deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-11924
Published: 2025-12-17
Description: The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.13.2. This is due to the plugin not properly verifying that a user is authorized before the `ninja-forms-views` REST endpoints return form metadata and submission content. This makes it possible for unauthenticated attackers to read arbitrary form definitions and submission records via a leaked bearer token granted they can load any page containing the Submissions Table block. NOTE: The developer released a patch for this issue in 3.13.1, but inadvertently introduced a REST API endpoint in which a valid bearer token could be minted for arbitrary form IDs, making this patch ineffective.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: https://plugins.trac.wordpress.org/changeset/3415563/ninja-forms; https://www.wordfence.com/threat-intel/vulnerabilities/id/4240cdae-9122-443e-8a7e-3369e74384be?source=cve
CVE: CVE-2025-13750
Published: 2025-12-17
Description: The Converter for Media – Optimize images | Convert WebP & AVIF plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `/webp-converter/v1/regenerate-attachment` REST endpoint in all versions up to, and including, 6.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete optimized WebP/AVIF variants for arbitrary attachments.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/3414745/webp-converter-for-media; https://www.wordfence.com/threat-intel/vulnerabilities/id/9a31190f-e2ed-46ee-a224-85a0a003738d?source=cve
CVE: CVE-2025-14061
Published: 2025-12-17
Description: The Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the gdpr_delete_policy_data function in all versions up to, and including, 4.0.7. This makes it possible for unauthenticated attackers to permanently delete arbitrary posts, pages, attachments, and other post types by ID.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/gdpr-cookie-consent/tags/4.0.6/admin/class-gdpr-cookie-consent-admin.php#L8091; https://plugins.trac.wordpress.org/browser/gdpr-cookie-consent/tags/4.0.6/admin/class-gdpr-cookie-consent-admin.php#L8878; https://www.wordfence.com/threat-intel/vulnerabilities/id/866b4ca8-563f-4a19-bbf7-79a79f07d53d?source=cve
CVE: CVE-2025-14817
Published: 2025-12-17
Description: The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by third-party apps which can construct intents to directly open adb debugging functionality without user interaction.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://security.tecno.com/SRC/blogdetail/434?lang=en_US; https://security.tecno.com/SRC/securityUpdates
CVE: CVE-2025-12496
Published: 2025-12-17
Description: The Zephyr Project Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.203 via the `file` parameter. This makes it possible for authenticated attackers, with Custom-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. On a servers that have `allow_url_fopen` enabled, this issue allows for Server-Side Request Forgery
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/browser/zephyr-project-manager/trunk/includes/Base/AjaxHandler.php#L3506; https://plugins.trac.wordpress.org/browser/zephyr-project-manager/trunk/includes/Core/Projects.php#L1870; https://www.wordfence.com/threat-intel/vulnerabilities/id/2b4b0640-d61a-4969-a5c0-d2d709fb56d0?source=cve
CVE: CVE-2025-14399
Published: 2025-12-17
Description: The Download Plugins and Themes in ZIP from Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.6. This is due to missing or incorrect nonce validation on the download_plugin_bulk and download_theme_bulk functions. This makes it possible for unauthenticated attackers to archive all the sites plugins and themes and place them in the `wp-content/uploads/` directory via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset/3417484/download-plugins-dashboard; https://www.wordfence.com/threat-intel/vulnerabilities/id/845b6bcf-004b-4b92-88d7-3d331fa58c11?source=cve
CVE: CVE-2025-14347
Published: 2025-12-17
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd. OBS (Student Affairs Information System)0 allows Reflected XSS.This issue affects OBS (Student Affairs Information System)0: before 26.5009.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-25-0463
CVE: CVE-2025-14101
Published: 2025-12-17
Description: Authorization Bypass Through User-Controlled Key vulnerability in GG Soft Software Services Inc. PaperWork allows Exploitation of Trusted Identifiers.This issue affects PaperWork: from 5.2.0.9427 before 6.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-639
References: https://www.usom.gov.tr/bildirim/tr-25-0464
CVE: CVE-2025-14095
Published: 2025-12-17
Description: A "Privilege boundary violation" vulnerability is identified affecting multiple Radiometer Products. Exploitation of this vulnerability gives a user with physical access to the analyzer, the possibility to gain unauthorized access to functionalities outside the restricted environment. The vulnerability is due to weakness in the design of access control implementation in application software. 

Other related CVE's are CVE-2025-14096 & CVE-2025-14097.

Affected customers have been informed about this vulnerability. This CVE is being published to provide transparency.

Required configuration for Exposure:


Physical access to the analyzer is needed.

Temporary work Around:


Only authorized people can physically access the analyzer. 

Permanent solution:
Local Radiometer representatives will contact all affected customers to discuss a permanent solution.



Exploit Status:
Researchers have provided working proof-of-concept. Radiometer is not aware of any publicly available exploit at the time of publication.                                                                                                                                                                                        Note: 

CVSS score 6.8 when underlying OS is Windows 7 or Windows XP Operating systems and CVSS score 5.7 when underlying OS is Windows 8 or Windows 10 operating systems.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284, CWE-693
References: https://www.radiometer.com/myradiometer
CVE: CVE-2025-67895
Published: 2025-12-17
Description: Edge3 Worker RPC RCE on Airflow 2.

This issue affects Apache Airflow Providers Edge3: before 2.0.0 - and only if you installed and configured it on Airflow 2.



The Edge3 provider support in Airflow 2 has been always development-only and not officially released, however if you installed and configured Edge3 provider in Airflow 2, it implicitly enabled non-public (normally) API which was used to test Edge Provider in Airflow 2 during the development. This API allowed Dag author to perform Remote Code Execution in the webserver context, which Dag Author was not supposed to be able to do.

If you installed and configured Edge3 provider for Airflow 2, you should uninstall it and migrate to Airflow 3. The new Edge3 provider versions (>=2.0.0) has minimum version of Airflow set to 3 and the RCE-prone Airflow 2 code is removed, so it should no longer be possible to use the Edge3 provider 2.0.0+ on Airflow 2.

If you used Edge Provider in Airflow 3, you are not affected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-669
References: https://github.com/apache/airflow/pull/59143; https://lists.apache.org/thread/hhnmmzkj5qx5gbk6pdkh8tcsx5oj1nqs; http://www.openwall.com/lists/oss-security/2025/12/16/3
CVE: CVE-2025-13352
Published: 2025-12-17
Description: Mattermost versions 10.11.x <= 10.11.6 and Mattermost GitHub plugin versions <=2.4.0 fail to validate plugin bot identity in reaction forwarding which allows attackers to hijack the GitHub reaction feature to make users add reactions to arbitrary GitHub objects via crafted notification posts.
CVSS Score: 3.0 (LOW)
CWE: CWE-1287
References: https://mattermost.com/security-updates
CVE: CVE-2025-14096
Published: 2025-12-17
Description: A vulnerability exists in multiple Radiometer products that allow an attacker with physical access to the analyzer possibility to extract credential information. The vulnerability is due to a weakness in the design and insufficient credential protection in operating system.

Other related CVE's are CVE-2025-14095 & CVE-2025-14097.



Affected customers have been informed about this vulnerability. This CVE is being published to provide transparency.





Required Configuration for Exposure:


Attacker requires physical access to the analyzer.



Temporary work Around:
Only authorized people can physically access the analyzer.

Permanent solution:
Local Radiometer representatives will contact all affected customers to discuss a permanent solution.

Exploit Status:


Researchers have provided a working proof-of-concept (PoC). Radiometer is not aware of any public exploit code at the time of this publication.
CVSS Score: 8.4 (HIGH)
CWE: CWE-250, CWE-798
References: https://www.radiometer.com/myradiometer
CVE: CVE-2025-14097
Published: 2025-12-17
Description: A vulnerability in the application software of multiple Radiometer products may allow remote code execution and unauthorized device management when specific internal conditions are met. Exploitation requires that a remote connection is established with additional information obtained through other means.  The issue is caused by a weakness in the analyzer’s application software.                                                                                                                                                                                                Other related CVE's are CVE-2025-14095 & CVE-2025-14096.                                                                                                      Affected customers have been informed about this vulnerability. This CVE is being published to provide transparency.



Required Configuration for Exposure: Affected application software version is in use and remote support feature is enabled in the analyzer.                                                                                                                                                                        Temporary work Around: If the network is not considered secure, please remove the analyzer from the network.                         Permanent solution:
Customers should ensure the following:
•  The network is secure, and access follows best practices.
Local Radiometer representatives will contact all affected customers to discuss a permanent solution.                                                     
Exploit Status:


Researchers have provided working proof-of-concept (PoC). Radiometer is not aware of any publicly available exploits at the time of this publication.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287
References: https://www.radiometer.com/myradiometer
CVE: CVE-2025-61736
Published: 2025-12-17
Description: Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires.
CWE: CWE-298
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-04; https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories
CVE: CVE-2025-62190
Published: 2025-12-17
Description: Mattermost versions 11.0.x <= 11.0.4, 10.12.x <= 10.12.2, 10.11.x <= 10.11.6 and Mattermost Calls versions <=1.10.0 fail to implement CSRF protection on the Calls widget page which allows an authenticated attacker to initiate calls and inject messages into channels or direct messages via a malicious webpage or crafted link
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://mattermost.com/security-updates
CVE: CVE-2025-62690
Published: 2025-12-17
Description: Mattermost versions 10.11.x <= 10.11.4 fail to validate redirect URLs on the /error page, which allows an attacker to redirect a victim to a malicious site via a crafted link opened in a new tab.
CVSS Score: 3.1 (LOW)
CWE: CWE-601
References: https://mattermost.com/security-updates
CVE: CVE-2025-14266
Published: 2025-12-17
Description: CSRF in Ercom Cryptobox administration console allows attacker to trigger some actions on behalf of a Cryptobox administrator. The attack requires the administrator to browse a malicious web site or to click a link while he has an open session on the administration console.
CWE: CWE-352
References: https://info.cryptobox.com/doc/v4.39/4.39.en/#fix2
CVE: CVE-2022-23851
Published: 2025-12-17
Description: Netaxis API Orchestrator (APIO) before 0.19.3 allows server side template injection (SSTI).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1336
References: https://blog.tig00r.me/post/CVE-2022-23851; https://www.netaxis.be/products/apio/
CVE: CVE-2024-29370
Published: 2025-12-17
Description: In python-jose 3.3.0 (specifically jwe.decrypt), a vulnerability allows an attacker to cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-409
References: https://github.com/mpdavis/python-jose/issues/344
CVE: CVE-2024-29371
Published: 2025-12-17
Description: In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1259
References: https://bitbucket.org/b_c/jose4j/issues/220/vuln-zip-bomb-attack; https://bitbucket.org/b_c/jose4j/issues/220/vuln-zip-bomb-attack
CVE: CVE-2025-14727
Published: 2025-12-17
Description: A vulnerability exists in NGINX Ingress Controller's nginx.org/rewrite-target annotation validation. 


Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 8.3 (HIGH)
CWE: CWE-22
References: https://my.f5.com/manage/s/article/K000158176
CVE: CVE-2025-43873
Published: 2025-12-17
Description: Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device.
CWE: CWE-78
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-02; https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories
CVE: CVE-2025-44005
Published: 2025-12-17
Description: An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-287
References: https://github.com/smallstep/certificates/security/advisories/GHSA-h8cp-697h-8c8p; https://talosintelligence.com/vulnerability_reports/TALOS-2025-2242; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2242
CVE: CVE-2025-20393
Published: 2025-12-17
Description: A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges.

This vulnerability is due to insufficient validation of HTTP requests by the Spam Quarantine feature. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with&nbsp;root privileges.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-20
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-attack-N9bf4; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20393
CVE: CVE-2025-26381
Published: 2025-12-17
Description: Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information.
CWE: CWE-425
References: https://https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-03; https://tyco.widen.net/view/pdf/xmejieec4b/JCI-PSA-2025-05.pdf?t.download=true&u=aiurfs
CVE: CVE-2025-53398
Published: 2025-12-17
Description: The Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions,
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.portrait.com/dell-security-cve-updates/; https://www.portrait.com/dell/
CVE: CVE-2025-53919
Published: 2025-12-17
Description: An issue was discovered in the Portrait Dell Color Management application through 3.3.008 for Dell monitors, It creates a temporary folder, with weak permissions, during installation and uninstallation. A low-privileged attacker with local access could potentially exploit this, leading to elevation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://portrait.com/dell; https://www.portrait.com/dell-security-cve-updates/
CVE: CVE-2025-65185
Published: 2025-12-17
Description: There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows malicious users to enumerate users by entering an OTP code and new password then reviewing application responses.
CVSS Score: 2.8 (LOW)
CWE: CWE-203
References: https://entrinsik.com; https://www.triaxiomsecurity.com/entrinsik-informer-username-enumeration-cve-2025-65185/
CVE: CVE-2025-65855
Published: 2025-12-17
Description: The OTA firmware update mechanism in Netun Solutions HelpFlash IoT (firmware v18_178_221102_ASCII_PRO_1R5_50) uses hard-coded WiFi credentials identical across all devices and does not authenticate update servers or validate firmware signatures. An attacker with brief physical access can activate OTA mode (8-second button press), create a malicious WiFi AP using the known credentials, and serve malicious firmware via unauthenticated HTTP to achieve arbitrary code execution on this safety-critical emergency signaling device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-319, CWE-494, CWE-798
References: https://docs.espressif.com/projects/esp-idf/en/v4.3.2/; https://luismirandaacebedo.github.io/CVE-2025-65855/
CVE: CVE-2025-66921
Published: 2025-12-17
Description: A Cross-site scripting (XSS) vulnerability in Create/Update Item(s) Module in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the "name" parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-79
References: https://github.com/omkaryepre/vulnerability-research/blob/main/CVE-2025-66921/readme.md; https://github.com/opensourcepos/opensourcepos; https://github.com/omkaryepre/vulnerability-research/blob/main/CVE-2025-66921/readme.md
CVE: CVE-2025-67164
Published: 2025-12-17
Description: An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-78, CWE-94, CWE-434
References: https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67164
CVE: CVE-2025-67165
Published: 2025-12-17
Description: An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-639
References: https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67165; https://github.com/pagekit/docs/blob/develop/user-interface/users.md#permissions; https://github.com/pagekit/docs/blob/develop/user-interface/users.md#roles
CVE: CVE-2025-67285
Published: 2025-12-17
Description: A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate cleaning or validation.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/bardminx/Lonlydance/issues/1
CVE: CVE-2025-65203
Published: 2025-12-17
Description: KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352, CWE-353, CWE-640
References: https://github.com/keepassxreboot/keepassxc-browser/issues/2647; https://github.com/keepassxreboot/keepassxc-browser/pull/2648
CVE: CVE-2025-66923
Published: 2025-12-17
Description: A Cross-site scripting (XSS) vulnerability in Create/Update Customer(s) in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the phone_number parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-79
References: https://github.com/omkaryepre/vulnerability-research/blob/main/CVE-2025-66923/readme.md; https://github.com/opensourcepos/opensourcepos; https://github.com/omkaryepre/vulnerability-research/blob/main/CVE-2025-66923/readme.md
CVE: CVE-2025-66924
Published: 2025-12-17
Description: A Cross-site scripting (XSS) vulnerability in Create/Update Item Kit(s) in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the "name" parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/omkaryepre/vulnerability-research/blob/main/CVE-2025-66924/readme.md; https://github.com/opensourcepos/opensourcepos; https://github.com/omkaryepre/vulnerability-research/blob/main/CVE-2025-66924/readme.md
CVE: CVE-2025-67172
Published: 2025-12-17
Description: RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-94
References: https://github.com/handylulu/RiteCMS/; https://github.com/handylulu/RiteCMS/blob/master/cms/includes/functions.inc.php#L297; https://github.com/handylulu/RiteCMS/blob/master/cms/includes/functions.inc.php#L504
CVE: CVE-2024-46060
Published: 2025-12-17
Description: Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During installation, world-writable files are created and executed with root privileges. This allows a local low-privileged user to inject arbitrary commands, leading to code execution as the root user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-732
References: https://m8sec.dev/blog/privilege-escalation-macos-pkg-installers/; https://www.anaconda.com/docs/getting-started/anaconda/release/2024.x#anaconda-2024-06-1
CVE: CVE-2024-46062
Published: 2025-12-17
Description: Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During installation, world-writable files are created and executed with root privileges. This flaw allows a local low-privileged user to inject arbitrary commands, leading to code execution as the root user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-732
References: https://m8sec.dev/blog/privilege-escalation-macos-pkg-installers/; https://www.anaconda.com/docs/getting-started/miniconda/release/23.x#miniconda-23-11-0-1