deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-64383
Published: 2025-11-13
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Qode Qi Blocks qi-blocks allows Stored XSS.This issue affects Qi Blocks: from n/a through <= 1.4.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/qi-blocks/vulnerability/wordpress-qi-blocks-plugin-1-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-64384
Published: 2025-11-13
Description: Missing Authorization vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through <= 3.5.3.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/jetformbuilder/vulnerability/wordpress-jetformbuilder-plugin-3-5-3-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-7704
Published: 2025-11-13
Description: Supermicro BMC  Insyde SMASH shell program has a stacked-based overflow vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-121
References: https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2025
CVE: CVE-2025-12377
Published: 2025-11-13
Description: The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.12.0. This makes it possible for authenticated attackers, with Author-level access and above, to perform multiple actions, such as removing images from arbitrary galleries. The vulnerability was partially patched in version 1.12.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://drive.google.com/file/d/1AgsJeff1x4pQAFVGmoSwwU75iiH4-H_p/view?usp=sharing; https://plugins.trac.wordpress.org/browser/envira-gallery-lite/trunk/includes/admin/ajax.php; https://plugins.trac.wordpress.org/changeset/3387243/envira-gallery-lite/trunk/includes/admin/ajax.php?old=3133202&old_path=envira-gallery-lite%2Ftrunk%2Fincludes%2Fadmin%2Fajax.php
CVE: CVE-2025-12762
Published: 2025-11-13
Description: pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-94
References: https://github.com/pgadmin-org/pgadmin4/issues/9320
CVE: CVE-2025-12763
Published: 2025-11-13
Description: pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused by the use of shell=True during backup and restore operations, enabling attackers to execute arbitrary system commands by providing specially crafted file path input.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://github.com/pgadmin-org/pgadmin4/issues/9323
CVE: CVE-2025-12764
Published: 2025-11-13
Description: pgAdmin <= 9.9  is affected by an LDAP injection vulnerability in the LDAP authentication flow that allows an attacker to inject special LDAP characters in the username, causing the DC/LDAP server and the client to process an unusual amount of data DOS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-90
References: https://github.com/pgadmin-org/pgadmin4/issues/9325
CVE: CVE-2025-12765
Published: 2025-11-13
Description: pgAdmin <= 9.9  is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://github.com/pgadmin-org/pgadmin4/issues/9324
CVE: CVE-2025-12817
Published: 2025-11-13
Description: Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema.  A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail.  Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.
CVSS Score: 3.1 (LOW)
CWE: CWE-862
References: https://www.postgresql.org/support/security/CVE-2025-12817/
CVE: CVE-2025-12818
Published: 2025-11-13
Description: Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes.  This results in a segmentation fault for the application using libpq.  Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-190
References: https://www.postgresql.org/support/security/CVE-2025-12818/
CVE: CVE-2025-40681
Published: 2025-11-13
Description: Cross-site Scripting (XSS) vulnerability reflected in xCally's Omnichannel v3.30.1. This vulnerability allowsan attacker to executed JavaScript code in the victim's browser by sending them a malicious URL using the 'failureMessage' parameter in '/login'. This vulnerability can be exploited to steal sentitive user data, such as session cookies , or to perform actions on behalf of the user.
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-xcally-omnichannel
CVE: CVE-2025-13114
Published: 2025-11-13
Description: A vulnerability was identified in macrozheng mall-swarm up to 1.0.3. This affects the function updateAttr of the file /cart/update/attr. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://github.com/Hwwg/cve/issues/5; https://vuldb.com/?ctiid.332319; https://vuldb.com/?id.332319
CVE: CVE-2025-13115
Published: 2025-11-13
Description: A security flaw has been discovered in macrozheng mall-swarm and mall up to 1.0.3. This impacts the function detail of the file /order/detail/ of the component Order Details Handler. Performing manipulation of the argument orderId results in improper authorization. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://github.com/Hwwg/cve/issues/11; https://github.com/Hwwg/cve/issues/6; https://vuldb.com/?ctiid.332320
CVE: CVE-2025-13116
Published: 2025-11-13
Description: A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserOrder. Executing manipulation of the argument orderId can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://github.com/Hwwg/cve/issues/13; https://github.com/Hwwg/cve/issues/8; https://vuldb.com/?ctiid.332321
CVE: CVE-2025-41069
Published: 2025-11-13
Description: Insecure Direct Object Reference (IDOR) vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to access or modify unauthorized resources by manipulating requests using the 'idUsuario' parameter in ‘/ajax/TInnova_v2/Formulario_Consentimiento/llamadaAjax/obtenerDatosConsentimientos’, which could lead to the exposure or alteration os confidential data.
CWE: CWE-639
References: https://www.incibe.es/en/incibe-cert/notices/aviso/insecure-direct-object-references-idor-deporsite-t-innova-deporsite
CVE: CVE-2025-13117
Published: 2025-11-13
Description: A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this vulnerability is the function cancelOrder of the file /order/cancelOrder. The manipulation of the argument orderId leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://github.com/Hwwg/cve/issues/12; https://github.com/Hwwg/cve/issues/7; https://vuldb.com/?ctiid.332322
CVE: CVE-2025-13118
Published: 2025-11-13
Description: A vulnerability was detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this issue is the function paySuccess of the file /order/paySuccess. The manipulation of the argument orderID results in improper authorization. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://github.com/Hwwg/cve/issues/14; https://github.com/Hwwg/cve/issues/9; https://vuldb.com/?ctiid.332323
CVE: CVE-2025-13119
Published: 2025-11-13
Description: A flaw has been found in Fabian Ros/SourceCodester Simple E-Banking System 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been published and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862, CWE-352
References: https://github.com/i4G5d/CRITICAL-SECURITY-VULNERABILITY-REPORT-CSRF-Forced-Withdrawal; https://vuldb.com/?ctiid.332324; https://vuldb.com/?id.332324
CVE: CVE-2025-30662
Published: 2025-11-13
Description: Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-646
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25045
CVE: CVE-2025-30669
Published: 2025-11-13
Description: Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-295
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25044
CVE: CVE-2025-62482
Published: 2025-11-13
Description: Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25046
CVE: CVE-2025-62483
Published: 2025-11-13
Description: Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-212
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25047
CVE: CVE-2025-64738
Published: 2025-11-13
Description: External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-73
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25040
CVE: CVE-2025-64739
Published: 2025-11-13
Description: External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-73
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25041
CVE: CVE-2025-64740
Published: 2025-11-13
Description: Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://www.zoom.com/en/trust/security-bulletin/ZSB-25042
CVE: CVE-2025-64741
Published: 2025-11-13
Description: Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVSS Score: 8.1 (HIGH)
CWE: CWE-74
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25043
CVE: CVE-2025-13120
Published: 2025-11-13
Description: A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sort_cmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is eb398971bfb43c38db3e04528b68ac9a7ce509bc. It is advisable to implement a patch to correct this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-416
References: https://github.com/makesoftwaresafe/mruby/pull/263; https://github.com/mruby/mruby/; https://github.com/mruby/mruby/commit/eb398971bfb43c38db3e04528b68ac9a7ce509bc
CVE: CVE-2025-52186
Published: 2025-11-13
Description: Lichess lila before commit 11b4c0fb00f0ffd823246f[PII_REDACTED]59c8f05c (2025-06-02) contains a Server-Side Request Forgery (SSRF) vulnerability in the game export API. The players parameter is passed directly to an internal HTTP client without validation, allowing remote attackers to force the server to send HTTP requests to arbitrary URLs
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://github.com/lichess-org/lila/commit/11b4c0fb00f0ffd8232346f[PII_REDACTED]59c8f05c; https://hackerone.com/reports/3165242
CVE: CVE-2025-60682
Published: 2025-11-13
Description: A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the cloudupdate_check binary, specifically in the sub_402414 function that handles cloud update parameters. User-supplied 'magicid' and 'url' values are directly concatenated into shell commands and executed via system() without any sanitization or escaping. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary commands on the device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: http://totolink.com; https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A720R/CVE-2025-60682.md; https://www.totolink.net/
CVE: CVE-2025-60683
Published: 2025-11-13
Description: A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary, specifically in the sub_40BFA4 function that handles network interface reinitialization from '/var/system/linux_vlan_reinit'. Input is only partially validated by checking the prefix of interface names, and is concatenated into shell commands executed via system() without escaping. An attacker with write access to this file can execute arbitrary commands on the device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: http://totolink.com; https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A720R/CVE-2025-60683.md; https://www.totolink.net/
CVE: CVE-2025-60684
Published: 2025-11-13
Description: A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (sub_42F32C function). The web interface reads the "lang" parameter and constructs Help URL strings using sprintf() into fixed-size stack buffers without proper length validation. Maliciously crafted input can overflow these buffers, potentially leading to arbitrary code execution or memory corruption, without requiring authentication.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121
References: http://totolink.com; https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-LR1200GB/CVE-2025-60684.md; https://www.totolink.net/
CVE: CVE-2025-60685
Published: 2025-11-13
Description: A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary (sub_401EE0 function). The binary reads the /proc/stat file using fgets() into a local buffer and subsequently parses the line using sscanf() into a single-byte variable with the %s format specifier. Maliciously crafted /proc/stat content can overwrite adjacent stack memory, potentially allowing an attacker with filesystem write privileges to execute arbitrary code on the device.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-121
References: http://totolink.com; https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A720R/CVE-2025-60685.md; https://www.totolink.net/
CVE: CVE-2025-60686
Published: 2025-11-13
Description: A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink routers (A720R V4.1.5cu.614_B20230630, LR1200GB V9.1.0u.6619_B20230130, and NR1800X V9.1.0u.6681_B20230703). Both programs parse the contents of /proc/net/arp using sscanf() with "%s" format specifiers into fixed-size stack buffers without length validation. Specifically, one function writes user-controlled data into a single-byte buffer, and the other into adjacent small arrays without bounds checking. An attacker who controls the contents of /proc/net/arp can trigger memory corruption, leading to denial of service or potential arbitrary code execution.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-121
References: http://totolink.com; https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A720R/CVE-2025-60686.md; https://www.totolink.net/
CVE: CVE-2025-60687
Published: 2025-11-13
Description: An unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router firmware V9.1.0u.6619_B20230130 within the cstecgi.cgi binary (sub_41EC68 function). The binary reads the "imei" parameter from a web request and verifies only that it is 15 characters long. The parameter is then directly inserted into a system command using sprintf() and executed with system(). Maliciously crafted IMEI input can execute arbitrary commands on the router without authentication.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: http://totolink.com; https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-LR1200GB/CVE-2025-60687.md; https://www.totolink.net/
CVE: CVE-2025-60688
Published: 2025-11-13
Description: A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (setDefResponse function). The binary reads the "IpAddress" parameter from a web request and copies it into a fixed-size stack buffer using strcpy() without any length validation. Maliciously crafted input can overflow the buffer, leading to potential arbitrary code execution or memory corruption, without requiring authentication.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121
References: http://totolink.com; https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-LR1200GB/CVE-2025-60688.md; https://www.totolink.net/
CVE: CVE-2025-60689
Published: 2025-11-13
Description: An unauthenticated command injection vulnerability exists in the Start_EPI function of the httpd binary on Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz). The vulnerability occurs because user-supplied CGI parameters (wl_ant, wl_ssid, wl_rate, ttcp_num, ttcp_ip, ttcp_size) are concatenated into system command strings without proper sanitization and executed via wl_exec_cmd. Successful exploitation allows remote attackers to execute arbitrary commands on the device without authentication.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-77
References: http://linksys.com; https://github.com/yifan20020708/SGTaint-0-day/blob/main/Linksys/Linksys-E1200/CVE-2025-60689.md; https://www.linksys.com/
CVE: CVE-2025-62484
Published: 2025-11-13
Description: Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVSS Score: 8.1 (HIGH)
CWE: CWE-1333
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25048
CVE: CVE-2025-64511
Published: 2025-11-13
Description: MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can access internal network services such as databases through Python code in the tool module, although the process runs in a sandbox. Version 2.3.1 fixes the issue.
CVSS Score: 7.4 (HIGH)
CWE: CWE-918
References: https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-9287-g7px-9rp4
CVE: CVE-2025-64525
Published: 2025-11-13
Description: Astro is a web framework. In Astro versions 2.16.0 up to but excluding 5.15.5 which utilizeon-demand rendering, request headers `x-forwarded-proto` and `x-forwarded-port` are insecurely used, without sanitization, to build the URL. This has several consequences, the most important of which are: middleware-based protected route bypass (only via `x-forwarded-proto`), DoS via cache poisoning (if a CDN is present), SSRF (only via `x-forwarded-proto`), URL pollution (potential SXSS, if a CDN is present), and WAF bypass. Version 5.15.5 contains a patch.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L121; https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L97; https://github.com/withastro/astro/commit/dafbb1ba29912099c4faff1440033edc768af8b4
CVE: CVE-2025-64703
Published: 2025-11-13
Description: MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations by Python code in tool module, although the process run in sandbox. Version 2.3.1 fixes the issue.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-qwvm-x4xh-g2qq
CVE: CVE-2025-64714
Published: 2025-11-13
Description: PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Starting in version 1.7.7 and prior to version 2.0.3, an unauthenticated Local File Inclusion exists in the template-switching feature. If `templateselection` is enabled in the configuration, the server trusts the `template` cookie and includes the referenced PHP file. An attacker can read sensitive data or, if they manage to drop a PHP file elsewhere, gain remote code execution. The constructed path of the template file is checked for existence, then included. For PrivateBin project files this does not leak any secrets due to data files being created with PHP code that prevents execution, but if a configuration file without that line got created or the visitor figures out the relative path to a PHP script that directly performs an action without appropriate privilege checking, those might execute or leak information. The issue has been patched in version 2.0.3. As a workaround, set `templateselection = false` (which is the default) in `cfg/conf.php` or remove it entirely
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-23, CWE-73, CWE-98
References: https://github.com/PrivateBin/PrivateBin/commit/4434dbf73ac53217fda0f90d8cf9b6110f8acc4f; https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-g2j9-g8r5-rg82