deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-3220
Published: 2025-02-14
Description: There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the incorrect file type.

This defect is caused by the default locations of Linux and macOS platforms (such as “/etc/mime.types”) also being used on Windows, where they are user-writable locations (“C:\etc\mime.types”).

To work-around this issue a user can call mimetypes.init() with an empty list (“[]”) on Windows platforms to avoid using the default list of known file locations.
CWE: CWE-426
References: https://mail.python.org/archives/list/security-announce@python.org/thread/CDXW34ND2LSAOYAR5N6UNONP4ZBX4D6R/; http://www.openwall.com/lists/oss-security/2025/02/14/8; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-56463
Published: 2025-02-14
Description: IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7183251
CVE: CVE-2024-57790
Published: 2025-02-14
Description: IXON B.V. IXrouter IX2400 (Industrial Edge Gateway) v3.0 was discovered to contain hardcoded root credentials stored in the non-volatile flash memory. This vulnerability allows physically proximate attackers to gain root access via UART or SSH.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-798
References: https://github.com/rick-cen/vulnerability-research/tree/main/CVE-2024-57790
CVE: CVE-2024-8893
Published: 2025-02-14
Description: Use of Hard-coded Credentials vulnerability in GoodWe Technologies Co., Ltd. GW1500‑XS allows anyone in physical proximity to the device to fully access the web interface of the inverter via Wi‑Fi.This issue affects GW1500‑XS: 1.1.2.1.
CVSS Score: 7.3 (HIGH)
CWE: CWE-798
References: https://os-s.net/publications/advisories/CVE-2024-8893.pdf
CVE: CVE-2025-25204
Published: 2025-02-14
Description: `gh` is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool `gh attestation verify` causes it to return a zero exit status when no attestations are present. This behavior is incorrect: When no attestations are present, `gh attestation verify` should return a non-zero exit status code, thereby signaling verification failure. An attacker can abuse this flaw to, for example, deploy malicious artifacts in any system that uses `gh attestation verify`'s exit codes to gatekeep deployments. Users are advised to update `gh` to patched version `v2.67.0` as soon as possible.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-390
References: https://github.com/cli/cli/issues/10418; https://github.com/cli/cli/pull/10421; https://github.com/cli/cli/security/advisories/GHSA-fgw4-v983-mgp8
CVE: CVE-2025-25206
Published: 2025-02-14
Description: eLabFTW is an open source electronic lab notebook for research labs. Prior to version 5.1.15, an incorrect input validation could allow an authenticated user to read sensitive information, including login token or other content stored in the database. This could lead to privilege escalation if cookies are enabled (default setting). Users must upgrade to eLabFTW version 5.1.15 to receive a fix. No known workarounds are available.
CVSS Score: 8.3 (HIGH)
CWE: CWE-89
References: https://github.com/elabftw/elabftw/releases/tag/5.1.15; https://github.com/elabftw/elabftw/security/advisories/GHSA-qffc-rfjh-77gg
CVE: CVE-2025-25295
Published: 2025-02-14
Description: Label Studio is an open source data labeling tool. A path traversal vulnerability in Label Studio SDK versions prior to 1.0.10 allows unauthorized file access outside the intended directory structure. The flaw exists in the VOC, COCO and YOLO export functionalities. These functions invoke a `download` function on the `label-studio-sdk` python package, which fails to validate file paths when processing image references during task exports. By creating tasks with path traversal sequences in the image field, an attacker can force the application to read files from arbitrary server filesystem locations when exporting projects in any of the mentioned formats. This is authentication-required vulnerability allowing arbitrary file reads from the server filesystem. It may lead to potential exposure of sensitive information like configuration files, credentials, and confidential data. Label Studio versions before 1.16.0 specified SDK versions prior to 1.0.10 as dependencies, and the issue was confirmed in Label Studio version 1.13.2.dev0; therefore, Label Studio users should upgrade to 1.16.0 or newer to mitigate it.
CWE: CWE-22, CWE-26
References: https://github.com/HumanSignal/label-studio-sdk/commit/4a9715c6b0b619371e89c09ea8d1c86ce5c880df; https://github.com/HumanSignal/label-studio/security/advisories/GHSA-rgv9-w7jp-m23g
CVE: CVE-2025-25988
Published: 2025-02-14
Description: Cross Site Scripting vulnerability in hooskcms v.1.8 allows a remote attacker to cause a denial of service via the custom Link title parameter and the Title parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/havok89/Hoosk/issues/67; https://github.com/havok89/Hoosk/issues/67
CVE: CVE-2025-25990
Published: 2025-02-14
Description: Cross Site Scripting vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/havok89/Hoosk/issues/69
CVE: CVE-2025-25991
Published: 2025-02-14
Description: SQL Injection vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php component.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-89
References: https://github.com/havok89/Hoosk/issues/68
CVE: CVE-2025-25992
Published: 2025-02-14
Description: SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquire_inout_item.php component.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-89
References: https://github.com/FeMiner/wms/issues/19
CVE: CVE-2025-25993
Published: 2025-02-14
Description: SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter "itemid."
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-89
References: https://github.com/FeMiner/wms/issues/21
CVE: CVE-2025-25994
Published: 2025-02-14
Description: SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/FeMiner/wms/issues/20
CVE: CVE-2025-25997
Published: 2025-02-14
Description: Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/FeMiner/wms/issues/22
CVE: CVE-2025-26156
Published: 2025-02-14
Description: A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/README.md; https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/README.md
CVE: CVE-2025-26157
Published: 2025-02-14
Description: A SQL Injection vulnerability was found in /bpms/index.php in Source Code and Project Beauty Parlour Management System V1.1, which allows remote attackers to execute arbitrary code via the name POST request parameter.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-89
References: https://github.com/rtnthakur/CVE/blob/main/others/README.md
CVE: CVE-2025-26158
Published: 2025-02-14
Description: A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the manage-employee.php page of Kashipara Online Attendance Management System V1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the department parameter.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-79
References: https://github.com/rtnthakur/CVE/blob/main/Kashipara/README.md
CVE: CVE-2025-26506
Published: 2025-02-14
Description: Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://support.hp.com/us-en/document/ish_1[PII_REDACTED]3793-16/hpsbpi04007
CVE: CVE-2025-26507
Published: 2025-02-14
Description: Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://support.hp.com/us-en/document/ish_1[PII_REDACTED]3793-16/hpsbpi04007
CVE: CVE-2025-26508
Published: 2025-02-14
Description: Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.hp.com/us-en/document/ish_1[PII_REDACTED]3793-16/hpsbpi04007
CVE: CVE-2025-0503
Published: 2025-02-14
Description: Mattermost versions 9.11.x <= 9.11.6 fail to filter out DMs from the deleted channels endpoint which allows an attacker to infer user IDs and other metadata from deleted DMs if someone had manually marked DMs as deleted in the database.
CVSS Score: 3.1 (LOW)
CWE: CWE-754
References: https://mattermost.com/security-updates
CVE: CVE-2025-25285
Published: 2025-02-14
Description: @octokit/endpoint turns REST API endpoints into generic request options. Starting in version 4.1.0 and prior to version 10.1.3, by crafting specific `options` parameters, the `endpoint.parse(options)` call can be triggered, leading to a regular expression denial-of-service (ReDoS) attack. This causes the program to hang and results in high CPU utilization. The issue occurs in the `parse` function within the `parse.ts` file of the npm package `@octokit/endpoint`. Version 10.1.3 contains a patch for the issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333
References: https://github.com/octokit/endpoint.js/blob/main/src/parse.ts; https://github.com/octokit/endpoint.js/commit/6c9c5be033c450d436efb37de41b6470c22f7db8; https://github.com/octokit/endpoint.js/security/advisories/GHSA-x4c5-c7rf-jjgv
CVE: CVE-2025-25288
Published: 2025-02-14
Description: @octokit/plugin-paginate-rest is the Octokit plugin to paginate REST API endpoint responses. For versions starting in 1.0.0 and prior to 11.4.1 of the npm package `@octokit/plugin-paginate-rest`, when calling `octokit.paginate.iterator()`, a specially crafted `octokit` instance—particularly with a malicious `link` parameter in the `headers` section of the `request`—can trigger a ReDoS attack. Version 11.4.1 contains a fix for the issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333
References: https://github.com/octokit/plugin-paginate-rest.js/blob/main/src/iterator.ts; https://github.com/octokit/plugin-paginate-rest.js/commit/bb6c4f945d8023902cf387391d2b[PII_REDACTED]ab; https://github.com/octokit/plugin-paginate-rest.js/security/advisories/GHSA-h5c3-5r3r-rr8q
CVE: CVE-2025-25289
Published: 2025-02-14
Description: @octokit/request-error is an error class for Octokit request errors. Starting in version 1.0.0 and prior to version 6.1.7, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the processing of HTTP request headers. By sending an authorization header containing an excessively long sequence of spaces followed by a newline and "@", an attacker can exploit inefficient regular expression processing, leading to excessive resource consumption. This can significantly degrade server performance or cause a denial-of-service (DoS) condition, impacting availability. Version 6.1.7 contains a fix for the issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333
References: https://github.com/octokit/request-error.js/blob/main/src/index.ts; https://github.com/octokit/request-error.js/commit/d558320874a4bc8d356babf1079e6f0056a59b9e; https://github.com/octokit/request-error.js/security/advisories/GHSA-xx4v-prfh-6cgc
CVE: CVE-2025-25290
Published: 2025-02-14
Description: @octokit/request sends parameterized requests to GitHub’s APIs with sensible defaults in browsers and Node. Starting in version 1.0.0 and prior to versions 9.2.1 and 8.4.1, the regular expression `/<([^>]+)>; rel="deprecation"/` used to match the `link` header in HTTP responses is vulnerable to a ReDoS (Regular Expression Denial of Service) attack. This vulnerability arises due to the unbounded nature of the regex's matching behavior, which can lead to catastrophic backtracking when processing specially crafted input. An attacker could exploit this flaw by sending a malicious `link` header, resulting in excessive CPU usage and potentially causing the server to become unresponsive, impacting service availability. Versions 9.2.1 and 8.4.1 fix the issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333
References: https://github.com/octokit/request.js/commit/34ff07ee86fc5c20865982d77391bc910ef19c68; https://github.com/octokit/request.js/commit/356411e3217019aa9fc8a68f4236af82490873c2; https://github.com/octokit/request.js/commit/6bb29ba92a52f7bf94469c3433707c682c17126c
CVE: CVE-2025-25296
Published: 2025-02-14
Description: Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's `/projects/upload-example` endpoint allows injection of arbitrary HTML through a `GET` request with an appropriately crafted `label_config` query parameter. By crafting a specially formatted XML label config with inline task data containing malicious HTML/JavaScript, an attacker can achieve Cross-Site Scripting (XSS). While the application has a Content Security Policy (CSP), it is only set in report-only mode, making it ineffective at preventing script execution. The vulnerability exists because the upload-example endpoint renders user-provided HTML content without proper sanitization on a GET request. This allows attackers to inject and execute arbitrary JavaScript in victims' browsers by getting them to visit a maliciously crafted URL. This is considered vulnerable because it enables attackers to execute JavaScript in victims' contexts, potentially allowing theft of sensitive data, session hijacking, or other malicious actions. Version 1.16.0 contains a patch for the issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/HumanSignal/label-studio/commit/8cf6958e1e27ef6a03ed287e674470975d340885; https://github.com/HumanSignal/label-studio/security/advisories/GHSA-wpq5-3366-mqw4
CVE: CVE-2025-25297
Published: 2025-02-14
Description: Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's S3 storage integration feature contains a Server-Side Request Forgery (SSRF) vulnerability in its endpoint configuration. When creating an S3 storage connection, the application allows users to specify a custom S3 endpoint URL via the s3_endpoint parameter. This endpoint URL is passed directly to the boto3 AWS SDK without proper validation or restrictions on the protocol or destination. The vulnerability allows an attacker to make the application send HTTP requests to arbitrary internal services by specifying them as the S3 endpoint. When the storage sync operation is triggered, the application attempts to make S3 API calls to the specified endpoint, effectively making HTTP requests to the target service and returning the response in error messages. This SSRF vulnerability enables attackers to bypass network segmentation and access internal services that should not be accessible from the external network. The vulnerability is particularly severe because error messages from failed requests contain the full response body, allowing data exfiltration from internal services. Version 1.16.0 contains a patch for the issue.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: https://github.com/HumanSignal/label-studio/commit/06a2b29c1208e1878ccae66e6b84c8b24598fa79; https://github.com/HumanSignal/label-studio/security/advisories/GHSA-m238-fmcw-wh58
CVE: CVE-2025-25304
Published: 2025-02-14
Description: Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to version 5.26.0 of vega and 5.4.2 of vega-selections, the `vlSelectionTuples` function can be used to call JavaScript functions, leading to cross-site scripting.`vlSelectionTuples` calls multiple functions that can be controlled by an attacker, including one call with an attacker-controlled argument. This can be used to call `Function()` with arbitrary JavaScript and the resulting function can be called with `vlSelectionTuples` or using a type coercion to call `toString` or `valueOf`. Version 5.26.0 of vega and 5.4.2 of vega-selections fix this issue.
CWE: CWE-79
References: https://github.com/vega/vega/blob/b45cf431cd6c0d0c0e1567f087f9b3b55bc236fa/packages/vega-selections/src/selectionTuples.js#L14; https://github.com/vega/vega/commit/9fb9ea07e27984394e463d286eb73944fa61411e; https://github.com/vega/vega/security/advisories/GHSA-mp7w-mhcv-673j
CVE: CVE-2022-26083
Published: 2025-02-14
Description: Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1204
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00667.html
CVE: CVE-2022-28693
Published: 2025-02-14
Description: Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-420
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00707.html
CVE: CVE-2024-31144
Published: 2025-02-14
Description: For a brief summary of Xapi terminology, see:

   https://xapi-project.github.io/xen-api/overview.html#object-model-overview 

Xapi contains functionality to backup and restore metadata about Virtual
Machines and Storage Repositories (SRs).

The metadata itself is stored in a Virtual Disk Image (VDI) inside an
SR.  This is used for two purposes; a general backup of metadata
(e.g. to recover from a host failure if the filer is still good), and
Portable SRs (e.g. using an external hard drive to move VMs to another
host).

Metadata is only restored as an explicit administrator action, but
occurs in cases where the host has no information about the SR, and must
locate the metadata VDI in order to retrieve the metadata.

The metadata VDI is located by searching (in UUID alphanumeric order)
each VDI, mounting it, and seeing if there is a suitable metadata file
present.  The first matching VDI is deemed to be the metadata VDI, and
is restored from.

In the general case, the content of VDIs are controlled by the VM owner,
and should not be trusted by the host administrator.

A malicious guest can manipulate its disk to appear to be a metadata
backup.

A guest cannot choose the UUIDs of its VDIs, but a guest with one disk
has a 50% chance of sorting ahead of the legitimate metadata backup.  A
guest with two disks has a 75% chance, etc.
CVSS Score: 3.8 (LOW)
CWE: CWE-829
References: https://xenbits.xen.org/xsa/advisory-459.html; http://www.openwall.com/lists/oss-security/2024/07/16/4; http://xenbits.xen.org/xsa/advisory-459.html
CVE: CVE-2025-0592
Published: 2025-02-14
Description: The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by manipulating the firmware file and uploading it to the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-924
References: https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF; https://sick.com/psirt; https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
CVE: CVE-2025-0593
Published: 2025-02-14
Description: The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by using lower-level functions to interact with the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF; https://sick.com/psirt; https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
CVE: CVE-2024-10405
Published: 2025-02-15
Description: Brocade SANnav before SANnav 2.3.1b 
enables weak TLS ciphers on ports 443 and 18082. In case of a successful
 exploit, an attacker can read Brocade SANnav data stream that includes 
monitored Brocade Fabric OS switches performance data, port status, 
zoning information, WWNs, IP Addresses, but no customer data, no 
personal data and no secrets or passwords, as it travels across the 
network.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-327
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25402
CVE: CVE-2024-4282
Published: 2025-02-15
Description: Brocade SANnav OVA before SANnav 2.3.1b enables SHA1 deprecated setting for SSH for port 22.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-327
References: https://support.broadcom.com/external/content/SecurityAdvisories/0/25400
CVE: CVE-2024-5461
Published: 2025-02-15
Description: Implementation of the Simple Network 
Management Protocol (SNMP) operating on the Brocade 6547 (FC5022) 
embedded switch blade, makes internal script calls to system.sh from 
within the SNMP binary. An authenticated attacker could perform command 
or parameter injection on SNMP operations that are only enabled on the 
Brocade 6547 (FC5022) embedded switch. This injection could allow the 
authenticated attacker to issue commands as Root.
CVSS Score: 8.0 (HIGH)
CWE: CWE-78
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24411
CVE: CVE-2024-5462
Published: 2025-02-15
Description: If Brocade Fabric OS before Fabric OS 9.2.0 configuration settings are not set to encrypt SNMP passwords, then the SNMP privsecret / authsecret fields can be exposed in plaintext. The plaintext passwords can be exposed in a configupload capture or a supportsave capture if encryption of passwords is not enabled. An attacker can use these passwords to fetch values of the supported OIDs via SNMPv3 queries. There are also a limited number of MIB objects that can be modified.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24610
CVE: CVE-2025-21401
Published: 2025-02-15
Description: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-601
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21401
CVE: CVE-2025-26819
Published: 2025-02-15
Description: Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections.
CVSS Score: 8.6 (HIGH)
CWE: CWE-770
References: https://github.com/monero-project/monero/commit/ec74ff4a3d3ca38b7912af680209a45fd1701c3d
CVE: CVE-2024-37374
Published: 2025-02-15
Description: Rejected reason: This CVE record has been withdrawn due to a duplicate entry CVE-2024-13842.
CVE: CVE-2024-37375
Published: 2025-02-15
Description: Rejected reason: This CVE record has been withdrawn due to a duplicate entry CVE-2024-13843.