deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-58365
Published: 2025-09-08
Description: The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Prior to version 9.14, the blog application in XWiki allowed remote code execution for any user who has edit right on any page. Normally, these are all logged-in users as they can edit their own user profile. For an exploit, it is sufficient to add an object of type `Blog.BlogPostClass` to any page and to add some script macro with the exploit code to the "Content" field of that object. The vulnerability has been patched in the blog application version 9.14 by executing the content of blog posts with the rights of the appropriate author. No known workarounds are available.
CWE: CWE-95
References: https://github.com/xwiki-contrib/application-blog/commit/b98ab6f17da3029576f42d12b4442cd555c7e0b4; https://github.com/xwiki-contrib/application-blog/security/advisories/GHSA-gwj6-xpfg-pxwr; https://jira.xwiki.org/browse/BLOG-191
CVE: CVE-2025-58444
Published: 2025-09-08
Description: The MCP inspector is a developer tool for testing and debugging MCP servers. A cross-site scripting issue was reported in versions of the MCP Inspector local development tool prior to 0.16.6 when connecting to untrusted remote MCP servers with a malicious redirect URI. This could be leveraged to interact directly with the inspector proxy to trigger arbitrary command execution. Users are advised to update to 0.16.6 to resolve this issue.
CWE: CWE-84
References: https://github.com/modelcontextprotocol/inspector/commit/650f3090d26344a672026b737d81586595bb1f60; https://github.com/modelcontextprotocol/inspector/security/advisories/GHSA-g9hg-qhmf-q45m
CVE: CVE-2025-58449
Published: 2025-09-08
Description: Maho is a free and open source ecommerce platform. In Maho prior to 25.9.0, an authenticated staff user with access to the `Dashboard` and `Catalog\Manage Products` permissions can create a custom option on a listing with a file input field. By allowing file uploads with a `.php` extension, the user can use the filed to upload malicious PHP files, gaining remote code execution. Version 25.9.0 fixes the issue.
CWE: CWE-646
References: https://github.com/MahoCommerce/maho/commit/db54a1b44e9b3fd26b27ca4d5ece0af99c4dcb53; https://github.com/MahoCommerce/maho/security/advisories/GHSA-vgmm-27fc-vmgp; https://github.com/MahoCommerce/maho/security/advisories/GHSA-vgmm-27fc-vmgp
CVE: CVE-2025-58450
Published: 2025-09-08
Description: pREST (PostgreSQL REST), is an API that delivers an application on top of a Postgres database. SQL injection is possible in versions prior to 2.0.0-rc3. The validation present in versions prior to 2.0.0-rc3 does not provide adequate protection from injection attempts. Version 2.0.0-rc3 contains a patch to mitigate such attempts.
CWE: CWE-89
References: https://github.com/prest/prest/commit/47d02b87842900f77d76fc694d9aa7e983b0711c; https://github.com/prest/prest/security/advisories/GHSA-p46v-f2x8-qp98; https://github.com/prest/prest/security/advisories/GHSA-p46v-f2x8-qp98
CVE: CVE-2025-58451
Published: 2025-09-08
Description: Cattown is a JavaScript markdown parser. Versions prior to 1.0.2 used regular expressions with inefficient, potentially exponential worst-case complexity. This could cause excessive CPU usage due to excessive backtracking on crafted inputs. In turn, the excessive CPU usage could lead to resource exhaustion, where processing malicious inputs could cause high CPU or memory usage, potentially leading to denial of service. Version 1.0.2 contains a patch. Additionally, users should review and restrict input sources if untrusted inputs are processed.
CWE: CWE-400, CWE-1333
References: https://github.com/IEatUranium238/Cattown/commit/70c2a28fb7dc520cfb7e401e0e141bff3dd26ead; https://github.com/IEatUranium238/Cattown/security/advisories/GHSA-455v-w7r9-3vv9
CVE: CVE-2025-10109
Published: 2025-09-08
Description: A vulnerability was determined in Campcodes Online Loan Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=delete_payment. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/dico-Z/CVE/issues/5; https://vuldb.com/?ctiid.323075; https://vuldb.com/?id.323075
CVE: CVE-2025-10110
Published: 2025-09-08
Description: A vulnerability was identified in ChanCMS up to 3.3.1. Impacted is an unknown function of the file /search/. The manipulation with the input '%20or%201=1%20%23/words.html leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/chujianxin0101/vuln/issues/10; https://vuldb.com/?ctiid.323076; https://vuldb.com/?id.323076
CVE: CVE-2025-10111
Published: 2025-09-08
Description: A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is an unknown function of the file /admin/modules/instructor/index.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/mybonn/CVE/issues/4; https://itsourcecode.com/; https://vuldb.com/?ctiid.323077
CVE: CVE-2025-1761
Published: 2025-09-08
Description: IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-824
References: https://www.ibm.com/support/pages/node/7244230
CVE: CVE-2025-58452
Published: 2025-09-08
Description: WeGIA is a Web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the listar_despachos.php endpoint of the WeGIA application prior to version 3.4.11. This vulnerability allows attackers to inject malicious scripts in the id_memorando parameter. Version 3.4.11 contains a patch.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-hq9x-mfv2-x467; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-hq9x-mfv2-x467
CVE: CVE-2025-58453
Published: 2025-09-08
Description: WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in WeGIA versions 3.4.10 and prior in the endpoint /WeGIA/html/memorando/exibe_anexo.php, in the id_anexo parameter. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. Version 3.4.11 contains a patch.
CVSS Score: 8.2 (HIGH)
CWE: CWE-89
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-gg48-pg9f-39fx; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-gg48-pg9f-39fx
CVE: CVE-2025-58454
Published: 2025-09-08
Description: WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in WeGIA versions 3.4.10 and prior inthe endpoint /WeGIA/html/memorando/listar_despachos.php, in the id_memorando parameter. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. Version 3.4.11 contains a patch.
CVSS Score: 8.2 (HIGH)
CWE: CWE-89
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-ghfh-g6rg-jmqf; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-ghfh-g6rg-jmqf
CVE: CVE-2025-58745
Published: 2025-09-08
Description: WeGIA is a Web manager for charitable institutions. The fix for CVE-2025-22133 was not enough to remediate the arbitrary file upload vulnerability. The WeGIA only check MIME types for Excel files at endpoint `/html/socio/sistema/controller/controla_xlsx.php`, which can be bypassed by using magic bytes of Excel file in a PHP file. As a result, attacker can upload webshell to the server for remote code execution. Version 3.4.11 contains an updated fix.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94, CWE-434, CWE-434
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-hq96-gvmx-qrwp; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-hq96-gvmx-qrwp
CVE: CVE-2025-58746
Published: 2025-09-08
Description: The Volkov Labs Business Links panel for Grafana provides an interface to navigate using external links, internal dashboards, time pickers, and dropdown menus. Prior to version 2.4.0, a malicious actor with Editor privileges can escalate their privileges to Administrator and perform arbitrary administrative actions. This is possible because the plugin allows arbitrary JavaScript code injection in the [Layout] → [Link] → [URL] field. Version 2.4.0 contains a fix for the issue.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-83
References: https://github.com/VolkovLabs/business-links/commit/9d203a6950de7860e11b25e4265ed8fe60082d7d; https://github.com/VolkovLabs/business-links/security/advisories/GHSA-93qj-gv4p-mf53; https://github.com/VolkovLabs/business-links/security/advisories/GHSA-93qj-gv4p-mf53
CVE: CVE-2025-58751
Published: 2025-09-08
Description: Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, files starting with the same name with the public directory were served bypassing the `server.fs` settings. Only apps that explicitly expose the Vite dev server to the network (using --host or `server.host` config option), use the public directory feature (enabled by default), and have a symlink in the public directory are affected. Versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20 fix the issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-200, CWE-284
References: https://github.com/lukeed/sirv/commit/f0113f3f8266328d804ee808f763a3c11f8997eb; https://github.com/vitejs/vite/commit/09f2b52e8d5907f26602653caf41b3a56692600d; https://github.com/vitejs/vite/commit/4f1c35bcbb5830290c694aa14b6789e07450f069
CVE: CVE-2025-58752
Published: 2025-09-08
Description: Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, any HTML files on the machine were served regardless of the `server.fs` settings. Only apps that explicitly expose the Vite dev server to the network (using --host or server.host config option) and use `appType: 'spa'` (default) or `appType: 'mpa'` are affected. This vulnerability also affects the preview server. The preview server allowed HTML files not under the output directory to be served. Versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20 fix the issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-23, CWE-200, CWE-284
References: https://github.com/vitejs/vite/commit/0ab19ea9fcb66f544328f442cf6e70f7c0528d5f; https://github.com/vitejs/vite/commit/14015d794f69accba68798bd0e15135bc51c9c1e; https://github.com/vitejs/vite/commit/482000f57f56fe6ff2e905305100cfe03043ddea
CVE: CVE-2025-10112
Published: 2025-09-09
Description: A weakness has been identified in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/department/index.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/mybonn/CVE/issues/5; https://itsourcecode.com/; https://vuldb.com/?ctiid.323078
CVE: CVE-2025-10113
Published: 2025-09-09
Description: A security vulnerability has been detected in itsourcecode Student Information Management System 1.0. This affects an unknown function of the file /admin/modules/room/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/mybonn/CVE/issues/6; https://itsourcecode.com/; https://vuldb.com/?ctiid.323079
CVE: CVE-2025-43763
Published: 2025-09-09
Description: A server-side request forgery (SSRF) vulnerability exist in the Liferay Portal  7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.20 that affects custom object attachment fields. This flaw allows an attacker to manipulate the application into making unauthorized requests to other instances, creating new object entries that link to external resources.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43763
CVE: CVE-2025-58755
Published: 2025-09-09
Description: MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. The extractall function `zip_file.extractall(output_dir)` is used directly to process compressed files. It is used in many places in the project. In versions up to and including 1.5.0, when the Zip file containing malicious content is decompressed, it overwrites the system files. In addition, the project allows the download of the zip content through the link, which increases the scope of exploitation of this vulnerability. As of time of publication, no known fixed versions are available.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-x6ww-pf9m-m73m
CVE: CVE-2025-58756
Published: 2025-09-09
Description: MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, in `model_dict = torch.load(full_path, map_location=torch.device(device), weights_only=True)` in monai/bundle/scripts.py , `weights_only=True` is loaded securely. However, insecure loading methods still exist elsewhere in the project, such as when loading checkpoints. This is a common practice when users want to reduce training time and costs by loading pre-trained models downloaded from other platforms. Loading a checkpoint containing malicious content can trigger a deserialization vulnerability, leading to code execution. As of time of publication, no known fixed versions are available.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-6vm5-6jv9-rjpj
CVE: CVE-2025-58757
Published: 2025-09-09
Description: MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, the `pickle_operations` function in `monai/data/utils.py` automatically handles dictionary key-value pairs ending with a specific suffix and deserializes them using `pickle.loads()` . This function also lacks any security measures. The deserialization may lead to code execution. As of time of publication, no known fixed versions are available.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-p8cm-mm2v-gwjm; https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-p8cm-mm2v-gwjm
CVE: CVE-2025-10114
Published: 2025-09-09
Description: A vulnerability was found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the argument Name results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/sruki3/cve/issues/1; https://phpgurukul.com/; https://vuldb.com/?ctiid.323083
CVE: CVE-2025-10115
Published: 2025-09-09
Description: A vulnerability was determined in SiempreCMS up to 1.3.6. This affects an unknown part of the file user_search_ajax.php. This manipulation of the argument name/userName causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/drew-byte/SiempreCMS-SQLi-POC; https://vuldb.com/?ctiid.323084; https://vuldb.com/?id.323084
CVE: CVE-2025-43774
Published: 2025-09-09
Description: Rejected reason: This CVE ID is rejected. The reported vulnerability was found to be present only in a feature that was under development and protected by a beta feature flag. As a result, the issue was not exploitable in the official or public releases within the specified affected ranges, making this a false positive for officially released versions.
CVE: CVE-2025-10116
Published: 2025-09-09
Description: A vulnerability was identified in SiempreCMS up to 1.3.6. This vulnerability affects unknown code of the file /docs/admin/file_upload.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available and might be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284, CWE-434
References: https://github.com/drew-byte/SiempreCMS-File-Upload-Abuse/blob/main/README.md; https://vuldb.com/?ctiid.323085; https://vuldb.com/?id.323085
CVE: CVE-2025-10117
Published: 2025-09-09
Description: A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetch_tasks.php of the component Add New Task. Executing manipulation with the input <script>alert('XSS')</script> can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/chen[PII_REDACTED]/CVE/issues/11; https://vuldb.com/?ctiid.323087; https://vuldb.com/?id.323087
CVE: CVE-2025-10118
Published: 2025-09-09
Description: A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/Ais0329/cve/issues/1; https://itsourcecode.com/; https://vuldb.com/?ctiid.323088
CVE: CVE-2025-10120
Published: 2025-09-09
Description: A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120
References: https://github.com/cymiao1978/cve/blob/main/4.md; https://github.com/cymiao1978/cve/blob/main/4.md#poc; https://vuldb.com/?ctiid.323089
CVE: CVE-2025-10121
Published: 2025-09-09
Description: A flaw has been found in uverif up to 3.2. This affects the function addbatch of the file /admin/kami_list. This manipulation of the argument note causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/Axianke/cve_bug/issues/1; https://vuldb.com/?ctiid.323090; https://vuldb.com/?id.323090
CVE: CVE-2025-42911
Published: 2025-09-09
Description: SAP NetWeaver (Service Data Download) allows an authenticated user to call a remote-enabled function module, which could grant access to information about the SAP system and operating system. This leads to a low impact on confidentiality, with no effect on the integrity and availability of the application
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3627644; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42912
Published: 2025-09-09
Description: SAP HCM My Timesheet Fiori 2.0 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This issue has a significant impact on the application's integrity, while confidentiality and availability remain unaffected.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3635587; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42913
Published: 2025-09-09
Description: Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in-depth system knowledge to escalate privileges and perform activities that are otherwise restricted, resulting in a low impact on the integrity of the application. Confidentiality and availability are not impacted.
CVSS Score: 3.1 (LOW)
CWE: CWE-862
References: https://me.sap.com/notes/3635587; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42914
Published: 2025-09-09
Description: Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in-depth system knowledge to escalate privileges and perform activities that are otherwise restricted, resulting in a low impact on the integrity of the application. Confidentiality and availability are not impacted.
CVSS Score: 3.1 (LOW)
CWE: CWE-862
References: https://me.sap.com/notes/3635587; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42915
Published: 2025-09-09
Description: Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without affecting the availability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3409013; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42916
Published: 2025-09-09
Description: Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database but no impact on confidentiality.
CVSS Score: 8.1 (HIGH)
CWE: CWE-1287
References: https://me.sap.com/notes/3635475; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42917
Published: 2025-09-09
Description: SAP HCM Approve Timesheets Fiori 2.0 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This issue has a significant impact on the application's integrity, while confidentiality and availability remain unaffected.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3643832; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42918
Published: 2025-09-09
Description: SAP NetWeaver Application Server for ABAP allows authenticated users with access to background processing to gain unauthorized read access to profile parameters.  This results in a low impact on confidentiality, with no impact on integrity or availability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3623504; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42920
Published: 2025-09-09
Description: Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated victim clicks on the link, the injected input is processed during the page generation, resulting in the execution of malicious content. This execution allows the attacker to access and modify information within the victim's browser scope, impacting confidentiality and integrity, while availability remains unaffected.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3647098; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42922
Published: 2025-09-09
Description: SAP NetWeaver AS Java allows an attacker authenticated as a non-administrative user to use a flaw in an available service to upload an arbitrary file. This file when executed can lead to a full compromise of confidentiality, integrity and availability of the system.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94
References: https://me.sap.com/notes/3643865; https://url.sap/sapsecuritypatchday