deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-13583
Published: 2025-11-24
Description: A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/rassec2/dbcve/issues/6; https://vuldb.com/?ctiid.333347
CVE: CVE-2025-13584
Published: 2025-11-24
Description: A security vulnerability has been detected in Eigenfocus up to 1.4.0. This vulnerability affects unknown code of the component Description Handler. The manipulation of the argument entry.description/time_entry.description leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.4.1 is able to resolve this issue. The identifier of the patch is 7dec94c9d1f3e513e0ee38ba68caaba628e08582. Upgrading the affected component is advised.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/Eigenfocus/eigenfocus/commit/7dec94c9d1f3e513e0ee38ba68caaba628e08582; https://github.com/Eigenfocus/eigenfocus/pull/358; https://github.com/Eigenfocus/eigenfocus/releases/tag/v1.4.1-free
CVE: CVE-2025-7402
Published: 2025-11-24
Description: The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘site_id’ parameter in all versions up to, and including, 4.95 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://codecanyon.net/item/ads-pro-plugin-multipurpose-wordpress-advertising-manager/10275010; https://www.wordfence.com/threat-intel/vulnerabilities/id/5548b97d-14f0-4f50-b213-a19c02c240be?source=cve
CVE: CVE-2024-14015
Published: 2025-11-24
Description: The WordPress eCommerce Plugin  WordPress plugin through 2.9.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 7.1 (HIGH)
References: https://wpscan.com/vulnerability/1a70927a-e345-4e2f-98da-1235f4482cc0/
CVE: CVE-2025-12394
Published: 2025-11-24
Description: The Backup Migration WordPress plugin before 2.0.0 does not properly generate its backup path in certain server configurations, allowing unauthenticated users to fetch a log that discloses the backup filename. The backup archive is then downloadable without authentication.
CVSS Score: 5.9 (MEDIUM)
References: https://wpscan.com/vulnerability/e61293d0-2e1b-4dac-96c5-97fa17e38b16/
CVE: CVE-2025-12569
Published: 2025-11-24
Description: The Guest posting / Frontend Posting / Front Editor  WordPress plugin before 5.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue
CVSS Score: 4.7 (MEDIUM)
References: https://wpscan.com/vulnerability/37586572-33f9-4365-bfce-7db277a8df72/
CVE: CVE-2025-12629
Published: 2025-11-24
Description: The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 7.1 (HIGH)
References: https://wpscan.com/vulnerability/528e9775-3a2d-4e52-92f7-f123ad787e7d/
CVE: CVE-2025-13585
Published: 2025-11-24
Description: A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument code results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/beamyou/CVE/issues/4; https://itsourcecode.com/; https://vuldb.com/?ctiid.333349
CVE: CVE-2025-13586
Published: 2025-11-24
Description: A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. This manipulation of the argument txtconfirm_password causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/CaseyW33/CVE/issues/2; https://vuldb.com/?ctiid.333350; https://vuldb.com/?id.333350
CVE: CVE-2025-13588
Published: 2025-11-24
Description: A vulnerability was found in lKinderBueno Streamity Xtream IPTV Player up to 2.8. The impacted element is an unknown function of the file public/proxy.php. Performing manipulation results in server-side request forgery. The attack can be initiated remotely. The exploit has been made public and could be used. Upgrading to version 2.8.1 is sufficient to resolve this issue. The patch is named c70bfb8d36b47bfd64c5ec73917e1d9ddb97af92. It is suggested to upgrade the affected component.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/lKinderBueno/Streamity-Xtream-IPTV-Web-player/commit/c70bfb8d36b47bfd64c5ec73917e1d9ddb97af92; https://github.com/lKinderBueno/Streamity-Xtream-IPTV-Web-player/releases/tag/v2.8.1; https://github.com/lakshayyverma/CVE-Discovery/blob/main/Streamity.md
CVE: CVE-2025-13596
Published: 2025-11-24
Description: A sensitive information disclosure vulnerability exists in the error handling component of ATISoluciones CIGES Application version 2.15.6 and earlier. When certain unexpected conditions trigger unhandled exceptions, the application returns detailed error messages and stack traces to the client. This may expose internal filesystem paths, SQL queries, database connection details, or environment configuration data to remote unauthenticated attackers. This issue allows information gathering and reconnaissance but does not enable direct system compromise.
CWE: CWE-200, CWE-209
References: https://www.atisoluciones.com/incidentes-cve
CVE: CVE-2025-12739
Published: 2025-11-24
Description: An attacker with viewer permissions in Looker could craft a malicious URL that, when opened by a Looker admin, would execute an attacker-supplied script. Exploitation required at least one Looker extension installed on the instance.

Looker-hosted and Self-hosted were found to be vulnerable.
This issue has already been mitigated for Looker-hosted instances. No user action is required for these.


Self-hosted instances must be upgraded as soon as possible. This vulnerability has been patched in all supported versions of Self-hosted.
The versions below have all been updated to protect from this vulnerability. You can download these versions at the Looker download page  https://download.looker.com/ :  *  24.18.201+
  *  25.0.79+
  *  25.6.66+
  *  25.12.7+
  *  25.16.0+
  *  25.18.0+
  *  25.20.0+
CWE: CWE-79
References: https://cloud.google.com/support/bulletins#gcp-2025-068
CVE: CVE-2025-12740
Published: 2025-11-24
Description: A Looker user with a Developer role could create a database connection using IBM DB2 driver and, by manipulating LookML, cause Looker to execute a malicious command, due to inadequate filtering of the driver's parameters.

Looker-hosted and Self-hosted were found to be vulnerable.
This issue has already been mitigated for Looker-hosted instances. No user action is required for these.


Self-hosted instances must be upgraded as soon as possible. This vulnerability has been patched in all supported versions of Self-hosted.
The versions below have all been updated to protect from this vulnerability. You can download these versions at the Looker download page  https://download.looker.com/ :
  *  25.0.93+
  *  25.6.84+

  *  25.12.42+
  *  25.14.50+
  *  25.16.44+
CWE: CWE-20
References: https://cloud.google.com/support/bulletins#gcp-2025-052
CVE: CVE-2025-12741
Published: 2025-11-24
Description: A Looker user with Developer role could create a database connection using Denodo driver and, by manipulating LookML, cause Looker to execute a malicious command.

Looker-hosted and Self-hosted were found to be vulnerable.
This issue has already been mitigated for Looker-hosted instances. No user action is required for these.


Self-hosted instances must be upgraded as soon as possible. This vulnerability has been patched in all supported versions of Self-hosted.
The versions below have all been updated to protect from this vulnerability. You can download these versions at the Looker download page  https://download.looker.com/ :
  *  24.12.108+
  *  24.18.200+
  *  25.0.78+
  *  25.6.65+
  *  25.8.47+
  *  25.12.10+
  *  25.14+
CWE: CWE-20
References: https://cloud.google.com/support/bulletins#gcp-2025-052
CVE: CVE-2025-41087
Published: 2025-11-24
Description: Cross-Site Scripting (XSS) vulnerability stored in tha Taclia web application, where the uploaded SVG images are not properly sanitized. This allows to the attackers to embed malicious scripts in SVG files such as image profiles, which are then stored on the server and executed in the context of any user who accesses the compromised resource.
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-stored-taclias-web-application
CVE: CVE-2025-41729
Published: 2025-11-24
Description: An unauthenticated remote attacker can send a specially crafted Modbus read command to the device which leads to a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1287
References: https://certvde.com/de/advisories/VDE-2025-094
CVE: CVE-2025-12628
Published: 2025-11-24
Description: The WP 2FA WordPress plugin does not generate backup codes with enough entropy, which could allow attackers to bypass the second factor by brute forcing them
CVSS Score: 6.3 (MEDIUM)
References: https://wpscan.com/vulnerability/5e2d033c-dde6-4774-8588-cbe268c0d797/
CVE: CVE-2025-40212
Published: 2025-11-24
Description: In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix refcount leak in nfsd_set_fh_dentry()

nfsd exports a "pseudo root filesystem" which is used by NFSv4 to find
the various exported filesystems using LOOKUP requests from a known root
filehandle.  NFSv3 uses the MOUNT protocol to find those exported
filesystems and so is not given access to the pseudo root filesystem.

If a v3 (or v2) client uses a filehandle from that filesystem,
nfsd_set_fh_dentry() will report an error, but still stores the export
in "struct svc_fh" even though it also drops the reference (exp_put()).
This means that when fh_put() is called an extra reference will be dropped
which can lead to use-after-free and possible denial of service.

Normal NFS usage will not provide a pseudo-root filehandle to a v3
client.  This bug can only be triggered by the client synthesising an
incorrect filehandle.

To fix this we move the assignments to the svc_fh later, after all
possible error cases have been detected.
References: https://git.kernel.org/stable/c/8a7348a9ed70bda1c1f51d3f1815bcbdf9f3b38c; https://git.kernel.org/stable/c/b6bc86ce3944b10b9fc181fc00c1a520a20ed965; https://git.kernel.org/stable/c/c83d7365cec5eb5ebeeee2a72e29b4ca58a7e4c2
CVE: CVE-2025-41016
Published: 2025-11-24
Description: Inadequate access control vulnerability in Davantis DFUSION v6.177.7, which allows unauthorised actors to extract images and videos related to alarm events through access to “/alarms/<ALARM_ID>/<MEDIA>”, where the “MEDIA” parameter can take the value of “snapshot” or “video.mp4”. These media files contain images recorded by security cameras in response to triggered alerts.
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-dfusion-davantis
CVE: CVE-2025-41017
Published: 2025-11-24
Description: Inadequate access control vulnerability in Davantis DDFUSION v6.177.7, which allows unauthorised actors to retrieve perspective parameters from security camera settings by accessing “/cameras/<CAMERA_ID>/perspective”.
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-dfusion-davantis
CVE: CVE-2025-65493
Published: 2025-11-24
Description: NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS/TLS connection that triggers BIO_get_data() to return NULL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/obgm/libcoap/issues/1743; https://github.com/obgm/libcoap/pull/1750
CVE: CVE-2025-65494
Published: 2025-11-24
Description: NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted X.509 certificate that causes sk_GENERAL_NAME_value() to return NULL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/obgm/libcoap/issues/1745; https://github.com/obgm/libcoap/pull/1750
CVE: CVE-2025-65495
Published: 2025-11-24
Description: Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted TLS certificate that causes i2d_X509() to return -1 and be misused as a malloc() size parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-195
References: https://github.com/obgm/libcoap/issues/1744; https://github.com/obgm/libcoap/pull/1750
CVE: CVE-2025-65496
Published: 2025-11-24
Description: NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-476
References: https://github.com/obgm/libcoap/issues/1745; https://github.com/obgm/libcoap/pull/1750
CVE: CVE-2025-65497
Published: 2025-11-24
Description: NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-476
References: https://github.com/obgm/libcoap/issues/1745; https://github.com/obgm/libcoap/pull/1750
CVE: CVE-2025-65498
Published: 2025-11-24
Description: NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-476
References: https://github.com/obgm/libcoap/issues/1746; https://github.com/obgm/libcoap/pull/1750
CVE: CVE-2025-65499
Published: 2025-11-24
Description: Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_ex_data_X509_STORE_CTX_idx() to return -1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-129
References: https://github.com/obgm/libcoap/issues/1747; https://github.com/obgm/libcoap/pull/1750
CVE: CVE-2025-65500
Published: 2025-11-24
Description: NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-476
References: https://github.com/obgm/libcoap/issues/1746; https://github.com/obgm/libcoap/pull/1750
CVE: CVE-2025-65501
Published: 2025-11-24
Description: Null pointer dereference in coap_dtls_info_callback() in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a DTLS handshake where SSL_get_app_data() returns NULL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-476
References: https://github.com/obgm/libcoap/issues/1748; https://github.com/obgm/libcoap/pull/1750
CVE: CVE-2025-65502
Published: 2025-11-24
Description: Null pointer dereference in add_ca_certs() in Cesanta Mongoose before 7.2 allows remote attackers to cause a denial of service via TLS initialization where SSL_CTX_get_cert_store() returns NULL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-476
References: https://github.com/cesanta/mongoose/issues/3306; https://github.com/cesanta/mongoose/pull/3307
CVE: CVE-2025-65503
Published: 2025-11-24
Description: Use after free in endpoint destructors in Redboltz async_mqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between io_context and endpoint objects.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/redboltz/async_mqtt/issues/436; https://github.com/redboltz/async_mqtt/pull/437
CVE: CVE-2025-65998
Published: 2025-11-24
Description: Apache Syncope can be configured to store the user password values in the internal database with AES encryption, though this is not the default option.

When AES is configured, the default key value, hard-coded in the source code, is always used. This allows a malicious attacker, once obtained access to the internal database content, to reconstruct the original cleartext password values.
This is not affecting encrypted plain attributes, whose values are also stored using AES encryption.

Users are recommended to upgrade to version 3.0.15 / 4.0.3, which fix this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-321
References: https://lists.apache.org/thread/fjh0tb0d1xkbphc5ogdsc348ppz88cts; http://www.openwall.com/lists/oss-security/2025/11/24/1
CVE: CVE-2025-11921
Published: 2025-11-24
Description: iStats contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via command injection.This issue affects iStats: 7.10.4.
CWE: CWE-77, CWE-732
References: https://bjango.com/mac/istatmenus/; https://cdn.istatmenus.app/files/istatmenus7/versions/iStatMenus7.10.6.zip; https://fluidattacks.com/advisories/muse
CVE: CVE-2025-12969
Published: 2025-11-24
Description: Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send unauthenticated data. By bypassing authentication controls, attackers can inject forged log records, flood alerting systems, or manipulate routing decisions, compromising the authenticity and integrity of ingested logs.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306
References: https://fluentbit.io/blog/2025/10/28/security-vulnerabilities-addressed-in-fluent-bit-v4.1-and-backported-to-v4.0/; https://www.oligo.security/blog/critical-vulnerabilities-in-fluent-bit-expose-cloud-environments-to-remote-takeover
CVE: CVE-2025-12970
Published: 2025-11-24
Description: The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://fluentbit.io/blog/2025/10/28/security-vulnerabilities-addressed-in-fluent-bit-v4.1-and-backported-to-v4.0/; https://www.oligo.security/blog/critical-vulnerabilities-in-fluent-bit-expose-cloud-environments-to-remote-takeover
CVE: CVE-2025-12972
Published: 2025-11-24
Description: Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names. When the File option is omitted, the plugin uses untrusted tag input to construct file paths. This allows attackers with network access to craft tags containing path traversal sequences that cause Fluent Bit to write files outside the intended output directory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://fluentbit.io/blog/2025/10/28/security-vulnerabilities-addressed-in-fluent-bit-v4.1-and-backported-to-v4.0/; https://www.oligo.security/blog/critical-vulnerabilities-in-fluent-bit-expose-cloud-environments-to-remote-takeover
CVE: CVE-2025-12977
Published: 2025-11-24
Description: Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs. An attacker with network access or the ability to write records into Splunk or Elasticsearch can supply tag_key values containing special characters such as newlines or ../ that are treated as valid tags. Because tags influence routing and some outputs derive filenames or contents from tags, this can allow newline injection, path traversal, forged record injection, or log misrouting, impacting data integrity and log routing.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-1287
References: https://fluentbit.io/blog/2025/10/28/security-vulnerabilities-addressed-in-fluent-bit-v4.1-and-backported-to-v4.0/; https://www.oligo.security/blog/critical-vulnerabilities-in-fluent-bit-expose-cloud-environments-to-remote-takeover
CVE: CVE-2025-12978
Published: 2025-11-24
Description: Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that fails to enforce exact key-length matching. This allows crafted inputs where a tag prefix is incorrectly treated as a full match. A remote attacker with authenticated or exposed access to these input endpoints can exploit this behavior to manipulate tags and redirect records to unintended destinations. This compromises the authenticity of ingested logs and can allow injection of forged data, alert flooding and routing manipulation.
CVSS Score: 5.4 (MEDIUM)
References: https://fluentbit.io/announcements/v4.1.0/
CVE: CVE-2025-13541
Published: 2025-11-24
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-13598
Published: 2025-11-24
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-10554
Published: 2025-11-24
Description: A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10554
CVE: CVE-2025-10555
Published: 2025-11-24
Description: A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10555
CVE: CVE-2025-40213
Published: 2025-11-24
Description: In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete

There is a BUG: KASAN: stack-out-of-bounds in set_mesh_sync due to
memcpy from badly declared on-stack flexible array.

Another crash is in set_mesh_complete() due to double list_del via
mgmt_pending_valid + mgmt_pending_remove.

Use DEFINE_FLEX to declare the flexible array right, and don't memcpy
outside bounds.

As mgmt_pending_valid removes the cmd from list, use mgmt_pending_free,
and also report status on error.
References: https://git.kernel.org/stable/c/1c9aca1787e8395a2c59fef20e[PII_REDACTED]69c5; https://git.kernel.org/stable/c/5c19daa93d9af29f1f46251b47e1ea66bcc8d679; https://git.kernel.org/stable/c/e8785404de06a69d89dcdd1e9a0b6ea42dc6d327