deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-66625
Published: 2025-12-09
Description: Umbraco is an ASP.NET CMS. Due to unsafe handling and deletion of temporary files in versions 10.0.0 through 13.12.0, during the dictionary upload process an attacker with access to the backoffice can trigger predictable requests to temporary file paths. The application’s error responses (HTTP 500 when a file exists, 404 when it does not) allow the attacker to enumerate the existence of arbitrary files on the server’s filesystem. This vulnerability does not allow reading or writing file contents. In certain configurations, incomplete clean-up of temporary upload files may additionally expose the NTLM hash of the Windows account running the Umbraco application. This issue is fixed in version 13.12.1.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200, CWE-377, CWE-552
References: https://github.com/umbraco/Umbraco-CMS/commit/7505efd433189037f46547932d4a8b603fd4a615; https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-hfv2-pf68-m33x
CVE: CVE-2021-47701
Published: 2025-12-09
Description: OpenBMCS 2.4 allows an attacker to escalate privileges from a read user to an admin user by manipulating permissions and exploiting a vulnerability in the update_user_permissions.php script.  Attackers can submit a malicious HTTP POST request to PHP scripts in '/plugins/useradmin/' directory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://www.exploit-db.com/exploits/50669; https://www.vulncheck.com/advisories/openbmcs-user-management-privilege-escalation; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5693.php
CVE: CVE-2021-47702
Published: 2025-12-09
Description: OpenBMCS 2.4 contains a CSRF vulnerability that allows attackers to perform actions with administrative privileges by exploiting the sendFeedback.php endpoint. Attackers can submit malicious requests to trigger unintended actions, such as sending emails or modifying system settings.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://www.exploit-db.com/exploits/50667; https://www.openbmcs.com; https://www.vulncheck.com/advisories/openbmcs-cross-site-request-forgery-csrf-via-sendfeedbackphp
CVE: CVE-2021-47703
Published: 2025-12-09
Description: OpenBMCS 2.4 contains an unauthenticated SSRF vulnerability that allows attackers to bypass firewalls and initiate service and network enumeration on the internal network through the affected application, allowing hijacking of current sessions. Attackers can specify an external domain in the 'ip' parameter to force the application to make an HTTP request to an arbitrary destination host.
CVSS Score: 7.2 (HIGH)
CWE: CWE-918
References: https://www.exploit-db.com/exploits/50670; https://www.openbmcs.com; https://www.vulncheck.com/advisories/openbmcs-server-side-request-forgery-ssrf-via-phpqueryphp
CVE: CVE-2021-47704
Published: 2025-12-09
Description: OpenBMCS 2.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting arbitrary SQL code. Attackers can send GET requests to /debug/obix_test.php with malicious 'id' values to extract database information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/50668; https://www.openbmcs.com; https://www.vulncheck.com/advisories/openbmcs-sql-injection-via-obixtestphp
CVE: CVE-2021-47705
Published: 2025-12-09
Description: COMMAX UMS Client ActiveX Control 1.7.0.2 contains a heap-based buffer overflow vulnerability that allows attackers to execute arbitrary code by providing excessively long string arrays through multiple functions. Attackers can exploit improper boundary validation in CNC_Ctrl.dll to cause heap corruption and potentially gain system-level access.
CWE: CWE-787
References: https://www.commax.com; https://www.exploit-db.com/exploits/50232; https://www.vulncheck.com/advisories/commax-ums-client-activex-control-cnc-ctrl-dll-heap-buffer-overflow
CVE: CVE-2021-47706
Published: 2025-12-09
Description: COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent physical controls in smart homes and buildings by exploiting cookie poisoning. Attackers can forge cookies to bypass authentication and disclose sensitive information.
CWE: CWE-565
References: https://www.commax.com; https://www.commax.com/product/; https://www.exploit-db.com/exploits/50206
CVE: CVE-2021-47707
Published: 2025-12-09
Description: COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel.
CWE: CWE-1392
References: https://www.commax.com; https://www.exploit-db.com/exploits/50210; https://www.vulncheck.com/advisories/commax-cvd-axx-dvr-weak-default-credentials-stream-disclosure
CVE: CVE-2021-47708
Published: 2025-12-09
Description: COMMAX Smart Home System CDP-1020n contains an SQL injection vulnerability that allows attackers to bypass authentication by injecting arbitrary SQL code through the 'id' parameter in 'loginstart.asp'. Attackers can exploit this by sending a POST request with malicious 'id' values to manipulate database queries and gain unauthorized access.
CWE: CWE-89
References: https://github.com/zeroscience; https://www.commax.com; https://www.exploit-db.com/exploits/50207
CVE: CVE-2021-47709
Published: 2025-12-09
Description: COMMAX Smart Home System allows an unauthenticated attacker to change configuration and cause denial-of-service through the setconf endpoint. Attackers can trigger a denial-of-service scenario by sending a malformed request to the setconf endpoint.
CWE: CWE-306
References: https://www.commax.com; https://www.exploit-db.com/exploits/50209; https://www.vulncheck.com/advisories/commax-smart-home-ruvie-cctv-bridge-dvr-service-config-write-dos
CVE: CVE-2021-47710
Published: 2025-12-09
Description: COMMAX Smart Home System is a smart IoT home solution that allows an unauthenticated attacker to disclose RTSP credentials in plain-text by exploiting the /overview.asp endpoint. Attackers can access sensitive information, including login credentials and DVR settings, by submitting a GET request to this endpoint.
CWE: CWE-306
References: https://www.commax.com; https://www.exploit-db.com/exploits/50208; https://www.vulncheck.com/advisories/commax-smart-home-ruvie-cctv-bridge-dvr-service-rtsp-credentials-disclosure
CVE: CVE-2021-47717
Published: 2025-12-09
Description: IntelliChoice eFORCE Software Suite 2.5.9 contains a username enumeration vulnerability that allows attackers to enumerate valid users by exploiting the 'ctl00$MainContent$UserName' POST parameter. Attackers can send requests with valid usernames to retrieve user information.
CWE: CWE-204
References: https://www.eforcesoftware.com; https://www.exploit-db.com/exploits/50164; https://www.vulncheck.com/advisories/intellichoice-eforce-software-suite-username-enumeration
CVE: CVE-2021-47718
Published: 2025-12-09
Description: OpenBMCS 2.4 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive files by exploiting directory listing functionality. Attackers can browse directories like /debug/ and /php/ to discover configuration files, database credentials, and system information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-548
References: https://www.exploit-db.com/exploits/50671; https://www.openbmcs.com; https://www.vulncheck.com/advisories/openbmcs-directory-listing-information-disclosure
CVE: CVE-2021-47719
Published: 2025-12-09
Description: COMMAX WebViewer ActiveX Control 2.1.4.5 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by providing excessively long string arrays through multiple functions. Attackers can exploit boundary errors in Commax_WebViewer.ocx to cause buffer overflow conditions and potentially gain code execution.
CWE: CWE-787
References: https://www.commax.com; https://www.exploit-db.com/exploits/50231; https://www.vulncheck.com/advisories/commax-webviewer-activex-control-commax-webviewer-ocx-buffer-overflow
CVE: CVE-2021-47723
Published: 2025-12-09
Description: STVS ProVision 5.9.10 contains a cross-site request forgery vulnerability that allows attackers to perform actions with administrative privileges by exploiting unvalidated HTTP requests. Attackers can visit malicious web sites to trigger the forge request, allowing them to create new admin users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.stvs.ch; https://www.exploit-db.com/exploits/49482; https://www.vulncheck.com/advisories/stvs-provision-cross-site-request-forgery-add-admin
CVE: CVE-2021-47724
Published: 2025-12-09
Description: STVS ProVision 5.9.10 contains a path traversal vulnerability that allows authenticated attackers to access arbitrary files by manipulating the files parameter in the archive download functionality. Attackers can send GET requests to /archive/download with directory traversal sequences to read sensitive system files like /etc/passwd.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.stvs.ch; https://www.exploit-db.com/exploits/49481; https://www.vulncheck.com/advisories/stvs-provision-authenticated-file-disclosure-via-archiverb
CVE: CVE-2021-47727
Published: 2025-12-09
Description: Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication. Attackers can directly connect to RTP/RTSP or M-JPEG streams by requesting specific endpoints like p1.mjpg or p1.264 to view camera footage.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://github.com/Mbed-TLS/mbedtls; https://www.exploit-db.com/exploits/49459; https://www.selea.com
CVE: CVE-2021-47728
Published: 2025-12-09
Description: Selea Targa IP OCR-ANPR Camera contains an unauthenticated command injection vulnerability in utils.php that allows remote attackers to execute arbitrary shell commands. Attackers can exploit the 'addr' and 'port' parameters to inject commands and gain www-data user access through chained local file inclusion techniques.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/zeroscience; https://www.exploit-db.com/exploits/49460; https://www.selea.com
CVE: CVE-2021-47729
Published: 2025-12-09
Description: Selea Targa IP OCR-ANPR Camera contains a stored cross-site scripting vulnerability in the 'files_list' parameter that allows attackers to inject malicious HTML and script code. Attackers can send a POST request to /cgi-bin/get_file.php with crafted payload to execute arbitrary scripts in victim's browser session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49454; https://www.selea.com; https://www.selea.com/product/
CVE: CVE-2021-47730
Published: 2025-12-09
Description: Selea Targa IP OCR-ANPR Camera contains a cross-site request forgery vulnerability that allows attackers to create administrative users without authentication. Attackers can craft a malicious web page that submits a form to add a new admin user with full system privileges when a logged-in user visits the page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/zeroscience; https://www.exploit-db.com/exploits/49458; https://www.selea.com
CVE: CVE-2021-47731
Published: 2025-12-09
Description: Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page. Attackers can exploit the hidden endpoint by using the hard-coded password 'Selea781830' to enable configuration upload and overwrite device settings.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/zeroscience; https://www.exploit-db.com/exploits/49455; https://www.selea.com
CVE: CVE-2023-53739
Published: 2025-12-09
Description: Tinycontrol LAN Controller v3 LK3 version 1.58a contains an unauthenticated vulnerability that allows remote attackers to download configuration backup files containing sensitive credentials. Attackers can retrieve the lk3_settings.bin file and extract base64-encoded user and admin passwords without authentication.
CWE: CWE-260
References: https://www.exploit-db.com/exploits/51731; https://www.tinycontrol.pl; https://www.vulncheck.com/advisories/tinycontrol-lan-controller-v3-lk3-unauthenticated-configuration-backup-disclosure
CVE: CVE-2023-53770
Published: 2025-12-09
Description: MiniDVBLinux 5.4 contains an unauthenticated configuration download vulnerability that allows remote attackers to access sensitive system configuration files through a direct object reference. Attackers can exploit the backup download endpoint by sending a GET request with 'action=getconfig' to retrieve a complete system configuration archive containing sensitive credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-260
References: https://www.exploit-db.com/exploits/51091; https://www.minidvblinux.de; https://www.vulncheck.com/advisories/minidvblinux-unauthenticated-configuration-download-via-backup-endpoint
CVE: CVE-2023-53771
Published: 2025-12-09
Description: MiniDVBLinux 5.4 contains an authentication bypass vulnerability that allows remote attackers to change the root password without authentication. Attackers can send crafted POST requests to the system setup endpoint with modified SYSTEM_PASSWORD parameters to reset root credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.exploit-db.com/exploits/51094; https://www.minidvblinux.de; https://www.vulncheck.com/advisories/minidvblinux-unauthenticated-root-password-change-via-system-setup
CVE: CVE-2023-53772
Published: 2025-12-09
Description: MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/51097; https://www.minidvblinux.de; https://www.vulncheck.com/advisories/minidvblinux-arbitrary-file-read-vulnerability-via-about-page
CVE: CVE-2023-53773
Published: 2025-12-09
Description: MiniDVBLinux 5.4 contains an unauthenticated vulnerability in the tv_action.sh script that allows remote attackers to generate live stream snapshots through the Simple VDR Protocol. Attackers can request /tpl/tv_action.sh to create and retrieve a live TV screenshot stored in /var/www/images/tv.jpg without authentication.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://www.exploit-db.com/exploits/51095; https://www.minidvblinux.de; https://www.vulncheck.com/advisories/minidvblinux-unauthenticated-live-stream-disclosure-via-tvactionsh
CVE: CVE-2023-53774
Published: 2025-12-09
Description: MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk recorder remotely.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.exploit-db.com/exploits/51093; https://www.linuxtv.org/vdrwiki/index.php/SVDRP#The_commands; https://www.minidvblinux.de
CVE: CVE-2025-13743
Published: 2025-12-09
Description: Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in exported diagnostics, especially when access denied errors occurred.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://docs.docker.com/desktop/troubleshoot-and-support/troubleshoot/#troubleshoot-menu
CVE: CVE-2025-64785
Published: 2025-12-09
Description: Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://helpx.adobe.com/security/products/acrobat/apsb25-119.html
CVE: CVE-2025-64786
Published: 2025-12-09
Description: Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited unauthorized write access. Exploitation of this issue requires user interaction with a cryptographic signature.
CVSS Score: 3.3 (LOW)
CWE: CWE-347
References: https://helpx.adobe.com/security/products/acrobat/apsb25-119.html
CVE: CVE-2025-64787
Published: 2025-12-09
Description: Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass cryptographic protections and gain limited unauthorized write access. Exploitation of this issue requires user interaction with a cryptographic signature.
CVSS Score: 3.3 (LOW)
CWE: CWE-347
References: https://helpx.adobe.com/security/products/acrobat/apsb25-119.html
CVE: CVE-2025-64896
Published: 2025-12-09
Description: Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to disrupt the application's functionality by manipulating temporary files. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-379
References: https://helpx.adobe.com/security/products/creative-cloud/apsb25-120.html
CVE: CVE-2025-64899
Published: 2025-12-09
Description: Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb25-119.html
CVE: CVE-2025-66626
Published: 2025-12-09
Description: Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Versions 3.6.13 and below and versions 3.7.0 through 3.7.4, contain unsafe untar code that handles symbolic links in archives. Concretely, the computation of a link's target and the subsequent check are flawed. An attacker can overwrite the file /var/run/argo/argoexec with a script of their choice, which would be executed at the pod's start. The patch deployed against CVE-2025-62156 is ineffective against malicious archives containing symbolic links. This issue is fixed in versions 3.6.14 and 3.7.5.
CVSS Score: 8.1 (HIGH)
CWE: CWE-23, CWE-78, CWE-59
References: https://github.com/advisories/GHSA-p84v-gxvw-73pf; https://github.com/argoproj/argo-workflows/blob/5291e0b01f94ba864f96f795bb500f2cfc5ad799/workflow/executor/executor.go#L1034-L1037; https://github.com/argoproj/argo-workflows/commit/6b92af23f35aed4d4de8b04adcaf19d68f006de1
CVE: CVE-2025-67488
Published: 2025-12-09
Description: SiYuan is self-hosted, open source personal knowledge management software. Versions 0.0.0[PII_REDACTED]3337-6ef83b42c7ce and below contain function importZipMd which is vulnerable to ZipSlips, allowing an authenticated user to overwrite files on the system. An authenticated user with access to the import functionality in notes is able to overwrite any file on the system, and can escalate to full code execution under some circumstances. A fix is planned for version 3.5.0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://github.com/siyuan-note/siyuan/blob/dae6158860cc704e353454565c96e874278c6f47/kernel/api/import.go#L190; https://github.com/siyuan-note/siyuan/security/advisories/GHSA-gqfv-g4v7-m366
CVE: CVE-2025-67489
Published: 2025-12-09
Description: @vitejs/plugin-rs provides React Server Components (RSC) support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote code execution on the development server through unsafe dynamic imports in server function APIs (loadServerAction, decodeReply, decodeAction) when integrated into RSC applications that expose server function endpoints. Attackers with network access to the development server can read/modify files, exfiltrate sensitive data (source code, environment variables, credentials), or pivot to other internal services. While this affects development servers only, the risk increases when using vite --host to expose the server on all network interfaces. This issue is fixed in version 0.5.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/vitejs/vite-plugin-react/commit/fe634b58210d0a4a146a7faae56cd71af3bb9af4; https://github.com/vitejs/vite-plugin-react/security/advisories/GHSA-j76j-5p5g-9wfr
CVE: CVE-2025-34425
Published: 2025-12-09
Description: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the WindowContext parameter of /Mondo/lang/sys/Forms/MAI/compose.aspx. The WindowContext value is not properly sanitized when processed via a GET request and is reflected within a <script> context in the JavaScript variable window.location, allowing an attacker to break out of the existing script and inject arbitrary JavaScript. A remote attacker can supply a crafted payload that terminates the existing ProcessContextSwitchResult() function, inserts attacker-controlled script, and comments out remaining code, leading to script execution in a victim’s browser when the victim visits a malicious link or attempts to send an email. Successful exploitation can redirect victims to malicious sites, steal non-HttpOnly cookies, inject arbitrary HTML or CSS, and perform actions as the authenticated user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://mailenable.com/Standard-ReleaseNotes.txt; https://www.mailenable.com/; https://www.vulncheck.com/advisories/mailenable-reflected-xss-in-windowscontext-parameter-of-mai-compose-aspx
CVE: CVE-2025-36437
Published: 2025-12-09
Description: IBM Planning Analytics Local 2.1.0 - 2.1.15 could disclose sensitive information about server architecture that could aid in further attacks against the system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209
References: https://www.ibm.com/support/pages/node/7253603
CVE: CVE-2025-65513
Published: 2025-12-09
Description: fetch-mcp v1.0.2 and before is vulnerable to Server-Side Request Forgery (SSRF) vulnerability, which allows attackers to bypass private IP validation and access internal network resources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/Team-Off-course/MCP-Server-Vuln-Analysis/blob/main/CVE-2025-65513.md; https://thorn-pheasant-6d8.notion.site/fetch-mcp-2853daf7b44180029ca5d56e03195736; https://github.com/Team-Off-course/MCP-Server-Vuln-Analysis/blob/main/CVE-2025-65513.md