deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-22427
Published: 2025-09-02
Description: In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.3 (HIGH)
CWE: CWE-693
References: https://android.googlesource.com/platform/packages/apps/Settings/+/7255b2eaac4b5cb1bc3bbf23509b33c7355a8657; https://source.android.com/security/bulletin/2025-04-01
CVE: CVE-2025-22428
Published: 2025-09-02
Description: In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on the secondary user from the primary user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://android.googlesource.com/platform/packages/apps/Settings/+/4a9cb946e978d9d93f9ee0a2c4c8ca41ba774540; https://source.android.com/security/bulletin/2025-04-01
CVE: CVE-2025-22429
Published: 2025-09-02
Description: In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-693
References: https://android.googlesource.com/platform/frameworks/base/+/ece83fb425b1e912a036e9985b710910e2e3ca37; https://source.android.com/security/bulletin/2025-04-01
CVE: CVE-2025-22430
Published: 2025-09-02
Description: In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://android.googlesource.com/platform/frameworks/base/+/161eb6100d6f75f0a0df6da3d19da7fe842655c1; https://source.android.com/security/bulletin/2025-04-01
CVE: CVE-2025-22431
Published: 2025-09-02
Description: In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to a logic error in the code. This could lead to local denial of service until the phone reboots with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-693
References: https://android.googlesource.com/platform/frameworks/base/+/79211e094a7363f28a06cea2737aa815339911ad; https://source.android.com/security/bulletin/2025-04-01
CVE: CVE-2025-22433
Published: 2025-09-02
Description: In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://android.googlesource.com/platform/frameworks/base/+/d2216fc62a9e1253828bf4cfdf5395948f2e78c6; https://android.googlesource.com/platform/packages/modules/IntentResolver/+/20cef18d8d9b817823d8d8d505cc382d3b334f34; https://source.android.com/security/bulletin/2025-04-01
CVE: CVE-2025-22434
Published: 2025-09-02
Description: In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://android.googlesource.com/platform/frameworks/base/+/2880f0ab2dc63dc6ea820afb79e9be523ecb7074; https://source.android.com/security/bulletin/2025-04-01
CVE: CVE-2025-22435
Published: 2025-09-02
Description: In avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-843
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/efa5f4ef386a8947f4777840c5cefff389740e86; https://source.android.com/security/bulletin/2025-04-01
CVE: CVE-2025-22437
Published: 2025-09-02
Description: In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/339d20053956ec0f92384f0b7cefda4fa7126290; https://source.android.com/security/bulletin/2025-04-01
CVE: CVE-2025-22438
Published: 2025-09-02
Description: In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://android.googlesource.com/platform/frameworks/native/+/7ac747cb442d382c74a18d26268b7fc3751537ce; https://source.android.com/security/bulletin/2025-04-01
CVE: CVE-2025-22439
Published: 2025-09-02
Description: In onLastAccessedStackLoaded of ActionHandler.java , there is a possible way to bypass storage restrictions across apps due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.3 (HIGH)
CWE: CWE-862
References: https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/1f283d5b87d0c8f04a79d1d2a51ed4d9327ae864; https://source.android.com/security/bulletin/2025-04-01
CVE: CVE-2025-22442
Published: 2025-09-02
Description: In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created work profile due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://android.googlesource.com/platform/frameworks/base/+/2095d130b4d7f2ba1a3284abb58ca894817f5f4a; https://source.android.com/security/bulletin/2025-04-01
CVE: CVE-2025-26416
Published: 2025-09-02
Description: In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://android.googlesource.com/platform/external/skia/+/fc2ebb312c[PII_REDACTED]df981a51c2bb90e3756d; https://source.android.com/security/bulletin/2025-04-01
CVE: CVE-2025-9838
Published: 2025-09-02
Description: A vulnerability was identified in itsourcecode Student Information Management System 1.0. Impacted is an unknown function of the file /admin/modules/subject/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/mybonn/CVE/issues/2; https://itsourcecode.com/; https://vuldb.com/?ctiid.322185
CVE: CVE-2025-9839
Published: 2025-09-02
Description: A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is an unknown function of the file /admin/modules/course/index.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/mybonn/CVE/issues/3; https://itsourcecode.com/; https://vuldb.com/?ctiid.322186
CVE: CVE-2025-9840
Published: 2025-09-02
Description: A weakness has been identified in itsourcecode Sports Management System 1.0. The impacted element is an unknown function of the file /Admin/gametype.php. Executing manipulation of the argument code can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/hjsjbsg/record-for-own/issues/1; https://itsourcecode.com/; https://vuldb.com/?ctiid.322187
CVE: CVE-2025-54588
Published: 2025-09-03
Description: Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. Versions 1.34.0 through 1.34.4 and 1.35.0 contain a use-after-free (UAF) vulnerability in the DNS cache, causing abnormal process termination. The vulnerability is in Envoy's Dynamic Forward Proxy implementation, occurring when a completion callback for a DNS resolution triggers new DNS resolutions or removes existing pending resolutions. This condition may occur when the following conditions are met: dynamic Forwarding Filter is enabled, the `envoy.reloadable_features.dfp_cluster_resolves_hosts` runtime flag is enabled, and the Host header is modified between the Dynamic Forwarding Filter and Router filters. This issue is resolved in versions 1.34.5 and 1.35.1. To work around this issue, set the envoy.reloadable_features.dfp_cluster_resolves_hosts runtime flag to false.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://github.com/envoyproxy/envoy/releases/tag/v1.34.5; https://github.com/envoyproxy/envoy/releases/tag/v1.35.1; https://github.com/envoyproxy/envoy/security/advisories/GHSA-g9vw-6pvx-7gmw
CVE: CVE-2025-9260
Published: 2025-09-03
Description: The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to PHP Object Injection in versions 5.1.16 to 6.1.1 via deserialization of untrusted input in the parseUserProperties function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. The additional presence of a POP chain allows attackers to read arbitrary files. If allow_url_include is enabled on the server, remote code execution is possible.
While the vendor patched this issue in version 6.1.0, the patch caused a fatal error in the vulnerable code, due to a missing class import, so we consider 6.1.2 to be the most complete and best patched version
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-502
References: https://plugins.trac.wordpress.org/browser/fluentform/tags/6.0.2/app/Services/FormBuilder/EditorShortcodeParser.php#L214; https://plugins.trac.wordpress.org/browser/fluentform/tags/6.0.2/vendor/wpfluent/framework/src/WPFluent/View/View.php#L7; https://www.wordfence.com/threat-intel/vulnerabilities/id/938e5d6b-1ad6-4021-a148-1d1c9e8a0a83?source=cve
CVE: CVE-2025-9841
Published: 2025-09-03
Description: A security vulnerability has been detected in code-projects Mobile Shop Management System 1.0. This affects an unknown function of the file AddNewProduct.php. The manipulation of the argument ProductImage leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434
References: https://code-projects.org/; https://github.com/chen[PII_REDACTED]/CVE/issues/2; https://vuldb.com/?ctiid.322188
CVE: CVE-2025-9842
Published: 2025-09-03
Description: A vulnerability was detected in Das Parking Management System 停车场管理系统 6.2.0. This impacts an unknown function of the file /Operator/Search. The manipulation results in information disclosure. The attack may be performed from remote. The exploit is now public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://github.com/K-mxredo/MXdocument/blob/K-mxredo-blob/dasiot.md; https://vuldb.com/?ctiid.322189; https://vuldb.com/?id.322189
CVE: CVE-2025-57806
Published: 2025-09-03
Description: Local Deep Research is an AI-powered research assistant for deep, iterative research. Versions 0.2.0 through 0.6.7 stored confidential information, including API keys, in a local SQLite database without encryption. This behavior was not clearly documented outside of the database architecture page. Users were not given the ability to configure the database location, allowing anyone with access to the container or host filesystem to retrieve sensitive data in plaintext by accessing the .db file. This is fixed in version 1.0.0.
CWE: CWE-312, CWE-522
References: http://github.com/LearningCircuit/local-deep-research/releases/tag/v1.0.0; https://github.com/LearningCircuit/local-deep-research/pull/578; https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-4h8c-qrcq-cv5c
CVE: CVE-2025-9843
Published: 2025-09-03
Description: A flaw has been found in Das Parking Management System 停车场管理系统 6.2.0. Affected is an unknown function of the file /Operator/FindAll. This manipulation causes information disclosure. It is possible to initiate the attack remotely. The exploit has been published and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://github.com/K-mxredo/MXdocument/blob/K-mxredo-blob/Parking.md; https://vuldb.com/?ctiid.322190; https://vuldb.com/?id.322190
CVE: CVE-2025-9845
Published: 2025-09-03
Description: A vulnerability has been found in code-projects Fruit Shop Management System 1.0. Affected by this vulnerability is an unknown functionality of the file products.php. Such manipulation of the argument product_code/gen_name/product_name/supplier leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://code-projects.org/; https://github.com/chen[PII_REDACTED]/CVE/issues/3; https://vuldb.com/?ctiid.322191
CVE: CVE-2025-58163
Published: 2025-09-03
Description: FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Versions 1.8.185 and earlier contain a deserialization of untrusted data vulnerability that allows authenticated attackers with knowledge of the application's APP_KEY to achieve remote code execution. The vulnerability is exploited via endpoint, e.g.: `/help/{mailbox_id}/auth/{customer_id}/{hash}/{timestamp}` where the `customer_id` and `timestamp` parameters are processed through the decrypt function in `app/Helper.php` without proper validation. The code decrypts using Laravel's built-in encryption functions, which subsequently deserialize the decrypted payload without sanitization, allowing attackers to craft malicious serialized PHP objects using classes to trigger arbitrary command execution. This is fixed in version 1.8.186.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://github.com/freescout-help-desk/freescout/commit/e2de65f3f32f825b4ec5558643ed81438c9a6bc6; https://github.com/freescout-help-desk/freescout/releases/tag/1.8.186; https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-j94w-q9gj-c37g
CVE: CVE-2025-7039
Published: 2025-09-03
Description: A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations.
CVSS Score: 3.7 (LOW)
CWE: CWE-22
References: https://access.redhat.com/security/cve/CVE-2025-7039; https://bugzilla.redhat.com/show_bug.cgi?id=2392423
CVE: CVE-2025-9847
Published: 2025-09-03
Description: A weakness has been identified in ScriptAndTools Real Estate Management System 1.0. Impacted is an unknown function of the file register.php. This manipulation of the argument uimage causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://vuldb.com/?ctiid.322196; https://vuldb.com/?id.322196; https://vuldb.com/?submit.641970
CVE: CVE-2025-9848
Published: 2025-09-03
Description: A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. The affected element is an unknown function of the file /admin/userlist.php. Such manipulation leads to execution after redirect. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-698, CWE-705
References: https://vuldb.com/?ctiid.322197; https://vuldb.com/?id.322197; https://vuldb.com/?submit.641980
CVE: CVE-2025-58164
Published: 2025-09-03
Description: Rejected reason: This CVE is a duplicate of another CVE, CVE-2025-58163.
CVE: CVE-2025-58165
Published: 2025-09-03
Description: Rejected reason: This CVE is a duplicate of another CVE, CVE-2025-58163.
CVE: CVE-2025-58166
Published: 2025-09-03
Description: Rejected reason: This CVE is a duplicate of another CVE.
CVE: CVE-2025-58167
Published: 2025-09-03
Description: Rejected reason: This CVE is a duplicate of another CVE.
CVE: CVE-2025-58168
Published: 2025-09-03
Description: Rejected reason: This CVE is a duplicate of another CVE.
CVE: CVE-2025-58169
Published: 2025-09-03
Description: Rejected reason: This CVE is a duplicate of another CVE.
CVE: CVE-2025-58170
Published: 2025-09-03
Description: Rejected reason: This CVE is a duplicate of another CVE.
CVE: CVE-2025-58176
Published: 2025-09-03
Description: Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. In versions 0.9.0 through 0.9.3, there is a one-click Remote Code Execution vulnerability triggered through a custom url value, `transport` in the JSON object. An attacker can exploit the vulnerability in the following two scenarios: a victim visits a malicious website controlled by the attacker and the website redirect to the URL automatically, or a victim clicks on such a crafted link embedded on a legitimate website (e.g., in user-generated content). In both cases, the browser invokes Dive's custom URL handler (dive:), which launches the Dive app and processes the crafted URL, leading to arbitrary code execution on the victim’s machine. This vulnerability is caused by improper processing of custom url. This is fixed in version 0.9.4.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/OpenAgentPlatform/Dive/commit/acae6d40354d380f69f8241e9122a43ff64cff11; https://github.com/OpenAgentPlatform/Dive/security/advisories/GHSA-2r34-7pgx-vvrc; https://github.com/OpenAgentPlatform/Dive/security/advisories/GHSA-2r34-7pgx-vvrc
CVE: CVE-2025-58351
Published: 2025-09-03
Description: Outline is a service that allows for collaborative documentation. In versions 0.72.0 through 0.83.0, Outline introduced a feature which facilitates local file system storage capabilities as an optional file storage strategy. This feature allowed a CSP bypass as well as a ContentType bypass that might facilitate further attacks. In the case of self-hosting and using Outline FILE_STORAGE=local on the same domain as the Outline application, a malicious payload can be uploaded as a file attachment and bypass those CSP restrictions, allowing script execution within the context of another user. This is fixed in version 0.84.0.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/outline/outline/commit/18bc93c9c207329244c6909606a2393e863892a3; https://github.com/outline/outline/releases/tag/v0.84.0; https://github.com/outline/outline/security/advisories/GHSA-gcj7-c9jv-fhgf
CVE: CVE-2025-9785
Published: 2025-09-03
Description: PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF which simplifies printer deployment and management. When the component is deployed to an environment, the customer has an option to configure the system to use a self-signed certificate. If the customer does not fully configure the system to leverage the trust database on the clients, it opens up the communication between clients and the server to man-in-the-middle attacks. 

It was discovered that certain parts of the documentation related to the configuration of SSL in Print Deploy were lacking, which could potentially contribute to a misconfiguration of the Print Deploy client installation. PaperCut strongly recommends to use valid certificates to secure installations and to follow the updated documentation to ensure the correct SSL configuration. Those who use private CAs and/or self-signed certificates should make sure to copy their Certification Authority certificate, or their self signed certificate if using only one, to the trust store of their operating system and to the Java key store
CWE: CWE-295
References: https://www.papercut.com/kb/Main/papercut-ng-mf-security-bulletin-september-2025/
CVE: CVE-2023-21466
Published: 2025-09-03
Description: PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local attackers to access contentProvider without proper permission.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=04
CVE: CVE-2023-21467
Published: 2025-09-03
Description: Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted message.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=04
CVE: CVE-2023-21468
Published: 2025-09-03
Description: Improper access control vulnerability in Telephony prior to SMR Apr-2023 Release 1 allows attackers to access files with escalated permission.
CVSS Score: 5.9 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=04
CVE: CVE-2023-21469
Published: 2025-09-03
Description: Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.GEOFENCE action.
CVSS Score: 4.0 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=04
CVE: CVE-2023-21470
Published: 2025-09-03
Description: Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.NETWORK_LOCATION action.
CVSS Score: 4.0 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=04
CVE: CVE-2023-21471
Published: 2025-09-03
Description: Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows attackers to read arbitrary files with system permission.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=04
CVE: CVE-2023-21472
Published: 2025-09-03
Description: Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=04
CVE: CVE-2023-21473
Published: 2025-09-03
Description: Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=04