deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-13949
Published: 2025-12-03
Description: A vulnerability was identified in ProudMuBai GoFilm 1.0.0/1.0.1. Impacted is the function SingleUpload of the file /server/controller/FileController.go. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434
References: https://github.com/yzlala1147/cve/issues/1; https://vuldb.com/?ctiid.334164; https://vuldb.com/?id.334164
CVE: CVE-2025-53841
Published: 2025-12-03
Description: The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escalation vulnerability. The service will attempt to read an OpenSSL configuration file from a non-existent location that standard Windows users have default write access to. This allows an unprivileged local user to create a crafted "openssl.cnf" file in that location and, by specifying the path to a custom DLL file in a custom OpenSSL engine definition, execute arbitrary commands with the privileges of the Guardicore Agent process. Since Guardicore Agent runs with SYSTEM privileges, this permits an unprivileged user to fully elevate privileges to SYSTEM level in this manner.
CVSS Score: 7.8 (HIGH)
CWE: CWE-829
References: https://community.akamai.com/customers/s/article/Windows-Agent-Vulnerability-Summary-and-Resolution; https://techdocs.akamai.com/guardicore-platform-agent/changelog; https://www.akamai.com/blog/security/advisory-cve-2025-53841-guardicore-local-privilege-escalation
CVE: CVE-2025-57200
Published: 2025-12-03
Description: AVTECH SECURITY Corporation DGM1104 FullImg-[PII_REDACTED] was discovered to contain an authenticated command injection vulnerability in the test_mail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: http://avtech.com; http://dgm1104.com; https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2025-57200
CVE: CVE-2025-65267
Published: 2025-12-03
Description: In ERPNext v15.83.2 and Frappe Framework v15.86.0, improper validation of uploaded SVG avatar images allows attackers to embed malicious JavaScript. The payload executes when an administrator clicks the image link to view the avatar, resulting in stored cross-site scripting (XSS). Successful exploitation may lead to account takeover, privilege escalation, or full compromise of the affected ERPNext instance.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://github.com/PhDg1410/CVE/tree/main/CVE-2025-65267; https://github.com/frappe/erpnext; https://github.com/frappe/frappe
CVE: CVE-2025-55182
Published: 2025-12-03
Description: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafely deserializes payloads from HTTP requests to Server Function endpoints.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-502
References: https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components; https://www.facebook.com/security/advisories/cve-2025-55182; http://www.openwall.com/lists/oss-security/2025/12/03/4
CVE: CVE-2025-57198
Published: 2025-12-03
Description: AVTECH SECURITY Corporation DGM1104 FullImg-[PII_REDACTED] was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://avtech.com; http://dgm1104.com; https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2025-57198
CVE: CVE-2025-57199
Published: 2025-12-03
Description: AVTECH SECURITY Corporation DGM1104 FullImg-[PII_REDACTED] was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary. This vulnerability allows attackers to execute arbitrary commands via a crafted input.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://avtech.com; http://dgm1104.com; https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2025-57199
CVE: CVE-2025-57201
Published: 2025-12-03
Description: AVTECH SECURITY Corporation DGM1104 FullImg-[PII_REDACTED] was discovered to contain an authenticated command injection vulnerability in the SMB server function. This vulnerability allows attackers to execute arbitrary commands via a crafted input.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://avtech.com; http://dgm1104.com; https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2025-57201
CVE: CVE-2025-57202
Published: 2025-12-03
Description: A stored cross-site scripting (XSS) vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-[PII_REDACTED] allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the username field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://avtech.com; http://dmg1104.com; https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2025-57202
CVE: CVE-2025-65320
Published: 2025-12-03
Description: Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://github.com/Smarttfoxx/CVE-2025--; https://packetstorm.news/files/id/212149
CVE: CVE-2025-7044
Published: 2025-12-03
Description: An Improper Input Validation vulnerability exists in the user websocket handler of MAAS. An authenticated, unprivileged attacker can intercept a user.update websocket request and inject the is_superuser property set to true. The server improperly validates this input, allowing the attacker to self-promote to an administrator role. This results in full administrative control over the MAAS deployment.
CVSS Score: 7.7 (HIGH)
CWE: CWE-269
References: https://bugs.launchpad.net/maas/+bug/2115714
CVE: CVE-2024-32641
Published: 2025-12-03
Description: Masa CMS is an open source Enterprise Content Management platform. Masa CMS versions prior to 7.2.8, 7.3.13, and 7.4.6 are vulnerable to remote code execution. The vulnerability exists in the addParam function, which accepts user input via the criteria parameter. This input is subsequently evaluated by setDynamicContent, allowing an unauthenticated attacker to execute arbitrary code via the m tag. The vulnerability is patched in versions 7.2.8, 7.3.13, and 7.4.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/MasaCMS/MasaCMS/commit/fb27f822fe426496af71205fa35208e58823fcf6; https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-cj9g-v5mq-qrjm
CVE: CVE-2024-32642
Published: 2025-12-03
Description: Masa CMS is an open source Enterprise Content Management platform. Prior to 7.2.8, 7.3.13, and 7.4.6, there is vulnerable to host header poisoning which allows account takeover via password reset email. This vulnerability is fixed in 7.2.8, 7.3.13, and 7.4.6.
CVSS Score: 8.8 (HIGH)
CWE: CWE-346, CWE-640
References: https://github.com/MasaCMS/MasaCMS/commit/7541b9c99fb9e32d1de6f[PII_REDACTED]cec1d8960; https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-qjm6-c8hx-ffh8
CVE: CVE-2024-32643
Published: 2025-12-03
Description: Masa CMS is an open source Enterprise Content Management platform. Prior to 7.2.8, 7.3.13, and 7.4.6, if the URL to the page is modified to include a /tag/ declaration, the CMS will render the page regardless of group restrictions. This vulnerability is fixed in 7.2.8, 7.3.13, and 7.4.6.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://github.com/MasaCMS/MasaCMS/commit/d1a2e57ef8dbc50c87b178eacc85fcccb05f5b6c; https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-f469-jh82-97fv
CVE: CVE-2025-13492
Published: 2025-12-03
Description: A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3. The vulnerability
               could potentially allow a local attacker to escalate privileges via a race condition when installing packages.
CVSS Score: 7.0 (HIGH)
CWE: CWE-363
References: https://support.hp.com/us-en/document/ish_13[PII_REDACTED]5143-16/hpsbgn04078
CVE: CVE-2025-13751
Published: 2025-12-03
Description: Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and 2.7_alpha1 through 2.7_rc2 on Windows allows a local authenticated user to connect to the service and trigger an error causing a local denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770, CWE-775, CWE-841
References: https://community.openvpn.net/Security%20Announcements/CVE-2025-13751; https://www.mail-archive.com/openvpn-announce@lists.sourceforge.net/msg00153.html; https://www.mail-archive.com/openvpn-announce@lists.sourceforge.net/msg00154.html
CVE: CVE-2025-20381
Published: 2025-12-03
Description: In Splunk MCP Server app versions below 0.2.4, a user with access to the "run_splunk_query" Model Context Protocol (MCP) tool could bypass the SPL command allowlist controls in MCP by embedding SPL commands as sub-searches, leading to unauthorized actions beyond the intended MCP restrictions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://advisory.splunk.com/advisories/SVD-2025-1210
CVE: CVE-2025-20382
Published: 2025-12-03
Description: In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.10, 10.0.2503.8, and 9.3.2411.120, a low-privileged user that does not hold the "admin" or "power" Splunk roles could create a views dashboard with a custom background using the `data:image/png;base64` protocol that could potentially lead to an unvalidated redirect. This behavior circumvents the Splunk external URL warning mechanism by using a specially crafted URL, allowing for a redirection to an external malicious site. The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. The authenticated user should not be able to exploit the vulnerability at will.
CVSS Score: 3.5 (LOW)
CWE: CWE-601
References: https://advisory.splunk.com/advisories/SVD-2025-1201
CVE: CVE-2025-20383
Published: 2025-12-03
Description: In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and below 3.9.10, 3.8.58, and 3.7.28 of Splunk Secure Gateway app in Splunk Cloud Platform, a low-privileged user that does not hold the "admin" or "power" Splunk roles and subscribes to mobile push notifications could receive notifications that disclose the title and description of the report or alert even if they do not have access to view the report or alert.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://advisory.splunk.com/advisories/SVD-2025-1202
CVE: CVE-2025-20384
Published: 2025-12-03
Description: In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated attacker can inject American National Standards Institute (ANSI) escape codes into Splunk log files due to improper validation at the /en-US/static/ web endpoint. This may allow them to poison, forge, or obfuscate sensitive log data through specially crafted HTTP requests, potentially impacting log integrity and detection capabilities.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-117
References: https://advisory.splunk.com/advisories/SVD-2025-1203
CVE: CVE-2025-20385
Published: 2025-12-03
Description: In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.6, 10.0.2503.7, and 9.3.2411.117, a user who holds a role with a high privilege capability `admin_all_objects` could craft a malicious payload through the href attribute of an anchor tag within a collection in the navigation bar, which could result in execution of unauthorized JavaScript code in the browser of a user.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://advisory.splunk.com/advisories/SVD-2025-1204
CVE: CVE-2025-20386
Published: 2025-12-03
Description: In Splunk Enterprise for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Splunk Enterprise for Windows Installation directory. This lets non-administrator users on the machine access the directory and all its contents.
CVSS Score: 8.0 (HIGH)
CWE: CWE-732
References: https://advisory.splunk.com/advisories/SVD-2025-1205
CVE: CVE-2025-20387
Published: 2025-12-03
Description: In Splunk Universal Forwarder for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory. This lets non-administrator users on the machine access the directory and all its contents.
CVSS Score: 8.0 (HIGH)
CWE: CWE-732
References: https://advisory.splunk.com/advisories/SVD-2025-1206
CVE: CVE-2025-20388
Published: 2025-12-03
Description: In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.7, and 9.3.2411.116, a user who holds a role that contains the high privilege capability `change_authentication` could enumerate internal IP addresses and network ports when adding new search peers to a Splunk search head in a distributed environment.
CVSS Score: 2.7 (LOW)
CWE: CWE-918
References: https://advisory.splunk.com/advisories/SVD-2025-1207
CVE: CVE-2025-20389
Published: 2025-12-03
Description: In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and versions below 3.9.10, 3.8.58 and 3.7.28 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload through the `label` column field after adding a new device in the Splunk Secure Gateway app. This could potentially lead to a client-side denial of service (DoS).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://advisory.splunk.com/advisories/SVD-2025-1208
CVE: CVE-2025-34319
Published: 2025-12-03
Description: TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 (discovered in V2.1.8-B20[PII_REDACTED]) contain an OS command injection vulnerability in the Boa formWsc handling functionality. An unauthenticated attacker can send specially crafted requests to trigger command execution via the targetAPSsid request parameter.
CWE: CWE-78
References: https://totolink.tw/support_view/N300RT; https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/154/ids/36.html; https://www.vulncheck.com/advisories/totolink-n300rt-boa-formwsc-rce
CVE: CVE-2025-53965
Published: 2025-12-03
Description: An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The function used to decode the SOR transparent container lacks bounds checking, which can cause a fatal error.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-53965/
CVE: CVE-2025-54065
Published: 2025-12-03
Description: GZDoom is a feature centric port for all Doom engine games. GZDoom is an open source Doom engine. In versions 4.14.2 and earlier, ZScript actor state handling allows scripts to read arbitrary addresses, write constants into the JIT-compiled code section, and redirect control flow through crafted FState and VMFunction structures. A script can copy FState structures into a writable buffer, modify function pointers and state transitions, and cause execution of attacker-controlled bytecode, leading to arbitrary code execution.
CVSS Score: 7.9 (HIGH)
CWE: CWE-913
References: https://github.com/ZDoom/gzdoom/security/advisories/GHSA-prhc-chfw-32jg
CVE: CVE-2025-54326
Published: 2025-12-03
Description: An issue was discovered in Camera in Samsung Mobile Processor Exynos 1280 and 2200. Unnecessary registration of a hardware IP address in the Camera device driver can lead to a NULL pointer dereference, resulting in a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54326/
CVE: CVE-2025-55076
Published: 2025-12-03
Description: A local privilege escalation vulnerability exists in the InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 for macOS. The service accepts unauthenticated XPC connections and executes input via system(), which may allow a local user to execute arbitrary commands with root privileges.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-269
References: https://almightysec.com/plugin-alliance-helpertool-xpc-service-local-privilege-escalation/
CVE: CVE-2025-62686
Published: 2025-12-03
Description: A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 on macOS. Due to the absence of a hardened runtime and a __RESTRICT segment, a local user may exploit the DYLD_INSERT_LIBRARIES environment variable to inject a dynamic library, potentially resulting in code execution with elevated privileges.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-269
References: https://almightysec.com/plugin-alliance-installationhelper-dylib-injection/
CVE: CVE-2025-65841
Published: 2025-12-03
Description: Aquarius Desktop 3.0.069 for macOS stores user authentication credentials in the local file ~/Library/Application Support/Aquarius/aquarius.settings using a weak obfuscation scheme. The password is "encrypted" through predictable byte-substitution that can be trivially reversed, allowing immediate recovery of the plaintext value. Any attacker who can read this settings file can fully compromise the victim's Aquarius account by importing the stolen configuration into their own client or login through the vendor website. This results in complete account takeover, unauthorized access to cloud-synchronized data, and the ability to perform authenticated actions as the user.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-284
References: http://acustica.com; http://aquarius.com; https://almightysec.com/account-takeover-via-weak-encryption/
CVE: CVE-2025-65842
Published: 2025-12-03
Description: The Aquarius HelperTool (1.0.003) privileged XPC service on macOS contains multiple flaws that allow local privilege escalation. The service accepts XPC connections from any local process without validating the client's identity, and its authorization logic incorrectly calls AuthorizationCopyRights with a NULL reference, causing all authorization checks to succeed. The executeCommand:authorization:withReply: method then interpolates attacker-controlled input into NSTask and executes it with root privileges. A local attacker can exploit these weaknesses to run arbitrary commands as root, create persistent backdoors, or obtain a fully interactive root shell.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-266
References: https://almightysec.com/helpertool-xpc-service-local-privilege-escalation/
CVE: CVE-2025-65843
Published: 2025-12-03
Description: Aquarius Desktop 3.0.069 for macOS contains an insecure file handling vulnerability in its support data archive generation feature. The application follows symbolic links placed inside the ~/Library/Logs/Aquarius directory and treats them as regular files. When building the support ZIP, Aquarius recursively enumerates logs using a JUCE directory iterator configured to follow symlinks, and later writes file data without validating whether the target is a symbolic link. A local attacker can exploit this behavior by planting symlinks to arbitrary filesystem locations, resulting in unauthorized disclosure or modification of arbitrary files. When chained with the associated HelperTool privilege escalation issue, root-owned files may also be exposed.
CVSS Score: 7.7 (HIGH)
CWE: CWE-59
References: https://almightysec.com/insecure-file-handling-via-symlink/
CVE: CVE-2025-66431
Published: 2025-12-03
Description: WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated users to execute arbitrary code as root via domain creation. The attacker needs "Create and manage sites" with "Domains management" and "Subdomains management."
CVSS Score: 7.8 (HIGH)
CWE: CWE-61
References: https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18074; https://docs.plesk.com/release-notes/obsidian/whats-new/; https://support.plesk.com/hc/en-us/articles/[PII_REDACTED]7687--CVE-2025-66431-Security-vulnerability-in-domain-creation-mechanism-allows-Plesk-users-to-execute-arbitrary-code-on-behalf-of-root
CVE: CVE-2025-64443
Published: 2025-12-03
Description: MCP Gateway allows easy and secure running and deployment of MCP servers. In versions 0.27.0 and earlier, when MCP Gateway runs in sse or streaming transport mode, it is vulnerable to DNS rebinding. An attacker who can get a victim to visit a malicious website or be served a malicious advertisement can perform browser-based exploitation of MCP servers executing behind the gateway, including manipulating tools or other features exposed by those MCP servers. MCP Gateway is not affected when running in the default stdio mode, which does not listen on network ports. Version 0.28.0 fixes this issue.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-749
References: https://github.com/docker/mcp-gateway/commit/6b076b2479d8d1345c50c112119c62978d46858e; https://github.com/docker/mcp-gateway/security/advisories/GHSA-46gc-mwh4-cc5r
CVE: CVE-2025-64527
Published: 2025-12-03
Description: Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy crashes when JWT authentication is configured with the remote JWKS fetching, allow_missing_or_failed is enabled, multiple JWT tokens are present in the request headers and the JWKS fetch fails. This is caused by a re-entry bug in the JwksFetcherImpl. When the first token's JWKS fetch fails, onJwksError() callback triggers processing of the second token, which calls fetch() again on the same fetcher object. The original callback's reset() then clears the second fetch's state (receiver_ and request_) which causes a crash when the async HTTP response arrives.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-mp85-7mrq-r866
CVE: CVE-2025-64763
Published: 2025-12-03
Description: Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, when Envoy is configured in TCP proxy mode to handle CONNECT requests, it accepts client data before issuing a 2xx response and forwards that data to the upstream TCP connection. If a forwarding proxy upstream from Envoy then responds with a non-2xx status, this can cause a de-synchronized CONNECT tunnel state. By default Envoy continues to allow early CONNECT data to avoid disrupting existing deployments. The envoy.reloadable_features.reject_early_connect_data runtime flag can be set to reject CONNECT requests that send data before a 2xx response when intermediaries upstream from Envoy may reject establishment of a CONNECT tunnel.
CVSS Score: 3.7 (LOW)
CWE: CWE-693
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-rj35-4m94-77jh
CVE: CVE-2025-66478
Published: 2025-12-03
Description: Rejected reason: This CVE is a duplicate of CVE-2025-55182.