deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-25029
Published: 2025-05-28
Description: IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping of input.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-116
References: https://www.ibm.com/support/pages/node/7234827
CVE: CVE-2025-4800
Published: 2025-05-28
Description: The MasterStudy LMS Pro plugin for WordPress is vulnerable to arbitrary file uploads due to a missing file type validation in the stm_lms_add_assignment_attachment function in all versions up to, and including, 4.7.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server, which may make remote code execution possible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://docs.stylemixthemes.com/masterstudy-lms/changelog-pro-version; https://stylemixthemes.com/wordpress-lms-plugin/; https://themeforest.net/item/masterstudy-education-center-wordpress-theme/12170274/
CVE: CVE-2025-4009
Published: 2025-05-28
Description: The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product
features, setup network switching, and register license among other features. The application has been developed in PHP with the webEASY SDK, also named ‘ewb’ by Evertz.

This web interface has two endpoints that are vulnerable to arbitrary command injection (CVE-2025-4009, CVE-2025-10364) and the authentication mechanism has a flaw leading to authentication bypass (CVE-2025-10365).

CVE-2025-4009 covers the command injection in feature-transfer-import.php
CVE-2025-10364 covers the command injection in feature-transfer-export.php

Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.

This level of access could lead to serious business impact such as the interruption of media streaming, modification of media being streamed, alteration of closed captions being generated, among others.
CWE: CWE-77
References: https://www.onekey.com/resource/security-advisory-remote-code-execution-on-evertz-svdn-cve-2025-4009
CVE: CVE-2025-4947
Published: 2025-05-28
Description: libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: https://curl.se/docs/CVE-2025-4947.html; https://curl.se/docs/CVE-2025-4947.json; https://hackerone.com/reports/3150884
CVE: CVE-2025-5025
Published: 2025-05-28
Description: libcurl supports *pinning* of the server certificate public key for HTTPS transfers. Due to an omission, this check is not performed when connecting with QUIC for HTTP/3, when the TLS backend is wolfSSL. Documentation says the option works with wolfSSL, failing to specify that it does not for QUIC and HTTP/3. Since pinning makes the transfer succeed if the pin is fine, users could unwittingly connect to an impostor server without noticing.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-295
References: https://curl.se/docs/CVE-2025-5025.html; https://curl.se/docs/CVE-2025-5025.json; https://hackerone.com/reports/3153497
CVE: CVE-2024-54020
Published: 2025-05-28
Description: A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated attacker to overwrite global threat feeds via crafted update requests.
CVSS Score: 2.3 (LOW)
CWE: CWE-862
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-023
CVE: CVE-2025-22252
Published: 2025-05-28
Description: A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FortiOS versions 7.4.4 through 7.4.6 and version 7.6.0 may allow an attacker with knowledge of an existing admin account to access the device as a valid admin via an authentication bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-472
CVE: CVE-2025-24473
Published: 2025-05-28
Description: A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.1, FortiClientWindows 7.0.13 through 7.0.14 may allow an unauthorized remote attacker to view application information via navigation to a hosted webpage, if Windows is configured to accept incoming connections to port 8053 (non-default setup)
CVSS Score: 3.7 (LOW)
CWE: CWE-497
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-548
CVE: CVE-2025-25251
Published: 2025-05-28
Description: An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 may allow a local attacker to escalate privileges via crafted XPC messages.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://fortiguard.fortinet.com/psirt/FG-IR-25-016
CVE: CVE-2025-27522
Published: 2025-05-28
Description: Deserialization of Untrusted Data vulnerability in Apache InLong.

This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it.

[1] 

 https://github.com/apache/inlong/pull/11732
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-502
References: https://github.com/apache/inlong/pull/11732; https://lists.apache.org/thread/s4dnmq3gwcjocxf85qk190knlzd26jby; https://github.com/apache/inlong/commit/86c893cfd8f7ba9ffce5d20abef6cd360f502fdf
CVE: CVE-2025-27526
Published: 2025-05-28
Description: Deserialization of Untrusted Data vulnerability in Apache InLong.

This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncdoe and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it.

[1]  https://github.com/apache/inlong/pull/11747
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-502
References: https://github.com/apache/inlong/pull/11747; https://lists.apache.org/thread/4t4sqscm7xdqn883dyjy40qk6ncf26xf; http://www.openwall.com/lists/oss-security/2025/05/28/1
CVE: CVE-2025-27528
Published: 2025-05-28
Description: Deserialization of Untrusted Data vulnerability in Apache InLong.

This issue affects Apache InLong: from 1.13.0 through 2.1.0. 

This
vulnerability allows attackers to bypass the security mechanisms of InLong
JDBC and leads to arbitrary file reading. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it.

[1]  https://github.com/apache/inlong/pull/11747
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-502
References: https://github.com/apache/inlong/pull/11747; https://lists.apache.org/thread/b807rqzgyv4qgvxw3nhkq8tl6g90gqgj; http://www.openwall.com/lists/oss-security/2025/05/28/3
CVE: CVE-2025-46777
Published: 2025-05-28
Description: A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.9 may allow an authenticated attacker with at least read-only admin permissions to view encrypted secrets via the FortiPortal System Log.
CVSS Score: 2.3 (LOW)
CWE: CWE-532
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-380
CVE: CVE-2025-47294
Published: 2025-05-28
Description: A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the csfd daemon via a specially crafted request.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-190
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-388
CVE: CVE-2025-47295
Published: 2025-05-28
Description: A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, under rare conditions that are outside of the attacker's control.
CVSS Score: 3.7 (LOW)
CWE: CWE-126, CWE-125
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-381
CVE: CVE-2025-5082
Published: 2025-05-28
Description: The WP Attachments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘attachment_id’ parameter in all versions up to, and including, 5.0.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-attachments/tags/5.0.12/inc/html/attachmentEditIframe.php; https://plugins.trac.wordpress.org/browser/wp-attachments/tags/5.0.12/inc/ij-post-attachments.php#L274; https://plugins.trac.wordpress.org/changeset/3300269/
CVE: CVE-2025-5287
Published: 2025-05-28
Description: The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/inprosysmedia-likes-dislikes-post/trunk/inprosysmedia-likes-dislikes-post.php#L76; https://www.wordfence.com/threat-intel/vulnerabilities/id/ad19205d-d355-45d8-be5b-f8005459a8c7?source=cve
CVE: CVE-2025-1753
Published: 2025-05-28
Description: LLama-Index CLI version v0.12.20 contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the `--files` argument, which is directly passed into `os.system`. An attacker who controls the content of this argument can inject and execute arbitrary shell commands. This vulnerability can be exploited locally if the attacker has control over the CLI arguments, and remotely if a web application calls the LLama-Index CLI with a user-controlled filename. This issue can lead to arbitrary code execution on the affected system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/run-llama/llama_index/commit/b57e76738c53ca82d88658b82f2d82d1c7839c7d; https://huntr.com/bounties/19e1c67e-1d77-451d-b10b-acbe99900b22
CVE: CVE-2025-4963
Published: 2025-05-28
Description: The WP Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3300818/; https://wordpress.org/plugins/wpextended/#developers; https://wpextended.io/module_resources/svg-file-upload/
CVE: CVE-2025-40673
Published: 2025-05-28
Description: A Missing Authorization vulnerability has been found in DinoRANK. This 
vulnerability allows an attacker to access invoices of any user via 
accessing endpoint '/facturas/YYYY-MM/SDRYYMM-XXXXX.pdf' because there 
is no access control. The pdf filename can be obtained via OSINT, 
insecure network traffic or brute force.
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/missing-authorization-dinorank
CVE: CVE-2025-5295
Published: 2025-05-28
Description: A vulnerability classified as critical was found in FreeFloat FTP Server 1.0.0. This vulnerability affects unknown code of the component PORT Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119, CWE-120
References: https://fitoxs.com/exploit/exploit-4f6236b59b5119d64718e994b0f3d63a755e7cb5a496e3846b92dfb960f1a80a.txt; https://vuldb.com/?ctiid.310420; https://vuldb.com/?id.310420
CVE: CVE-2025-3864
Published: 2025-05-28
Description: Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library.
Fix for this issue has been included in 1.24.0 release.
CWE: CWE-772
References: https://cert.pl/en/posts/2025/05/CVE-2025-3864/; https://github.com/benoitc/hackney/commit/8f13ddac50d1626f8b9a47a08bd599e4efe1773d; https://github.com/benoitc/hackney/issues/717
CVE: CVE-2025-5297
Published: 2025-05-28
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Computer Store System 1.0. This issue affects the function Add of the file main.c. The manipulation of the argument laptopcompany/RAM/Processor leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-121, CWE-787
References: https://github.com/byxs0x0/cve/issues/6; https://vuldb.com/?ctiid.310421; https://vuldb.com/?id.310421
CVE: CVE-2025-5298
Published: 2025-05-28
Description: A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/RS7325/cve/issues/2; https://vuldb.com/?ctiid.310422; https://vuldb.com/?id.310422
CVE: CVE-2025-5299
Published: 2025-05-28
Description: A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /user_order_customer_update.php. The manipulation of the argument uploaded_file_cancelled leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284, CWE-434
References: https://github.com/RS7325/cve/issues/3; https://vuldb.com/?ctiid.310426; https://vuldb.com/?id.310426
CVE: CVE-2025-4493
Published: 2025-05-28
Description: Improper privilege assignment in PAM JIT privilege sets in Devolutions 
Server allows a PAM user to perform PAM JIT 
requests on unauthorized groups by exploiting a user interface issue.


This issue affects the following versions : 

  *  Devolutions Server 2025.1.3.0 through 2025.1.7.0
  *  Devolutions Server 2024.3.15.0 and earlier
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-266
References: https://devolutions.net/security/advisories/DEVO-2025-0008/
CVE: CVE-2025-40651
Published: 2025-05-28
Description: Reflected Cross-Site Scripting (XSS) vulnerability in Real Easy Store. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the keyword parameter in /index.php?a=search. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-real-easy-store
CVE: CVE-2025-45997
Published: 2025-05-28
Description: Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability. An attacker can upload a PHP file disguised as an image by modifying the Content-Type header to image/jpg.
CVSS Score: 8.6 (HIGH)
CWE: CWE-434
References: https://github.com/litsasuk/CVE-POC/blob/main/CVE-2025-45997.md; https://www.sourcecodester.com/php/17883/web-based-product-alert-system.html
CVE: CVE-2025-48734
Published: 2025-05-28
Description: Improper Access Control vulnerability in Apache Commons.



A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this protection was not enabled by default. PropertyUtilsBean (and consequently BeanUtilsBean) now disallows declared class level property access by default.





Releases 1.11.0 and 2.0.0-M2 address a potential security issue when accessing enum properties in an uncontrolled way. If an application using Commons BeanUtils passes property paths from an external source directly to the getProperty() method of PropertyUtilsBean, an attacker can access the enum’s class loader via the “declaredClass” property available on all Java “enum” objects. Accessing the enum’s “declaredClass” allows remote attackers to access the ClassLoader and execute arbitrary code. The same issue exists with PropertyUtilsBean.getNestedProperty().
Starting in versions 1.11.0 and 2.0.0-M2 a special BeanIntrospector suppresses the “declaredClass” property. Note that this new BeanIntrospector is enabled by default, but you can disable it to regain the old behavior; see section 2.5 of the user's guide and the unit tests.

This issue affects Apache Commons BeanUtils 1.x before 1.11.0, and 2.x before 2.0.0-M2.Users of the artifact commons-beanutils:commons-beanutils

 1.x are recommended to upgrade to version 1.11.0, which fixes the issue.


Users of the artifact org.apache.commons:commons-beanutils2

 2.x are recommended to upgrade to version 2.0.0-M2, which fixes the issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9; http://www.openwall.com/lists/oss-security/2025/05/28/6; https://lists.debian.org/debian-lts-announce/2025/06/msg00027.html
CVE: CVE-2025-4134
Published: 2025-05-28
Description: Lack of file validation in do_update_vps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unverified file write.
CVSS Score: 7.3 (HIGH)
CWE: CWE-552
References: https://www.gendigital.com/us/en/contact-us/security-advisories/
CVE: CVE-2025-5277
Published: 2025-05-28
Description: aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that once accessed by the MCP client will run arbitrary commands on the host system.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/alexei-led/aws-mcp-server/blob/94d20ae1798a43ac7e3a28e71900d774e5159c8a/src/aws_mcp_server/cli_executor.py#L92; https://github.com/alexei-led/aws-mcp-server/commit/94d20ae1798a43ac7e3a28e71900d774e5159c8a
CVE: CVE-2025-3357
Published: 2025-05-28
Description: IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19 could allow a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamically allocated array.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1285, CWE-129
References: https://www.ibm.com/support/pages/node/7234923
CVE: CVE-2024-38341
Published: 2025-05-28
Description: IBM Sterling Secure Proxy 6.0.0.0 through 6.0.3.1, 6.1.0.0 through 6.1.0.0, and 6.2.0.0 through 6.2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-328, CWE-326
References: https://www.ibm.com/support/pages/node/7234888
CVE: CVE-2024-51453
Published: 2025-05-28
Description: IBM Sterling Secure Proxy 6.2.0.0 through 6.2.0.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://www.ibm.com/support/pages/node/7234887
CVE: CVE-2025-45343
Published: 2025-05-28
Description: An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module in the goform/setmodules route.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://w18e.com; https://gist.github.com/isstabber/b363d47966965e5c0a8ec26d445e090b; https://www.tenda.com.cn/
CVE: CVE-2022-24067
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-25868
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-25870
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-25909
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-26037
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-26056
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-26072
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-26304
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-26424
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2024-47056
Published: 2025-05-28
Description: SummaryThis advisory addresses a security vulnerability in Mautic where sensitive .env configuration files may be directly accessible via a web browser. This exposure could lead to the disclosure of sensitive information, including database credentials, API keys, and other critical system configurations.

Sensitive Information Disclosure via .env File Exposure: The .env file, which typically contains environment variables and sensitive application configurations, is directly accessible via a web browser due to missing web server configurations that restrict access to such files. This allows an unauthenticated attacker to view the contents of this file by simply navigating to its URL.

MitigationUpdate Mautic to the latest Mautic version.

By default, Mautic does not use .env files for production data.

For Apache users: Ensure your web server is configured to respect .htaccess files.

For Nginx users: As Nginx does not inherently support .htaccess files, you must manually add a configuration block to your Nginx server configuration to deny access to .env files. Add the following to your Nginx configuration for the Mautic site:

location ~ /\.env {
    deny all;
}





After modifying your Nginx configuration, remember to reload or restart your Nginx service for the changes to take effect.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-312
References: https://github.com/mautic/mautic/security/advisories/GHSA-h2wg-v8wg-jhxh
CVE: CVE-2025-32801
Published: 2025-05-28
Description: Kea configuration and API directives can be used to load a malicious hook library.  Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths.
This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://kb.isc.org/docs/cve-2025-32801