deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-11785
Published: 2025-12-02
Description: Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. In the 'ShowMeterPasswords()' function, there is an unlimited user input that is copied to a fixed-size buffer via 'sprintf()'. The 'GetParameter(meter)' function retrieves the user input, which is directly incorporated into a buffer without size validation. An attacker can provide an excessively large input for the 'meter' parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-circutor-products-0
CVE: CVE-2025-11786
Published: 2025-12-02
Description: Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. In the 'SetUserPassword()' function, the 'newPassword' parameter is directly embedded in a shell command string using 'sprintf()' without any sanitisation or validation, and then executed using 'system()'. This allows an attacker to inject arbitrary shell commands that will be executed with the same privileges as the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-circutor-products-0
CVE: CVE-2025-11787
Published: 2025-12-02
Description: Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 through the 'GetDNS()', 'CheckPing()' and 'TraceRoute()' functions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-circutor-products-0
CVE: CVE-2025-11788
Published: 2025-12-02
Description: Heap-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. In the 'ShowSupervisorParameters()' function, there is an unlimited user input that is copied to a fixed-size buffer via 'sprintf()'. The 'GetParameter(meter)' function retrieves the user input, which is directly incorporated into a buffer without size validation. An attacker can provide an excessively large input for the 'meter' parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-circutor-products-0
CVE: CVE-2025-11789
Published: 2025-12-02
Description: Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The 'DownloadFile' function converts a parameter to an integer using 'atoi()' and then uses it as an index in the 'FilesDownload' array with '(&FilesDownload)[iVar2]'. If the parameter is too large, it will access memory beyond the limits.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-circutor-products-0
CVE: CVE-2025-12465
Published: 2025-12-02
Description: A Blind SQL injection vulnerability has been identified in QuickCMS. Improper neutralization of input provided by a high-privileged user into aFilesDelete allows for Blind SQL Injection attacks.

The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.
CWE: CWE-89
References: https://cert.pl/posts/2025/12/CVE-2025-12465/
CVE: CVE-2025-13879
Published: 2025-12-02
Description: Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For examplem setting the 'directory' parameter to '/' displays files outside the 'LOCAL:///' folder.
CVSS Score: 2.7 (LOW)
CWE: CWE-22
References: https://efficientip.com/resources/solidserver-ipam-solutions-3/; https://www.incibe.es/en/incibe-cert/notices/aviso/directory-traversal-vulnerability-efficientips-solidserver-ipam
CVE: CVE-2025-40700
Published: 2025-12-02
Description: Reflected Cross-Site Scripting (XSS) in IDI Eikon's Governalia. The vulnerability allows an attacker to execute JavaScript code in the victim's browser when a malicious URL with the 'q' parameter in '/search' is sent to them. This vulnerability can be exploited to steal sensitive information such as session cookies or to perform actions on behalf of the victim.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://governalia.es/; https://www.incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-governalia-idi-eikon
CVE: CVE-2025-41012
Published: 2025-12-02
Description: Unauthorized access vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system by using the 'pda:userId' and 'pda:newPassword' parameters with 'soapaction UnlockUser’ in '/WS/PDAWebService.asmx'.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tcman-gim-2
CVE: CVE-2025-13295
Published: 2025-12-02
Description: Insertion of Sensitive Information Into Sent Data vulnerability in Argus Technology Inc. BILGER allows Choosing Message Identifier.This issue affects BILGER: before 2.4.9.
CVSS Score: 7.5 (HIGH)
CWE: CWE-201
References: https://www.usom.gov.tr/bildirim/tr-25-0423
CVE: CVE-2025-13731
Published: 2025-12-02
Description: The Nexter Extension – Site Enhancements Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'nxt-year' shortcode in all versions up to, and including, 4.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/nexter-extension/trunk/include/class-nexter-load-ext.php#L136; https://plugins.trac.wordpress.org/browser/nexter-extension/trunk/include/class-nexter-load-ext.php#L66; https://plugins.trac.wordpress.org/changeset?old=3402155&old_path=nexter-extension%2Ftags%2F4.4.1%2Finclude%2Fclass-nexter-load-ext.php&new=3403967&new_path=nexter-extension%2Ftags%2F4.4.2%2Finclude%2Fclass-nexter-load-ext.php
CVE: CVE-2025-41013
Published: 2025-12-02
Description: SQL injection vulnerability in TCMAN GIM v11 in version 20250304. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a GET request using the 'idmant' parameter in '/PC/frmEPIS.aspx'.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tcman-gim-2
CVE: CVE-2025-41014
Published: 2025-12-02
Description: User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetLastDatePasswordChange' in '/WS/PDAWebService.asmx'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tcman-gim-2
CVE: CVE-2025-41015
Published: 2025-12-02
Description: User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetUserQuestionAndAnswer' in '/WS/PDAWebService.asmx'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tcman-gim-2
CVE: CVE-2025-41066
Published: 2025-12-02
Description: Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system. To exploit the vulnerability, an HTTP request must be sent to ‘/imp/attachment.php’ including the parameters ‘id’ and ‘u’. If the specified user exists, the server will return the download of an empty file; if it does not exist, no download will be initiated, which unequivocally reveals the validity of the user.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.incibe.es/en/incibe-cert/notices/aviso/disclosure-sensitive-information-horde-groupware
CVE: CVE-2025-41086
Published: 2025-12-02
Description: Vulnerability in the access control system of the GAMS licensing system that allows unlimited valid licenses to be generated, bypassing any usage restrictions. The validator uses an insecure checksum algorithm; knowing this algorithm and the format of the license lines, an attacker can recalculate the checksum and generate a valid license to grant themselves full privileges without credentials or access to the source code, allowing them unrestricted access to GAMS's mathematical models and commercial solvers.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://www.gams.com/latest/docs/RN_51.html; https://www.incibe.es/en/incibe-cert/notices/aviso/authorization-bypass-gams-gams-development-corp
CVE: CVE-2025-65858
Published: 2025-12-02
Description: A Stored Cross-Site Scripting (XSS) vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username' field during user creation. The payload is stored unsanitized and later executed when the /ajax/listusers endpoint is accessed.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/KhanhDuy155/calibre-web-CVE-2025-65858/blob/main/CVE-2025-65858.md
CVE: CVE-2025-13505
Published: 2025-12-02
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Datateam Information Technologies Inc. Datactive allows Stored XSS.This issue affects Datactive: from 2.13.34 before 2.14.0.6.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-80
References: https://www.usom.gov.tr/bildirim/tr-25-0424
CVE: CVE-2025-13875
Published: 2025-12-02
Description: A weakness has been identified in Yohann0617 oci-helper up to 3.2.4. This issue affects the function addCfg of the file src/main/java/com/yohann/ocihelper/service/impl/OciServiceImpl.java of the component OCI Configuration Upload. Executing manipulation of the argument File can lead to path traversal. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/Xzzz111/exps/blob/main/archives/oci-helper-path-traversal-1/report.md; https://github.com/Xzzz111/exps/blob/main/archives/oci-helper-path-traversal-1/report.md#proof-of-concept; https://vuldb.com/?ctiid.334031
CVE: CVE-2025-13876
Published: 2025-12-02
Description: A security vulnerability has been detected in Rareprob HD Video Player All Formats App 12.1.372 on Android. Impacted is an unknown function of the component com.rocks.music.videoplayer. The manipulation leads to path traversal. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/Secsys-FDU/AF_CVEs/blob/main/HD%20Video%20Player%20All%20Formats/HD%20Video%20Player%20All%20Formats%20APP%20Arbitrary%20File%20Overwrite%20Vulnerability.md; https://vuldb.com/?ctiid.334032; https://vuldb.com/?id.334032
CVE: CVE-2025-59693
Published: 2025-12-02
Description: The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis without leaving evidence, and accessing the JTAG connector. This is called F02.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj; https://www.entrust.com/use-case/why-use-an-hsm
CVE: CVE-2025-59694
Published: 2025-12-02
Description: The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allows a physically proximate attacker to persistently modify firmware and influence the (insecurely configured) appliance boot process. To exploit this, the attacker must modify the firmware via JTAG or perform an upgrade to the chassis management board firmware. This is called F03.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-1274
References: https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj; https://www.entrust.com/use-case/why-use-an-hsm; https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj
CVE: CVE-2025-59695
Published: 2025-12-02
Description: Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a user with OS root access to alter firmware on the Chassis Management Board (without Authentication). This is called F04.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj; https://www.entrust.com/use-case/why-use-an-hsm
CVE: CVE-2025-59696
Published: 2025-12-02
Description: Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker to modify or erase tamper events via the Chassis management board.
CVSS Score: 3.2 (LOW)
CWE: CWE-1263
References: https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj; https://www.entrust.com/use-case/why-use-an-hsm
CVE: CVE-2025-59697
Published: 2025-12-02
Description: Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker to escalate privileges by editing the Legacy GRUB bootloader configuration to start a root shell upon boot of the host OS. This is called F06.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269, CWE-284
References: https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj; https://www.entrust.com/use-case/why-use-an-hsm; https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj
CVE: CVE-2025-59698
Published: 2025-12-02
Description: Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, might allow a physically proximate attacker to gain access to the EOL legacy bootloader.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-1270
References: https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj; https://www.entrust.com/use-case/why-use-an-hsm; https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj
CVE: CVE-2025-59699
Published: 2025-12-02
Description: Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker to escalate privileges by booting from a USB device with a valid root filesystem. This occurs because of insecure default settings in the Legacy GRUB Bootloader.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-290
References: https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj; https://www.entrust.com/use-case/why-use-an-hsm
CVE: CVE-2025-59700
Published: 2025-12-02
Description: Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with root access to modify the Recovery Partition (because of a lack of integrity protection).
CVSS Score: 3.9 (LOW)
CWE: CWE-345
References: https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj; https://www.entrust.com/use-case/why-use-an-hsm
CVE: CVE-2025-59701
Published: 2025-12-02
Description: Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker (with elevated privileges) to read and modify the Appliance SSD contents (because they are unencrypted).
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-312
References: https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj; https://www.entrust.com/use-case/why-use-an-hsm
CVE: CVE-2025-59702
Published: 2025-12-02
Description: Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to falsify tamper events by accessing internal components.
CVSS Score: 7.2 (HIGH)
CWE: CWE-203, CWE-284
References: https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj; https://www.entrust.com/use-case/why-use-an-hsm; https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj
CVE: CVE-2025-59705
Published: 2025-12-02
Description: Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface through chassis probe insertion during system boot, aka "Unauthorized Reactivation of the USB interface" or F01.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-269
References: https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj; https://www.entrust.com/use-case/why-use-an-hsm
CVE: CVE-2025-12630
Published: 2025-12-02
Description: The Upload.am  WordPress plugin before 1.0.1 is vulnerable to arbitrary option disclosure due to a missing capability check on its AJAX request handler, allowing users such as contributor to view site options.
CVSS Score: 4.9 (MEDIUM)
References: https://wpscan.com/vulnerability/531537f1-5547-4b0f-9e11-3f8a0b2589f5/
CVE: CVE-2025-13372
Published: 2025-12-02
Description: An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.
`FilteredRelation` is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the `**kwargs` passed to `QuerySet.annotate()` or `QuerySet.alias()` on PostgreSQL.
Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.
Django would like to thank Stackered for reporting this issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89
References: https://docs.djangoproject.com/en/dev/releases/security/; https://groups.google.com/g/django-announce; https://www.djangoproject.com/weblog/2025/dec/02/security-releases/
CVE: CVE-2025-13877
Published: 2025-12-02
Description: A vulnerability was detected in nocobase up to 1.9.4/2.0.0-alpha.37. The affected element is an unknown function of the file nocobase\packages\core\auth\src\base\jwt-service.ts of the component JWT Service. The manipulation of the argument API_KEY results in use of hard-coded cryptographic key . The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is described as difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-320, CWE-321
References: https://gist.github.com/H2u8s/f3ede60d7ecfe598ae452aa5a8fbb90d; https://vuldb.com/?ctiid.334033; https://vuldb.com/?id.334033
CVE: CVE-2025-58113
Published: 2025-12-02
Description: An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co. Ltd PDF-XChange Editor 10.7.3.401.  By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2280; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2280
CVE: CVE-2025-59703
Published: 2025-12-02
Description: Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from the device without damaging it. This is called an F14 attack.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284
References: https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj; https://www.entrust.com/use-case/why-use-an-hsm
CVE: CVE-2025-59704
Published: 2025-12-02
Description: Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the the BIOS menu because is has no password.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-287
References: https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj; https://www.entrust.com/use-case/why-use-an-hsm
CVE: CVE-2025-63872
Published: 2025-12-02
Description: DeepSeek V3.2 has a Cross Site Scripting (XSS) vulnerability, which allows JavaScript execution through model-generated SVG content.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/@vinitkundu14/cve-2025-63872-svg-based-xss-in-deepseek-chat-v3-2-db4ebc1f1f28
CVE: CVE-2025-64460
Published: 2025-12-02
Description: An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.
Algorithmic complexity in `django.core.serializers.xml_serializer.getInnerText()` allows a remote attacker to cause a potential denial-of-service attack triggering CPU and memory exhaustion via specially crafted XML input processed by the XML `Deserializer`.
Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.
Django would like to thank Seokchan Yoon for reporting this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-407
References: https://docs.djangoproject.com/en/dev/releases/security/; https://groups.google.com/g/django-announce; https://www.djangoproject.com/weblog/2025/dec/02/security-releases/
CVE: CVE-2025-65187
Published: 2025-12-02
Description: A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://civicrm.com/; https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/CVE-2025-65187.pdf
CVE: CVE-2025-13827
Published: 2025-12-02
Description: Summary
Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. 
ImpactIf the media folder is not restricted from running files this can lead to a remote code execution.
CWE: CWE-434
References: https://github.com/mautic/mautic/security/advisories/GHSA-5xw2-57jx-pgjp
CVE: CVE-2025-13828
Published: 2025-12-02
Description: SummaryA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked.

ImpactA low-privileged user of the platform can install malicious code to obtain higher privileges.
CWE: CWE-862
References: https://github.com/mautic/mautic/security/advisories/GHSA-3fq7-c5m8-g86x
CVE: CVE-2025-64070
Published: 2025-12-02
Description: Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the Add New Subject Description field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/vabnamoni/CVE-Researches/blob/main/CVE-2025-64070; https://www.linkedin.com/in/vabna-lina-24ab17186/
CVE: CVE-2025-65186
Published: 2025-12-02
Description: Grav CMS 1.7.49 is vulnerable to Cross Site Scripting (XSS). The page editor allows authenticated users to edit page content via a Markdown editor. The editor fails to properly sanitize <script> tags, allowing stored XSS payloads to execute when pages are viewed in the admin interface.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/getgrav/grav; https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/CVE-2025-65186.pdf