deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-50975
Published: 2025-08-26
Description: IPFire 2.29 web-based firewall interface (firewall.cgi) fails to sanitize several rule parameters such as PROT, SRC_PORT, TGT_PORT, dnatport, key, ruleremark, src_addr, std_net_tgt, and tgt_addr, allowing an authenticated administrator to inject persistent JavaScript. This stored XSS payload is executed whenever another admin views the firewall rules page, enabling session hijacking, unauthorized actions within the interface, or further internal pivoting. Exploitation requires only high-privilege GUI access, and the complexity of the attack is low.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/4rdr/proofs/blob/main/info/IPFire-2.29-Stored-XSS-via-Firewall.md; https://github.com/4rdr/proofs/blob/main/info/IPFire-2.29-Stored-XSS-via-Firewall.md
CVE: CVE-2025-9478
Published: 2025-08-26
Description: Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_26.html; https://issues.chromium.org/issues/437825940
CVE: CVE-2025-50971
Published: 2025-08-26
Description: Directory traversal vulnerability in AbanteCart version 1.4.2 allows unauthenticated attackers to gain access to sensitive system files via the template parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/4rdr/proofs/blob/main/info/abantecart_file_traversal_1.4.2_via_template_parameter.md
CVE: CVE-2025-52353
Published: 2025-08-26
Description: An arbitrary code execution vulnerability in Badaso CMS 2.9.11. The Media Manager allows authenticated users to upload files containing embedded PHP code via the file-upload endpoint, bypassing content-type validation. When such a file is accessed via its URL, the server executes the PHP payload, enabling an attacker to run arbitrary system commands and achieve full compromise of the underlying host. This has been demonstrated by embedding a backdoor within a PDF and renaming it with a .php extension.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/uasoft-indonesia/badaso; https://medium.com/@pat.sanitjairak/remote-code-execution-in-a-plain-view-0f86f183543d
CVE: CVE-2025-55443
Published: 2025-08-26
Description: Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT server connection details (IP/port) that are stored in plaintext within log files on the device's external storage. This allows attackers with access to these logs to: 1. Authenticate to the MDM web platform to execute administrative operations (device shutdown/factory reset/software installation); 2. Connect to the MQTT server to intercept/publish device data.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-312
References: https://gist.github.com/raiji1n/a2ce5dd46c312e3bd38b9b2446b95860
CVE: CVE-2024-35203
Published: 2025-08-26
Description: Mahara before 22.10.6, 23.04.6, and 24.04.1 allows cross-site scripting (XSS) via a file, with JavaScript code as part of its name, that is uploaded via the Mahara filebrowser system.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://git.mahara.org/catalyst-security/mahara-security/-/merge_requests/6; https://mahara.org/interaction/forum/topic.php?id=9519
CVE: CVE-2024-47192
Published: 2025-08-26
Description: An issue was discovered in Mahara 23.04.8 and 24.04.4. The use of a malicious export download URL can allow an attacker to download files that they do not have permission to download.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-494
References: https://mahara.org/interaction/forum/topic.php?id=9594; https://mahara.org/interaction/forum/view.php?id=43
CVE: CVE-2025-9492
Published: 2025-08-26
Description: A vulnerability was determined in Campcodes Online Water Billing System 1.0. This affects an unknown function of the file /addclient1.php. Executing manipulation of the argument lname can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Other parameters might be affected as well.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/skyrainoh/CVE/issues/9; https://vuldb.com/?ctiid.321473; https://vuldb.com/?id.321473
CVE: CVE-2023-21125
Published: 2025-08-26
Description: In btif_hh_hsdata_rpt_copy_cb of bta_hh.cc, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.0 (HIGH)
CWE: CWE-416
References: https://android.googlesource.com/platform/system/bt/+/e7b978841deb331ff5e5849388fa92ee4c40f979; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2024-49740
Published: 2025-08-26
Description: In multiple locations, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://android.googlesource.com/platform/frameworks/base/+/bcb1316835dc31f33f0c3b409ee847c389c09d2b; https://android.googlesource.com/platform/packages/services/Telephony/+/b1ab472f0f56146387d[PII_REDACTED]cb2525ad34c; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-0074
Published: 2025-08-26
Description: In process_service_attr_rsp of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/37bcf769c1aa8dfa8e5524858d47f6a80b765fa4; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-0075
Published: 2025-08-26
Description: In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5959f8bcf4efe924b0ba4dbcbfe83e602f0eb0ac; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-0078
Published: 2025-08-26
Description: In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-250
References: https://android.googlesource.com/platform/frameworks/native/+/c32d4defe0f4e5cad86437d6672de7a76caf1a79; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-0079
Published: 2025-08-26
Description: In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-250
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b1e6d8d1e393d246a0738c92747a0bef98e67a30; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-0080
Published: 2025-08-26
Description: In multiple locations, there is a possible way to overlay the installation confirmation dialog due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-250
References: https://android.googlesource.com/platform/frameworks/base/+/5916a3de10fa9ca6a9b31f489be1838c0a1613f4; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-0081
Published: 2025-08-26
Description: In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a crash due to uninitialized data. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-457
References: https://android.googlesource.com/platform/external/dng_sdk/+/7fc02c8d5af37c97b325dc2956f4a6117c145c2f; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-0082
Published: 2025-08-26
Description: In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-610
References: https://android.googlesource.com/platform/frameworks/base/+/7ba8c8f63f1b13b127c871749314a242ff022ae2; https://android.googlesource.com/platform/packages/services/Telecomm/+/685c2fc2f6b40bb2113db77da270c7b7220791c4; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-0083
Published: 2025-08-26
Description: In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-116
References: https://android.googlesource.com/platform/frameworks/base/+/7ba8c8f63f1b13b127c871749314a242ff022ae2; https://android.googlesource.com/platform/packages/services/Telecomm/+/685c2fc2f6b40bb2113db77da270c7b7220791c4; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-0084
Published: 2025-08-26
Description: In multiple locations, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support is enabled, with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/94c565214e3496fbaade9efed8be41d6425ba21e; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-0086
Published: 2025-08-26
Description: In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-862
References: https://android.googlesource.com/platform/frameworks/base/+/c1aa9e662464b8fa49765d53a82efa8e06bb176a; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-0092
Published: 2025-08-26
Description: In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-345, CWE-356
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/090ca53cc13c12e3763777a6a3c7367641e9808f; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-0093
Published: 2025-08-26
Description: In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/090ca53cc13c12e3763777a6a3c7367641e9808f; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-22403
Published: 2025-08-26
Description: In sdp_snd_service_search_req of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/37bcf769c1aa8dfa8e5524858d47f6a80b765fa4; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-22404
Published: 2025-08-26
Description: In avct_lcb_msg_ind of avct_lcb_act.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/806774b1cf641e0c0e7df8024e327febf23d7d7c; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-22405
Published: 2025-08-26
Description: In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/806774b1cf641e0c0e7df8024e327febf23d7d7c; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-22406
Published: 2025-08-26
Description: In bnepu_check_send_packet of bnep_utils.cc, there is a possible way to achieve code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/806774b1cf641e0c0e7df8024e327febf23d7d7c; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-22407
Published: 2025-08-26
Description: In hidd_check_config_done of hidd_conn.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/806774b1cf641e0c0e7df8024e327febf23d7d7c; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-22408
Published: 2025-08-26
Description: In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/806774b1cf641e0c0e7df8024e327febf23d7d7c; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-22409
Published: 2025-08-26
Description: In rfc_send_buf_uih of rfc_ts_frames.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/806774b1cf641e0c0e7df8024e327febf23d7d7c; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-22410
Published: 2025-08-26
Description: In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/806774b1cf641e0c0e7df8024e327febf23d7d7c; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-22411
Published: 2025-08-26
Description: In process_service_attr_rsp of sdp_discovery.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/806774b1cf641e0c0e7df8024e327febf23d7d7c; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-22412
Published: 2025-08-26
Description: In multiple functions of sdp_server.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/806774b1cf641e0c0e7df8024e327febf23d7d7c; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-22413
Published: 2025-08-26
Description: In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-703
References: https://android.googlesource.com/kernel/common/+/1a3366f0d3d9b94a8c025d9863edc3b427435c4c; https://android.googlesource.com/kernel/common/+/add3d68602a0c48ed2d5659f0cf26d869776ab35; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-26417
Published: 2025-08-26
Description: In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-610
References: https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/ed764e06106adef1cff5178c6df038fd054e7bec; https://source.android.com/security/bulletin/2025-03-01
CVE: CVE-2025-35112
Published: 2025-08-26
Description: Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-611
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-239-01.json; https://wiki.agiloft.com/display/HELP/What%27s+New%3A+CVE+Resolution; https://www.cve.org/CVERecord?id=CVE-2025-35112
CVE: CVE-2025-35113
Published: 2025-08-26
Description: Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a specially crafted payload. Users should upgrade to Agiloft Release 31.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1336
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-239-01.json; https://wiki.agiloft.com/display/HELP/What%27s+New%3A+CVE+Resolution; https://www.cve.org/CVERecord?id=CVE-2025-35113
CVE: CVE-2025-35114
Published: 2025-08-26
Description: Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one of the accounts and the credentials could be cracked offline. Users should upgrade to Agiloft Release 30.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1392
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-239-01.json; https://wiki.agiloft.com/display/HELP/What%27s+New%3A+CVE+Resolution; https://www.cve.org/CVERecord?id=CVE-2025-35114
CVE: CVE-2025-35115
Published: 2025-08-26
Description: Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the contents of the download URL. Users should upgrade to Agiloft Release 30.
CVSS Score: 8.1 (HIGH)
CWE: CWE-494
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-239-01.json; https://wiki.agiloft.com/display/HELP/What%27s+New%3A+CVE+Resolution; https://www.cve.org/CVERecord?id=CVE-2025-35115
CVE: CVE-2025-57820
Published: 2025-08-26
Description: Svelte devalue is a utility library. Prior to version 5.3.2, a string passed to devalue.parse could represent an object with a __proto__ property and devalue.parse does not check that an index is numeric. This could result in assigning prototypes to objects and properties, leading to prototype pollution. This issue has been fixed in version 5.3.2
CWE: CWE-1321
References: https://github.com/sveltejs/devalue/commit/0623a47c9555b639c03ff1baea82951b2d9d1132; https://github.com/sveltejs/devalue/security/advisories/GHSA-vj54-72f3-p5jv
CVE: CVE-2025-9277
Published: 2025-08-26
Description: The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the broken preg_replace expression in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/siteseo/tags/1.2.6/main/advanced.php#L80; https://www.wordfence.com/threat-intel/vulnerabilities/id/b8c7cca2-94d2-4a86-bc69-d7b2b0f068ba?source=cve
CVE: CVE-2025-8490
Published: 2025-08-27
Description: The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Import in all versions up to, and including, 7.97 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/all-in-one-wp-migration/tags/7.97/lib/controller/class-ai1wm-import-controller.php#L144; https://www.wordfence.com/threat-intel/vulnerabilities/id/85930893-d415-4131-bcda-54a20644eddc?source=cve
CVE: CVE-2025-7732
Published: 2025-08-27
Description: The Lazy Load for Videos plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its lazy‑loading handlers in all versions up to, and including, 2.18.7 due to insufficient input sanitization and output escaping. The plugin’s JavaScript registration handlers read the client‑supplied 'data-video-title' and 'href' attributes, decode HTML entities by default, and pass them directly into DOM sinks without any escaping or validation. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/lazy-load-for-videos/trunk/public/js/lazyload-vimeo.js; https://plugins.trac.wordpress.org/browser/lazy-load-for-videos/trunk/public/js/lazyload-youtube.js; https://plugins.trac.wordpress.org/changeset/3348894