deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-34852
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-34856
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-34861
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-34863
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-35237
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-35274
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-35400
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-35727
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-35731
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-35732
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-35736
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36281
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36283
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36286
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36290
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36291
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36294
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36297
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36342
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36353
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36366
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36393
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36395
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36419
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36420
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36421
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36426
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-36792
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-37408
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-38071
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-38084
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-40221
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-40688
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-40689
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-41341
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-41625
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-41626
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-41637
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-41782
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-41803
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-41834
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-41997
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-42480
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-42487
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-42700
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-42702
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-43444
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-43446
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-43498
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-43510
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-43511
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-43659
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-43661
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-43669
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-44450
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-44452
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-44454
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-44607
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-44609
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-44613
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-44614
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-44618
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-45114
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-45117
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-45120
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-45125
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-45878
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-46296
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-46419
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-46655
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-46729
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-46734
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-46735
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-46736
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-46739
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2022-47914
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2025-27702
Published: 2025-05-28
Description: CVE-2025-27702 is a vulnerability in the management console of Absolute 
Secure Access prior to version 13.54. Attackers with administrative 
access to the console and who have been assigned a certain set of 
permissions can bypass those permissions to improperly modify settings. 
The attack complexity is low, there are no preexisting attack 
requirements; the privileges required are high, and there is no user 
interaction required. There is no impact to system confidentiality or 
availability, impact to system integrity is high.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-284
References: https://www.absolute.com/platform/vulnerability-archive/cve-2025-27702
CVE: CVE-2025-27703
Published: 2025-05-28
Description: CVE-2025-27703 is a privilege escalation vulnerability in the management
 console of Absolute Secure Access prior to version 13.54. Attackers 
with administrative access to a specific subset of privileged features 
in the console can elevate their permissions to access additional 
features in the console. The attack complexity is low, there are no 
preexisting attack requirements; the privileges required are high, and 
there is no user interaction required. The impact to system 
confidentiality is low, the impact to system integrity is high and the 
impact to system availability is low.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-281
References: https://www.absolute.com/platform/vulnerability-archive/cve-2025-27703
CVE: CVE-2025-27706
Published: 2025-05-28
Description: CVE-2025-27706 is a cross-site scripting vulnerability in the management
 console of Absolute Secure Access prior to version 13.54. Attackers 
with system administrator permissions can interfere with another system 
administrator’s use of the management console when the second 
administrator visits the page. Attack complexity is low, there are no 
preexisting attack requirements, privileges required are high and active
 user interaction is required. There is no impact on confidentiality, 
the impact on integrity is low and there is no impact on availability.
CVSS Score: 3.4 (LOW)
CWE: CWE-79
References: https://www.absolute.com/platform/vulnerability-archive/cve-2025-27706
CVE: CVE-2023-48726
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2023-49137
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2023-49139
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2023-49604
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2023-49904
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2023-50338
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2023-51753
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2023-51756
Published: 2025-05-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE: CVE-2025-3755
Published: 2025-05-29
Description: Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation of the CPU module (causing a DoS condtion on the CPU module), by sending specially crafted packets. The product is needed to reset for recovery.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-1285
References: https://jvn.jp/vu/JVNVU94070048/; https://www.cisa.gov/news-events/ics-advisories/icsa-25-153-03; https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-003_en.pdf
CVE: CVE-2025-4583
Published: 2025-05-29
Description: The Smash Balloon Social Photo Feed – Easy Social Feeds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `data-plugin` attribute in all versions up to, and including, 6.9.0 (Free) and 6.8.0 (Pro) due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/instagram-feed/tags/6.9.0/js/sb-instagram-admin-6.js#L428; https://www.wordfence.com/threat-intel/vulnerabilities/id/23e47daa-79e7-4ed3-a88a-0f090e9aa277?source=cve
CVE: CVE-2025-5273
Published: 2025-05-29
Description: All versions of the package mcp-markdownify-server are vulnerable to Files or Directories Accessible to External Parties via the get-markdown-file tool. An attacker can craft a prompt that, once accessed by the MCP host, will allow it to read arbitrary files from the host running the server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-552, CWE-552
References: https://github.com/zcaceres/markdownify-mcp/blob/3667bd4765c0e49684ce22df268d02dd478a7f3b/src/Markdownify.ts%23L94; https://github.com/zcaceres/markdownify-mcp/commit/3a6b202d088ef7acb8be84bc09515f41a2b1a9df; https://security.snyk.io/vuln/SNYK-JS-MCPMARKDOWNIFYSERVER-10249193
CVE: CVE-2025-5276
Published: 2025-05-29
Description: All versions of the package mcp-markdownify-server are vulnerable to Server-Side Request Forgery (SSRF) via the Markdownify.get() function. An attacker can craft a prompt that, once accessed by the MCP host, can invoke the webpage-to-markdown, bing-search-to-markdown, and youtube-to-markdown tools to issue requests and read the responses to attacker-controlled URLs, potentially leaking sensitive information.
CVSS Score: 7.4 (HIGH)
CWE: CWE-918, CWE-918
References: https://github.com/zcaceres/markdownify-mcp/blob/224cf89f0d58616d2a5522f60f184e8391d1c9e3/src/server.ts%23L20C17-L20C29; https://github.com/zcaceres/markdownify-mcp/commit/0284aa8f34d32c65e20d8cda2d429b7943c9af03; https://security.snyk.io/vuln/SNYK-JS-MCPMARKDOWNIFYSERVER-10249387
CVE: CVE-2024-52588
Published: 2025-05-29
Description: Strapi is an open-source content management system. Prior to version 4.25.2, inputting a local domain into the Webhooks URL field leads to the application fetching itself, resulting in a server side request forgery (SSRF). This issue has been patched in version 4.25.2.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-918
References: https://github.com/strapi/strapi/security/advisories/GHSA-v8wj-f5c7-pvxf
CVE: CVE-2025-27151
Published: 2025-05-29
Description: Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlen(filepath) when copying a user-supplied file path into a fixed-size stack buffer. This allows an attacker to overflow the stack and potentially achieve code execution. This issue has been patched in version 8.0.2.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20, CWE-121
References: https://github.com/redis/redis/commit/643b5db235cb82508e72f11c7b4bbfc7dc39be56; https://github.com/redis/redis/releases/tag/8.0.2; https://github.com/redis/redis/security/advisories/GHSA-5453-q98w-cmvm
CVE: CVE-2025-4670
Published: 2025-05-29
Description: The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's edd_receipt shortcode in all versions up to, and including, 3.3.8.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3301852/; https://wordpress.org/plugins/easy-digital-downloads/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/95c5bfc5-53b3-482f-856b-db6b6cac93a2?source=cve
CVE: CVE-2025-4687
Published: 2025-05-29
Description: In Teltonika Networks Remote Management System (RMS), it is possible to perform account pre-hijacking by misusing the invite functionality. If a victim has a pending invite and registers to the platform directly, they are added to the attackers company without their knowledge. The victims account and their company can then be managed by the attacker.This issue affects RMS: before 5.7.
CWE: CWE-288
References: https://jowin922.medium.com/cve-2025-4687-pre-account-takeover-through-invite-on-teletonika-rms-website[PII_REDACTED]29
CVE: CVE-2025-5122
Published: 2025-05-29
Description: The Map Block Leaflet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/map-block-leaflet/trunk/build/leaflet-map-block/render.php#L41; https://plugins.trac.wordpress.org/changeset/3302407/; https://wordpress.org/plugins/map-block-leaflet/#developers
CVE: CVE-2025-5286
Published: 2025-05-29
Description: The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘additional_settings’ parameter in all versions up to, and including, 5.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/bold-page-builder/tags/5.3.6/content_elements/bt_bb_content_slider/bt_bb_content_slider.php#L156; https://plugins.trac.wordpress.org/browser/bold-page-builder/tags/5.3.6/content_elements/bt_bb_content_slider/bt_bb_content_slider.php#L176; https://plugins.trac.wordpress.org/browser/bold-page-builder/tags/5.3.6/content_elements/bt_bb_content_slider/bt_bb_content_slider.php#L7
CVE: CVE-2025-48388
Published: 2025-05-29
Description: FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, the application performs insufficient validation of user-supplied data, which is used as arguments to string formatting functions. As a result, an attacker can pass a string containing special symbols (\r, \n, \t)to the application. This issue has been patched in version 1.8.178.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-93, CWE-134
References: https://github.com/freescout-help-desk/freescout/commit/eab97711027fff4bce90ccd2e189cbc184fa0370; https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-c76f-wggm-grcq