deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-32868
Published: 2025-04-16
Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'ExportCertificate' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://cert-portal.siemens.com/productcert/html/ssa-443402.html
CVE: CVE-2025-32869
Published: 2025-04-16
Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'ImportCertificate' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://cert-portal.siemens.com/productcert/html/ssa-443402.html
CVE: CVE-2025-32870
Published: 2025-04-16
Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetTraces' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://cert-portal.siemens.com/productcert/html/ssa-443402.html
CVE: CVE-2025-32871
Published: 2025-04-16
Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'MigrateDatabase' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://cert-portal.siemens.com/productcert/html/ssa-443402.html
CVE: CVE-2025-32872
Published: 2025-04-16
Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetOverview' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://cert-portal.siemens.com/productcert/html/ssa-443402.html
CVE: CVE-2025-39472
Published: 2025-04-16
Description: Cross-Site Request Forgery (CSRF) vulnerability in wpweb WooCommerce Social Login woo-social-login allows Cross Site Request Forgery.This issue affects WooCommerce Social Login: from n/a through < 2.8.3.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/woo-social-login/vulnerability/wordpress-woocommerce-social-login-plugin-2-8-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2025-31200
Published: 2025-04-16
Description: A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS released before iOS 18.4.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://support.apple.com/en-us/122282; https://support.apple.com/en-us/122400; https://support.apple.com/en-us/122401
CVE: CVE-2025-31201
Published: 2025-04-16
Description: This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1220
References: https://support.apple.com/en-us/122282; https://support.apple.com/en-us/122400; https://support.apple.com/en-us/122401
CVE: CVE-2025-29648
Published: 2025-04-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-29649
Published: 2025-04-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-29650
Published: 2025-04-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-29651
Published: 2025-04-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-29652
Published: 2025-04-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-29653
Published: 2025-04-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-32817
Published: 2025-04-16
Description: A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthorized file overwrite, potentially leading to denial of service or file corruption.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-59
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0007
CVE: CVE-2025-3723
Published: 2025-04-16
Description: A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. This issue affects some unknown processing of the component MDTM Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119, CWE-120
References: https://fitoxs.com/exploit/exploit-d41d8cd98f00b204e9800998ecf8427e.txt; https://vuldb.com/?ctiid.305069; https://vuldb.com/?id.305069
CVE: CVE-2025-3724
Published: 2025-04-16
Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function of the component DIR Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119, CWE-120
References: https://fitoxs.com/exploit/exploit-21232f297a57a5a743894a0e4a801fc3.txt; https://vuldb.com/?ctiid.305070; https://vuldb.com/?id.305070
CVE: CVE-2025-3725
Published: 2025-04-16
Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component MIC Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119, CWE-120
References: https://fitoxs.com/exploit/exploit-827ccb0eea8a706c4c34a16891f84e7b.txt; https://vuldb.com/?ctiid.305071; https://vuldb.com/?id.305071
CVE: CVE-2025-3726
Published: 2025-04-16
Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component CD Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119, CWE-120
References: https://fitoxs.com/exploit/exploit-900150983cd24fb0d6963f7d28e17f72.txt; https://vuldb.com/?ctiid.305072; https://vuldb.com/?id.305072
CVE: CVE-2024-55371
Published: 2025-04-16
Description: Wallos <= 2.38.2 has a file upload vulnerability in the restore backup function, which allows authenticated users to restore backups by uploading a ZIP file. The contents of the ZIP file are extracted on the server. This functionality enables an authenticated attacker (being an administrator is not required) to upload malicious files to the server. Once a web shell is installed, the attacker gains the ability to execute arbitrary commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-73
References: https://www.datafarm.co.th/blog/CVE-2024-55371-and-CVE-2024-55372-Malicious-File-Upload-to-RCE-in-Wallos-Application
CVE: CVE-2024-55372
Published: 2025-04-16
Description: Wallos <=2.38.2 has a file upload vulnerability in the restore database function, which allows unauthenticated users to restore database by uploading a ZIP file. The contents of the ZIP file are extracted on the server. This functionality enables an unauthenticated attacker to upload malicious files to the server. Once a web shell is installed, the attacker gains the ability to execute arbitrary commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-73
References: https://www.datafarm.co.th/blog/CVE-2024-55371-and-CVE-2024-55372-Malicious-File-Upload-to-RCE-in-Wallos-Application
CVE: CVE-2025-26153
Published: 2025-04-16
Description: A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/NoSpaceAvailable/234acdf57b5d7b29b2f39090c1686bc8; https://github.com/chamilo/chamilo-lms/commit/beb07770d674fcc9db6df0e59aab107678c28682; https://github.com/chamilo/chamilo-lms/commit/d5c29cf39ac30d7364a52bba4036c3e870412066
CVE: CVE-2025-28072
Published: 2025-04-16
Description: PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/baixiaobi/TST/blob/main/README.md
CVE: CVE-2025-29708
Published: 2025-04-16
Description: SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-73
References: https://github.com/fupanc-w1n/fupanc/blob/main/php/CVE-2025-29708.md; https://github.com/fupanc-w1n/fupanc/blob/main/php/Company%20Website%20CMS1.md
CVE: CVE-2025-29709
Published: 2025-04-16
Description: SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-73
References: https://github.com/fupanc-w1n/fupanc/blob/main/php/CVE-2025-29709.md; https://github.com/fupanc-w1n/fupanc/blob/main/php/Company%20Website%20CMS2.md
CVE: CVE-2025-29710
Published: 2025-04-16
Description: SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting (XSS) via /dashboard/Services.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/fupanc-w1n/fupanc/blob/main/php/CVE-2025-29710.md; https://github.com/fupanc-w1n/fupanc/blob/main/php/Company%20Website%20CMS3.md; https://github.com/fupanc-w1n/fupanc/blob/main/php/Company%20Website%20CMS3.md
CVE: CVE-2025-3619
Published: 2025-04-16
Description: Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-122
References: https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_15.html; https://issues.chromium.org/issues/409619251
CVE: CVE-2025-3620
Published: 2025-04-16
Description: Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_15.html; https://issues.chromium.org/issues/405292639
CVE: CVE-2025-3727
Published: 2025-04-16
Description: A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component STATUS Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119, CWE-120
References: https://fitoxs.com/exploit/exploit-5ebe2294ecd0e0f08eab7690d2a6ee69.txt; https://vuldb.com/?ctiid.305073; https://vuldb.com/?id.305073
CVE: CVE-2025-3728
Published: 2025-04-16
Description: A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability affects the function Login. The manipulation of the argument uname leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-120, CWE-120
References: https://github.com/eeeee-vul/CVE/issues/3; https://vuldb.com/?ctiid.305074; https://vuldb.com/?id.305074
CVE: CVE-2025-3729
Published: 2025-04-16
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file backup.php of the component Database Backup Handler. The manipulation of the argument txtdbname leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-77, CWE-78, CWE-78
References: https://github.com/yaklang/IRifyScanResult/blob/main/Web-based%20Pharmacy%20Product%20Management%20System/rce_in_backup.md; https://vuldb.com/?ctiid.305075; https://vuldb.com/?id.305075
CVE: CVE-2025-3730
Published: 2025-04-16
Description: A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0. Affected is the function torch.nn.functional.ctc_loss of the file aten/src/ATen/native/LossCTC.cpp. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The name of the patch is 46fc5d8e[PII_REDACTED]11cb237d5f9eef0223e567. It is recommended to apply a patch to fix this issue. The security policy of the project warns to use unknown models which might establish malicious effects.
CVSS Score: 3.3 (LOW)
CWE: CWE-404
References: https://github.com/pytorch/pytorch/issues/150835; https://github.com/pytorch/pytorch/issues/150835#issue[PII_REDACTED]; https://github.com/pytorch/pytorch/pull/150981
CVE: CVE-2025-25230
Published: 2025-04-16
Description: Omnissa Horizon Client for Windows contains an LPE Vulnerability. A malicious actor with local access where Horizon Client for Windows is installed may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://static.omnissa.com/sites/default/files/OMSA-2025-0001.pdf; https://www.omnissa.com/omnissa-security-response/
CVE: CVE-2025-31478
Published: 2025-04-16
Description: Zulip is an open-source team collaboration tool. Zulip supports a configuration where account creation is limited solely by being able to authenticate with a single-sign on authentication backend, meaning the organization places no restrictions on email address domains or invitations being required to join, but has disabled the EmailAuthBackend that is used for email/password authentication. A bug in the Zulip server means that it is possible to create an account in such organizations, without having an account with the configured SSO authentication backend. This issue is patched in version 10.2. A workaround includes requiring invitations to join the organization prevents the vulnerability from being accessed.
CVSS Score: 8.2 (HIGH)
CWE: CWE-287
References: https://github.com/zulip/zulip/commit/b5ab90aaa4a7efdcbf886cb9e7d55fa5bfca3a28; https://github.com/zulip/zulip/security/advisories/GHSA-qxfv-j6vg-5rqc
CVE: CVE-2025-32433
Published: 2025-04-16
Description: Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-306
References: https://github.com/erlang/otp/commit/0fcd9c56524b28615e8ece65fc0c3f66ef6e4c12; https://github.com/erlang/otp/commit/6eef04130afc8b0ccb63c9a0d8650209cf54892f; https://github.com/erlang/otp/commit/b1924d37fd83c070055beb115d5d6a6a9490b891
CVE: CVE-2025-32783
Published: 2025-04-16
Description: XWiki Platform is a generic wiki platform. A vulnerability in versions from 5.0 to 16.7.1 affects users with Message Stream enabled and a wiki configured as closed from selecting "Prevent unregistered users to view pages" in the Administrations Rights. The vulnerability is that any message sent in a subwiki to "everyone" is actually sent to the farm: any visitor of the main wiki will be able to see that message through the Dashboard, even if the subwiki is configured to be private. This issue will not be patched as Message Stream has been deprecated in XWiki 16.8.0RC1 and is not maintained anymore. A workaround for this issue involves keeping Message Stream disabled by default. It's advised to keep it disabled from Administration > Social > Message Stream.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-668
References: https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-42fh-pvvh-999x; https://jira.xwiki.org/browse/XWIKI-17154; https://jira.xwiki.org/browse/XWIKI-17154
CVE: CVE-2025-32787
Published: 2025-04-16
Description: SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. Versions 5.02.5184 to 5.02.5187 are vulnerable to NULL dereference in `DeleteIPv6DefaultRouterInRA` called by `StorePacket`. Before dereferencing, `DeleteIPv6DefaultRouterInRA` does not account for `ParsePacket` returning NULL, resulting in the program crashing. A patched version does not exist at this time.
CVSS Score: 3.1 (LOW)
CWE: CWE-476
References: https://github.com/SoftEtherVPN/SoftEtherVPN/blob/[PII_REDACTED]c0231d7723623cc8732f94ba2b8c54/src/Cedar/Hub.c#L5112C1-L5116C29; https://github.com/SoftEtherVPN/SoftEtherVPN/blob/master/src/Mayaqua/TcpIp.c#L1633; https://github.com/SoftEtherVPN/SoftEtherVPN/security/advisories/GHSA-xw53-587j-mqh6
CVE: CVE-2025-32789
Published: 2025-04-16
Description: EspoCRM is an Open Source Customer Relationship Management software. Prior to version 9.0.7, users can be sorted by their password hash. This flaw allows an attacker to make assumptions about the hash values of other users stored in the password column of the user table, based on the results of the sorted list of users. Although unlikely, if an attacker knows the hash value of their password, they can change the password and repeat the sorting until the other user's password hash is fully revealed. This issue is patched in version 9.0.7.
CVSS Score: 3.1 (LOW)
CWE: CWE-200, CWE-203
References: https://github.com/espocrm/espocrm/commit/91740192d2e2c575c6a04534c079baf9f3af0a7f; https://github.com/espocrm/espocrm/commit/bd900d0b48fe37a98def4c0e094e39e7e385e9ea; https://github.com/espocrm/espocrm/security/advisories/GHSA-3ph3-jcfx-fq53
CVE: CVE-2025-32791
Published: 2025-04-16
Description: The Backstage Scaffolder plugin houses types and utilities for building scaffolder-related modules. A vulnerability in the Backstage permission plugin backend allows callers to extract some information about the conditional decisions returned by the permission policy installed in the permission backend. If the permission system is not in use or if the installed permission policy does not use conditional decisions, there is no impact. This issue has been patched in version 0.6.0 of the permissions backend. A workaround includes having administrators of the permission policies ensure that they are crafted in such a way that conditional decisions do not contain any sensitive information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-213
References: https://github.com/backstage/backstage/security/advisories/GHSA-f8j4-p5cr-p777
CVE: CVE-2025-43703
Published: 2025-04-16
Description: An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API (even though the attacker has no knowledge of an API key) through approaches such as scripts or the SRC attribute of an IMG element. NOTE: this issue exists because of an incomplete fix for CVE-2024-32484.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-830
References: https://github.com/ankitects/anki/pull/3925; https://github.com/ankitects/anki/pull/3925/commits/24bca15fd3d9dc386916509eb2d4862d1184e709
CVE: CVE-2025-0756
Published: 2025-04-16
Description: Overview 



 



The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. (CWE-99) 



 



Description 



 



Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.2, including 9.3.x and 8.3.x, do not restrict JNDI identifiers during the creation of platform data sources. 



 



Impact 



 



An attacker could gain access to or modify sensitive data or system resources. This could allow access to protected files or directories including configuration files and files containing sensitive information, which can lead to remote code execution by unauthorized users.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-99
References: https://https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]7709--Resolved-Hitachi-Vantara-Pentaho-Data-Integration-Analytics-Improper-Control-of-Resource-Identifiers-Resource-Injection-Versions-before-10-2-0-2-including-9-3-x-Impacted-CVE-2025-0756