deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-3413
Published: 2025-04-08
Description: A vulnerability has been found in opplus springboot-admin up to a2d5310f44fd46780a8686456cf2f9001ab8f024 and classified as critical. Affected by this vulnerability is the function code of the file SysGeneratorController.java. The manipulation of the argument Tables leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20, CWE-502
References: https://github.com/mapl3miss/Vul/blob/main/Vul.md; https://vuldb.com/?ctiid.303691; https://vuldb.com/?id.303691
CVE: CVE-2019-25223
Published: 2025-04-08
Description: The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2061993%40circle-image-slider-with-lightbox&new=2061993%40circle-image-slider-with-lightbox&sfp_email=&sfph_mail=; https://wordpress.org/plugins/circle-image-slider-with-lightbox/; https://www.wordfence.com/threat-intel/vulnerabilities/id/bd3e30ea-8f58-4895-b78c-fb18c94d5253?source=cve
CVE: CVE-2025-3427
Published: 2025-04-08
Description: The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'infill_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3249784%403dprint-lite&new=3249784%403dprint-lite&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/156945e1-80dc-4fb4-958f-bb87722e96fb?source=cve
CVE: CVE-2025-3428
Published: 2025-04-08
Description: The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'coating_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3249784%403dprint-lite&new=3249784%403dprint-lite&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/eaac2a61-7be6-4936-82a0-21c3665fa436?source=cve
CVE: CVE-2025-3429
Published: 2025-04-08
Description: The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'material_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3249784%403dprint-lite&new=3249784%403dprint-lite&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/3cf26716-70b6-4e5e-9ac1-764060be2215?source=cve
CVE: CVE-2025-3430
Published: 2025-04-08
Description: The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'printer_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3249784%403dprint-lite&new=3249784%403dprint-lite&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/718f5cf2-ca83-4981-9123-4360d043a32d?source=cve
CVE: CVE-2025-23186
Published: 2025-04-08
Description: In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function Call (RFC) request to restricted destinations, which can be used to expose credentials for a remote service. These credentials can then be further exploited to completely compromise the remote service, potentially resulting in a significant impact on the confidentiality, integrity, and availability of the application.
CVSS Score: 8.5 (HIGH)
CWE: CWE-94
References: https://me.sap.com/notes/3554667; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-26653
Published: 2025-04-08
Description: SAP NetWeaver Application Server ABAP does not sufficiently encode user-controlled inputs, leading to Stored Cross-Site Scripting (XSS) vulnerability. This enables an attacker, without requiring any privileges, to inject malicious JavaScript into a website. When a user visits the compromised page, the injected script gets executed, potentially compromising the confidentiality and integrity within the scope of the victim�s browser. Availability is not impacted.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3559307; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-26654
Published: 2025-04-08
Description: SAP Commerce Cloud (Public Cloud) does not allow to disable unencrypted HTTP (port 80) entirely, but instead allows a redirect from port 80 to 443 (HTTPS). As a result, Commerce normally communicates securely over HTTPS. However, the confidentiality and integrity of data sent on the first request before the redirect may be impacted if the client is configured to use HTTP and sends confidential data on the first request before the redirect.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-319
References: https://me.sap.com/notes/3543274; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-26657
Published: 2025-04-08
Description: SAP KMC WPC allows an unauthenticated attacker to remotely retrieve usernames by a simple parameter query which could expose sensitive information causing low impact on confidentiality of the application. This has no effect on integrity and availability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3568307; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-27428
Published: 2025-04-08
Description: Due to directory traversal vulnerability, an authorized attacker could gain access to some critical information by using RFC enabled function module. Upon successful exploitation, they could read files from any managed system connected to SAP Solution Manager, leading to high impact on confidentiality. There is no impact on integrity or availability.
CVSS Score: 7.7 (HIGH)
CWE: CWE-862
References: https://me.sap.com/notes/3581811; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-27429
Published: 2025-04-08
Description: SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94
References: https://me.sap.com/notes/3581961; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-27435
Published: 2025-04-08
Description: Under specific conditions and prerequisites, an unauthenticated attacker could access customer coupon codes exposed in the URL parameters of the Coupon Campaign URL in SAP Commerce. This could allow the attacker to use the disclosed coupon code, hence posing a low impact on confidentiality and integrity of the application.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3539465; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-27437
Published: 2025-04-08
Description: A Missing Authorization Check vulnerability exists in the Virus Scanner Interface of SAP NetWeaver Application Server ABAP. Because of this, an attacker authenticated as a non-administrative user can initiate a transaction, allowing them to access but not modify non-sensitive data without further authorization and with no effect on availability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3568778; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-2882
Published: 2025-04-08
Description: The GreenPay(tm) by Green.Money plugin for WordPress is vulnerable to Sensitive Information Exposure in versions between 3.0.0 and 3.0.9 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/green-money-payment-gateway/trunk/phpinfo.php; https://plugins.trac.wordpress.org/changeset/3267032/; https://wordpress.org/plugins/green-money-payment-gateway/#developers
CVE: CVE-2025-30013
Published: 2025-04-08
Description: SAP ERP BW Business Content is vulnerable to OS Command Injection through certain function modules. These function modules, when executed with elevated privileges, improperly handle user input, allowing attacker to inject arbitrary OS commands. This vulnerability allows the execution of unintended commands on the underlying system, posing a significant security risk to the confidentiality, integrity and availability of the application.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-94
References: https://me.sap.com/notes/3571093; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-30014
Published: 2025-04-08
Description: SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from directory which they don�t have access to, hence causing a high impact on confidentiality. Integrity and Availability are not affected.
CVSS Score: 7.7 (HIGH)
CWE: CWE-35
References: https://me.sap.com/notes/2927164; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-30015
Published: 2025-04-08
Description: Due to incorrect memory address handling in ABAP SQL of SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacker with high privileges could execute certain forms of SQL queries leading to manipulation of content in the output variable. This vulnerability has a low impact on the confidentiality, integrity and the availability of the application.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-787
References: https://me.sap.com/notes/3565944; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-30016
Published: 2025-04-08
Description: SAP Financial Consolidation allows an unauthenticated attacker to gain unauthorized access to the Admin account. The vulnerability arises due to improper authentication mechanisms, due to which there is high impact on the Confidentiality, Integrity & Availability of the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-921
References: https://me.sap.com/notes/3572688; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-30017
Published: 2025-04-08
Description: Due to a missing authorization check, an authenticated attacker could upload a file as a template for solution documentation in SAP Solution Manager 7.1. After successful exploitation, an attacker can cause limited impact on the integrity and availability of the application.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3558864; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-31330
Published: 2025-04-08
Description: SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94
References: https://me.sap.com/notes/3587115; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-31331
Published: 2025-04-08
Description: SAP NetWeaver allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would normally require additional validation. Once logged into the ABAP system, the attacker can run a specific transaction that exposes sensitive system code without proper authorization. This vulnerability compromises the confidentiality.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://me.sap.com/notes/3577131; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-31332
Published: 2025-04-08
Description: Due to insecure file permissions in SAP BusinessObjects Business Intelligence Platform, an attacker who has local access to the system could modify files potentially disrupting operations or cause service downtime hence leading to a high impact on integrity and availability. However, this vulnerability does not disclose any sensitive data.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-277
References: https://me.sap.com/notes/3565751; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-31333
Published: 2025-04-08
Description: SAP S4CORE OData meta-data property is vulnerable to data tampering, due to which entity set could be externally modified by an attacker causing low impact on integrity of the application. Confidentiality and availability is not impacted.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-472
References: https://me.sap.com/notes/3525971; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-3431
Published: 2025-04-08
Description: The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 6.91 via the 'dzsap_download' action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-73
References: https://codecanyon.net/item/zoomsounds-wordpress-wave-audio-player-with-playlist/6181433; https://www.wordfence.com/threat-intel/vulnerabilities/id/a78998da-1cb1-4991-95a8-a551bde04064?source=cve
CVE: CVE-2024-41788
Published: 2025-04-08
Description: A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the input parameters in specific GET requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://cert-portal.siemens.com/productcert/html/ssa-187636.html
CVE: CVE-2024-41789
Published: 2025-04-08
Description: A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the language parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://cert-portal.siemens.com/productcert/html/ssa-187636.html
CVE: CVE-2024-41790
Published: 2025-04-08
Description: A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the region parameter in specific POST requests. This could allow an authenticated remote attacker to execute arbitrary code with root privileges.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://cert-portal.siemens.com/productcert/html/ssa-187636.html
CVE: CVE-2024-41791
Published: 2025-04-08
Description: A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not authenticate report creation requests. This could allow an unauthenticated remote attacker to read or clear the log files on the device, reset the device or set the date and time.
CVSS Score: 7.3 (HIGH)
CWE: CWE-306
References: https://cert-portal.siemens.com/productcert/html/ssa-187636.html
CVE: CVE-2024-41792
Published: 2025-04-08
Description: A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices contains a path traversal vulnerability. This could allow an unauthenticated attacker it to access arbitrary files on the device with root privileges.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: https://cert-portal.siemens.com/productcert/html/ssa-187636.html
CVE: CVE-2024-41793
Published: 2025-04-08
Description: A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device via ssh.
CVSS Score: 8.6 (HIGH)
CWE: CWE-306
References: https://cert-portal.siemens.com/productcert/html/ssa-187636.html
CVE: CVE-2024-41794
Published: 2025-04-08
Description: A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardcoded credentials for remote access to the device operating system with root privileges. This could allow unauthenticated remote attackers to gain full access to a device, if they are in possession of these credentials and if the ssh service is enabled (e.g., by exploitation of CVE-2024-41793).
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-798
References: https://cert-portal.siemens.com/productcert/html/ssa-187636.html
CVE: CVE-2024-41795
Published: 2025-04-08
Description: A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices is vulnerable to Cross-Site Request Forgery (CSRF) attacks. This could allow an unauthenticated attacker to change arbitrary device settings by tricking a legitimate device administrator to click on a malicious link.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://cert-portal.siemens.com/productcert/html/ssa-187636.html
CVE: CVE-2024-41796
Published: 2025-04-08
Description: A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices allows to change the login password without knowing the current password. In combination with a prepared CSRF attack (CVE-2024-41795) an unauthenticated attacker could be able to set the password to an attacker-controlled value.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-620
References: https://cert-portal.siemens.com/productcert/html/ssa-187636.html
CVE: CVE-2024-54092
Published: 2025-04-08
Description: A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions), Industrial Edge Device Kit - arm64 V1.18 (All versions), Industrial Edge Device Kit - arm64 V1.19 (All versions), Industrial Edge Device Kit - arm64 V1.20 (All versions < V1.20.2-1), Industrial Edge Device Kit - arm64 V1.21 (All versions < V1.21.1-1), Industrial Edge Device Kit - x86-64 V1.17 (All versions), Industrial Edge Device Kit - x86-64 V1.18 (All versions), Industrial Edge Device Kit - x86-64 V1.19 (All versions), Industrial Edge Device Kit - x86-64 V1.20 (All versions < V1.20.2-1), Industrial Edge Device Kit - x86-64 V1.21 (All versions < V1.21.1-1), Industrial Edge Own Device (IEOD) (All versions < V1.21.1-1-a), Industrial Edge Virtual Device (All versions < V1.21.1-1-a), SCALANCE LPE9413 (6GK5998-3GS01-2AC2) (All versions < V2.1), SIMATIC IPC BX-39A Industrial Edge Device (All versions < V3.0), SIMATIC IPC BX-59A Industrial Edge Device (All versions < V3.0), SIMATIC IPC127E Industrial Edge Device (All versions < V3.0), SIMATIC IPC227E Industrial Edge Device (All versions < V3.0), SIMATIC IPC427E Industrial Edge Device (All versions < V3.0), SIMATIC IPC847E Industrial Edge Device (All versions < V3.0). Affected devices do not properly enforce user authentication on specific API endpoints when identity federation is used. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that identity federation is currently or has previously been used and the attacker has learned the identity of a legitimate user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1390
References: https://cert-portal.siemens.com/productcert/html/ssa-634640.html; https://cert-portal.siemens.com/productcert/html/ssa-819629.html
CVE: CVE-2025-22008
Published: 2025-04-08
Description: In the Linux kernel, the following vulnerability has been resolved:

regulator: check that dummy regulator has been probed before using it

Due to asynchronous driver probing there is a chance that the dummy
regulator hasn't already been probed when first accessing it.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/21e3fdf3146f9c63888d6bfabbd553434a5fb93f; https://git.kernel.org/stable/c/2c7a50bec4958f1d1c84d19cde518d0e96a676fd; https://git.kernel.org/stable/c/998b1aae22dca87da392ea35f089406cbef6032d
CVE: CVE-2025-22009
Published: 2025-04-08
Description: In the Linux kernel, the following vulnerability has been resolved:

regulator: dummy: force synchronous probing

Sometimes I get a NULL pointer dereference at boot time in kobject_get()
with the following call stack:

anatop_regulator_probe()
 devm_regulator_register()
  regulator_register()
   regulator_resolve_supply()
    kobject_get()

By placing some extra BUG_ON() statements I could verify that this is
raised because probing of the 'dummy' regulator driver is not completed
('dummy_regulator_rdev' is still NULL).

In the JTAG debugger I can see that dummy_regulator_probe() and
anatop_regulator_probe() can be run by different kernel threads
(kworker/u4:*).  I haven't further investigated whether this can be
changed or if there are other possibilities to force synchronization
between these two probe routines.  On the other hand I don't expect much
boot time penalty by probing the 'dummy' regulator synchronously.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://git.kernel.org/stable/c/5ade367b56c3947c990598df92395ce737bee872; https://git.kernel.org/stable/c/8619909b38eeebd3e60910158d7d68441fc954e9; https://git.kernel.org/stable/c/d3b83a1442a09b145006eb4294b1a963c5345c9c