deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-62496
Published: 2025-10-16
Description: A vulnerability exists in the QuickJS engine's BigInt string parsing logic (js_bigint_from_string) when attempting to create a BigInt from a string with an excessively large number of digits.

The function calculates the necessary number of bits (n_bits) required to store the BigInt using the formula:

$$\text{n\_bits} = (\text{n\_digits} \times 27 + 7) / 8 \quad (\text{for radix 10})$$

  *  For large input strings (e.g., $79,536,432$ digits or more for base 10), the intermediate calculation $(\text{n\_digits} \times 27 + 7)$ exceeds the maximum value of a standard signed 32-bit integer, resulting in an Integer Overflow.


  *  The resulting n_bits value becomes unexpectedly small or even negative due to this wrap-around.


  *  This flawed n_bits is then used to compute n_limbs, the number of memory "limbs" needed for the BigInt object. Since n_bits is too small, the calculated n_limbs is also significantly underestimated.


  *  The function proceeds to allocate a JSBigInt object using this underestimated n_limbs.


  *  When the function later attempts to write the actual BigInt data into the allocated object, the small buffer size is quickly exceeded, leading to a Heap Out-of-Bounds Write as data is written past the end of the allocated r->tab array.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://bellard.org/quickjs/Changelog; https://issuetracker.google.com/434193016
CVE: CVE-2025-9559
Published: 2025-10-16
Description: Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://support.pega.com/support-doc/pega-security-advisory-h25-vulnerability-remediation-note
CVE: CVE-2025-11854
Published: 2025-10-16
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-22381. Reason: This candidate is a reservation duplicate of CVE-2025-22381. Notes: All CVE users should reference CVE-2025-22381 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-25298
Published: 2025-10-16
Description: Strapi is an open source headless CMS. The @strapi/core package before version 5.10.3 does not enforce a maximum password length when using bcryptjs for password hashing. Bcryptjs ignores any bytes beyond 72, so passwords longer than 72 bytes are silently truncated. A user can create an account with a password exceeding 72 bytes and later authenticate with only the first 72 bytes. This reduces the effective entropy of overlong passwords and may mislead users who believe characters beyond 72 bytes are required, creating a low likelihood of unintended authentication if an attacker can obtain or guess the truncated portion. Long over‑length inputs can also impose unnecessary processing overhead. The issue is fixed in version 5.10.3. No known workarounds exist.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-261
References: https://github.com/strapi/strapi/commit/41f8cdf116f7f464dae7d591e52d88f7bfa4b7cb; https://github.com/strapi/strapi/security/advisories/GHSA-2cjv-6wg9-f4f3
CVE: CVE-2025-36128
Published: 2025-10-16
Description: IBM MQ 9.1, 9.2, 9.3, 9.4 LTS and 9.3, 9.4 CD is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting slowloris-type attacks, a remote attacker could exploit this vulnerability to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: https://www.ibm.com/support/pages/node/7244480
CVE: CVE-2025-53092
Published: 2025-10-16
Description: Strapi is an open source headless content management system. Strapi versions prior to 5.20.0 contain a CORS misconfiguration vulnerability in default installations. By default, Strapi reflects the value of the Origin header back in the Access-Control-Allow-Origin response header without proper validation or whitelisting. This allows an attacker-controlled site to send credentialed requests to the Strapi backend. An attacker can exploit this by hosting a malicious site on a different origin (e.g., different port) and sending requests with credentials to the Strapi API. The vulnerability is fixed in version 5.20.0. No known workarounds exist.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-284, CWE-364, CWE-942
References: https://github.com/strapi/strapi/security/advisories/GHSA-9329-mxxw-qwf8
CVE: CVE-2025-56699
Published: 2025-10-16
Description: SQL injection vulnerability in the cmd component of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows an unauthenticated user to execute arbitrary SQL commands via the sender parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://basedigitale.com/integrated-security-solutions/security-asset-management/centrax/; https://github.com/MarioTesoro/vulnerability-research/tree/main/CVE-2025-56699
CVE: CVE-2025-56700
Published: 2025-10-16
Description: Boolean SQL injection vulnerability in the web app of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows a low level priviliged user that has access to the platform, to execute arbitrary SQL commands via the datafine parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://basedigitale.com/integrated-security-solutions/security-asset-management/centrax/; https://github.com/MarioTesoro/vulnerability-research/tree/main/CVE-2025-56700
CVE: CVE-2025-58051
Published: 2025-10-16
Description: Nextcloud Tables allows you to create your own tables with individual columns. Prior 0.7.6, 0.8.8, and 0.9.5, when importing a table, a user was able to specify files on the server and when their format is supported by the used PhpSpreadsheet library they would be included and their content leaked to the user. It is recommended that the Nextcloud Tables app is upgraded to 0.7.6, 0.8.8 or 0.9.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-841
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wpp5-4w35-pxq6; https://github.com/nextcloud/tables/pull/1936; https://hackerone.com/reports/3249624
CVE: CVE-2025-61789
Published: 2025-10-16
Description: Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use a custom variable in a filter that is either protected by icingadb/protect/variables or hidden by icingadb/denylist/variables, to guess values assigned to it. Versions 1.1.4 and 1.2.3 respond with an error if such a custom variable is used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204
References: https://github.com/Icinga/icingadb-web/commit/5e982dad40ec379075307ab[PII_REDACTED]e675b18; https://github.com/Icinga/icingadb-web/security/advisories/GHSA-w57j-28jc-8429
CVE: CVE-2025-34512
Published: 2025-10-16
Description: Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a reflected cross-site scripting (XSS) vulnerability in index.php that allows an unauthenticated attacker to execute arbitrary code. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.ilevia.com/; https://www.vulncheck.com/advisories/ilevia-eve-x1-server-reflected-xss; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5961.php
CVE: CVE-2025-34513
Published: 2025-10-16
Description: Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command injection vulnerability in mbus_build_from_csv.php that allows an unauthenticated attacker to execute arbitrary code. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.ilevia.com/; https://www.vulncheck.com/advisories/ilevia-eve-x1-server-unauth-command-injection; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5962.php
CVE: CVE-2025-34514
Published: 2025-10-16
Description: Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain authenticated OS command injection vulnerabilities in multiple web-accessible PHP scripts that call exec() and allow an authenticated attacker to execute arbitrary commands. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.ilevia.com/; https://www.vulncheck.com/advisories/ilevia-eve-x1-server-auth-command-injection; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5966.php
CVE: CVE-2025-34515
Published: 2025-10-16
Description: Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an execution with unnecessary privileges vulnerability in sync_project.sh that allows an attacker to escalate privileges to root. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-250
References: https://www.ilevia.com/; https://www.vulncheck.com/advisories/ilevia-eve-x1-server-root-priv-esc; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5965.php
CVE: CVE-2025-34516
Published: 2025-10-16
Description: Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a use of default credentials vulnerability that allows an unauthenticated attacker to obtain remote access. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1392
References: https://www.ilevia.com/; https://www.vulncheck.com/advisories/ilevia-eve-x1-server-use-of-default-credentials; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5963.php
CVE: CVE-2025-34517
Published: 2025-10-16
Description: Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an absolute path traversal vulnerability in get_file_content.php that allows an attacker to read arbitrary files. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.ilevia.com/; https://www.vulncheck.com/advisories/ilevia-eve-x1-server-absolute-path-traversal; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5960.php
CVE: CVE-2025-34518
Published: 2025-10-16
Description: Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a relative path traversal vulnerability in get_file_content.php that allows an attacker to read arbitrary files. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.ilevia.com/; https://www.vulncheck.com/advisories/ilevia-eve-x1-server-relative-path-traversal; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5960.php
CVE: CVE-2025-34519
Published: 2025-10-16
Description: Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an insecure hashing algorithm vulnerability. The product stores passwords using the MD5 hash function without applying a per‑password salt. Because MD5 is a fast, unsalted hash, an attacker who obtains the password database can efficiently perform offline dictionary, rainbow‑table, or brute‑force attacks to recover the original passwords. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://www.ilevia.com/; https://www.vulncheck.com/advisories/ilevia-eve-x1-server-insecure-hashing-algorithm; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5964.php
CVE: CVE-2025-60639
Published: 2025-10-16
Description: Hardcoded credentials in gsigel14 ATLAS-EPIC commit f29312c (2025-05-26).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-798
References: http://atlas-epic.com; https://github.com/gsiegel14/ATLAS-EPIC; https://github.com/gsiegel14/ATLAS-EPIC/commit/f29312cf782ec5a6537fceaeb6a9ced7d7d04e1f
CVE: CVE-2025-60641
Published: 2025-10-16
Description: The file mexcel.php in the Vfront 0.99.52 codebase contains a vulnerable call to unserialize(base64_decode($_POST['mexcel'])), where $_POST['mexcel'] is user-controlled input. This input is decoded from base64 and deserialized without validation or use of the allowed_classes option, allowing an attacker to inject arbitrary PHP objects. This can lead to malicious behavior, such as Remote Code Execution (RCE), SQL Injection, Path Traversal, or Denial of Service, depending on the availability of exploitable classes in the Vfront codebase or its dependencies.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://vfront.com; https://xancatos.org/cve202560641
CVE: CVE-2025-61330
Published: 2025-10-16
Description: A hard-coded weak password vulnerability has been discovered in all Magic-branded devices from Chinese network equipment manufacturer H3C. The vulnerability stems from the use of a hard-coded weak password for the root account in the /etc/shadow configuration or even the absence of any password at all. Some of these devices have the Telnet service enabled by default, or users can choose to enable the Telnet service in other device management interfaces (e.g. /debug.asp or /debug_telnet.asp). In addition, these devices have related interfaces called Virtual Servers, which can map the devices to the public network, posing the risk of remote attacks. Therefore, attackers can obtain the highest root privileges of the devices through the Telnet service using the weak password hardcoded in the firmware (or without a password), and remote attacks are possible.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-259
References: https://www.notion.so/25e8cd7f7805800a9a71c1193fb3cb43
CVE: CVE-2025-61907
Published: 2025-10-16
Description: Icinga 2 is an open source monitoring system. In Icinga 2 versions 2.4 through 2.15.0, filter expressions provided to the various /v1/objects endpoints could access variables or objects that would otherwise be inaccessible for the user. This allows authenticated API users to learn information that should be hidden from them, including global variables not permitted by the variables permission and objects not permitted by the corresponding objects/query permissions. The vulnerability is fixed in versions 2.15.1, 2.14.7, and 2.13.13.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-204, CWE-749
References: https://github.com/Icinga/icinga2/commit/56255ac7a689b9e198742d2fca6f7459a54c85a3; https://github.com/Icinga/icinga2/security/advisories/GHSA-gg32-w9rm-vp2v
CVE: CVE-2025-61908
Published: 2025-10-16
Description: Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, when creating an invalid reference, such as a reference to null, dereferencing results in a segmentation fault. This can be used by any API user with access to an API endpoint that allows specifying a filter expression to crash the Icinga 2 daemon. A fix is included in the following Icinga 2 versions: 2.15.1, 2.14.7, and 2.13.13.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/Icinga/icinga2/pull/6521; https://github.com/Icinga/icinga2/security/advisories/GHSA-v9jg-xqhj-f43g; https://icinga.com/blog/releasing-icinga-2-v2-15-1-2-14-7-and-2-13-13-and-icinga-db-web-v1-2-3-and-1-1-4
CVE: CVE-2025-61909
Published: 2025-10-16
Description: Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script (also used during systemctl reload icinga2) and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user, but send the signal as the root user. This can allow the Icinga user to send signals to processes it would otherwise not permitted to. A fix is included in the following Icinga 2 versions: 2.15.1, 2.14.7, and 2.13.13.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-250
References: https://github.com/Icinga/icinga2/commit/51ec73cbd922a76fc0f60e1d8d33acd7caa5d587; https://github.com/Icinga/icinga2/issues/10527; https://github.com/Icinga/icinga2/security/advisories/GHSA-pg6g-g99v-mw46
CVE: CVE-2025-61922
Published: 2025-10-16
Description: PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. Starting in version 1.3.0 and prior to versions 4.4.1 and 5.0.5, missing validation on the Express Checkout feature allows silent login, enabling account takeover via email. The vulnerability is fixed in versions 4.4.1 and 5.0.5. No known workarounds exist.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287
References: https://github.com/PrestaShopCorp/ps_checkout/security/advisories/GHSA-54hq-mf6h-48xh
CVE: CVE-2025-61923
Published: 2025-10-16
Description: PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the backoffice is missing validation on input resulting in a directory traversal and arbitrary file disclosure. The vulnerability is fixed in versions 4.4.1 and 5.0.5. No known workarounds exist.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-22
References: https://github.com/PrestaShopCorp/ps_checkout/security/advisories/GHSA-fpxp-pfqm-x54w
CVE: CVE-2025-61924
Published: 2025-10-16
Description: PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the Target PayPal merchant account hijacking from backoffice due to wrong usage of the PHP array_search(). The vulnerability is fixed in versions 4.4.1 and 5.0.5. No known workarounds exist.
CVSS Score: 3.8 (LOW)
CWE: CWE-184
References: https://github.com/PrestaShopCorp/ps_checkout/security/advisories/GHSA-wvpg-4wrh-5889
CVE: CVE-2025-62407
Published: 2025-10-16
Description: Frappe is a full-stack web application framework. Prior to 14.98.0 and 15.83.0, an open redirect was possible  through the redirect argument on the login page, if a specific type of URL was passed in. This vulnerability is fixed in 14.98.0 and 15.83.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/frappe/frappe/security/advisories/GHSA-j9jr-qrpj-g855
CVE: CVE-2025-62409
Published: 2025-10-16
Description: Envoy is a cloud-native, open source edge and service proxy. Prior to 1.36.1, 1.35.5, 1.34.9, and 1.33.10, large requests and responses can potentially trigger TCP connection pool crashes due to flow control management in Envoy. It will happen when the connection is closing but upstream data is still coming, resulting in a buffer watermark callback nullptr reference. The vulnerability impacts TCP proxy and HTTP 1 & 2 mixed use cases based on ALPN. This vulnerability is fixed in 1.36.1, 1.35.5, 1.34.9, and 1.33.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-pq33-4jxh-hgm3; https://github.com/envoyproxy/envoy/security/advisories/GHSA-pq33-4jxh-hgm3
CVE: CVE-2025-62411
Published: 2025-10-16
Description: LibreNMS  is a community-based GPL-licensed network monitoring system. LibreNMS <= 25.8.0 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Alert Transports management functionality. When an administrator creates a new Alert Transport, the value of the Transport name field is stored and later rendered in the Transports column of the Alert Rules page without proper input validation or output encoding. This leads to arbitrary JavaScript execution in the admin’s browser. This vulnerability is fixed in 25.10.0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/librenms/librenms/commit/706a77085f4d5964f7de9444208ef707e1f79450; https://github.com/librenms/librenms/security/advisories/GHSA-frc6-pwgr-c28w; https://github.com/librenms/librenms/security/advisories/GHSA-frc6-pwgr-c28w
CVE: CVE-2025-62412
Published: 2025-10-16
Description: LibreNMS  is a community-based GPL-licensed network monitoring system. The alert rule name in the Alerts > Alert Rules page is not properly sanitized, and can be used to inject HTML code. This vulnerability is fixed in 25.10.0.
CVSS Score: 3.8 (LOW)
CWE: CWE-79
References: https://github.com/librenms/librenms/commit/dccdf6769976a974d70f06a7ce8d5a846b29db6f; https://github.com/librenms/librenms/security/advisories/GHSA-6g2v-66ch-6xmh; https://github.com/librenms/librenms/security/advisories/GHSA-6g2v-66ch-6xmh
CVE: CVE-2025-62413
Published: 2025-10-16
Description: MQTTX is an MQTT 5.0 desktop client and MQTT testing tool. A Cross-Site Scripting (XSS) vulnerability was introduced in MQTTX v1.12.0 due to improper handling of MQTT message payload rendering. Malicious payloads containing HTML or JavaScript could be rendered directly in the MQTTX message viewer. If exploited, this could allow attackers to execute arbitrary scripts in the context of the application UI — for example, attempting to access MQTT connection credentials or trigger unintended actions through script injection. This vulnerability is especially relevant when MQTTX is used with brokers in untrusted or multi-tenant environments, where message content cannot be fully controlled. This vulnerability is fixed in 1.12.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/emqx/MQTTX/commit/2963f78a4b3227cdb93597f546a75b75dee1059f; https://github.com/emqx/MQTTX/security/advisories/GHSA-29gf-9r9v-j4m3
CVE: CVE-2025-62586
Published: 2025-10-16
Description: OPEXUS FOIAXpress allows a remote, unauthenticated attacker to reset the administrator password. Fixed in FOIAXpress version 11.13.2.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://docs.opexustech.com/docs/foiaxpress/11.13.0/FOIAXpress_Release_Notes_11.13.2.0.pdf; https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-289-01.json; https://www.cve.org/CVERecord?id=CVE-2025-62586
CVE: CVE-2025-11492
Published: 2025-10-16
Description: In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor with a man-in-the-middle network position could intercept, modify, or replay agent-server traffic. Additionally, the encryption method used to obfuscate some communications over the HTTP channel is updated in the Automate 2025.9 patch to enforce HTTPS for all agent communications.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-319
References: https://www.connectwise.com/company/trust/security-bulletins/connectwise-automate-2025.9-security-fix
CVE: CVE-2025-11493
Published: 2025-10-16
Description: The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, such as updates, dependencies, and integrations. This creates a risk where an on-path attacker could perform a man-in-the-middle attack and substitute malicious files for legitimate ones by impersonating a legitimate server. This risk is mitigated when HTTPS is enforced and is related to CVE-2025-11492.
CVSS Score: 8.8 (HIGH)
CWE: CWE-494
References: https://www.connectwise.com/company/trust/security-bulletins/connectwise-automate-2025.9-security-fix
CVE: CVE-2025-11852
Published: 2025-10-16
Description: A vulnerability was found in Apeman ID71 218.53.203.117. The impacted element is an unknown function of the file /onvif/device_service of the component ONVIF Service. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287, CWE-306
References: https://github.com/juliourena/APEMAN-Camera-PoCs/blob/main/RTSP/RTSP_Unauthenticated.md; https://vuldb.com/?ctiid.328798; https://vuldb.com/?id.328798