vulnerability exists in both Unix and Windows lock file creation where filelock checks if a file exists before opening it with O_TRUNC. An attacker can create a symlink pointing to a victim file in the time gap between the check and open, causing os.open() to follow the symlink and truncate the target file. All users of filelock on Unix, Linux, macOS, and Windows systems are impacted. The vulnerability cascades to dependent libraries. The attack requires local filesystem access and ability to create symlinks (standard user permissions on Unix; Developer Mode on Windows 10+). Exploitation succeeds within 1-3 attempts when lock file paths are predictable. The issue is fixed in version 3.20.1. If immediate upgrade is not possible, use SoftFileLock instead of UnixFileLock/WindowsFileLock (note: different locking semantics, may not be suitable for all use cases); ensure lock file directories have restrictive permissions (chmod 0700) to prevent untrusted users from creating symlinks; and/or monitor lock file directories for suspicious symlinks before running trusted applications. These workarounds provide only partial mitigation. The race condition remains exploitable. Upgrading to version 3.20.1 is strongly recommended.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-59, CWE-362, CWE-367, CWE-367
References: https://github.com/tox-dev/filelock/commit/4724d7f8c3393ec1f048c93933e6e3e6ec321f0e; https://github.com/tox-dev/filelock/pull/461; https://github.com/tox-dev/filelock/releases/tag/3.20.1
CVE: CVE-2025-68150
Published: 2025-12-16
Description: Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.2 and 9.1.1-alpha.1, the Instagram authentication adapter allows clients to specify a custom API URL via the `apiURL` parameter in `authData`. This enables SSRF attacks and possibly authentication bypass if malicious endpoints return fake responses to validate unauthorized users. This is fixed in versions 8.6.2 and 9.1.1-alpha.1 by hardcoding the Instagram Graph API URL `https://graph.instagram.com` and ignoring client-provided `apiURL` values. No known workarounds are available.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://github.com/parse-community/parse-server/pull/9988; https://github.com/parse-community/parse-server/pull/9989; https://github.com/parse-community/parse-server/security/advisories/GHSA-3f5f-xgrj-97pf
CVE: CVE-2025-68154
Published: 2025-12-16
Description: systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the `fsSize()` function in systeminformation is vulnerable to OS command injection on Windows systems. The optional `drive` parameter is directly concatenated into a PowerShell command without sanitization, allowing arbitrary command execution when user-controlled input reaches this function. The actual exploitability depends on how applications use this function. If an application does not pass user-controlled input to `fsSize()`, it is not vulnerable. Version 5.27.14 contains a patch.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: https://github.com/sebhildebrandt/systeminformation/commit/c52f9fd07fef42d2d8e8c66f75b42178da701c68; https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-wphj-fx3q-84ch
CVE: CVE-2025-68155
Published: 2025-12-16
Description: @vitejs/plugin-rs provides React Server Components (RSC) support for Vite. Prior to version 0.5.8, the `/__vite_rsc_findSourceMapURL` endpoint in `@vitejs/plugin-rsc` allows unauthenticated arbitrary file read during development mode. An attacker can read any file accessible to the Node.js process by sending a crafted HTTP request with a `file://` URL in the `filename` query parameter. Version 0.5.8 fixes the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-73
References: https://github.com/facebook/react/pull/29708; https://github.com/facebook/react/pull/30741; https://github.com/vitejs/vite-plugin-react/commit/582fba0b9a52b13fcff6beaaa3bfbd532bc5359d