deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-4614
Published: 2025-10-09
Description: An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked.  

The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators.

Cloud NGFW and Prisma® Access are not affected by this vulnerability.
CVSS Score: 2.7 (LOW)
CWE: CWE-497
References: https://security.paloaltonetworks.com/CVE-2025-4614
CVE: CVE-2025-4615
Published: 2025-10-09
Description: An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands.

The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators.

Cloud NGFW and Prisma® Access are not affected by this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-83
References: https://security.paloaltonetworks.com/CVEN-2025-4615
CVE: CVE-2025-55200
Published: 2025-10-09
Description: BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.13, the "Shared Notes" feature contains a Stored Cross-Site Scripting (XSS) vulnerability with the input location being the "Username" field and the output location on the "Shared Notes" page, when a user with a malicious username is editing content. This vulnerability allows a low-privileged user to execute arbitrary JavaScript in the context of higher-privileged users (e.g., Admins) who open the Shared Notes page. Version 3.0.13 fixes the issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://github.com/bigbluebutton/bbb-pads/pull/67; https://github.com/bigbluebutton/bbb-pads/releases/tag/v1.5.4; https://github.com/bigbluebutton/bigbluebutton/pull/23693
CVE: CVE-2025-59146
Published: 2025-10-09
Description: New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. An authenticated Server-Side Request Forgery (SSRF) vulnerability exists in versions prior to 0.9.0.5. A feature within the application allows authenticated users to submit a URL for the server to process its content. The application fails to properly validate this user-supplied URL before making a server-side request. This vulnerability is not limited to image URLs and can be triggered with any link provided to the vulnerable endpoint. Since user registration is often enabled by default, any registered user can exploit this. By crafting a malicious URL, an attacker can coerce the server to send requests to arbitrary internal or external services. The vulnerability has been patched in version 0.9.0.5. The patch introduces a comprehensive, user-configurable SSRF protection module, which is enabled by default to protect server security. This new feature provides administrators with granular control over outbound requests made by the server. For users who cannot upgrade immediately, some temporary mitigation options are available. Enable new-api image processing worker (new-api-worker) and/or configure egress firewall rules.
CVSS Score: 8.5 (HIGH)
CWE: CWE-918
References: https://github.com/QuantumNous/new-api/commit/ef634160986c6f6b087cbfe131074fda862928af; https://github.com/QuantumNous/new-api/security/advisories/GHSA-xxv6-m6fx-vfhh
CVE: CVE-2025-11553
Published: 2025-10-09
Description: A weakness has been identified in code-projects Courier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-courier.php. Executing manipulation of the argument Shippername can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/QuJun1/cve/issues/5; https://vuldb.com/?ctiid.327713
CVE: CVE-2025-11554
Published: 2025-10-09
Description: A security vulnerability has been detected in Portabilis i-Educar up to 2.9.10. Affected by this issue is some unknown functionality of the file app/Http/Controllers/AccessLevelController.php of the component User Type Handler. The manipulation leads to insecure inherited permissions. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-277
References: https://github.com/m3m0o/portabilis-ieducar-user-type-privilege-escalation; https://vuldb.com/?ctiid.327714; https://vuldb.com/?id.327714
CVE: CVE-2025-60316
Published: 2025-10-09
Description: SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/view_customer.php via the ID parameter.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-89
References: https://github.com/ChuckBartowski7/Vulnerability-Research/blob/main/CVE-2025-60316/README.md; https://www.youtube.com/watch?v=KopMozY6X5w&t=191s&ab_channel=MayuriK
CVE: CVE-2016-15047
Published: 2025-10-09
Description: AVTECH devices that include the CloudSetup.cgi management endpoint are vulnerable to authenticated OS command injection. The `exefile` parameter in CloudSetup.cgi is passed to the underlying system command execution without proper validation or whitelisting. An authenticated attacker who can invoke this endpoint can supply crafted input to execute arbitrary system commands as root. Successful exploitation grants full control of the device, and - depending on deployment and whether the device stores credentials or has network reachability to internal systems - may enable credential theft, lateral movement, or data exfiltration. The archived SEARCH-LAB disclosure implies that this vulnerability was remediated in early 2017, but AVTECH has not defined an affected version range.
CWE: CWE-78
References: https://web.archive.org/web/[PII_REDACTED]5806/http://www.search-lab.hu/media/vulnerability_matrix.txt; https://web.archive.org/web/[PII_REDACTED]5729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities; https://www.exploit-db.com/exploits/40500
CVE: CVE-2025-11555
Published: 2025-10-09
Description: A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/calendar_of_events.php. The manipulation of the argument date_start results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/Rowantu/CVE/issues/2; https://vuldb.com/?ctiid.327715; https://vuldb.com/?id.327715
CVE: CVE-2025-11556
Published: 2025-10-09
Description: A flaw has been found in code-projects Simple Leave Manager 1.0. This vulnerability affects unknown code of the file /user.php. This manipulation of the argument table causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/asd1238525/cve/blob/main/SQL8.md; https://vuldb.com/?ctiid.327716
CVE: CVE-2025-11557
Published: 2025-10-09
Description: A vulnerability has been found in projectworlds Gate Pass Management System 1.0. This issue affects some unknown processing of the file /add-pass.php. Such manipulation of the argument fullname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/QIU-DIE/CVE/issues/6; https://vuldb.com/?ctiid.327717; https://vuldb.com/?id.327717
CVE: CVE-2025-11558
Published: 2025-10-09
Description: A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/user_index_search.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/cxm947/CVE-repoort-251008; https://vuldb.com/?ctiid.327718
CVE: CVE-2025-34248
Published: 2025-10-09
Description: D-Link Nuclias Connect firmware versions < 1.3.1.4 contain a directory traversal vulnerability within /api/web/dnc/global/database/deleteBackup due to improper sanitization of the deleteBackupList parameter. This can allow an authenticated attacker to delete arbitrary files impacting the integrity and availability of the system.
CWE: CWE-22
References: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10472; https://www.dlink.com/en/for-business/nuclias/nuclias-connect; https://www.vulncheck.com/advisories/dlink-nuclias-connect-directory-traversal-to-arbitrary-file-deletion
CVE: CVE-2025-35050
Published: 2025-10-09
Description: Newforma Info Exchange (NIX) accepts serialized .NET data via the '/remoteweb/remote.rem' endpoint, allowing a remote, unauthenticated attacker to execute arbitrary code with 'NT AUTHORITY\NetworkService' privileges. The vulnerable endpoint is used by Newforma Project Center Server (NPCS), so a compromised NIX system can be used to attack an associated NPCS system. To mitigate this vulnerability, restrict network access to the '/remoteweb/remote.rem' endpoint, for example using the IIS URL Rewrite Module.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-502
References: https://learn.microsoft.com/en-us/iis/extensions/url-rewrite-module/using-the-url-rewrite-module; https://projectcenter.help.newforma.com/overviews/info_exchange_overview/; https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json
CVE: CVE-2025-35051
Published: 2025-10-09
Description: Newforma Project Center Server (NPCS) accepts serialized .NET data via the '/ProjectCenter.rem' endpoint on 9003/tcp, allowing a remote, unauthenticated attacker to execute arbitrary code with 'NT AUTHORITY\NetworkService' privileges. According to the recommended architecture, the vulnerable NPCS endpoint is only accessible on an internal network. To mitigate this vulnerability, restrict network access to NPCS.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-502
References: https://projectcenter.help.newforma.com/overviews/info_exchange_overview/; https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json; https://www.cve.org/CVERecord?id=CVE-2025-35051
CVE: CVE-2025-35052
Published: 2025-10-09
Description: Newforma Info Exchange (NIX) uses a hard-coded key to encrypt certain query parameters. Some encrypted parameter values can specify paths to download files, potentially bypassing authentication and authorization, for example, the 'qs' parameter used in '/DownloadWeb/download.aspx'. This key is shared across NIX installations. NIX 2023.3 and 2024.1 limit the use of hard-coded keys.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-321
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json; https://www.cve.org/CVERecord?id=CVE-2025-35052
CVE: CVE-2025-35053
Published: 2025-10-09
Description: Newforma Info Exchange (NIX) accepts requests to '/UserWeb/Common/MarkupServices.ashx' specifying the 'DownloadExportedPDF' command that allow an authenticated user to read and delete arbitrary files with 'NT AUTHORITY\NetworkService' privileges.

In Newforma before 2023.1, anonymous access is enabled by default (CVE-2025-35062), allowing an otherwise unauthenticated attacker to effectively authenticate as 'anonymous' and exploit this file upload vulnerability.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22, CWE-73
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json; https://www.cve.org/CVERecord?id=CVE-2025-35053; https://www.cve.org/CVERecord?id=CVE-2025-35062
CVE: CVE-2025-35054
Published: 2025-10-09
Description: Newforma Info Exchange (NIX) stores credentials  used to configure NPCS in 'HKLM\Software\WOW6432Node\Newforma\<version>\Credentials'. The credentials are encrypted but the encryption key is stored in the same registry location. Authenticated users can access both the credentials and the encryption key. If these are Active Directory credentials, an attacker may be able to gain access to additional systems and resources.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-257, CWE-522, CWE-922
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json; https://www.cve.org/CVERecord?id=CVE-2025-35054
CVE: CVE-2025-35055
Published: 2025-10-09
Description: Newforma Info Exchange (NIX) '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrary file to any location writable by the NIX application. An attacker can upload and run a web shell or other content executable by the web server. An attacker can also delete directories.  In Newforma before 2023.1, anonymous access is enabled by default (CVE-2025-35062), allowing an otherwise unauthenticated attacker to effectively authenticate as 'anonymous' and exploit this file upload vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-434
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json; https://www.cve.org/CVERecord?id=CVE-2025-35055; https://www.cve.org/CVERecord?id=CVE-2025-35062
CVE: CVE-2025-35056
Published: 2025-10-09
Description: Newforma Info Exchange (NIX) '/UserWeb/Common/MarkupServices.ashx' 'StreamStampImage' accepts an encrypted file path and returns an image of the specified file. An authenticated attacker can read arbitrary files subject to the privileges of NIX, typically 'NT AUTHORITY\NetworkService', and the ability of StreamStampImage to process the file. The encrypted file path can be generated using the shared, hard-coded secret key described in CVE-2025-35052. This vulnerability cannot be exploited as an 'anonymous' user as described in CVE-2025-35062.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json; https://www.cve.org/CVERecord?id=CVE-2025-35056; https://www.cve.org/CVERecord?id=CVE-2025-35062
CVE: CVE-2025-35057
Published: 2025-10-09
Description: Newforma Info Exchange (NIX) '/RemoteWeb/IntegrationServices.ashx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the NIX service account.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-294
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json; https://www.cve.org/CVERecord?id=CVE-2025-35057
CVE: CVE-2025-35058
Published: 2025-10-09
Description: Newforma Info Exchange (NIX) '/UserWeb/Common/MarkupServices.ashx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the customer-configured NIX service account.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-294
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json; https://www.cve.org/CVERecord?id=CVE-2025-35058
CVE: CVE-2025-35059
Published: 2025-10-09
Description: Newforma Info Exchange (NIX) '/DownloadWeb/hyperlinkredirect.aspx' provides an unauthenticated URL redirect via the 'nhl' parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-601
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json; https://www.cve.org/CVERecord?id=CVE-2025-35059
CVE: CVE-2025-35060
Published: 2025-10-09
Description: Newforma Info Exchange (NIX) provides a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files that contain JavaScript or other content that may be executed or rendered by a web browser using a mobile user agent.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json; https://www.cve.org/CVERecord?id=CVE-2025-35060
CVE: CVE-2025-35061
Published: 2025-10-09
Description: Newforma Info Exchange (NIX) '/NPCSRemoteWeb/LegacyIntegrationServices.asmx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the user-configured NIX service account.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-294
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json; https://www.cve.org/CVERecord?id=CVE-2025-35061
CVE: CVE-2025-35062
Published: 2025-10-09
Description: Newforma Info Exchange (NIX) before version 2023.1 by default allows anonymous authentication which allows an unauthenticated attacker to exploit additional vulnerabilities that require authentication.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json; https://www.cve.org/CVERecord?id=CVE-2025-35062
CVE: CVE-2025-43296
Published: 2025-10-09
Description: A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeeper checks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-352, CWE-693, CWE-703
References: https://support.apple.com/en-us/125110
CVE: CVE-2025-55321
Published: 2025-10-09
Description: Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an unauthorized attacker to perform spoofing over a network.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55321
CVE: CVE-2025-59218
Published: 2025-10-09
Description: Azure Entra ID Elevation of Privilege Vulnerability
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59218
CVE: CVE-2025-59246
Published: 2025-10-09
Description: Azure Entra ID Elevation of Privilege Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59246
CVE: CVE-2025-59247
Published: 2025-10-09
Description: Azure PlayFab Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-269, CWE-565
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59247
CVE: CVE-2025-59252
Published: 2025-10-09
Description: Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-77
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59252
CVE: CVE-2025-59271
Published: 2025-10-09
Description: Redis Enterprise Elevation of Privilege Vulnerability
CVSS Score: 8.7 (HIGH)
CWE: CWE-285
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59271
CVE: CVE-2025-59272
Published: 2025-10-09
Description: Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform information disclosure locally.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-77
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59272
CVE: CVE-2025-59286
Published: 2025-10-09
Description: Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-77
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59286
CVE: CVE-2025-60375
Published: 2025-10-09
Description: The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including administrative accounts, without providing valid credentials.
CVSS Score: 7.3 (HIGH)
CWE: CWE-289
References: https://github.com/AhamedYaseen03/CVE-2025-60375
CVE: CVE-2025-61601
Published: 2025-10-09
Description: BigBlueButton is an open-source virtual classroom. A Denial of Service (DoS) vulnerability in versions prior to 3.0.13 allows any authenticated user to freeze or crash the entire server by abusing the polling feature's `Choices` response type. By submitting a malicious payload with a massive array in the `answerIds` field, the attacker can cause the current meeting — and potentially all meetings on the server — to become unresponsive. Version 3.0.13 contains a patch. No known workarounds are available.
CVSS Score: 7.5 (HIGH)
CWE: CWE-703
References: https://github.com/bigbluebutton/bigbluebutton/pull/23662; https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-73j3-v3fq-fqx5; https://www.youtube.com/watch?v=BwROSVIYjOY
CVE: CVE-2025-61602
Published: 2025-10-09
Description: BigBlueButton is an open-source virtual classroom. A denial-of-service (DoS) vulnerability in versions prior to 3.0.13 allows any authenticated user to crash the chat functionality for all participants in a meeting by sending a malformed `reactionEmojiId` in the GraphQL mutation `chatSendMessageReaction`. Version 3.0.13 contains a patch. No known workarounds are available.
CVSS Score: 7.5 (HIGH)
CWE: CWE-703
References: https://github.com/bigbluebutton/bigbluebutton/pull/23651; https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-45j2-m26c-3pcm; https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-45j2-m26c-3pcm
CVE: CVE-2025-61773
Published: 2025-10-09
Description: pyLoad is a free and open-source download manager written in Python. In versions prior to 0.5.0b3.dev91, pyLoad web interface contained insufficient input validation in both the Captcha script endpoint and the Click'N'Load (CNL) Blueprint. This flaw allowed untrusted user input to be processed unsafely, which could be exploited by an attacker to inject arbitrary content into the web UI or manipulate request handling. The vulnerability could lead to client-side code execution (XSS) or other unintended behaviors when a malicious payload is submitted. user-supplied parameters from HTTP requests were not adequately validated or sanitized before being passed into the application logic and response generation. This allowed crafted input to alter the expected execution flow. CNL (Click'N'Load) blueprint exposed unsafe handling of untrusted parameters in HTTP requests. The application did not consistently enforce input validation or encoding, making it possible for an attacker to craft malicious requests. Version 0.5.0b3.dev91 contains a patch for the issue.
CVSS Score: 8.1 (HIGH)
CWE: CWE-74, CWE-79, CWE-94, CWE-116
References: https://github.com/pyload/pyload/commit/5823327d0b797161c7195a1f660266d30a69f0ca; https://github.com/pyload/pyload/pull/4624; https://github.com/pyload/pyload/security/advisories/GHSA-cjjf-27cc-pvmv
CVE: CVE-2025-61779
Published: 2025-10-09
Description: Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them. In versions prior to 0.15.0, the attestation-policy endpoint didn't check if the kbs-client submitting the request was actually authenticated (had the right key). This allowed any kbs-client to actually change the attestation policy. Version 0.15.0 fixes the issue.
CWE: CWE-639
References: https://github.com/confidential-containers/trustee/commit/3a7d04a70918fa503a00974dcae653cf9f0640e0; https://github.com/confidential-containers/trustee/pull/957; https://github.com/confidential-containers/trustee/security/advisories/GHSA-49mc-2q77-m99x