deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-20079
Published: 2025-05-13
Description: Uncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01263.html
CVE: CVE-2025-20082
Published: 2025-05-13
Description: Time-of-check time-of-use race condition in the UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-367
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01269.html
CVE: CVE-2025-20083
Published: 2025-05-13
Description: Improper authentication in the firmware for the Intel(R) Slim Bootloader may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01290.html
CVE: CVE-2025-20084
Published: 2025-05-13
Description: Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 3.5 (LOW)
CWE: CWE-400
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-20095
Published: 2025-05-13
Description: Incorrect Default Permissions for some Intel(R) RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01305.html
CVE: CVE-2025-20100
Published: 2025-05-13
Description: Improper access control in the memory controller configurations for some Intel(R) Xeon(R) 6 processor with E-cores may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01278.html
CVE: CVE-2025-20101
Published: 2025-05-13
Description: Out-of-bounds read for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable information disclosure or denial of service via local access.
CVSS Score: 8.4 (HIGH)
CWE: CWE-125
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html
CVE: CVE-2025-20103
Published: 2025-05-13
Description: Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-410
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html; https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html
CVE: CVE-2025-20104
Published: 2025-05-13
Description: Race condition in some Administrative Tools for some Intel(R) Network Adapters package before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-362
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01293.html
CVE: CVE-2025-20108
Published: 2025-05-13
Description: Uncontrolled search path element for some Intel(R) Network Adapter Driver installers for Windows 11 before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01293.html
CVE: CVE-2025-20611
Published: 2025-05-13
Description: Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-20612
Published: 2025-05-13
Description: Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-279
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-20616
Published: 2025-05-13
Description: Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-20618
Published: 2025-05-13
Description: Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 7.9 (HIGH)
CWE: CWE-121
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html
CVE: CVE-2025-20623
Published: 2025-05-13
Description: Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core™ processors (10th Generation) may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.6 (MEDIUM)
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html; https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html
CVE: CVE-2025-20624
Published: 2025-05-13
Description: Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via adjacent access.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-200
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-20629
Published: 2025-05-13
Description: Insecure inherited permissions in the NVM Update Utility for some Intel(R) Ethernet Network Adapter E810 Series before version 4.60 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-277
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01295.html
CVE: CVE-2025-21081
Published: 2025-05-13
Description: Protection mechanism failure for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-693
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-21094
Published: 2025-05-13
Description: Improper input validation in the UEFI firmware DXE module for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01269.html
CVE: CVE-2025-21099
Published: 2025-05-13
Description: Uncontrolled search path for some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html
CVE: CVE-2025-21100
Published: 2025-05-13
Description: Improper initialization in the UEFI firmware for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-665
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01269.html
CVE: CVE-2025-22446
Published: 2025-05-13
Description: Inadequate encryption strength for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-326
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-22448
Published: 2025-05-13
Description: Insecure inherited permissions for some Intel(R) Simics(R) Package Manager software before version 1.12.0 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-277
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01297.html
CVE: CVE-2025-22843
Published: 2025-05-13
Description: Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-279
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-22844
Published: 2025-05-13
Description: Improper access control for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an unauthenticated user to potentially enable information disclosure via adjacent access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-22848
Published: 2025-05-13
Description: Improper conditions check for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 3.5 (LOW)
CWE: CWE-754
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-22892
Published: 2025-05-13
Description: Uncontrolled resource consumption for some OpenVINO™ model server software maintained by Intel(R) before version 2024.4 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01272.html
CVE: CVE-2025-22895
Published: 2025-05-13
Description: Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-23233
Published: 2025-05-13
Description: Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 3.5 (LOW)
CWE: CWE-279
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE: CVE-2025-24308
Published: 2025-05-13
Description: Improper input validation in the UEFI firmware error handler for the Intel(R) Server D50DNP and M50FCP may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01269.html
CVE: CVE-2025-24495
Published: 2025-05-13
Description: Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.6 (MEDIUM)
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html; https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html
CVE: CVE-2025-30314
Published: 2025-05-13
Description: Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/connect/apsb25-36.html
CVE: CVE-2025-30315
Published: 2025-05-13
Description: Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/connect/apsb25-36.html
CVE: CVE-2025-30316
Published: 2025-05-13
Description: Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/connect/apsb25-36.html
CVE: CVE-2025-43548
Published: 2025-05-13
Description: Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/dimension/apsb25-45.html
CVE: CVE-2025-43549
Published: 2025-05-13
Description: Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb25-46.html
CVE: CVE-2025-43551
Published: 2025-05-13
Description: Substance3D - Stager versions 3.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb25-46.html
CVE: CVE-2025-43553
Published: 2025-05-13
Description: Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or executables, an attacker could manipulate the search path to load a malicious resource, potentially executing arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-51.html
CVE: CVE-2025-43554
Published: 2025-05-13
Description: Substance3D - Modeler versions 1.21.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-51.html
CVE: CVE-2025-43559
Published: 2025-05-13
Description: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-52.html
CVE: CVE-2025-43560
Published: 2025-05-13
Description: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-52.html
CVE: CVE-2025-43561
Published: 2025-05-13
Description: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass authentication mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-863
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-52.html
CVE: CVE-2025-43562
Published: 2025-05-13
Description: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-52.html
CVE: CVE-2025-43563
Published: 2025-05-13
Description: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitation of this issue does not require user interaction, and scope is changed.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-52.html
CVE: CVE-2025-43564
Published: 2025-05-13
Description: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitation of this issue does not require user interaction, and scope is changed
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-863
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-52.html
CVE: CVE-2025-43565
Published: 2025-05-13
Description: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security protections and execute code. Exploitation of this issue requires user interaction and scope is changed.
CVSS Score: 8.4 (HIGH)
CWE: CWE-863
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-52.html
CVE: CVE-2025-43566
Published: 2025-05-13
Description: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. A high-privileged attacker could leverage this vulnerability to bypass security protections and gain unauthorized read access. Exploitation of this issue does not require user interaction and scope is changed.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-52.html
CVE: CVE-2025-43567
Published: 2025-05-13
Description: Adobe Connect versions 12.8 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/connect/apsb25-36.html
CVE: CVE-2025-43568
Published: 2025-05-13
Description: Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb25-46.html
CVE: CVE-2025-43569
Published: 2025-05-13
Description: Substance3D - Stager versions 3.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb25-46.html
CVE: CVE-2025-43570
Published: 2025-05-13
Description: Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb25-46.html
CVE: CVE-2025-43571
Published: 2025-05-13
Description: Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb25-46.html
CVE: CVE-2025-43572
Published: 2025-05-13
Description: Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/dimension/apsb25-45.html
CVE: CVE-2025-4668
Published: 2025-05-13
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-26646
Published: 2025-05-13
Description: External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.
CVSS Score: 8.0 (HIGH)
CWE: CWE-73
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26646