deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-20274
Published: 2025-07-16
Description: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to upload arbitrary files to an affected device.

This vulnerability is due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit this vulnerability by uploading arbitrary files to an affected device. A successful exploit could allow the attacker to store malicious files on the system and execute arbitrary commands on the operating system. The Security Impact Rating (SIR) of this advisory has been raised to High because an attacker could elevate privileges to root. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Report Designer.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuis-file-upload-UhNEtStm
CVE: CVE-2025-20283
Published: 2025-07-16
Description: A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root.

This vulnerability is due to insufficient validation of user-supplied input. An attacker with valid credentials could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to execute commands as the root user. To exploit this vulnerability, the attacker must have valid high-privileged credentials.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-74
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-3VpsXOxO
CVE: CVE-2025-20284
Published: 2025-07-16
Description: A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root.

This vulnerability is due to insufficient validation of user-supplied input. An attacker with valid credentials could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to execute commands as the root user. To exploit this vulnerability, the attacker must have valid high-privileged credentials.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-74
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-3VpsXOxO
CVE: CVE-2025-20285
Published: 2025-07-16
Description: A vulnerability in the IP Access Restriction feature of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to bypass configured IP access restrictions and log in to the device from a disallowed IP address.

This vulnerability is due to improper enforcement of access controls that are configured using the IP Access Restriction feature. An attacker could exploit this vulnerability by logging in to the API from an unauthorized source IP address. A successful exploit could allow the attacker to gain access to the targeted device from an IP address that should have been restricted. To exploit this vulnerability, the attacker must have valid administrative credentials.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-302
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-3VpsXOxO
CVE: CVE-2025-20288
Published: 2025-07-16
Description: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device.

This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-918
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuis-ssrf-JSuDjeV
CVE: CVE-2025-20337
Published: 2025-07-16
Description: A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability.

This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-74
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20337
CVE: CVE-2025-53904
Published: 2025-07-16
Description: The Scratch Channel is a news website that is under development as of time of this writing. The file `/api/admin.js` contains code that could make the website vulnerable to cross-site scripting. No known patches exist as of time of publication.
CWE: CWE-79, CWE-692
References: https://github.com/The-Scratch-Channel/the-scratch-channel.github.io/blob/main/api/admin.js#L18; https://github.com/The-Scratch-Channel/the-scratch-channel.github.io/security/advisories/GHSA-hgh4-pj74-f5rr
CVE: CVE-2025-36097
Published: 2025-07-16
Description: IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 are vulnerable to a denial of service, caused by a stack-based overflow.  An attacker can send a specially crafted request that cause the server to consume excessive memory resources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://www.ibm.com/support/pages/node/7239856
CVE: CVE-2025-37105
Published: 2025-07-16
Description: An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04877en_us
CVE: CVE-2025-37106
Published: 2025-07-16
Description: An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04877en_us
CVE: CVE-2025-37107
Published: 2025-07-16
Description: An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04877en_us
CVE: CVE-2025-40777
Published: 2025-07-16
Description: If a `named` caching resolver is configured with `serve-stale-enable` `yes`, and with `stale-answer-client-timeout` set to `0` (the only allowable value other than `disabled`), and if the resolver, in the process of resolving a query, encounters a CNAME chain involving a specific combination of cached or authoritative records, the daemon will abort with an assertion failure.
This issue affects BIND 9 versions 9.20.0 through 9.20.10, 9.21.0 through 9.21.9, and 9.20.9-S1 through 9.20.10-S1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://kb.isc.org/docs/cve-2025-40777; http://www.openwall.com/lists/oss-security/2025/07/16/6
CVE: CVE-2025-53908
Published: 2025-07-16
Description: RomM is a self-hosted rom manager and player. Versions prior to 3.10.3 and 4.0.0-beta.3 have an authenticated path traversal vulnerability in the `/api/raw` endpoint. Anyone running the latest version of RomM and has multiple users, even unprivileged users, such as the kiosk user in the official implementation, may be affected. This allows the leakage of passwords and users that may be stored on the system. Versions 3.10.3 and 4.0.0-beta.3 contain a patch.
CWE: CWE-26
References: https://github.com/rommapp/romm/blob/4.0.0-beta.2/backend/endpoints/raw.py#L31; https://github.com/rommapp/romm/commit/7c94cb05e74ddb6a6af7b82320686c01754e9966; https://github.com/rommapp/romm/commit/baa1a9759079c36e36a9f10c920c46b57d0b6151
CVE: CVE-2025-6982
Published: 2025-07-16
Description: Use of Hard-coded Credentials in TP-Link Archer C50 V3(

<=

180703)/V4(



<=

250117

)/V5(



<=

200407

), and C20 V5 (<US_V5_260419 or <EU_V5_260317) allows attackers to decrypt the config.xml files.
CWE: CWE-798
References: https://www.tp-link.com/en/support/download/archer-c20/v5/#Firmware; https://www.tp-link.com/us/support/download/archer-c20/v5/#Firmware; https://www.tp-link.com/us/support/faq/4538/
CVE: CVE-2025-6983
Published: 2025-07-16
Description: A 

Clickjacking vulnerability in TP-Link Archer C1200 web management page allows an attacker to trick users into performing unintended actions via rendered UI layers or frames.This issue affects Archer C1200 <= 1.1.5.
CWE: CWE-1021
References: https://www.tp-link.com/us/support/faq/4539/
CVE: CVE-2025-34117
Published: 2025-07-16
Description: A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. Exact version boundaries remain undocumented. An unauthenticated remote attacker can send specially crafted UDP packets to execute arbitrary commands on the affected device. This backdoor uses a hardcoded authentication mechanism and accepts shell commands post-authentication. Some device models include a non-standard implementation of the `echo` command, which may affect exploitability.
CWE: CWE-78, CWE-306, CWE-912
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/misc/netcore_udp_53413_backdoor.rb; https://vulners.com/metasploit/MSF:EXPLOIT-LINUX-MISC-NETCORE_UDP_53413_BACKDOOR-; https://web.archive.org/web/[PII_REDACTED]4943/http://blog.trendmicro.com/trendlabs-security-intelligence/netis-routers-leave-wide-open-backdoor/
CVE: CVE-2025-34118
Published: 2025-07-16
Description: A path traversal vulnerability exists in Linknat VOS Manager versions prior to 2.1.9.07, including VOS2009 and early VOS3000 builds, that allows unauthenticated remote attackers to read arbitrary files on the server. The vulnerability is accessible via multiple localized subpaths such as '/eng/', '/chs/', or '/cht/', where the 'js/lang_en_us.js' or equivalent files are loaded. By injecting encoded traversal sequences such as '%c0%ae%c0%ae' into the request path, attackers can bypass input validation and disclose sensitive files.
CWE: CWE-20, CWE-22
References: http://www.linknat.com/; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/linknat_vos_traversal.rb; https://web.archive.org/web/[PII_REDACTED]1957/http://www.wooyun.org/bugs/wooyun-2[PII_REDACTED]
CVE: CVE-2025-34119
Published: 2025-07-16
Description: A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers via TCP port 831. The server listens for a custom protocol where opcode 0x43 can be used to request arbitrary files by absolute path. If the file exists and is accessible, its content is returned without authentication. This flaw allows attackers to retrieve sensitive files such as system configuration, password files, or application data.
CWE: CWE-306, CWE-668
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/misc/easycafe_server_fileaccess.rb; https://www.exploit-db.com/exploits/39102; https://www.vulncheck.com/advisories/easy-cafe-server-remote-file-disclosure
CVE: CVE-2025-34120
Published: 2025-07-16
Description: An unauthenticated file download vulnerability exists in LimeSurvey versions from 2.0+ up to and including 2.06+ Build 151014. The application fails to validate serialized input to the admin backup endpoint (`index.php/admin/update/sa/backup`), allowing attackers to specify arbitrary file paths using a crafted `datasupdateinfo` payload. The files are packaged in a ZIP archive and made available for download without authentication. This vulnerability can be exploited to read arbitrary files on the host system, including sensitive OS and configuration files.
CWE: CWE-22, CWE-306
References: https://packetstorm.news/files/id/180855; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/admin/http/limesurvey_file_download.rb; https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-lime-survey/
CVE: CVE-2025-34121
Published: 2025-07-16
Description: An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and including 7.2. The `wizards/post2file.php` script accepts arbitrary POST parameters, allowing attackers to upload crafted PHP files to the webroot. Successful exploitation results in remote code execution as the web server user. NOTE: The bypass for this vulnerability is tracked as CVE-2015-9263.
CWE: CWE-306, CWE-434
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/uptime_file_upload_1.rb; https://web.archive.org/web/[PII_REDACTED]3937/http://www.security-assessment.com/files/documents/advisory/Up.Time%207.2%20-%20Arbitrary%20File%20Upload.pdf; https://www.exploit-db.com/exploits/38732
CVE: CVE-2025-34123
Published: 2025-07-16
Description: A stack-based buffer overflow vulnerability exists in VideoCharge Studio 2.12.3.685 when processing a specially crafted .VSC configuration file. The issue occurs due to improper handling of user-supplied data in the XML 'Name' attribute, leading to an SEH overwrite condition. An attacker can exploit this vulnerability by convincing a user to open a malicious .VSC file, resulting in arbitrary code execution under the context of the user.
CWE: CWE-20, CWE-94, CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/videocharge_studio.rb; https://www.exploit-db.com/exploits/29234; https://www.vulncheck.com/advisories/video-charge-studio-seh-buffer-overflow
CVE: CVE-2025-34124
Published: 2025-07-16
Description: A buffer overflow vulnerability exists in Heroes of Might and Magic III Complete 4.0.0.0, HD Mod 3.808 build 9, and Demo 1.0.0.0 via malicious .h3m map files that exploit object sprite name parsing logic. The vulnerability occurs during in-game map loading when a crafted object name causes a buffer overflow, potentially allowing arbitrary code execution. Exploitation requires the victim to open a malicious map file within the game.
CWE: CWE-20, CWE-94, CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/homm3_h3m.rb; https://www.exploit-db.com/exploits/37716; https://www.vulncheck.com/advisories/heroes-of-might-and-magic-iii-map-file-buffer-overflow
CVE: CVE-2025-34125
Published: 2025-07-16
Description: An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01. This occurs when specially crafted cookie values are processed, allowing remote attackers to execute arbitrary commands on the underlying Linux operating system. Successful exploitation enables full system compromise.
CWE: CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_dspw110_cookie_noauth_exec.rb; https://web.archive.org/web/[PII_REDACTED]1424/https://github.com/darkarnium/secpub/tree/master/D-Link/DSP-W110; https://www.exploit-db.com/exploits/37628
CVE: CVE-2025-34126
Published: 2025-07-16
Description: A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script with a manipulated 'file' parameter. This can lead to disclosure of sensitive information.
CWE: CWE-22
References: https://codesec.blogspot.com/2015/03/rips-scanner-v-054-local-file-include.html; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/rips_traversal.rb; https://rips-scanner.sourceforge.net/
CVE: CVE-2025-34127
Published: 2025-07-16
Description: A stack-based buffer overflow exists in Achat v0.150 in its default configuration. By sending a specially crafted message to the UDP port 9256, an attacker can overwrite the structured exception handler (SEH) due to insufficient bounds checking on user-supplied input leading to remote code execution.
CWE: CWE-94, CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/achat_bof.rb; https://www.exploit-db.com/exploits/36056; https://www.vulncheck.com/advisories/achat-seh-buffer-overflow
CVE: CVE-2025-34128
Published: 2025-07-16
Description: A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control (VideoPlayer.ocx) version 2.6 when handling overly long arguments to the ConvertFile() method. An attacker can exploit this vulnerability by supplying crafted input to cause memory corruption and execute arbitrary code within the context of the current process.
CWE: CWE-94, CWE-120
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/x360_video_player_set_text_bof.rb; https://rh0dev.github.io/blog/2015/fun-with-info-leaks/; https://www.exploit-db.com/exploits/35948
CVE: CVE-2025-34129
Published: 2025-07-16
Description: A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 due to insufficient sanitization of the FTP and NTP Server fields in the service configuration. An attacker with access to the configuration interface can upload a malicious XML file with injected shell commands in these fields. Upon subsequent configuration syncs, these commands are executed with elevated privileges. This vulnerability was exploited in the wild by the Moobot botnets.
CWE: CWE-20, CWE-78
References: https://blog.netlab.360.com/multiple-botnets-are-spreading-using-lilin-dvr-0-day/; https://www.meritlilin.com/assets/uploads/support/file/M00158-TW.pdf; https://www.vulncheck.com/advisories/lilin-dvr-multiple-vulnerabilities
CVE: CVE-2025-34130
Published: 2025-07-16
Description: An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the /z/zbin/net_html.cgi endpoint. This vulnerability allows attackers to read sensitive configuration files, such as /zconf/service.xml, which can then be used to facilitate further attacks including command injection. The vulnerability has been exploited in the wild in conjunction with other issues by botnets like FBot and Moobot.
CWE: CWE-200, CWE-306
References: https://blog.netlab.360.com/multiple-botnets-are-spreading-using-lilin-dvr-0-day/; https://www.meritlilin.com/assets/uploads/support/file/M00158-TW.pdf; https://www.vulncheck.com/advisories/lilin-dvr-multiple-vulnerabilities
CVE: CVE-2025-34132
Published: 2025-07-16
Description: A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the Server field in the NTPUpdate configuration. The web service at /z/zbin/dvr_box fails to properly sanitize input, allowing remote attackers to inject and execute arbitrary commands as root by supplying specially crafted XML data to the DVRPOST interface.
CWE: CWE-20, CWE-78
References: https://blog.netlab.360.com/multiple-botnets-are-spreading-using-lilin-dvr-0-day/; https://ducklingstudio.blog.fc2.com/blog-entry-400.html; https://www.meritlilin.com/assets/uploads/support/file/M00158-TW.pdf
CVE: CVE-2024-12498
Published: 2025-07-16
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-5396
Published: 2025-07-17
Description: The Bears Backup plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.0. This is due to the bbackup_ajax_handle() function not having a capability check, nor validating user supplied input passed directly to call_user_func(). This makes it possible for unauthenticated attackers to execute code on the server which can be leverage to inject backdoors or create new administrative user accounts to name a few things. On WordPress sites running the Alone theme versions 7.8.4 and older, this can be chained with CVE-2025-5394 to install the Bears Backup plugin and achieve the same impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://themeforest.net/item/alone-charity-multipurpose-nonprofit-wordpress-theme/15019939; https://www.wordfence.com/threat-intel/vulnerabilities/id/81b44abb-6d30-4930-b68b-9a04d93f5169?source=cve
CVE: CVE-2025-7728
Published: 2025-07-17
Description: A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. Affected is an unknown function of the file users.shtm. The manipulation of the argument Username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this issue and confirmed that it will be fixed in the upcoming release 2.8.0.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/CVE-Hunters/CVE/blob/main/Scada-LTS/CVE-2025-7728.md; https://vuldb.com/?ctiid.316710; https://vuldb.com/?id.316710
CVE: CVE-2025-7729
Published: 2025-07-17
Description: A vulnerability classified as problematic was found in Scada-LTS up to 2.7.8.1. Affected by this vulnerability is an unknown functionality of the file usersProfiles.shtm. The manipulation of the argument Username leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this issue and confirmed that it will be fixed in the upcoming release 2.8.0.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/CVE-Hunters/CVE/blob/main/Scada-LTS/CVE-2025-7729.md; https://vuldb.com/?ctiid.316711; https://vuldb.com/?id.316711
CVE: CVE-2025-7712
Published: 2025-07-17
Description: The Madara - Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wp_manga_delete_zip() function in all versions up to, and including, 2.2.3. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://mangabooth.com/product/wp-manga-theme-madara/; https://www.wordfence.com/threat-intel/vulnerabilities/id/f9de8e90-5bda-4ab1-aa78-2748cd717376?source=cve
CVE: CVE-2025-7735
Published: 2025-07-17
Description: The Hospital Information System developed by UNIMAX has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://www.twcert.org.tw/en/cp-139-10249-5d48c-2.html; https://www.twcert.org.tw/tw/cp-132-10248-f429e-1.html
CVE: CVE-2025-4302
Published: 2025-07-17
Description: The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. However, this can be bypassed by URL-encoding the API path.
CVSS Score: 5.3 (MEDIUM)
References: https://wpscan.com/vulnerability/19f67d6e-4ffe-4126-ac42-fb23c5017a3e