deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-47946
Published: 2025-05-19
Description: Symfony UX is an initiative and set of libraries to integrate JavaScript tools into applications. Prior to version 2.25.1, rendering `{{ attributes }}` or using any method that returns a `ComponentAttributes` instance (e.g. `only()`, `defaults()`, `without()`) ouputs attribute values directly without escaping. If these values are unsafe (e.g. contain user input), this can lead to HTML attribute injection and XSS vulnerabilities. The issue is fixed in version `2.25.1` of `symfony/ux-twig-component` Those who use `symfony/ux-live-component` must also update it to `2.25.1` to benefit from the fix, as it reuses the `ComponentAttributes` class internally. As a workaround, avoid rendering `{{ attributes }}` or derived objects directly if it may contain untrusted values.
Instead, use `{{ attributes.render('name') }}` for safe output of individual attributes.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/symfony/ux/commit/b5d1c85995c128cb926d47a96cfbfbd500b643a8; https://github.com/symfony/ux/security/advisories/GHSA-5j3w-5pcr-f8hg
CVE: CVE-2025-47949
Published: 2025-05-19
Description: samlify is a Node.js library for SAML single sign-on. A Signature Wrapping attack has been found in samlify prior to version 2.10.0, allowing an attacker to forge a SAML Response to authenticate as any user. An attacker would need a signed XML document by the identity provider. Version 2.10.0 fixes the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://github.com/tngan/samlify/commit/115679acd89f0a37ea3ebd8fff7db54fca3e8af3; https://github.com/tngan/samlify/security/advisories/GHSA-r683-v43c-6xqv
CVE: CVE-2025-3223
Published: 2025-05-19
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova WorkstationST on Windows (EGD Configuration Server modules) allows Path Traversal.This issue affects WorkstationST: WorkstationST V07.10.10C and earlier.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-22
References: https://www.gevernova.com/content/dam/cyber_security/global/en_US/pdfs/2024-09-24_EGD_Config_Server_File_Overwrite.pdf
CVE: CVE-2025-48340
Published: 2025-05-19
Description: Cross-Site Request Forgery (CSRF) vulnerability in Danny Vink User Profile Meta Manager user-profile-meta allows Privilege Escalation.This issue affects User Profile Meta Manager: from n/a through <= 1.02.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/user-profile-meta/vulnerability/wordpress-user-profile-meta-manager-plugin-1-02-csrf-to-privilege-escalation-vulnerability?_s_id=cve
CVE: CVE-2025-1308
Published: 2025-05-19
Description: A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions.
CWE: CWE-116
References: https://support.purestorage.com/Pure_Security
CVE: CVE-2025-3078
Published: 2025-05-20
Description: A passback vulnerability which relates to production printers and office multifunction printers.
CVSS Score: 8.7 (HIGH)
CWE: CWE-522
References: https://canon.jp/support/support-info/250519vulnerability-response; https://corporate.jp.canon/caution/160106; https://psirt.canon/advisory-information/cp2025-004/
CVE: CVE-2025-3079
Published: 2025-05-20
Description: A passback vulnerability which relates to office/small office multifunction printers and laser printers.
CVSS Score: 8.7 (HIGH)
CWE: CWE-522
References: https://canon.jp/support/support-info/250519vulnerability-response; https://corporate.jp.canon/caution/160106; https://psirt.canon/advisory-information/cp2025-004/
CVE: CVE-2025-4971
Published: 2025-05-20
Description: Broadcom Automic
Automation Agent Unix versions <
24.3.0 HF4 and < 21.0.13 HF1 allow low privileged users who have execution
rights on the agent executable to escalate their privileges.
CWE: CWE-426
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25732; https://www.secuvera.de/advisories/secuvera-SA-2025-01.txt
CVE: CVE-2025-2929
Published: 2025-05-20
Description: The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e9299d8f-900b-4487-b135-b82946825e61/
CVE: CVE-2025-4322
Published: 2025-05-20
Description: The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user passwords, including those of administrators, and leverage that to gain access to their account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-620
References: http://themeforest.net/item/motors-car-dealership-wordpress-theme/13987211; https://www.wordfence.com/threat-intel/vulnerabilities/id/61820ca5-5548-4155-b350-df3db1bc1661?source=cve
CVE: CVE-2024-5878
Published: 2025-05-20
Description: Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled SimpleLightbox JavaScript library (version 2.1.5) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/nextgen-gallery/trunk/static/Lightbox/simplelightbox/nextgen_simple_lightbox_init.js; https://plugins.trac.wordpress.org/browser/simplelightbox/trunk/dist/simple-lightbox.js; https://plugins.trac.wordpress.org/changeset/3157076/nextgen-gallery
CVE: CVE-2025-4951
Published: 2025-05-20
Description: Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in the "ScanName" field.
Despite the application preventing the inclusion of special characters within the "ScanName" field, this could be bypassed by modifying the configuration file directly.

This is fixed as of version 7.5.018
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://docs.rapid7.com/release-notes/appspider/20250516/
CVE: CVE-2025-37892
Published: 2025-05-20
Description: In the Linux kernel, the following vulnerability has been resolved:

mtd: inftlcore: Add error check for inftl_read_oob()

In INFTL_findwriteunit(), the return value of inftl_read_oob()
need to be checked. A proper implementation can be
found in INFTL_deleteblock(). The status will be set as
SECTOR_IGNORE to break from the while-loop correctly
if the inftl_read_oob() fails.
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/0300e751170cf80c05ca1a762a7b449e8ca6b693; https://git.kernel.org/stable/c/114d94f095aa405fa9a51484c4be34846d7bb386; https://git.kernel.org/stable/c/1c22356dfb041e5292835c9ff44d5f91bef8dd18
CVE: CVE-2025-40633
Published: 2025-05-20
Description: A Stored Cross-Site Scripting (XSS) vulnerability has been found in 
Koibox for versions prior to e8cbce2. This vulnerability allows an 
authenticated attacker to upload an image containing malicious 
JavaScript code as profile picture in the 
'/es/dashboard/clientes/ficha/' endpoint
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/stored-cross-site-scripting-xss-koibox
CVE: CVE-2025-40634
Published: 2025-05-20
Description: Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.15 build 241203 rel61480. This vulnerability allows an attacker to execute arbitrary code on the device over LAN and WAN networks.
CWE: CWE-121
References: https://www.incibe.es/en/incibe-cert/notices/aviso/stack-based-buffer-overflow-tp-link-archer-ax50
CVE: CVE-2025-30193
Published: 2025-05-20
Description: In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP connection from a client, an attacker can cause a denial of service by crafting a TCP exchange that triggers an exhaustion of the stack and a crash of DNSdist, causing a denial of service.

The remedy is: upgrade to the patched 1.9.10 version.

A workaround is to restrict the maximum number of queries on incoming TCP connections to a safe value, like 50, via the setMaxTCPQueriesPerConnection setting.

We would like to thank Renaud Allard for bringing this issue to our attention.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2025-03.html
CVE: CVE-2025-40635
Published: 2025-05-20
Description: SQL injection vulnerability in Comerzzia Backoffice: Sales Orchestrator 3.0.15. This vulnerability allows an attacker to retrieve, create, update and delete databases via the ‘uidActivity’, ‘codCompany’ and ‘uidInstance’ parameters of the ‘/comerzzia/login’ endpoint.
CWE: CWE-89
References: https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-comerzzia
CVE: CVE-2025-41229
Published: 2025-05-20
Description: VMware Cloud Foundation contains a directory traversal vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to access certain internal services.
CVSS Score: 8.2 (HIGH)
CWE: CWE-22
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25733
CVE: CVE-2025-41230
Published: 2025-05-20
Description: VMware Cloud Foundation contains an information disclosure vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to gain access to sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25733
CVE: CVE-2025-41231
Published: 2025-05-20
Description: VMware Cloud Foundation contains a missing authorisation vulnerability. A malicious actor with access to VMware Cloud Foundation appliance may be able to perform certain unauthorised actions and access limited sensitive information.
CVSS Score: 7.3 (HIGH)
CWE: CWE-862
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25733
CVE: CVE-2025-4977
Published: 2025-05-20
Description: A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00.15_1.00.15NA. Affected by this issue is some unknown functionality of the file /BRS_top.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://github.com/at0de/my_vulns/blob/main/Netgear/DGND3700v2/BRS_top.md; https://vuldb.com/?ctiid.309638; https://vuldb.com/?id.309638
CVE: CVE-2025-4978
Published: 2025-05-20
Description: A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file /BRS_top.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/at0de/my_vulns/blob/main/Netgear/DGND3700v2/backdoor.md; https://vuldb.com/?ctiid.309639; https://vuldb.com/?id.309639
CVE: CVE-2024-53359
Published: 2025-05-20
Description: An issue in Zalo v23.09.01 allows attackers to obtain sensitive user information via a crafted GET request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/crysalix4/CVE/tree/main/CVE-2024-53359; https://www.linkedin.com/in/le-anh-truong/
CVE: CVE-2025-45862
Published: 2025-05-20
Description: TOTOLINK A3002R v4.0.0-B20[PII_REDACTED] was discovered to contain a buffer overflow via the interfacenameds parameter in the formDhcpv6s interface.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121
References: https://github.com/Jiangxiazhe/IOT_hack/blob/main/TOTOLINK/A3002R/7/overflow.md; https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/258/ids/36.html
CVE: CVE-2025-47936
Published: 2025-05-20
Description: TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS and the 13.x branch prior to 13.4.2 LTS, Webhooks are inherently vulnerable to Cross-Site Request Forgery (CSRF), which can be exploited by adversaries to target internal resources (e.g., localhost or other services on the local network). While this is not a vulnerability in TYPO3 itself, it may enable attackers to blindly access systems that would otherwise be inaccessible. An administrator-level backend user account is required to exploit this vulnerability. Users should update to TYPO3 version 12.4.31 LTS or 13.4.12 LTS to fix the problem.
CVSS Score: 3.3 (LOW)
CWE: CWE-918
References: https://github.com/TYPO3/typo3/security/advisories/GHSA-p4xx-m758-3hpx; https://typo3.org/security/advisory/typo3-core-sa-2025-012
CVE: CVE-2025-47937
Published: 2025-05-20
Description: TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12 LTS, when performing a database query involving multiple tables through the database abstraction layer (DBAL), frontend user permissions are only applied via `FrontendGroupRestriction` to the first table. As a result, data from additional tables included in the same query may be unintentionally exposed to unauthorized users. Users should update to TYPO3 version 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, or 13.4.12 LTS to fix the problem.
CVSS Score: 3.7 (LOW)
CWE: CWE-863
References: https://github.com/TYPO3/typo3/security/advisories/GHSA-x8pv-fgxp-8v3x; https://typo3.org/security/advisory/typo3-core-sa-2025-011
CVE: CVE-2025-47938
Published: 2025-05-20
Description: TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12 LTS, the backend user management interface allows password changes without requiring the current password. When an administrator updates their own account or modifies other user accounts via the admin interface, the current password is not requested for verification. This behavior may lower the protection against unauthorized access in scenarios where an admin session is hijacked or left unattended, as it enables password changes without additional authentication. Users should update to TYPO3 version 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, or 13.4.12 LTS to fix the problem.
CVSS Score: 3.8 (LOW)
CWE: CWE-620
References: https://github.com/TYPO3/typo3/security/advisories/GHSA-3jrg-97f3-rqh9; https://typo3.org/security/advisory/typo3-core-sa-2025-013
CVE: CVE-2025-47939
Published: 2025-05-20
Description: TYPO3 is an open source, PHP based web content management system. By design, the file management module in TYPO3’s backend user interface has historically allowed the upload of any file type, with the exception of those that are directly executable in a web server context. This lack of restriction means it is possible to upload files that may be considered potentially harmful, such as executable binaries (e.g., `.exe` files), or files with inconsistent file extensions and MIME types (for example, a file incorrectly named with a `.png` extension but actually carrying the MIME type `application/zip`) starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12 LTS. Although such files are not directly executable through the web server, their presence can introduce indirect risks. For example, third-party services such as antivirus scanners or malware detection systems might flag or block access to the website for end users if suspicious files are found. This could negatively affect the availability or reputation of the site. Users should update to TYPO3 version 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, or 13.4.12 LTS to fix the problem.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-351, CWE-434
References: https://github.com/TYPO3/typo3/security/advisories/GHSA-9hq9-cr36-4wpj; https://typo3.org/security/advisory/typo3-core-sa-2025-014
CVE: CVE-2025-47940
Published: 2025-05-20
Description: TYPO3 is an open source, PHP based web content management system. Starting in version 10.0.0 and prior to versions 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12 LTS, administrator-level backend users without system maintainer privileges can escalate their privileges and gain system maintainer access. Exploiting this vulnerability requires a valid administrator account. Users should update to TYPO3 version 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, or 13.4.12 LTS to fix the problem.
CVSS Score: 7.2 (HIGH)
CWE: CWE-283
References: https://github.com/TYPO3/typo3/security/advisories/GHSA-6frx-j292-c844; https://typo3.org/security/advisory/typo3-core-sa-2025-016
CVE: CVE-2025-47941
Published: 2025-05-20
Description: TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS and the 13.x branch prior to 13.4.2 LTS, the multifactor authentication (MFA) dialog presented during backend login can be bypassed due to insufficient enforcement of access restrictions on all backend routes. Successful exploitation requires valid backend user credentials, as MFA can only be bypassed after successful authentication. Users should update to TYPO3 version 12.4.31 LTS or 13.4.12 LTS to fix the problem.
CVSS Score: 7.2 (HIGH)
CWE: CWE-288
References: https://github.com/TYPO3/typo3/security/advisories/GHSA-744g-7qm9-hjh9; https://typo3.org/security/advisory/typo3-core-sa-2025-015
CVE: CVE-2025-4980
Published: 2025-05-20
Description: A vulnerability has been found in Netgear DGND3700 1.1.00.15_1.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component mini_http. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://github.com/at0de/my_vulns/blob/main/Netgear/DGND3700v2/currentsetting.md; https://vuldb.com/?ctiid.309640; https://vuldb.com/?id.309640
CVE: CVE-2023-33861
Published: 2025-05-20
Description: IBM Security ReaQta EDR 3.12 could allow an attacker to spoof a trusted entity by interfering with the communication path between the host and client.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: https://www.ibm.com/support/pages/node/7233972
CVE: CVE-2025-26086
Published: 2025-05-20
Description: An unauthenticated blind SQL injection vulnerability exists in RSI Queue Management System v3.0 within the TaskID parameter of the get request handler. Attackers can remotely inject time-delayed SQL payloads to induce server response delays, enabling time-based inference and iterative extraction of sensitive database contents without authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://seclists.org/fulldisclosure/2025/May/21; http://seclists.org/fulldisclosure/2025/May/21
CVE: CVE-2025-41225
Published: 2025-05-20
Description: The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to create or modify alarms and run script action may exploit this issue to run arbitrary commands on the vCenter Server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717
CVE: CVE-2025-41226
Published: 2025-05-20
Description: VMware ESXi contains a denial-of-service vulnerability that occurs when performing a guest operation. A malicious actor with guest operation privileges on a VM, who is already authenticated through vCenter Server or ESXi may trigger this issue to create a denial-of-service condition of guest VMs with VMware Tools running and guest operations enabled.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-400
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717
CVE: CVE-2025-41227
Published: 2025-05-20
Description: VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative privileges within a guest operating system may be able to exploit this issue by exhausting memory of the host process leading to a denial-of-service condition.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717
CVE: CVE-2025-41228
Published: 2025-05-20
Description: VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal cookies or redirect to malicious websites.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717
CVE: CVE-2024-45641
Published: 2025-05-20
Description: IBM Security ReaQta EDR 3.12 could allow an attacker to perform unauthorized actions due to improper SSL certificate validation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: https://www.ibm.com/support/pages/node/7233972