deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-49812
Published: 2025-07-10
Description: In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade.

Only configurations using "SSLEngine optional" to enable TLS upgrades are affected. Users are recommended to upgrade to version 2.4.64, which removes support for TLS upgrade.
CVSS Score: 7.4 (HIGH)
CWE: CWE-287
References: https://httpd.apache.org/security/vulnerabilities_24.html; http://www.openwall.com/lists/oss-security/2025/07/09/3; http://www.openwall.com/lists/oss-security/2025/07/10/2
CVE: CVE-2025-53020
Published: 2025-07-10
Description: Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server.

This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63.

Users are recommended to upgrade to version 2.4.64, which fixes the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://httpd.apache.org/security/vulnerabilities_24.html; http://www.openwall.com/lists/oss-security/2025/07/10/10; https://lists.debian.org/debian-lts-announce/2025/08/msg00009.html
CVE: CVE-2025-7409
Published: 2025-07-10
Description: A vulnerability was found in code-projects Mobile Shop 1.0 and classified as critical. This issue affects some unknown processing of the file /LoginAsAdmin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/rom4j/cve/issues/20; https://vuldb.com/?ctiid.315869
CVE: CVE-2025-7410
Published: 2025-07-10
Description: A vulnerability was found in code-projects LifeStyle Store 1.0. It has been classified as critical. Affected is an unknown function of the file /cart_remove.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/rom4j/cve/issues/19; https://vuldb.com/?ctiid.315870
CVE: CVE-2025-53371
Published: 2025-07-10
Description: DiscordNotifications is an extension for MediaWiki that sends notifications of actions in your Wiki to a Discord channel. DiscordNotifications allows sending requests via curl and file_get_contents to arbitrary URLs set via $wgDiscordIncomingWebhookUrl and $wgDiscordAdditionalIncomingWebhookUrls. This allows for DOS by causing the server to read large files. SSRF is also possible if there are internal unprotected APIs that can be accessed using HTTP POST requests, which could also possibly lead to RCE. This vulnerability is fixed in commit 1f20d850cbcce5b15951c7c6127b87b927a5415e.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-400, CWE-918
References: https://github.com/miraheze/DiscordNotifications/commit/1f20d850cbcce5b15951c7c6127b87b927a5415e; https://github.com/miraheze/DiscordNotifications/security/advisories/GHSA-gvfx-p3h5-qf65
CVE: CVE-2025-28243
Published: 2025-07-10
Description: An issue in Alteryx Server v.2023.1.1.460 allows HTML injection via a crafted script to the pages component.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: https://alteryx.com; https://gist.github.com/DylanGrl/fbe4cc8eaf2b95147069c82b39be59b0
CVE: CVE-2025-28244
Published: 2025-07-10
Description: Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers to obtain valid user session tokens from localStorage, leading to account takeover
CVSS Score: 8.8 (HIGH)
CWE: CWE-922
References: https://alteryx.com; https://gist.github.com/DylanGrl/2771afe86bdd2665b83f28c1ff5c12eb
CVE: CVE-2025-28245
Published: 2025-07-10
Description: Cross-site scripting (XSS) vulnerability in Alteryx Server 2023.1.1.460 allows remote attackers to inject arbitrary web script or HTML via the notification body.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://alteryx.com; https://gist.github.com/DylanGrl/5e0ac3924f4d939e9c1ebb8632f2851b; https://gist.github.com/DylanGrl/5e0ac3924f4d939e9c1ebb8632f2851b
CVE: CVE-2025-52434
Published: 2025-07-10
Description: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections.

This issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106.
The following versions were EOL at the time the CVE was created but are 
known to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions 
may also be affected.


Users are recommended to upgrade to version 9.0.107, which fixes the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: https://lists.apache.org/thread/gxgh65004f25y8519coth6w7vchww030; http://www.openwall.com/lists/oss-security/2025/07/10/11; https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html
CVE: CVE-2025-52473
Published: 2025-07-10
Description: liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Multiple secret-dependent branches have been identified in the reference implementation of the HQC key encapsulation mechanism when it is compiled with Clang for optimization levels above -O0 (-O1, -O2, etc). A proof-of-concept local attack exploits this secret-dependent information to recover the entire secret key. This vulnerability is fixed in 0.14.0.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://github.com/open-quantum-safe/liboqs/commit/4215362acbf69b88fe1777c4c052f154e29f9897; https://github.com/open-quantum-safe/liboqs/security/advisories/GHSA-qq3m-rq9v-jfgm
CVE: CVE-2025-52520
Published: 2025-07-10
Description: For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42, from 9.0.0.M1 through 9.0.106.
The following versions were EOL at the time the CVE was created but are 
known to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions 
may also be affected.


Users are recommended to upgrade to version 11.0.9, 10.1.43 or 9.0.107, which fix the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://lists.apache.org/thread/trqq01bbxw6c92zx69kx2mw2qgmfy0o5; http://www.openwall.com/lists/oss-security/2025/07/10/12; https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html
CVE: CVE-2025-52521
Published: 2025-07-10
Description: Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.
CVSS Score: 7.8 (HIGH)
CWE: CWE-64
References: https://helpcenter.trendmicro.com/en-us/article/tmka-18876; https://www.zerodayinitiative.com/advisories/ZDI-25-585/
CVE: CVE-2025-52837
Published: 2025-07-10
Description: Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow an attacker the opportunity to abuse symbolic links and other methods to delete any file/folder and achieve privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-64, CWE-59
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-12946; https://www.zerodayinitiative.com/advisories/ZDI-25-586/
CVE: CVE-2025-53378
Published: 2025-07-10
Description: A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations.

Also note: this vulnerability only affected the SaaS client version of WFBSS only, meaning the on-premise version of Worry-Free Business Security was not affected, and this issue was addressed in a WFBSS monthly maintenance update. Therefore no other customer action is required to mitigate if the WFBSS agents are on the regular SaaS maintenance deployment schedule and this disclosure is for informational purposes only.
CVSS Score: 7.6 (HIGH)
CWE: CWE-306
References: https://success.trendmicro.com/en-US/solution/KA-0019936
CVE: CVE-2025-53503
Published: 2025-07-10
Description: Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own.
CVSS Score: 7.8 (HIGH)
CWE: CWE-64
References: https://helpcenter.trendmicro.com/en-us/article/tmka-12951
CVE: CVE-2025-53542
Published: 2025-07-10
Description: Headlamp is an extensible Kubernetes web UI. A command injection vulnerability was discovered in the codeSign.js script used in the macOS packaging workflow of the Kubernetes Headlamp project. This issue arises due to the improper use of Node.js's execSync() function with unsanitized input derived from environment variables, which can be influenced by an attacker. The variables ${teamID}, ${entitlementsPath}, and ${config.app} are dynamically derived from the environment or application config and passed directly to the shell command without proper escaping or argument separation. This exposes the system to command injection if any of the values contain malicious input. This vulnerability is fixed in 0.31.1.
CVSS Score: 7.7 (HIGH)
CWE: CWE-78, CWE-88
References: https://advisory.zerodaysec.org/advisory/kubernetes-headlamp-code-signing; https://github.com/kubernetes-sigs/headlamp/commit/5bc0a9dd87acdf1e04be14619acde687eefa35fb; https://github.com/kubernetes-sigs/headlamp/pull/3377
CVE: CVE-2025-53549
Published: 2025-07-10
Description: The Matrix Rust SDK is a collection of libraries that make it easier to build Matrix clients in Rust. An SQL injection vulnerability in the EventCache::find_event_with_relations method of matrix-sdk 0.11 and 0.12 allows malicious room members to execute arbitrary SQL commands in Matrix clients that directly pass relation types provided by those room members into this method, when used with the default sqlite-based store backend. Exploitation is unlikely, as no known clients currently use the API in this manner. This vulnerability is fixed in 0.13.
CWE: CWE-89
References: https://github.com/matrix-org/matrix-rust-sdk/pull/4849; https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-275g-g844-73jh
CVE: CVE-2025-53625
Published: 2025-07-10
Description: The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. Several #dpl parameters can leak usernames that have been hidden using revision deletion, suppression, or the hideuser block flag. The vulnerability is fixed in 3.6.4.
CWE: CWE-359
References: https://github.com/Universal-Omega/DynamicPageList3/commit/a3dae0c89fb4214390c29ceffa23bbe2099986d6; https://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-7pgw-q3qp-6pgq; https://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-7pgw-q3qp-6pgq
CVE: CVE-2025-53626
Published: 2025-07-10
Description: pdfme is a TypeScript-based PDF generator and React-based UI. The expression evaluation feature in pdfme 5.2.0 to 5.4.0 contains critical vulnerabilities allowing sandbox escape leading to XSS and prototype pollution attacks. This vulnerability is fixed in 5.4.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-94, CWE-1321
References: https://github.com/pdfme/pdfme/commit/0dd54739acff2c249ed68c001a896bee38f0fd85; https://github.com/pdfme/pdfme/security/advisories/GHSA-54xv-94qv-2gfg; https://github.com/pdfme/pdfme/security/advisories/GHSA-54xv-94qv-2gfg
CVE: CVE-2025-53709
Published: 2025-07-10
Description: Secure-upload is a data submission service that validates single-use tokens when accepting submissions to channels. The service only installed on a small number of environments.

Under specific circumstances, privileged users of secure-upload could have selected email templates not necessarily created for their enrollment when sending data upload requests.
Authenticated and privileged users of one enrollment could have abused an endpoint to redirect existing submission channels to a dataset they control.
An endpoint handling domain validation allowed unauthenticated users to enumerate existing enrollments.
Finally, other endpoints allowed enumerating if a resource with a known RID exists across enrollments.

The affected service has been patched with version 0.815.0 and automatically deployed to all Apollo-managed Foundry instances.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-285
References: https://cwe.mitre.org/data/definitions/285.html
CVE: CVE-2025-7411
Published: 2025-07-10
Description: A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /success.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/rom4j/cve/issues/18; https://vuldb.com/?ctiid.315871
CVE: CVE-2025-2520
Published: 2025-07-10
Description: The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer (EPA) communications. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which results in a dereferencing of an uninitialized pointer leading to a denial of service.



Honeywell recommends updating to the most recent version of 

Honeywell Experion PKS: 520.2 TCU9 HF1and 530.1 TCU3 HF1. The affected Experion PKS products are 

C300 PCNT02, EHB, EHPM, ELMM, Classic ENIM, ETN, FIM4, FIM8, PGM, and RFIM.  The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-457
References: https://process.honeywell.com/
CVE: CVE-2025-34093
Published: 2025-07-10
Description: An authenticated command injection vulnerability exists in the Polycom HDX Series command shell interface accessible over Telnet. The lan traceroute command in the devcmds console accepts unsanitized input, allowing attackers to execute arbitrary system commands. By injecting shell metacharacters through the traceroute interface, an attacker can achieve remote code execution under the context of the root user. This flaw affects systems where Telnet access is enabled and either unauthenticated access is allowed or credentials are known.
CWE: CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/misc/polycom_hdx_traceroute_exec.rb; https://staaldraad.github.io/2017/11/12/polycom-hdx-rce/; https://vulncheck.com/advisories/polycom-hdx-series-telnet-rce
CVE: CVE-2025-34095
Published: 2025-07-10
Description: An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.execute() code, which is then persisted on disk and triggered via a subsequent GET request to examples/manage.lsp. This allows remote command execution on the underlying operating system, impacting both Windows and Unix-based deployments.
CWE: CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/makoserver_cmd_exec.rb; https://vulncheck/advisories/mako-server-rce; https://www.exploit-db.com/exploits/43132
CVE: CVE-2025-34096
Published: 2025-07-10
Description: A stack-based buffer overflow vulnerability exists in Easy File Sharing HTTP Server version 7.2. The flaw is triggered when a crafted POST request is sent to the /sendemail.ghp endpoint containing an overly long Email parameter. The application fails to properly validate the length of this field, resulting in a memory corruption condition. An unauthenticated remote attacker can exploit this to execute arbitrary code with the privileges of the server process.
CWE: CWE-119
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/easyfilesharing_post.rb; https://vulncheck/advisories/easy-file-sharing-http-server-buffer-overflow; https://www.exploit-db.com/exploits/42186
CVE: CVE-2025-34097
Published: 2025-07-10
Description: An unrestricted file upload vulnerability exists in ProcessMaker versions prior to 3.5.4 due to improper handling of uploaded plugin archives. An attacker with administrative privileges can upload a malicious .tar plugin file containing arbitrary PHP code. Upon installation, the plugin’s install() method is invoked, resulting in execution of attacker-supplied PHP code on the server with the privileges of the web server user. This vulnerability can be chained with CVE-2022-38577 — a privilege escalation flaw in the user profile page — to achieve full remote code execution from a low-privileged account.
CWE: CWE-434
References: https://process-maker-authenticated-plugin-upload-rce; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/processmaker_plugin_upload.rb; https://vulncheck.com/advisories/process-maker-authenticated-plugin-upload-rce
CVE: CVE-2025-34098
Published: 2025-07-10
Description: A path traversal vulnerability exists in Riverbed SteelHead VCX appliances (confirmed in VCX255U 9.6.0a) due to improper input validation in the log filtering functionality exposed via the management web interface. An authenticated attacker can exploit this flaw by submitting crafted filter expressions to the log_filter endpoint using the filterStr parameter. This input is processed by a backend parser that permits execution of file expansion syntax, allowing the attacker to retrieve arbitrary system files via the log viewing interface.
CWE: CWE-200
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/riverbed_steelhead_vcx_file_read.rb; https://vulncheck.com/advisories/riverbed-steel-head-vcx-authenticated-arbitrary-file-read; https://www.exploit-db.com/exploits/42101
CVE: CVE-2025-34099
Published: 2025-07-10
Description: An unauthenticated command injection vulnerability exists in VICIdial versions 2.9 RC1 through 2.13 RC1, within the vicidial_sales_viewer.php component when password encryption is enabled (a non-default configuration). The application improperly passes the HTTP Basic Authentication password directly to a call to exec() without adequate sanitation. This allows remote attackers to inject and execute arbitrary operating system commands as the web server user. NOTE: This vulnerability was mitigated in 2017.
CWE: CWE-20, CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/vicidial_user_authorization_unauth_cmd_exec.rb; https://vulncheck.com/advisories/vicidial-unauth-command-injection; https://www.exploit-db.com/exploits/42370
CVE: CVE-2025-34100
Published: 2025-07-10
Description: An unrestricted file upload vulnerability exists in BuilderEngine 3.5.0 via the integration of the elFinder 2.0 file manager and its use of the jQuery File Upload plugin. The plugin fails to properly validate or restrict file types or locations during upload operations, allowing an attacker to upload a malicious .php file and subsequently execute arbitrary PHP code on the server under the context of the web server process. While the root vulnerability lies within the jQuery File Upload component, BuilderEngine’s improper integration and lack of access controls expose this functionality to unauthenticated users, resulting in full remote code execution.
CWE: CWE-20, CWE-306, CWE-434
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/builderengine_upload_exec.rb; https://support.alertlogic.com/hc/en-us/articles/[PII_REDACTED]3-BuilderEngine-Content-Management-System-CMS-elFinder-2-0-Arbitrary-File-Upload; https://vulncheck.com/advisories/builder-engine-unauthenticated-arbitrary-file-upload
CVE: CVE-2025-34101
Published: 2025-07-10
Description: An unauthenticated command injection vulnerability exists in Serviio Media Server versions 1.4 through 1.8 on Windows, in the /rest/action API endpoint exposed by the console component (default port 23423). The checkStreamUrl method accepts a VIDEO parameter that is passed unsanitized to a call to cmd.exe, enabling arbitrary command execution under the privileges of the web server. No authentication is required to exploit this issue, as the REST API is exposed by default and lacks access controls.
CWE: CWE-20, CWE-78, CWE-306
References: https://fortiguard.fortinet.com/encyclopedia/ips/44042; https://packetstorm.news/files/id/142387; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/serviio_checkstreamurl_cmd_exec.rb
CVE: CVE-2025-34102
Published: 2025-07-10
Description: A remote code execution vulnerability exists in CryptoLog (PHP version, discontinued since 2009) due to a chained exploitation of SQL injection and command injection vulnerabilities. An unauthenticated attacker can gain shell access as the web server user by first exploiting a SQL injection flaw in login.php to bypass authentication, followed by command injection in logshares_ajax.php to execute arbitrary operating system commands.


The login bypass is achieved by submitting crafted SQL via the user POST parameter. Once authenticated, the attacker can abuse the lsid POST parameter in the logshares_ajax.php endpoint to inject and execute a command using $(...) syntax, resulting in code execution under the web context.


This exploitation path does not exist in the ASP.NET version of CryptoLog released since 2009.
CWE: CWE-20, CWE-78, CWE-89, CWE-306
References: https://pentest.blog/advisory-cryptolog-unauthenticated-remote-code-execution/; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/crypttech_cryptolog_login_exec.rb; https://vulncheck/advisories/cryptolog-unauthenticated-rce
CVE: CVE-2025-45662
Published: 2025-07-10
Description: A cross-site scripting (XSS) vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/J4cky1028/vulnerability-research/tree/main/CVE-2025-45662; https://github.com/shinovon/mpgram-web; https://mp.nnchan.ru/login.php
CVE: CVE-2025-53506
Published: 2025-07-10
Description: Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that reduces the maximum permitted concurrent streams.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42, from 9.0.0.M1 through 9.0.106.
The following versions were EOL at the time the CVE was created but are 
known to be affected: 8.5.0 through 8.5.100. Other EOL versions may also be affected.


Users are recommended to upgrade to version 11.0.9, 10.1.43 or 9.0.107, which fix the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://lists.apache.org/thread/p09775q0rd185m6zz98krg0fp45j8kr0; http://www.openwall.com/lists/oss-security/2025/07/10/13; https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html