deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-13552
Published: 2025-03-07
Description: The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.3.0 via file upload due to missing validation on a user controlled key. This makes it possible for authenticated attackers to download attachments for support tickets that don't belong to them. If an admin enables tickets for guests, this can be exploited by unauthenticated attackers.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://plugins.trac.wordpress.org/browser/supportcandy/trunk/includes/admin/tickets/class-wpsc-new-ticket.php#L395; https://plugins.trac.wordpress.org/changeset/3235142/supportcandy/trunk?old=3188306&old_path=%2Fsupportcandy%2Ftrunk; https://www.wordfence.com/threat-intel/vulnerabilities/id/13f87248-cc0b-4351-b79d-6efc5190b021?source=cve
CVE: CVE-2024-13635
Published: 2025-03-07
Description: The VK Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.94.2.2 via the page content block. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the content of private posts and pages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://plugins.trac.wordpress.org/browser/vk-blocks/trunk/inc/vk-blocks/build/blocks/page-content/index.php; https://plugins.trac.wordpress.org/changeset/3233455/vk-blocks/trunk/inc/vk-blocks/build/blocks/page-content/index.php; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3233455%40vk-blocks%2Ftrunk&old=3227170%40vk-blocks%2Ftrunk&sfp_email=&sfph_mail=
CVE: CVE-2024-13668
Published: 2025-03-07
Description: The WordPress Activity O Meter WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admins.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://wpscan.com/vulnerability/a7bfc094-b235-419d-882d-96b439651f65/
CVE: CVE-2024-13805
Published: 2025-03-07
Description: The Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.2.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted permissions by an Administrator, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/file-manager-advanced/trunk/application/class_fma_connector.php; https://plugins.trac.wordpress.org/changeset/3249482/; https://www.wordfence.com/threat-intel/vulnerabilities/id/0fc6cc1b-7d49-48cd-9bce-d37c6dcfece9?source=cve
CVE: CVE-2024-13857
Published: 2025-03-07
Description: The WPGet API – Connect to any external REST API plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.2.10. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application which can be used to query and modify information from internal services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-918
References: https://plugins.trac.wordpress.org/changeset/3251647/; https://wordpress.org/plugins/wpgetapi/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/cd2a8e7b-6fca-49f3-ba6d-bdaa418f611a?source=cve
CVE: CVE-2024-9458
Published: 2025-03-07
Description: The Reservit Hotel WordPress plugin before 3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/1157d6ae-af8b-4508-97e9-b9e86f612550/
CVE: CVE-2024-12634
Published: 2025-03-07
Description: The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including 2.0.59. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/related-post/tags/2.0.58b/includes/menu/settings.php#L129; https://plugins.trac.wordpress.org/changeset/3251482/; https://wordpress.org/plugins/related-post/#developers
CVE: CVE-2025-1768
Published: 2025-03-07
Description: The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to blind SQL Injection via the 'search' parameter in all versions up to, and including, 12.4.05 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/squirrly-seo/trunk/controllers/Assistant.php?rev=3207037#L55; https://plugins.trac.wordpress.org/browser/squirrly-seo/trunk/controllers/Audits.php?rev=3207037#L86; https://plugins.trac.wordpress.org/browser/squirrly-seo/trunk/controllers/BulkSeo.php?rev=3207037#L148
CVE: CVE-2025-1886
Published: 2025-03-07
Description: Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to discover stored SMTP credentials.
CWE: CWE-522
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sage-200-spain
CVE: CVE-2025-1887
Published: 2025-03-07
Description: SMB forced authentication vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to obtain NTLMv2-SSP Hash by changing any of the paths to a UNC path pointing to a server controlled by the attacker.
CWE: CWE-294
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sage-200-spain
CVE: CVE-2025-2084
Published: 2025-03-07
Description: A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /search-report.php of the component Search Report Page. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/sorcha-l/cve/blob/main/Human%20Metapneumovirus%20(HMPV)%20%E2%80%93%20Testing%20Management%20System%20%20XSS%20in%20search-report.php.md; https://phpgurukul.com/; https://vuldb.com/?ctiid.298896
CVE: CVE-2025-2085
Published: 2025-03-07
Description: A vulnerability classified as problematic has been found in StarSea99 starsea-mall 1.0. This affects an unknown part of the file /admin/carousels/save. The manipulation of the argument redirectUrl leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/ExecX/security/blob/main/111.md; https://vuldb.com/?ctiid.298899; https://vuldb.com/?id.298899
CVE: CVE-2025-2086
Published: 2025-03-07
Description: A vulnerability classified as problematic was found in StarSea99 starsea-mall 1.0. This vulnerability affects unknown code of the file /admin/indexConfigs/update. The manipulation of the argument redirectUrl leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/ExecX/security/blob/main/222.md; https://vuldb.com/?ctiid.298900; https://vuldb.com/?id.298900
CVE: CVE-2025-2087
Published: 2025-03-07
Description: A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects some unknown processing of the file /admin/goods/update. The manipulation of the argument goodsName leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/ExecX/security/blob/main/333.md; https://vuldb.com/?ctiid.298901; https://vuldb.com/?id.298901
CVE: CVE-2025-2088
Published: 2025-03-07
Description: A vulnerability, which was classified as critical, was found in PHPGurukul Pre-School Enrollment System up to 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument fullname/emailid/mobileNumber leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/SECWG/cve/issues/2; https://phpgurukul.com/; https://vuldb.com/?ctiid.298902
CVE: CVE-2025-2089
Published: 2025-03-07
Description: A vulnerability has been found in StarSea99 starsea-mall 1.0/2.X and classified as critical. Affected by this vulnerability is the function updateUserInfo of the file /personal/updateInfo of the component com.siro.mall.controller.mall.UserController. The manipulation of the argument userId leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://vuldb.com/?ctiid.298903; https://vuldb.com/?id.298903; https://vuldb.com/?submit.514977
CVE: CVE-2025-2090
Published: 2025-03-07
Description: A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php of the component Sub Admin Handler. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://github.com/SECWG/cve/issues/3; https://phpgurukul.com/; https://vuldb.com/?ctiid.298904
CVE: CVE-2025-25617
Published: 2025-03-07
Description: Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/armaansidana2003/CVE-2025-25617; https://github.com/changeweb/Unifiedtransform; https://github.com/armaansidana2003/CVE-2025-25617
CVE: CVE-2025-27152
Published: 2025-03-07
Description: axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even if ⁠baseURL is set, axios sends the request to the specified absolute URL, potentially causing SSRF and credential leakage. This issue impacts both server-side and client-side usage of axios. This issue is fixed in 1.8.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/axios/axios/issues/6463; https://github.com/axios/axios/security/advisories/GHSA-jr5f-v2jv-69x6; https://github.com/axios/axios/security/advisories/GHSA-jr5f-v2jv-69x6
CVE: CVE-2025-27518
Published: 2025-03-07
Description: Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for production by TrueFoundry. An insecure CORS configuration in the Cognita backend server allows arbitrary websites to send cross site requests to the application. This vulnerability is fixed in commit 75079c3d3cf376381489b9a82ee46c69024e1a15.
CWE: CWE-79
References: https://github.com/truefoundry/cognita/commit/75079c3d3cf376381489b9a82ee46c69024e1a15; https://github.com/truefoundry/cognita/pull/424; https://securitylab.github.com/advisories/GHSL-2024-193_GHSL-2024-194_Cognita/
CVE: CVE-2025-27519
Published: 2025-03-07
Description: Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for production by TrueFoundry. A path traversal issue exists at /v1/internal/upload-to-local-directory which is enabled when the Local env variable is set to true, such as when Cognita is setup using Docker. Because the docker environment sets up the backend uvicorn server with auto reload enabled, when an attacker overwrites the /app/backend/__init__.py file, the file will automatically be reloaded and executed. This allows an attacker to get remote code execution in the context of the Docker container. This vulnerability is fixed in commit a78bd065e05a1b30a53a3386cc02e08c317d2243.
CWE: CWE-22
References: https://github.com/truefoundry/cognita/commit/a78bd065e05a1b30a53a3386cc02e08c317d2243; https://github.com/truefoundry/cognita/pull/393; https://securitylab.github.com/advisories/GHSL-2024-193_GHSL-2024-194_Cognita/
CVE: CVE-2025-27597
Published: 2025-03-07
Description: Vue I18n is the internationalization plugin for Vue.js. @intlify/message-resolver and @intlify/vue-i18n-core are vulnerable to Prototype Pollution through the entry function: handleFlatJson. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service (DoS) a the minimum consequence. Moreover, the consequences of this vulnerability can escalate to other injection-based attacks, depending on how the library integrates within the application. For instance, if the polluted property propagates to sensitive Node.js APIs (e.g., exec, eval), it could enable an attacker to execute arbitrary commands within the application's context.
CWE: CWE-1321
References: https://github.com/intlify/vue-i18n/commit/4bb6eacda7fc2cde5687549afa0efb27ca40862a; https://github.com/intlify/vue-i18n/security/advisories/GHSA-p2ph-7g93-hw3m; https://github.com/intlify/vue-i18n/security/advisories/GHSA-p2ph-7g93-hw3m
CVE: CVE-2025-27603
Published: 2025-03-07
Description: XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. A user that doesn't have programming rights can execute arbitrary code due to an unescaped translation when creating a page using the Migration Page template. This vulnerability is fixed in 1.2.0.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-95
References: https://github.com/xwikisas/application-confluence-migrator-pro/commit/36cef2271bd429773698ca3a21e47b6d51d6377d; https://github.com/xwikisas/application-confluence-migrator-pro/security/advisories/GHSA-6qvp-39mm-95v8; https://github.com/xwikisas/application-confluence-migrator-pro/security/advisories/GHSA-6qvp-39mm-95v8
CVE: CVE-2023-35894
Published: 2025-03-07
Description: IBM Control Center 6.2.1 through 6.3.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-644, CWE-116
References: https://www.ibm.com/support/pages/node/7185101
CVE: CVE-2023-43052
Published: 2025-03-07
Description: IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-435, CWE-435
References: https://www.ibm.com/support/pages/node/7185102
CVE: CVE-2024-12975
Published: 2025-03-07
Description: A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface.
CWE: CWE-126
References: https://community.silabs.com/069Vm00000LWXMeIAP; https://github.com/SiliconLabs/simplicity_sdk/releases
CVE: CVE-2024-13086
Published: 2025-03-07
Description: An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.

We have already fixed the vulnerability in the following version:
QTS 5.2.0.2851 build 20240808 and later
QuTS hero h5.2.0.2851 build 20240808 and later
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.qnap.com/en/security-advisory/qsa-25-03
CVE: CVE-2024-38638
Published: 2025-03-07
Description: An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory.

QTS 5.2.x/QuTS hero h5.2.x are not affected.

We have already fixed the vulnerability in the following versions:
QTS 5.1.9.2954 build 20241120 and later
QuTS hero h5.1.9.2954 build 20241120 and later
CVSS Score: 7.2 (HIGH)
CWE: CWE-787
References: https://www.qnap.com/en/security-advisory/qsa-24-52
CVE: CVE-2024-48864
Published: 2025-03-07
Description: A files or directories accessible to external parties vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers to read/write files or directories.

We have already fixed the vulnerability in the following versions:
File Station 5 5.5.6.4741 and later
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-552
References: https://www.qnap.com/en/security-advisory/qsa-24-55
CVE: CVE-2024-50390
Published: 2025-03-07
Description: A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands.

We have already fixed the vulnerability in the following version:
QuRouter 2.4.5.032 and later
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-1188, CWE-78
References: https://www.qnap.com/en/security-advisory/qsa-25-01
CVE: CVE-2024-50394
Published: 2025-03-07
Description: An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.

We have already fixed the vulnerability in the following version:
Helpdesk 3.3.3 and later
CVSS Score: 8.8 (HIGH)
CWE: CWE-295
References: https://www.qnap.com/en/security-advisory/qsa-25-05
CVE: CVE-2024-50405
Published: 2025-03-07
Description: An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify application data.

We have already fixed the vulnerability in the following versions:
QTS 5.2.3.3006 build 20250108 and later
QuTS hero h5.2.3.3006 build 20250108 and later
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-93, CWE-94, CWE-94
References: https://www.qnap.com/en/security-advisory/qsa-24-54
CVE: CVE-2024-53692
Published: 2025-03-07
Description: A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands.

We have already fixed the vulnerability in the following versions:
QTS 5.2.3.3006 build 20250108 and later
QuTS hero h5.2.3.3006 build 20250108 and later
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-77, CWE-78, CWE-78
References: https://www.qnap.com/en/security-advisory/qsa-24-54
CVE: CVE-2024-53693
Published: 2025-03-07
Description: An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to modify application data.

We have already fixed the vulnerability in the following versions:
QTS 5.2.3.3006 build 20250108 and later
QuTS hero h5.2.3.3006 build 20250108 and later
CVSS Score: 7.1 (HIGH)
CWE: CWE-93, CWE-94, CWE-400, CWE-94
References: https://www.qnap.com/en/security-advisory/qsa-24-54
CVE: CVE-2024-53694
Published: 2025-03-07
Description: A time-of-check time-of-use (TOCTOU) race condition vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local attackers who have gained user access to gain access to otherwise unauthorized resources.

We have already fixed the vulnerability in the following versions:
QVPN Device Client for Mac 2.2.5 and later
Qsync for Mac 5.1.3 and later
Qfinder Pro Mac 7.11.1 and later
CWE: CWE-367
References: https://www.qnap.com/en/security-advisory/qsa-24-51
CVE: CVE-2024-53695
Published: 2025-03-07
Description: A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes.

We have already fixed the vulnerability in the following version:
HBS 3 Hybrid Backup Sync 25.1.4.952 and later
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120, CWE-121
References: https://www.qnap.com/en/security-advisory/qsa-25-06
CVE: CVE-2024-53696
Published: 2025-03-07
Description: A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read application data.

We have already fixed the vulnerability in the following versions:
QuLog Center 1.7.0.829 ( 2024/10/01 ) and later
QuLog Center 1.8.0.888 ( 2024/10/15 ) and later
QTS 4.5.4.2957 build 20241119 and later
QuTS hero h4.5.4.2956 build 20241119 and later
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-918
References: https://www.qnap.com/en/security-advisory/qsa-24-53
CVE: CVE-2024-53697
Published: 2025-03-07
Description: An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory.

We have already fixed the vulnerability in the following versions:
QTS 5.2.3.3006 build 20250108 and later
QuTS hero h5.2.3.3006 build 20250108 and later
CVSS Score: 7.2 (HIGH)
CWE: CWE-787
References: https://www.qnap.com/en/security-advisory/qsa-24-54
CVE: CVE-2024-53698
Published: 2025-03-07
Description: A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify memory.

We have already fixed the vulnerability in the following versions:
QTS 5.2.3.3006 build 20250108 and later
QuTS hero h5.2.3.3006 build 20250108 and later
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-415
References: https://www.qnap.com/en/security-advisory/qsa-24-54
CVE: CVE-2024-53699
Published: 2025-03-07
Description: An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory.

We have already fixed the vulnerability in the following versions:
QTS 5.2.3.3006 build 20250108 and later
QuTS hero h5.2.3.3006 build 20250108 and later
CVSS Score: 7.2 (HIGH)
CWE: CWE-787
References: https://www.qnap.com/en/security-advisory/qsa-24-54