deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-20202
Published: 2025-05-07
Description: A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device.
 This vulnerability is due to insufficient input validation of access point (AP) Cisco Discovery Protocol (CDP) neighbor reports when they are processed by the wireless controller. An attacker could exploit this vulnerability by sending a crafted CDP packet to an AP. A successful exploit could allow the attacker to cause an unexpected reload of the wireless controller that is managing the AP, resulting in a DoS condition that affects the wireless network.
CVSS Score: 7.4 (HIGH)
CWE: CWE-805
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-cdp-dos-fpeks9K
CVE: CVE-2025-20210
Published: 2025-05-07
Description: A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings.

This vulnerability is due to the lack of authentication in an API endpoint. An attacker could exploit this vulnerability by sending a request to the affected API of a Catalyst Center device. A successful exploit could allow the attacker to view or modify the outgoing proxy configuration, which could disrupt internet traffic from Cisco Catalyst Center or may allow the attacker to intercept outbound internet traffic.
CVSS Score: 7.3 (HIGH)
CWE: CWE-306
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-api-nBPZcJCM
CVE: CVE-2025-20213
Published: 2025-05-07
Description: A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnerability, the attacker must have valid read-only credentials with CLI access on the affected system.

This vulnerability is due to improper access controls on files that are on the local file system. An attacker could exploit this vulnerability by running a series of crafted commands on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device and gain privileges of the root user. To exploit this vulnerability, an attacker would need to have CLI access as a low-privilege user.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-78
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-fileoverwrite-Uc9tXWH
CVE: CVE-2025-20214
Published: 2025-05-07
Description: A vulnerability in the Network Configuration Access Control Module (NACM) of Cisco IOS XE Software could allow an authenticated, remote attacker to obtain unauthorized read access to configuration or operational data.
 This vulnerability exists because a subtle change in inner API call behavior causes results to be filtered incorrectly. An attacker could exploit this vulnerability by using either NETCONF, RESTCONF, or gRPC Network Management Interface (gNMI) protocols and query data on paths that may have been denied by the NACM configuration. A successful exploit could allow the attacker to access data that should have been restricted according to the NACM configuration.
 Note: This vulnerability requires that the attacker obtain the credentials from a valid user with privileges lower than 15, and that NACM was configured to provide restricted read access for that user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-netconf-nacm-bypass-TGZV9pmQ
CVE: CVE-2025-20216
Published: 2025-05-07
Description: A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user.

This vulnerability is due to improper sanitization of input to the web interface. An attacker could exploit this vulnerability by convincing an authenticated user to click a malicious link. A successful exploit could allow the attacker to inject HTML into the browser of an authenticated Cisco Catalyst SD-WAN Manager user.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-74
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-html-inj-GxVtK6zj
CVE: CVE-2025-20221
Published: 2025-05-07
Description: A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4 traffic filters. 
 This vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by sending a crafted packet to the affected device. A successful exploit could allow the attacker to bypass the Layer 3 and Layer 4 traffic filters and inject a crafted packet into the network.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-bypass-HHUVujdn
CVE: CVE-2025-20223
Published: 2025-05-07
Description: A vulnerability in Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to read and modify data in a repository that belongs to an internal service of an affected device.
 This vulnerability is due to insufficient enforcement of access control on HTTP requests. An attacker could exploit this vulnerability by submitting a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read and modify data that is handled by an internal service on the affected device.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-284
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-insec-acc-mtt8EhEb
CVE: CVE-2025-32819
Published: 2025-05-07
Description: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.
CVSS Score: 8.8 (HIGH)
CWE: CWE-552
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0011; https://old.rapid7.com/blog/post/2025/05/07/multiple-vulnerabilities-in-sonicwall-sma-100-series-2025/
CVE: CVE-2025-32820
Published: 2025-05-07
Description: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0011
CVE: CVE-2025-32821
Published: 2025-05-07
Description: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0011
CVE: CVE-2025-46824
Published: 2025-05-07
Description: The Discourse Code Review Plugin allows users to review GitHub commits on Discourse. Prior to commit eed3a80, an attacker can execute arbitrary JavaScript on users' browsers by posting links to malicious GitHub commits. This problem is patched in commit eed3a80 of the discourse-code-review plugin. As a workaround, one may disable the plugin.
CVSS Score: 3.1 (LOW)
CWE: CWE-79
References: https://github.com/discourse/discourse-code-review/commit/eed3a801f8fee217fe782212d8950eb1bd236e43; https://github.com/discourse/discourse-code-review/security/advisories/GHSA-358v-cwvc-gxh5; https://www.vicarius.io/vsociety/posts/cve-2025-46824-detect-discourse-plugin-vulnerability
CVE: CVE-2025-46828
Published: 2025-05-07
Description: WeGIA is a web manager for charitable institutions.  An unauthenticated SQL Injection vulnerability was identified in versions up to and including 3.3.0 in the endpoint `/html/socio/sistema/get_socios.php`, specifically in the query parameter. This issue allows attackers to inject and execute arbitrary SQL statements against the application's underlying database. As a result, it may lead to data exfiltration, authentication bypass, or complete database compromise. Version 3.3.1 fixes the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/LabRedesCefetRJ/WeGIA/commit/214dab59509bd3637f94adf381298c12da4ff80f; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-5qw5-q55h-6qg7
CVE: CVE-2025-47203
Published: 2025-05-07
Description: dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-78
References: https://github.com/mkj/dropbear/blob/master/CHANGES; https://github.com/mkj/dropbear/blob/master/src/cli-main.c; http://www.openwall.com/lists/oss-security/2025/05/09/4
CVE: CVE-2025-47423
Published: 2025-05-07
Description: Personal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/_test.php, as demonstrated by reading the server's private SSL key in cleartext.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-24
References: https://github.com/haluka92/CVE-2025-47423; https://pwsdashboard.com/
CVE: CVE-2025-26168
Published: 2025-05-07
Description: IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, can be overwritten.
CVSS Score: 8.1 (HIGH)
CWE: CWE-732
References: https://ixon-cloud.my.salesforce.com/sfc/p/#1t000000vlSF/a/TX000000DQmH/WRGwuYg2iMsKX6NAIK3MygCUOlg0SPQ..YvGWrwfNeM; https://support.ixon.cloud/s/article/VPN-Client-installation-and-uninstallation
CVE: CVE-2025-26169
Published: 2025-05-07
Description: IXON VPN Client before 1.4.4 on Windows allows Local Privilege Escalation to SYSTEM because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, can be overwritten.
CVSS Score: 8.1 (HIGH)
CWE: CWE-732
References: https://ixon-cloud.my.salesforce.com/sfc/p/#1t000000vlSF/a/TX000000DQmH/WRGwuYg2iMsKX6NAIK3MygCUOlg0SPQ..YvGWrwfNeM; https://support.ixon.cloud/s/article/VPN-Client-installation-and-uninstallation
CVE: CVE-2025-29746
Published: 2025-05-07
Description: Cross Site Scripting vulnerability in Koillection v.1.6.10 allows a remote attacker to escalate privileges via the collection, Wishlist and album components
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/unklerunkle/73e2ab58d1a5b9129be5de55765ea4fe; https://github.com/benjaminjonard/koillection/issues/1329; https://github.com/benjaminjonard/koillection/issues/1329
CVE: CVE-2025-30147
Published: 2025-05-07
Description: Besu Native contains scripts and tooling that is used to build and package the native libraries used by the Ethereum client Hyperledger Besu. Besu 24.7.1 through 25.2.2, corresponding to besu-native versions 0.9.0 through 1.2.1, have a potential consensus bug for the precompiles ALTBN128_ADD (0x06), ALTBN128_MUL (0x07), and ALTBN128_PAIRING (0x08). These precompiles were reimplemented in besu-native using gnark-crypto's bn254 implementation, as the former implementation used a library which was no longer maintained and not sufficiently performant. The new gnark implementation was initially added in version 0.9.0 of besu-native but was not utilized by Besu until version 0.9.2 in Besu 24.7.1. The issue is that there are EC points which may be crafted which are in the correct subgroup but are not on the curve and the besu-native gnark implementation was relying on subgroup checks to perform point-on-curve checks as well. The version of gnark-crypto used at the time did not do this check when performing subgroup checks. The result is that it was possible for Besu to give an incorrect result and fall out of consensus when executing one of these precompiles against a specially crafted input point. Additionally, homogenous Besu-only networks can potentially enshrine invalid state which would be incorrect and difficult to process with patched versions of besu which handle these calls correctly. The underlying defect has been patched in besu-native release 1.3.0. The fixed version of Besu is version 25.3.0. As a workaround for versions of Besu with the problem, the native precompile for altbn128 may be disabled in favor of the pure-java implementation. The pure java implementation is significantly slower, but does not have this consensus issue.
CWE: CWE-325
References: https://github.com/hyperledger/besu-native/security/advisories/GHSA-jcp8-gh74-97hq; https://github.com/hyperledger/besu/blob/main/besu/src/main/java/org/hyperledger/besu/cli/options/NativeLibraryOptions.java#L31-L38
CVE: CVE-2025-3272
Published: 2025-05-07
Description: Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. 

The vulnerability could allow authenticated users to change their password without providing their old password.

This issue affects Operations Bridge Manager: 24.2, 24.4.
CWE: CWE-863
References: https://portal.microfocus.com/s/article/KM000040405
CVE: CVE-2025-3476
Published: 2025-05-07
Description: Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege escalation by authenticated users.This issue affects Operations Bridge Manager: 2023.05, 23.4, 24.2, 24.4.
CWE: CWE-863
References: https://portal.microfocus.com/s/article/KM000040406?language=en_US
CVE: CVE-2025-45388
Published: 2025-05-07
Description: Wagtail CMS 6.4.1 is vulnerable to a Stored Cross-Site Scripting (XSS) in the document upload functionality. Attackers can inject malicious code inside a PDF file. When a user clicks the document in the CMS interface, the payload executes. NOTE: this is disputed by the Supplier because "It has been well documented that when serving uploaded files using a method outside of Wagtail (which admittedly is the default), it requires additional configuration from the developer, because Wagtail cannot control how these are served. ... For example, if a Wagtail instance is configured to upload files into AWS S3, Wagtail cannot control the permissions on how they're served, nor any headers used when serving them (a limitation of S3)."
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.wagtail.org/en/stable/deployment/under_the_hood.html#documents; https://github.com/echoBRT/Wagtail-CMS-XSS/; https://github.com/wagtail/wagtail/discussions/12617
CVE: CVE-2025-45514
Published: 2025-05-07
Description: Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.frmL7ImForm.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121
References: https://github.com/Eu21ka/cve_report/blob/master/The_router_Tenda_FH451_V1.0.0.9_of_Shenzhen_Jixiang_Tenda_Technology_Co.%2C_Ltd._has_a_stack_overflow_vulnerability_2.md
CVE: CVE-2025-31177
Published: 2025-05-07
Description: gnuplot is affected by a heap buffer overflow at function utf8_copy_one.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-122
References: https://access.redhat.com/security/cve/CVE-2025-31177; https://bugzilla.redhat.com/show_bug.cgi?id=2355342
CVE: CVE-2025-3925
Published: 2025-05-07
Description: BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or 
series 5 prior to v9.0.166 contain an execution with unnecessary 
privileges vulnerability, allowing for privilege escalation on the 
device once code execution has been obtained.
CVSS Score: 7.8 (HIGH)
CWE: CWE-250
References: https://www.brightsign.biz/resources/software-downloads/; https://www.cisa.gov/news-events/ics-advisories/icsa-25-126-03
CVE: CVE-2025-4043
Published: 2025-05-07
Description: An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-1274, CWE-1274
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-126-02; https://www.milesight.com/iot/resources/download-center/#firmware-ug65
CVE: CVE-2023-7303
Published: 2025-05-07
Description: A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects the function process_request of the file q2apro-onsitenotifications-page.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.8 is able to address this issue. The patch is named 0ca85ca02f8aceb661e9b71fd229c45d388ea5b5. It is recommended to upgrade the affected component.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/q2apro/q2apro-on-site-notifications/commit/0ca85ca02f8aceb661e9b71fd229c45d388ea5b5; https://github.com/q2apro/q2apro-on-site-notifications/issues/43; https://github.com/q2apro/q2apro-on-site-notifications/issues/43#issuecomment[PII_REDACTED]
CVE: CVE-2024-11953
Published: 2025-05-07
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-31644
Published: 2025-05-07
Description: When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 8.7 (HIGH)
CWE: CWE-77
References: https://my.f5.com/manage/s/article/K000148591
CVE: CVE-2025-35995
Published: 2025-05-07
Description: When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://my.f5.com/manage/s/article/K000149952
CVE: CVE-2025-36504
Published: 2025-05-07
Description: When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://my.f5.com/manage/s/article/K000140919
CVE: CVE-2025-36525
Published: 2025-05-07
Description: When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate. 


Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://my.f5.com/manage/s/article/K000150598
CVE: CVE-2025-36546
Published: 2025-05-07
Description: On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-based authentication is still allowed. For an attacker to exploit this vulnerability they must obtain the root user's SSH private key.  

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: https://my.f5.com/manage/s/article/K000140574
CVE: CVE-2025-36557
Published: 2025-05-07
Description: When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://my.f5.com/manage/s/article/K000139571
CVE: CVE-2025-41399
Published: 2025-05-07
Description: When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://my.f5.com/manage/s/article/K000137709
CVE: CVE-2025-41414
Published: 2025-05-07
Description: When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate. 

 


Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://my.f5.com/manage/s/article/K000140968
CVE: CVE-2025-41431
Published: 2025-05-07
Description: When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in a traffic group. 


Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://my.f5.com/manage/s/article/K000150668
CVE: CVE-2025-41433
Published: 2025-05-07
Description: When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.

 


Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://my.f5.com/manage/s/article/K000140937
CVE: CVE-2025-43878
Published: 2025-05-07
Description: When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system. 



Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-149, CWE-1286
References: https://my.f5.com/manage/s/article/K000139502
CVE: CVE-2025-46265
Published: 2025-05-07
Description: On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://my.f5.com/manage/s/article/K000139503
CVE: CVE-2025-46821
Published: 2025-05-07
Description: Envoy is a cloud-native edge/middle/service proxy. Prior to versions 1.34.1, 1.33.3, 1.32.6, and 1.31.8, Envoy's URI template matcher incorrectly excludes the `*` character from a set of valid characters in the URI path. As a result URI path containing the `*` character will not match a URI template expressions. This can result in bypass of RBAC rules when configured using the `uri_template` permissions. This vulnerability is fixed in Envoy versions v1.34.1, v1.33.3, v1.32.6, v1.31.8. As a workaround, configure additional RBAC permissions using `url_path` with `safe_regex` expression.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-186
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-c7cm-838g-6g67