deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-66039
Published: 2025-12-09
Description: FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "webserver." When providing an Authorization header with an arbitrary value, a session is associated with the target user regardless of valid credentials. This issue is fixed in versions 16.0.44 and 17.0.23.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/FreePBX/framework/commit/[PII_REDACTED]6543cd9932b90458660b2f19fc0e35#diff-72f14a52840a61504a8e03cd195035b44e488aecd634b001bc6412a04bdc940bR20-R50; https://github.com/FreePBX/security-reporting/security/advisories/GHSA-9jvh-mv6x-w698; https://www.freepbx.org/watch-what-we-do-with-security-fixes-%f0%9f%91%80
CVE: CVE-2025-66645
Published: 2025-12-09
Description: NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to  directory traversal through the App.add_media_files() function, which allows a remote attacker to read arbitrary files on the server filesystem. This issue is fixed in version 3.4.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/zauberzeug/nicegui/commit/a1b89e2a24e1911a40389ace2153a37f4eea92a9; https://github.com/zauberzeug/nicegui/security/advisories/GHSA-hxp3-63hc-5366; https://github.com/zauberzeug/nicegui/security/advisories/GHSA-hxp3-63hc-5366
CVE: CVE-2025-67494
Published: 2025-12-09
Description: ZITADEL is an open-source identity infrastructure tool. Versions 4.7.0 and below are vulnerable to an unauthenticated, full-read SSRF vulnerability. The ZITADEL Login UI (V2) treats the x-zitadel-forward-host header as a trusted fallback for all deployments, including self-hosted instances. This allows an unauthenticated attacker to force the server to make HTTP requests to arbitrary domains, such as internal addresses, and read the responses, enabling data exfiltration and bypassing network-segmentation controls. This issue is fixed in version 4.7.1.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-918
References: https://github.com/zitadel/zitadel/commit/4c879b47334e01d4fcab921ac1b44eda39acdb96; https://github.com/zitadel/zitadel/security/advisories/GHSA-7wfc-4796-gmg5
CVE: CVE-2025-13760
Published: 2025-12-09
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-67495
Published: 2025-12-09
Description: ZITADEL is an open-source identity infrastructure tool. Versions 4.0.0-rc.1 through 4.7.0 are vulnerable to DOM-Based XSS through the Zitadel V2 logout endpoint. The /logout endpoint insecurely routes to a value that is supplied in the post_logout_redirect GET parameter. As a result, unauthenticated remote attacker can execute malicious JS code on Zitadel users’ browsers. To carry out an attack, multiple user sessions need to be active in the same browser, however, account takeover is mitigated  when using Multi-Factor Authentication (MFA) or Passwordless authentication. This issue is fixed in version 4.7.1.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: https://github.com/zitadel/zitadel/commit/4c879b47334e01d4fcab921ac1b44eda39acdb96; https://github.com/zitadel/zitadel/security/advisories/GHSA-v959-qxv6-6f8p
CVE: CVE-2025-67496
Published: 2025-12-09
Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain a Stored Cross-Site Scripting (XSS) vulnerability in the /WeGIA/html/geral/configurar_senhas.php endpoint. The application does not sanitize user-controlled data before rendering it inside the employee selection dropdown. The application retrieves employee names from the database and injects them directly into HTML <option> elements without proper escaping. This issue is fixed in version 3.5.5.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/LabRedesCefetRJ/WeGIA/commit/c80b8cacd310fd459df61c030fb267c5e68cafc7; https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.5.5; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-9843-qm67-73h2
CVE: CVE-2025-67497
Published: 2025-12-09
Description: Rejected reason: Further research determined the issue is not a vulnerability.
CVE: CVE-2025-67498
Published: 2025-12-09
Description: Rejected reason: Further research determined the issue is not a vulnerability.
CVE: CVE-2025-61808
Published: 2025-12-10
Description: ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could lead to arbitrary code execution by a high priviledged attacker. Exploitation of this issue does not require user interaction and scope is changed.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-105.html
CVE: CVE-2025-61809
Published: 2025-12-10
Description: ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user interaction and scope is unchanged.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-105.html
CVE: CVE-2025-61810
Published: 2025-12-10
Description: ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. A high privileged attacker could exploit this vulnerability by providing maliciously crafted serialized data to the application. Exploitation of this issue requires user interaction and scope is changed.
CVSS Score: 8.4 (HIGH)
CWE: CWE-502
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-105.html
CVE: CVE-2025-61811
Published: 2025-12-10
Description: ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. A high privileged attacker could leverage this vulnerability to bypass security measures and execute malicious code. Exploitation of this issue does not require user interaction and scope is changed.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-105.html
CVE: CVE-2025-61812
Published: 2025-12-10
Description: ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could allow a high privileged attacker to gain arbitrary code execution. Exploitation of this issue does not require user interaction.
CVSS Score: 8.4 (HIGH)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-105.html
CVE: CVE-2025-61813
Published: 2025-12-10
Description: ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the server. Exploitation of this issue does requires user interaction and scope is changed.
CVSS Score: 8.2 (HIGH)
CWE: CWE-611
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-105.html
CVE: CVE-2025-61821
Published: 2025-12-10
Description: ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and data on the server. Exploitation of this issue does not require user interaction and scope is changed.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-611
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-105.html
CVE: CVE-2025-61822
Published: 2025-12-10
Description: ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could exploit this vulnerability to write malicious files to arbitrary locations on the file system. Exploitation of this issue does not require user interaction and scope is changed.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-105.html
CVE: CVE-2025-61823
Published: 2025-12-10
Description: ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. A high privileged attacker could exploit this vulnerability to access sensitive files and data on the server. Exploitation of this issue requires user interaction and scope is changed.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-611
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-105.html
CVE: CVE-2025-64897
Published: 2025-12-10
Description: ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access potentially resulting in denial of service. Exploitation of this issue requires user interaction.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-105.html
CVE: CVE-2025-64898
Published: 2025-12-10
Description: ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could result in limited unauthorized write access. An attacker could leverage this vulnerability to gain unauthorized access by exploiting improperly stored or transmitted credentials. Exploitation of this issue does not require user interaction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-522
References: https://helpx.adobe.com/security/products/coldfusion/apsb25-105.html
CVE: CVE-2025-67499
Published: 2025-12-10
Description: The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container. Versions 1.6.0 through 1.8.0  inadvertently forward all traffic with the same destination port as the host port when the portmap plugin is configured with the nftables backend, thus ignoring the destination IP. This includes traffic not intended for the node itself, i.e. traffic to containers hosted on the node. Containers that request HostPort forwarding can intercept all traffic destined for that port. This requires that the portmap plugin be explicitly configured to use the nftables backend. This issue is fixed in version 1.9.0. To workaround, configure the portmap plugin to use the iptables backend. It does not have this vulnerability.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-200
References: https://github.com/containernetworking/plugins/pull/1210; https://github.com/containernetworking/plugins/releases/tag/v1.9.0; https://github.com/containernetworking/plugins/security/advisories/GHSA-jv3w-x3r3-g6rm
CVE: CVE-2025-67500
Published: 2025-12-10
Description: Mastodon is a free, open-source social network server based on ActivityPub. Versions 4.2.27 and prior, 4.3.0-beta.1 through 4.3.14, 4.4.0-beta.1 through 4.4.9, 4.5.0-beta.1 through 4.5.2 have discrepancies in error handling which allow checking whether a given status exists by sending a request with a non-English Accept-Language header. Using this behavior, an attacker who knows the identifier of a particular status they are not allowed to see can confirm whether this status exists or not. This cannot be used to learn the contents of the status or any other property besides its existence. This issue is fixed in versions 4.2.28, 4.3.15, 4.4.10 and 4.5.3.
CVSS Score: 3.7 (LOW)
CWE: CWE-204
References: https://github.com/mastodon/mastodon/pull/37077/commits/9957d3218cb33fea6a44bb285e2ba4795a059e4f; https://github.com/mastodon/mastodon/security/advisories/GHSA-gwhw-gcjx-72v8
CVE: CVE-2025-67501
Published: 2025-12-10
Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain an SQL Injection vulnerability in the /html/matPat/editar_categoria.php endpoint. The application fails to properly validate and sanitize user inputs in the id_categoria parameter, which allows attackers to inject malicious SQL payloads for direct execution. This issue is fixed in version 3.5.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/LabRedesCefetRJ/WeGIA/commit/f04b91f584a38c2061a071b26219dba3f25819e6; https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.5.5; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-hj2x-qfm3-2869
CVE: CVE-2025-67502
Published: 2025-12-10
Description: Taguette is an open source qualitative research tool. In versions 1.5.1 and below,  attackers can craft malicious URLs that redirect users to arbitrary external websites after authentication. The application accepts a user-controlled next parameter and uses it directly in HTTP redirects without any validation. This can be exploited for phishing attacks where victims believe they are interacting with a trusted Taguette instance but are redirected to a malicious site designed to steal credentials or deliver malware. This issue is fixed in version 1.5.2.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://github.com/remram44/taguette/commit/67de2d2612e7e2572c61cd9627f89c2bfd0f2a36; https://github.com/remram44/taguette/security/advisories/GHSA-5923-r76v-mprm
CVE: CVE-2025-67503
Published: 2025-12-10
Description: Rejected reason: This CVE is a duplicate of another CVE.
CVE: CVE-2025-67485
Published: 2025-12-10
Description: mad-proxy is a Python-based HTTP/HTTPS proxy server for detection and blocking of malicious web activity using custom security policies. Versions 0.3 and below allow attackers to bypass HTTP/HTTPS traffic interception rules, potentially exposing sensitive traffic. This issue does not have a fix at the time of publication.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-693
References: https://github.com/machphy/mad-proxy/security/advisories/GHSA-wx63-35hw-2482
CVE: CVE-2025-67506
Published: 2025-12-10
Description: PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation. Versions prior to 0.1.0-beta expose POST /api/v1/record/buffer/convert through missing authentication. The endpoint accepts a file upload and converts it to PDF via LibreOffice by uploading payload to os.path.join(tmpdir, file.filename) without normalizing the filename. An attacker can submit a crafted filename containing ../ sequences to write arbitrary files anywhere the service account has permission, enabling remote file overwrite or planting malicious code. This issue is fixed in version 0.1.0-beta.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-434
References: https://github.com/pipeshub-ai/pipeshub-ai/commit/987ebab40a1fc39956730ed93220f7f9b2c4e5f8; https://github.com/pipeshub-ai/pipeshub-ai/security/advisories/GHSA-w398-9m55-2357
CVE: CVE-2025-67507
Published: 2025-12-10
Description: Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.3.0 contain a flaw in the handling of recovery codes for app-based multi-factor authentication, allowing the same recovery code to be reused indefinitely. This issue does not affect email-based MFA. It also only applies when recovery codes are enabled. This issue is fixed in version 4.3.1.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287, CWE-288
References: https://github.com/filamentphp/filament/commit/87ff60ad9b6e16d4e14ee36a220b8917dd7b0815; https://github.com/filamentphp/filament/security/advisories/GHSA-pvcv-q3q7-266g
CVE: CVE-2025-13613
Published: 2025-12-10
Description: The Elated Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.2. This is due to the plugin not properly logging in a user with the data that was previously verified through the 'eltdf_membership_check_facebook_user' and the 'eltdf_membership_login_user_from_social_network' function. This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the site which can easily be created by default through the temp user functionality, and access to the administrative user's email.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-289
References: https://themeforest.net/item/esmarts-a-modern-education-and-lms-theme/20987760; https://www.wordfence.com/threat-intel/vulnerabilities/id/f15dbce4-2e94-4735-b62b-e32d923c51ce?source=cve
CVE: CVE-2025-13677
Published: 2025-12-10
Description: The Simple Download Counter plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.2.2. This is due to insufficient path validation in the `simple_download_counter_parse_path()` function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which may contain sensitive information such as database credentials (wp-config.php) or system files. Please note that the vendor opted to continue to allow remote file downloads from arbitrary locations on the server, however, has disabled this functionality on multi-sites and provided a warning to site owners in the readme.txt when they install the plugin. While not an optimal patch, we have considered this sufficient and recommend users proceed to use the plugin with caution.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/browser/simple-download-counter/tags/2.2.2/inc/functions-admin.php#L566; https://plugins.trac.wordpress.org/browser/simple-download-counter/trunk/inc/functions-admin.php#L566; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3409876%40simple-download-counter&new=3409876%40simple-download-counter&sfp_email=&sfph_mail=
CVE: CVE-2025-9056
Published: 2025-12-10
Description: Unprotected service in the AudioLink component allows a local attacker to overwrite system files via unauthorized service invocation.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://security.tecno.com/SRC/securityUpdates
CVE: CVE-2025-13339
Published: 2025-12-10
Description: The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.1 via the template_redirect() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/changeset/3412701/; https://www.wordfence.com/threat-intel/vulnerabilities/id/06900b4b-6607-4b25-b4bc-2e[PII_REDACTED]?source=cve
CVE: CVE-2025-13072
Published: 2025-12-10
Description: The HandL UTM Grabber / Tracker WordPress plugin before 2.8.1 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 7.1 (HIGH)
References: https://wpscan.com/vulnerability/e3795f29-b886-4b92-a7d6-5f5afd7090aa/
CVE: CVE-2025-13073
Published: 2025-12-10
Description: The HandL UTM Grabber / Tracker WordPress plugin before 2.8.1 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 7.1 (HIGH)
References: https://wpscan.com/vulnerability/697fc4be-782c-44cc-840a-774c8ab3ccd8/
CVE: CVE-2025-9571
Published: 2025-12-10
Description: A remote code execution (RCE) vulnerability exists in Google Cloud Data Fusion.
A user with permissions to upload artifacts to a Data Fusion instance can execute arbitrary code within the core AppFabric component. 
This could allow the attacker to gain control over the Data Fusion instance, potentially leading to unauthorized access to sensitive data, modification of data pipelines, and exploration of the underlying infrastructure.

The following CDAP versions include the necessary update to protect against this vulnerability:  *   6.10.6+
  *  6.11.1+



 Users must immediately upgrade to them, or greater ones, available at:  https://github.com/cdapio/cdap-build/releases .
CWE: CWE-502
References: https://docs.cloud.google.com/support/bulletins#gcp-2025-076
CVE: CVE-2025-12952
Published: 2025-12-10
Description: A privilege escalation vulnerability exists in Google Cloud's Dialogflow CX.

Dialogflow agent developers with Webhook editor permission are able to configure Webhooks using Dialogflow service agent access token authentication. 
This allows the attacker to escalate their privileges from agent-level to project-level, granting them unauthorized access to manage resources in services associated with the project, leading to unexpected costs and resource depletion for the producer project.

A fix was applied on the server side to protect from this vulnerability in February 2025. No customer action is required.
CWE: CWE-269
References: https://docs.cloud.google.com/dialogflow/docs/release-notes#June_12_2025
CVE: CVE-2025-13954
Published: 2025-12-10
Description: Hard-coded cryptographic keys in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI
CWE: CWE-798
References: https://www.ncsc.admin.ch/ncsc/en/home/infos-fuer/infos-it-spezialisten/themen/schwachstelle-melden/cvd-cases/cvd-case-1-test.html
CVE: CVE-2025-13955
Published: 2025-12-10
Description: Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II version 1.17478.146 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observable device identifiers
CWE: CWE-330
References: https://www.ncsc.admin.ch/ncsc/en/home/infos-fuer/infos-it-spezialisten/themen/schwachstelle-melden/cvd-cases/cvd-case-1-test.html
CVE: CVE-2025-14082
Published: 2025-12-10
Description: A flaw was found in Keycloak Admin REST (Representational State Transfer) API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/{realm}/roles endpoint.
CVSS Score: 2.7 (LOW)
CWE: CWE-284
References: https://access.redhat.com/errata/RHSA-2026:6477; https://access.redhat.com/errata/RHSA-2026:6478; https://access.redhat.com/security/cve/CVE-2025-14082
CVE: CVE-2025-14087
Published: 2025-12-10
Description: A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-190
References: https://access.redhat.com/errata/RHSA-2026:15953; https://access.redhat.com/errata/RHSA-2026:15971; https://access.redhat.com/errata/RHSA-2026:7461
CVE: CVE-2025-1161
Published: 2025-12-10
Description: Incorrect Use of Privileged APIs vulnerability in NomySoft Information Technology Training and Consulting Inc. Nomysem allows Privilege Escalation.This issue affects Nomysem: through May 2025.
CVSS Score: 7.1 (HIGH)
CWE: CWE-648
References: https://www.usom.gov.tr/bildirim/tr-25-0440
CVE: CVE-2025-66004
Published: 2025-12-10
Description: A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-35
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-66004; https://lists.debian.org/debian-lts-announce/2025/12/msg00027.html