deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-32122
Published: 2025-04-08
Description: A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.
CVSS Score: 2.3 (LOW)
CWE: CWE-257
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-111
CVE: CVE-2024-46671
Published: 2025-04-08
Description: An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, version 7.2.10 and below, version 7.0.11 and below widgets dashboard may allow an authenticated attacker with at least read-only admin permission to perform operations on the dashboard of other administrators via crafted requests.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-286
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-184
CVE: CVE-2024-50565
Published: 2025-04-08
Description: A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15 and 6.2.0 through 6.2.16, Fortinet FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.15 and 2.0.0 through 2.0.14, Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14 and 6.2.0 through 6.2.13, Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14 and 6.2.0 through 6.2.13, Fortinet FortiVoice version 7.0.0 through 7.0.2, 6.4.0 through 6.4.8 and 6.0.0 through 6.0.12 and Fortinet FortiWeb version 7.4.0 through 7.4.2, 7.2.0 through 7.2.10, 7.0.0 through 7.0.10 allows an unauthenticated attacker in a man-in-the-middle position to impersonate the management device (FortiCloud server or/and in certain conditions, FortiManager), via intercepting the FGFM authentication request between the management device and the managed device
CVSS Score: 3.1 (LOW)
CWE: CWE-300
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-046
CVE: CVE-2024-52962
Published: 2025-04-08
Description: An Improper Output Neutralization for Logs vulnerability [CWE-117] in FortiAnalyzer version 7.6.1 and below, version 7.4.5 and below, version 7.2.8 and below, version 7.0.13 and below and FortiManager version 7.6.1 and below, version 7.4.5 and below, version 7.2.8 and below, version 7.0.12 and below may allow an unauthenticated remote attacker to pollute the logs via crafted login requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-117
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-453
CVE: CVE-2024-54024
Published: 2025-04-08
Description: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolator before version 2.4.6 allows a privileged attacker with super-admin profile and CLI access to execute unauthorized code via specifically crafted HTTP requests.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-397
CVE: CVE-2024-54025
Published: 2025-04-08
Description: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolator CLI before version 2.4.6 allows a privileged attacker to execute unauthorized code or commands via crafted CLI requests.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-392
CVE: CVE-2025-22855
Published: 2025-04-08
Description: An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Fortinet FortiClient before 7.4.1 may allow the EMS administrator to send messages containing javascript code.
CVSS Score: 2.7 (LOW)
CWE: CWE-79
References: https://fortiguard.fortinet.com/psirt/FG-IR-23-344
CVE: CVE-2025-25254
Published: 2025-04-08
Description: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, 7.2 all versions, 7.0 all versions endpoint may allow an authenticated admin to access and modify the filesystem via crafted requests.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-474
CVE: CVE-2025-30150
Published: 2025-04-08
Description: Shopware 6 is an open commerce platform based on Symfony Framework and Vue. Through the store-api it is possible as a attacker to check if a specific e-mail address has an account in the shop. Using the store-api endpoint /store-api/account/recovery-password you get the response, which indicates clearly that there is no account for this customer. In contrast you get a success response if the account was found. This vulnerability is fixed in Shopware 6.6.10.3 or 6.5.8.17. For older versions of 6.4, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204
References: https://github.com/shopware/shopware/security/advisories/GHSA-hh7j-6x3q-f52h
CVE: CVE-2025-30151
Published: 2025-04-08
Description: Shopware is an open commerce platform. It's possible to pass long passwords that leads to Denial Of Service via forms in Storefront forms or Store-API. This vulnerability is fixed in 6.6.10.3 or 6.5.8.17. For older versions of 6.4, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/shopware/shopware/security/advisories/GHSA-cgfj-hj93-rmh2
CVE: CVE-2025-31498
Published: 2025-04-08
Description: c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqueue a query either due to a DNS Cookie Failure or when the upstream server does not properly support EDNS, or possibly on TCP queries if the remote closed the connection immediately after a response. If there was an issue trying to put that new transaction on the wire, it would close the connection handle, but read_answers() was still expecting the connection handle to be available to possibly dequeue other responses. In theory a remote attacker might be able to trigger this by flooding the target with ICMP UNREACHABLE packets if they also control the upstream nameserver and can return a result with one of those conditions, this has been untested. Otherwise only a local attacker might be able to change system behavior to make send()/write() return a failure condition. This vulnerability is fixed in 1.34.5.
CWE: CWE-416
References: https://github.com/c-ares/c-ares/commit/29d[PII_REDACTED]9d8c0ba910254a3dd4f482ea2d1; https://github.com/c-ares/c-ares/pull/821; https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v
CVE: CVE-2025-22458
Published: 2025-04-08
Description: DLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an authenticated attacker to escalate to System.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://forums.ivanti.com/s/article/Security-Advisory-EPM-April-2025-for-EPM-2024-and-EPM-2022-SU6; http://seclists.org/fulldisclosure/2025/May/17
CVE: CVE-2025-22459
Published: 2025-04-08
Description: Improper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthenticated attacker to intercept limited traffic between clients and servers.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-296, CWE-295
References: https://forums.ivanti.com/s/article/Security-Advisory-EPM-April-2025-for-EPM-2024-and-EPM-2022-SU6
CVE: CVE-2025-22461
Published: 2025-04-08
Description: SQL injection in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote authenticated attacker with admin privileges to achieve code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://forums.ivanti.com/s/article/Security-Advisory-EPM-April-2025-for-EPM-2024-and-EPM-2022-SU6
CVE: CVE-2025-22464
Published: 2025-04-08
Description: An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an attacker with local access to write arbitrary data into memory causing a denial-of-service condition.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-822
References: https://forums.ivanti.com/s/article/Security-Advisory-EPM-April-2025-for-EPM-2024-and-EPM-2022-SU6
CVE: CVE-2025-22465
Published: 2025-04-08
Description: Reflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthenticated attacker to execute arbitrary javascript in a victim's browser. Unlikely user interaction is required.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://forums.ivanti.com/s/article/Security-Advisory-EPM-April-2025-for-EPM-2024-and-EPM-2022-SU6
CVE: CVE-2025-22466
Published: 2025-04-08
Description: Reflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthenticated attacker to obtain admin privileges. User interaction is required.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://forums.ivanti.com/s/article/Security-Advisory-EPM-April-2025-for-EPM-2024-and-EPM-2022-SU6
CVE: CVE-2025-32020
Published: 2025-04-08
Description: The crud-query-parser library parses query parameters from HTTP requests and converts them to database queries. Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if you are using the TypeORM adapter, ordering is enabled and you have not set-up a property filter.  This vulnerability is fixed in 0.1.0.
CWE: CWE-89
References: https://github.com/Guichaguri/crud-query-parser/security/advisories/GHSA-9r25-rp3p-h2w4
CVE: CVE-2025-32406
Published: 2025-04-08
Description: An XXE issue in the Director NBR component in NAKIVO Backup & Replication 10.3.x through 11.0.1 before 11.0.2 allows remote attackers fetch and parse the XML response.
CVSS Score: 8.6 (HIGH)
CWE: CWE-611
References: https://helpcenter.nakivo.com/Knowledge-Base/Content/Security-Advisory/CVE-2025-32406.htm
CVE: CVE-2025-1095
Published: 2025-04-08
Description: IBM Personal Communications v14 and v15 include a Windows service that is vulnerable to local privilege escalation (LPE). The vulnerability allows any interactively logged in users on the target computer to run commands with full privileges in the context of NT AUTHORITY\SYSTEM. This allows for a low privileged attacker to escalate their privileges. This vulnerability is due to an incomplete fix for CVE-2024-25029.
CVSS Score: 8.8 (HIGH)
CWE: CWE-420
References: https://www.ibm.com/support/pages/node/7230335
CVE: CVE-2025-27078
Published: 2025-04-08
Description: A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject commands into the underlying operating system while using the CLI. Successful exploitation could lead to complete system compromise.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-78
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04844en_us&docLocale=en_US
CVE: CVE-2025-27079
Published: 2025-04-08
Description: A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perform remote code execution (RCE). Successful exploitation could allow an attacker to execute arbitrary operating system commands on the underlying operating system leading to potential system compromise.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-78
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04844en_us&docLocale=en_US
CVE: CVE-2025-2285
Published: 2025-04-08
Description: A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data.  If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-457, CWE-824
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1726.html
CVE: CVE-2025-2286
Published: 2025-04-08
Description: A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data.  If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-457, CWE-824
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1726.html
CVE: CVE-2025-2287
Published: 2025-04-08
Description: A local code execution vulnerability exists in the Rockwell Automation Arena®  due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data.  If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-457, CWE-824
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1726.html
CVE: CVE-2025-2288
Published: 2025-04-08
Description: A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data.   If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1726.html
CVE: CVE-2025-2293
Published: 2025-04-08
Description: A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data.   If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1726.html
CVE: CVE-2025-2829
Published: 2025-04-08
Description: A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data.   If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1726.html
CVE: CVE-2025-32017
Published: 2025-04-08
Description: Umbraco is a free and open source .NET content management system. Authenticated users to the Umbraco backoffice are able to craft management API request that exploit a path traversal vulnerability to upload files into a incorrect location. The issue affects Umbraco 14+ and is patched in 14.3.4 and 15.3.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-23
References: https://github.com/umbraco/Umbraco-CMS/commit/06a2a500b358ce15b1e228391eb60bd517c6e833; https://github.com/umbraco/Umbraco-CMS/commit/d3c1443b14b1076faf13d1bcecc42860fdf5fad8; https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-q62r-8ppj-xvf4
CVE: CVE-2025-32018
Published: 2025-04-08
Description: Cursor is a code editor built for programming with AI. In versions 0.45.0 through 0.48.6, the Cursor app introduced a regression affecting the set of file paths the Cursor Agent is permitted to modify automatically. Under specific conditions, the agent could be prompted, either directly by the user or via maliciously crafted context, to automatically write to files outside of the opened workspace. This behavior required deliberate prompting, making successful exploitation highly impractical in real-world scenarios. Furthermore, the edited file was still displayed in the UI as usual for user review, making it unlikely for the edit to go unnoticed by the user. This vulnerability is fixed in 0.48.7.
CVSS Score: 8.0 (HIGH)
CWE: CWE-22
References: https://github.com/getcursor/cursor/security/advisories/GHSA-qjh8-mh96-fc86
CVE: CVE-2025-32024
Published: 2025-04-08
Description: bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image meta data from JPEG, TIFF, PNG, and WebP files. The EXIF data format allows for defining excessively large data structures in relatively small payloads. Before v0.10.0, If you didn't trust the input images, this could be abused to construct denial-of-service attacks. v0.10.0 added LimitNumTags (default 5000) and LimitTagSize (default 10000) options.
CWE: CWE-770
References: https://github.com/bep/imagemeta/commit/4fd89616d8bf7f9bb892360d3fb19080ec2b4602; https://github.com/bep/imagemeta/security/advisories/GHSA-q7rw-w4cq-2j6w
CVE: CVE-2025-32025
Published: 2025-04-08
Description: bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image meta data from JPEG, TIFF, PNG, and WebP files. The buffer created for parsing metadata for PNG and WebP images was only bounded by their input data type, which could lead to potentially large memory allocation, and unreasonably high for image metadata. Before v0.11.0, If you didn't trust the input images, this could be abused to construct denial-of-service attacks. v0.11.0 added a 10 MB upper limit.
CWE: CWE-770
References: https://github.com/bep/imagemeta/commit/ee0de9b029f4e82106729f69559f27c9a404229d; https://github.com/bep/imagemeta/security/advisories/GHSA-fmhh-rw3h-785m
CVE: CVE-2025-32026
Published: 2025-04-08
Description: Element Web is a Matrix web client built using the Matrix React SDK. Element Web, starting from version 1.11.16 up to version 1.11.96, can be configured to load Element Call from an external URL. Under certain conditions, the external page is able to get access to the media encryption keys used for an Element Call call. Version 1.11.97 fixes the problem.
CVSS Score: 3.8 (LOW)
CWE: CWE-497
References: https://github.com/element-hq/element-web/security/advisories/GHSA-69q3-jg79-cg79
CVE: CVE-2025-32028
Published: 2025-04-08
Description: HAX CMS PHP allows you to manage your microsite universe with PHP backend. Multiple file upload functions within the HAX CMS PHP application call a ’save’ function in ’HAXCMSFile.php’. This save function uses a denylist to block specific file types from being uploaded to the server. This list is non-exhaustive and only blocks ’.php’, ’.sh’, ’.js’, and ’.css’ files. The existing logic causes the system to "fail open" rather than "fail closed." This vulnerability is fixed in 10.0.3.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434
References: https://github.com/haxtheweb/issues/security/advisories/GHSA-vj5q-3jv2-cg5p; https://github.com/haxtheweb/issues/security/advisories/GHSA-vj5q-3jv2-cg5p
CVE: CVE-2025-3285
Published: 2025-04-08
Description: A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data.  If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1726.html
CVE: CVE-2025-3286
Published: 2025-04-08
Description: A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data.  If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1726.html
CVE: CVE-2025-3287
Published: 2025-04-08
Description: A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1726.html
CVE: CVE-2025-3288
Published: 2025-04-08
Description: A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data.  If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1726.html
CVE: CVE-2025-3289
Published: 2025-04-08
Description: A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflow. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerability a legitimate user must open a malicious DOE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1726.html
CVE: CVE-2024-48887
Published: 2025-04-08
Description: A  unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-620
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-435
CVE: CVE-2024-52974
Published: 2025-04-08
Description: An issue has been identified where a specially crafted request sent to an Observability API could cause the kibana server to crash.

A successful attack requires a malicious user to have read permissions for Observability assigned to them.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://discuss.elastic.co/t/kibana-7-17-23-and-8-15-1-security-update-esa-2024-36/376923
CVE: CVE-2024-52980
Published: 2025-04-08
Description: A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class could cause the Elasticsearch node to crash.

A successful attack requires a malicious user to have read_pipeline Elasticsearch cluster privilege assigned to them.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://discuss.elastic.co/t/elasticsearch-8-15-1-security-update-esa-2024-34/376919
CVE: CVE-2024-52981
Published: 2025-04-08
Description: An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stackoverflow.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-400
References: https://discuss.elastic.co/t/elasticsearch-7-17-24-and-8-15-1-security-update-esa-2024-37/376924