deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-56346
Published: 2025-03-18
Description: IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-114
References: https://www.ibm.com/support/pages/node/7186621
CVE: CVE-2024-56347
Published: 2025-03-18
Description: IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper process controls.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-114
References: https://www.ibm.com/support/pages/node/7186621
CVE: CVE-2025-25595
Published: 2025-03-18
Description: A lack of rate limiting in the login page of Safe App version a3.0.9 allows attackers to bypass authentication via a brute force attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: https://pastebin.com/t8FthPaF; https://play.google.com/store/apps/details?id=com.iitb.cse.arkenstone.safe_v2; https://pastebin.com/t8FthPaF
CVE: CVE-2025-26137
Published: 2025-03-18
Description: Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=. An unauthenticated attacker can exploit this issue to read arbitrary system files by supplying a crafted file path, potentially exposing sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-98
References: https://github.com/Arakiba/CVEs/tree/main/CVE-2025-26137
CVE: CVE-2025-26138
Published: 2025-03-18
Description: Systemic Risk Value <=2.8.0 is vulnerable to improper access control in /RiskValue/GroupingEntities/Controls/GetFile.aspx?ID=. Uploaded files are accessible via a predictable numerical ID parameter, allowing unauthorized users to increment or decrement the ID to access and download files they do not have permission to view.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://github.com/Arakiba/CVEs/tree/main/CVE-2025-26138
CVE: CVE-2025-2487
Published: 2025-03-18
Description: A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-476
References: https://access.redhat.com/errata/RHSA-2025:3663; https://access.redhat.com/errata/RHSA-2025:3670; https://access.redhat.com/errata/RHSA-2025:4491
CVE: CVE-2025-21619
Published: 2025-03-18
Description: GLPI is a free asset and IT management software package. An administrator user can perfom a SQL injection through the rules configuration forms. This vulnerability is fixed in 10.0.18.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-pcmc-xv3g-hjxv
CVE: CVE-2025-24799
Published: 2025-03-18
Description: GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-jv89-g7f7-jwfg
CVE: CVE-2025-24801
Published: 2025-03-18
Description: GLPI is a free asset and IT management software package. An authenticated user can upload and force the execution of *.php files located on the GLPI server. This vulnerability is fixed in 10.0.18.
CVSS Score: 8.5 (HIGH)
CWE: CWE-434
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-g2p3-33ff-r555
CVE: CVE-2025-25040
Published: 2025-03-18
Description: A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch Series only and affects: 

     - AOS-CX 10.14.xxxx : All patches
     - AOS-CX 10.15.xxxx : 10.15.1000 and below 
The vulnerability is specific to traffic originated by the CX 9300 switch platform and could allow an attacker to bypass ACL rules applied to routed ports on egress. As a result, port ACLs are not correctly enforced, which could lead to unauthorized traffic flow and violations of security policies. Egress VLAN ACLs and Routed VLAN ACLs are not affected by this vulnerability.
CVSS Score: 3.3 (LOW)
CWE: CWE-863
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04818en_us&docLocale=en_US
CVE: CVE-2025-25042
Published: 2025-03-18
Description: A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation could allow an attacker to read encrypted credentials of other users on the switch, potentially leading to further unauthorized access or data breaches.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-359
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04818en_us&docLocale=en_US
CVE: CVE-2025-27080
Published: 2025-03-18
Description: Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive information. Successful exploitation could allow an attacker to gain unauthorized access to services outside of the impacted switch, potentially leading to lateral movement involving those services.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-359
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04818en_us&docLocale=en_US
CVE: CVE-2025-29790
Published: 2025-03-18
Description: Contao is an Open Source CMS. Users can upload SVG files with malicious code, which is then executed in the back end and/or front end. This vulnerability is fixed in Contao 4.13.54, 5.3.30, or 5.5.6.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://contao.org/en/security-advisories/cross-site-scripting-through-svg-uploads; https://github.com/contao/contao/security/advisories/GHSA-vqqr-fgmh-f626
CVE: CVE-2025-29907
Published: 2025-03-18
Description: jsPDF is a library to generate PDFs in JavaScript. Prior to 3.0.1, user control of the first argument of the addImage method results in CPU utilization and denial of service. If given the possibility to pass unsanitised image urls to the addImage method, a user can provide a harmful data-url that results in high CPU utilization and denial of service. Other affected methods are html and addSvgAsImage. The vulnerability was fixed in jsPDF 3.0.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-770, CWE-400
References: https://github.com/parallax/jsPDF/commit/b167c43c27c466eb914b927885b[PII_REDACTED]8df; https://github.com/parallax/jsPDF/security/advisories/GHSA-w532-jxjh-hjhj
CVE: CVE-2025-29930
Published: 2025-03-18
Description: imFAQ is an advanced questions and answers management system for ImpressCMS. Prior to 1.0.1, if the $_GET['seoOp'] parameter is manipulated to include malicious input (e.g., seoOp=php://filter/read=convert.base64-encode/resource=/var/www/html/config.php), the application could allow an attacker to read sensitive files on the server (Local File Inclusion, LFI). The $_GET['seoOp'] and $_GET['seoArg'] parameters are directly used without sanitization or validation. This is partly mitigated by the fact that the ImpressCMS sensitive files are stored outside the web root, in a folder with a randomized name. The issue has been resolved in imFaq 1.0.1.
CWE: CWE-73
References: https://github.com/ImpressModules/imfaq/commit/63dedd30a8f196db7b340740adf667a39c26a4ac; https://github.com/ImpressModules/imfaq/security/advisories/GHSA-vrr3-54vc-vwg3
CVE: CVE-2025-30137
Published: 2025-03-18
Description: An issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for ports 9091 and 9092. The GNET mobile application contains hardcoded credentials that provide unauthorized access to the dashcam's API endpoints on ports 9091 and 9092. Once the GNET SSID is connected to, the attacker sends a crafted authentication command with TibetList and 000000 to list settings of the dashcam at port 9091. There's a separate set of credentials for port 9092 (stream) that is also exposed in cleartext: admin + tibet. For settings, the required credentials are adim + 000000.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/geo-chen/GNET; https://www.gnetsystem.com/eng/product/list?viewMode=view&idx=246&ca_id=0201
CVE: CVE-2025-30138
Published: 2025-03-18
Description: An issue was discovered on G-Net Dashcam BB GONX devices. Managing Settings and Obtaining Sensitive Data and Sabotaging Car Battery can be performed by unauthorized persons. It allows unauthorized users to modify critical system settings once connected to its network. Attackers can extract sensitive car and driver information, mute dashcam alerts to prevent detection, disable recording functionality, or even factory reset the device. Additionally, they can disable battery protection, causing the dashcam to drain the car battery when left on overnight. These actions not only compromise privacy but also pose potential physical harm by rendering the dashcam non-functional or causing vehicle battery failure.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-284
References: https://github.com/geo-chen/GNET; https://www.gnetsystem.com/eng/product/list?viewMode=view&idx=246&ca_id=0201
CVE: CVE-2025-30139
Published: 2025-03-18
Description: An issue was discovered on G-Net Dashcam BB GONX devices. Default credentials for SSID cannot be changed. It broadcasts a fixed SSID with default credentials that cannot be changed. This allows any nearby attacker to connect to the dashcam's network without restriction. Once connected, an attacker can sniff on connected devices such as the user's smartphone. The SSID is also always broadcasted.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1392
References: https://github.com/geo-chen/GNET; https://www.gnetsystem.com/eng/product/list?viewMode=view&idx=246&ca_id=0201
CVE: CVE-2025-30141
Published: 2025-03-18
Description: An issue was discovered on G-Net Dashcam BB GONX devices. One can Remotely Dump Video Footage and the Live Video Stream. It exposes API endpoints on ports 9091 and 9092 that allow remote access to recorded and live video feeds. An attacker who connects to the dashcam's network can retrieve all stored recordings and convert them from JDR format to MP4. Additionally, port 9092's RTSP stream can be accessed remotely, allowing real-time video feeds to be extracted without the owner's knowledge.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://github.com/geo-chen/GNET; https://www.gnetsystem.com/eng/product/list?viewMode=view&idx=246&ca_id=0201
CVE: CVE-2025-30142
Published: 2025-03-18
Description: An issue was discovered on G-Net Dashcam BB GONX devices. Bypassing of Device Pairing can occur. It uses MAC address verification as the sole mechanism for recognizing paired devices, allowing attackers to bypass authentication. By capturing the MAC address of an already-paired device through ARP scanning or other means, an attacker can spoof the MAC address and connect to the dashcam without going through the pairing process. This enables full access to the device.
CVSS Score: 8.1 (HIGH)
CWE: CWE-290
References: https://github.com/geo-chen/GNET; https://www.gnetsystem.com/eng/product/list?viewMode=view&idx=246&ca_id=0201
CVE: CVE-2024-12563
Published: 2025-03-18
Description: The s2Member Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 250214 via the 'template' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-98
References: https://s2member.com/changelog/; https://www.wordfence.com/threat-intel/vulnerabilities/id/d3326e9d-504f-444f-baf7-03989594f483?source=cve
CVE: CVE-2024-57151
Published: 2025-03-18
Description: SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: https://github.com/jcxj/jcxj/blob/master/source/_posts/%E4%BF%A1%E5%91%BCoa%E5%AE%A1%E8%AE%A1.md; https://github.com/l1uyi/cve-list/blob/main/cve-list/xinhu-CVE-2024-57171.md
CVE: CVE-2025-30140
Published: 2025-03-18
Description: An issue was discovered on G-Net Dashcam BB GONX devices. A Public Domain name is Used for the Internal Domain Name. It uses an unregistered public domain name as an internal domain, creating a security risk. This domain was not owned by GNET originally, allowing an attacker to register it and potentially intercept sensitive device traffic (it has since been registered by the vulnerability discoverer). If the dashcam or related services attempt to resolve this domain over the public Internet instead of locally, it could lead to data exfiltration or man-in-the-middle attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://github.com/geo-chen/GNET; https://www.gnetsystem.com/eng/product/list?viewMode=view&idx=246&ca_id=0201
CVE: CVE-2024-10441
Published: 2025-03-19
Description: Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-116
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_20; https://www.synology.com/en-global/security/advisory/Synology_SA_24_23
CVE: CVE-2024-10444
Published: 2025-03-19
Description: Improper certificate validation vulnerability in the LDAP utilities in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-7 and 7.2.2-72806-3 allows man-in-the-middle attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://www.synology.com/en-global/security/advisory/Synology_SA_25_01
CVE: CVE-2024-10445
Published: 2025-03-19
Description: Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to write limited files via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-295
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_20; https://www.synology.com/en-global/security/advisory/Synology_SA_24_23
CVE: CVE-2024-10442
Published: 2025-03-19
Description: Off-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066, 1.2.2-0353 and 1.3.0-0423 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote attackers to execute arbitrary code, potentially leading to a broader impact across the system via unspecified vectors.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-193
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_22
CVE: CVE-2024-11131
Published: 2025-03-19
Description: A vulnerability regarding out-of-bounds read is found in the video interface. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.2.0-0525 may be affected: BC500, CC400W and TC500.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_24
CVE: CVE-2024-12295
Published: 2025-03-19
Description: The BoomBox Theme Extensions plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.8.0. This is due to the plugin not properly validating a user's identity prior to updating their password through the 'boombox_ajax_reset_password' function. This makes it possible for authenticated attackers, with subscriber-level privileges and above, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-640
References: https://themeforest.net/item/boombox-viral-buzz-wordpress-theme/16596434; https://www.wordfence.com/threat-intel/vulnerabilities/id/c453aaf6-767d-4929-bbb3-3c0b78b0507a?source=cve
CVE: CVE-2025-2290
Published: 2025-03-19
Description: The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Unauthenticated Post Trashing due to a missing capability check on the delete_access_plan function and the related AJAX calls in all versions up to, and including, 8.0.1. This makes it possible for unauthenticated attackers to change status to "Trash" for every published post, therefore limiting the availability of the website's content.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/3257328/lifterlms/trunk/includes/class.llms.ajax.handler.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/4f64dbf2-b75a-4a35-9b4e-413b8fd1fff0?source=cve
CVE: CVE-2025-30234
Published: 2025-03-19
Description: SmartOS, as used in Triton Data Center and other products, has static host SSH keys in the 60f76fd2-143f-4f57-819b-1ae32684e81b image (a Debian 12 LX zone image from 2024-07-26).
CVSS Score: 8.3 (HIGH)
CWE: CWE-321
References: https://security.tritondatacenter.com/tps-2025-002/; https://smartos.topicbox.com/groups/smartos-discuss/Ta6f13072e6bedddc-M3702e993edd7d6ce8d78dfc8; https://www.openwall.com/lists/oss-security/2025/03/13/10
CVE: CVE-2024-12922
Published: 2025-03-19
Description: The Altair theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check within functions.php in all versions up to, and including, 5.2.4. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://themeforest.net/item/tour-travel-agency-altair-theme/9318575; https://themeforest.net/item/tour-travel-agency-altair-theme/9318575#item-description__changelog; https://www.wordfence.com/threat-intel/vulnerabilities/id/e27971a3-f84c-4f13-81af-127e7560566a?source=cve
CVE: CVE-2024-50629
Published: 2025-03-19
Description: Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to read limited files via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-116
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_20; https://www.synology.com/en-global/security/advisory/Synology_SA_24_23
CVE: CVE-2024-50630
Published: 2025-03-19
Description: Missing authentication for critical function vulnerability in the webapi component in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and 3.5.1-26102 allows remote attackers to obtain administrator credentials via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_21
CVE: CVE-2024-50631
Published: 2025-03-19
Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in the system syncing daemon in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and 3.5.1-26102 allows remote attackers to inject SQL commands, limited to write operations, via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_21
CVE: CVE-2025-1232
Published: 2025-03-19
Description: The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and escape some of its Review fields, which could allow unauthenticated users to perform Stored XSS attacks
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://wpscan.com/vulnerability/c4ea8357-ddd7-48ac-80c9-15b924715b14/
CVE: CVE-2025-30235
Published: 2025-03-19
Description: Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of failed authentication attempts, because concurrent attempts are mishandled.
CVSS Score: 3.5 (LOW)
CWE: CWE-362
References: https://reserge.org/probabilistically-breaking-securenvoy-totp/; https://securenvoy.com/wp-content/uploads/2025/03/Release-Notes-9.4.515.pdf
CVE: CVE-2025-30236
Published: 2025-03-19
Description: Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 allows authentication through only a six-digit TOTP code (skipping a password check) if an HTTP POST request contains a SESSION parameter.
CVSS Score: 8.6 (HIGH)
CWE: CWE-472
References: https://reserge.org/probabilistically-breaking-securenvoy-totp/; https://securenvoy.com/wp-content/uploads/2025/03/Release-Notes-9.4.515.pdf
CVE: CVE-2024-13410
Published: 2025-03-19
Description: The CozyStay and TinySalt plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.7.0, and in all versions up to, and including 3.9.0, respectively, via deserialization of untrusted input in the 'ajax_handler' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://themeforest.net/item/cozystay-hotel-booking-wordpress-theme/47383367#item-description__changelog; https://themeforest.net/item/tinysalt-personal-food-blog-wordpress-theme/26294668#item-description__changelog; https://www.wordfence.com/threat-intel/vulnerabilities/id/61080df6-836f-4365-964a-fa2517e8be5a?source=cve
CVE: CVE-2024-13412
Published: 2025-03-19
Description: The CozyStay theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_handler function in all versions up to, and including, 1.7.0. This makes it possible for unauthenticated attackers to execute arbitrary actions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://themeforest.net/item/cozystay-hotel-booking-wordpress-theme/47383367#item-description__changelog; https://www.wordfence.com/threat-intel/vulnerabilities/id/67965a51-39d3-4d14-adf5-d91d4c775baf?source=cve
CVE: CVE-2024-12136
Published: 2025-03-19
Description: Missing Critical Step in Authentication vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Authentication Bypass.This issue affects ANKA JPD-00028: before V.01.01.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-304
References: https://www.usom.gov.tr/bildirim/tr-25-0071
CVE: CVE-2024-12137
Published: 2025-03-19
Description: Authentication Bypass by Capture-replay vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Session Hijacking.This issue affects ANKA JPD-00028: before V.01.01.
CVSS Score: 7.6 (HIGH)
CWE: CWE-294
References: https://www.usom.gov.tr/bildirim/tr-25-0071