deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-50481
Published: 2025-07-23
Description: A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/kevinpdicks/Mezzanine-CMS-6.1.0-XSS; https://github.com/stephenmcd/mezzanine; https://github.com/kevinpdicks/Mezzanine-CMS-6.1.0-XSS
CVE: CVE-2025-8069
Published: 2025-07-23
Description: During the AWS Client VPN client installation on Windows devices, the install process references the C:\usr\local\windows-x86_64-openssl-localbuild\ssl directory location to fetch the OpenSSL configuration file. As a result, a non-admin user could place arbitrary code in the configuration file. If an admin user starts the AWS Client VPN client installation process, that code could be executed with root-level privileges. This issue does not affect Linux or Mac devices. 

We recommend users discontinue any new installations of AWS Client VPN on Windows prior to version 5.2.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://aws.amazon.com/security/security-bulletins/AWS-2025-014/; https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-windows-release-notes.html
CVE: CVE-2025-4439
Published: 2025-07-23
Description: An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed an authenticated user to perform cross-site scripting attacks when the instance is served through certain content delivery networks.
CVSS Score: 7.7 (HIGH)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/gitlab/-/issues/541177; https://hackerone.com/reports/3120111
CVE: CVE-2025-4700
Published: 2025-07-23
Description: An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under specific circumstances, could have potentially allowed a successful attacker to trigger unintended content rendering leading to XSS.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/gitlab/-/issues/542915; https://hackerone.com/reports/3120062
CVE: CVE-2025-46686
Published: 2025-07-23
Description: Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs because the server allocates memory for the command arguments of every bulk, even when the command is skipped because of insufficient permissions. NOTE: this is disputed by the Supplier because abuse of the commands network protocol is not a violation of the Redis Security Model.
CVSS Score: 3.5 (LOW)
CWE: CWE-401
References: https://github.com/io-no/CVE-Reports/issues/1; https://github.com/redis/redis; https://github.com/redis/redis/security/advisories/GHSA-2r7g-8hpc-rpq9
CVE: CVE-2025-47187
Published: 2025-07-23
Description: A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and the 6970 Conference Unit through 6.4 SP4 (R6.4.0.4006) or version V1 R0.1.0, could allow an unauthenticated attacker to perform a file upload attack due to missing authentication mechanisms. A successful exploit could allow an attacker to upload arbitrary WAV files, which may potentially exhaust the phone’s storage without affecting the phone's availability or operation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2025-0004
CVE: CVE-2025-50477
Published: 2025-07-23
Description: A URL redirection in lbry-desktop v0.53.9 allows attackers to redirect victim users to attacker-controlled pages.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://drive.google.com/file/d/1HLxOWDSq6DHeZTVNcY0Tgkcd_eWTqYAS/view; https://gist.github.com/Suuuuuzy/a3df9e88a41f9641c37e6d663f9b539c; https://suuuuuzy.github.io/mostly-harmless/lbry_poc/index.html
CVE: CVE-2025-44109
Published: 2025-07-23
Description: A URL redirection in Pinokio v3.6.23 allows attackers to redirect victim users to attacker-controlled pages.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://drive.google.com/file/d/12XY2WFBvGJ104gUvyG6YDIEdy4y1gl8i/view; https://gist.github.com/Suuuuuzy/609c7b2e74a8cc16c8e0302a100b86e0; https://suuuuuzy.github.io/mostly-harmless/pinokio_poc/index.html
CVE: CVE-2025-8058
Published: 2025-07-23
Description: The regcomp function in the GNU C library version from 2.4 to 2.41 is 
subject to a double free if some previous allocation fails. It can be 
accomplished either by a malloc failure or by using an interposed malloc
 that injects random malloc failures. The double free can allow buffer 
manipulation depending of how the regex is constructed. This issue 
affects all architectures and ABIs supported by the GNU C library.
CWE: CWE-415
References: https://sourceware.org/bugzilla/show_bug.cgi?id=33185; https://sourceware.org/git/?p=glibc.git;a=commit;h=3ff17af18c38727b88d9115e536c069e6b5d601f; http://www.openwall.com/lists/oss-security/2025/07/23/1
CVE: CVE-2025-32019
Published: 2025-07-23
Description: Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed in versions 2.11.3 and 2.12.3.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/goharbor/harbor/commit/76c2c5f7cfd9edb356cbb373889a59cc3217a058; https://github.com/goharbor/harbor/commit/a13a16383a41a8e20f524593cb290dc52f86f088; https://github.com/goharbor/harbor/commit/f[PII_REDACTED]18852f83f96cac9c587b89052d1e5
CVE: CVE-2025-47281
Published: 2025-07-23
Description: Kyverno is a policy engine designed for cloud native platform engineering teams. In versions 1.14.1 and below, a Denial of Service (DoS) vulnerability exists due to improper handling of JMESPath variable substitutions. Attackers with permissions to create or update Kyverno policies can craft expressions using the {{@}} variable combined with a pipe and an invalid JMESPath function (e.g., {{@ | non_existent_function }}). This leads to a nil value being substituted into the policy structure. Subsequent processing by internal functions, specifically getValueAsStringMap, which expect string values, results in a panic due to a type assertion failure (interface {} is nil, not string). This crashes Kyverno worker threads in the admission controller and causes continuous crashes of the reports controller pod. This is fixed in version 1.14.2.
CVSS Score: 7.7 (HIGH)
CWE: CWE-20, CWE-248
References: https://github.com/kyverno/kyverno/commit/cbd7d4ca24de1c55396fc3295e9fc3215832be7c; https://github.com/kyverno/kyverno/security/advisories/GHSA-r5p3-955p-5ggq; https://github.com/kyverno/kyverno/security/advisories/GHSA-r5p3-955p-5ggq
CVE: CVE-2025-53537
Published: 2025-07-23
Description: LibHTP is a security-aware parser for the HTTP protocol and its related bits and pieces. In versions 0.5.50 and below, there is a traffic-induced memory leak that can starve the process of memory, leading to loss of visibility. To workaround this issue, set `suricata.yaml app-layer.protocols.http.libhtp.default-config.lzma-enabled` to false. This issue is fixed in version 0.5.51.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://github.com/OISF/libhtp/commit/9037ea35110a0d97be5cedf8d31fb4cd9a38c7a7; https://github.com/OISF/libhtp/security/advisories/GHSA-v3qq-h8mh-vph7
CVE: CVE-2025-53942
Published: 2025-07-23
Description: authentik is an open-source Identity Provider that emphasizes flexibility and versatility, with support for a wide set of protocols. In versions 2025.4.4 and earlier, as well as versions 2025.6.0-rc1 through 2025.6.3, deactivated users who registered through OAuth/SAML or linked their accounts to OAuth/SAML providers can still retain partial access to the system despite their accounts being deactivated. They end up in a half-authenticated state where they cannot access the API but crucially they can authorize applications if they know the URL of the application. To workaround this issue, developers can add an expression policy to the user login stage on the respective authentication flow with the expression of return request.context["pending_user"].is_active. This modification ensures that the return statement only activates the user login stage when the user is active. This issue is fixed in versions authentik 2025.4.4 and 2025.6.4.
CVSS Score: 7.4 (HIGH)
CWE: CWE-269
References: https://github.com/goauthentik/authentik/commit/7a4c6b9b50f8b837133a7a1fd2cb9b7f18a145cd; https://github.com/goauthentik/authentik/commit/c3629d12bfe3d32d3dc8f85c0ee1f087a55dde8f; https://github.com/goauthentik/authentik/commit/ce3f9e3763c1778bf3a16b98c95d10f4091436ab
CVE: CVE-2025-54371
Published: 2025-07-23
Description: Rejected reason: This CVE is a duplicate of another CVE.
CVE: CVE-2025-54377
Published: 2025-07-23
Description: Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.23.18 and below, RooCode does not validate line breaks (\n) in its command input, allowing potential bypass of the allow-list mechanism. The project appears to lack parsing or validation logic to prevent multi-line command injection. When commands are evaluated for execution, only the first line or token may be considered, enabling attackers to smuggle additional commands in subsequent lines. This is fixed in version 3.23.19.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://github.com/RooCodeInc/Roo-Code/commit/9d434c2db9b20eb5c78b698cb2b0037cd2074534; https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-p278-52x9-cffx; https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-p278-52x9-cffx
CVE: CVE-2016-15044
Published: 2025-07-23
Description: A remote code execution vulnerability exists in Kaltura versions prior to 11.1.0-2 due to unsafe deserialization of user-controlled data within the keditorservices module. An unauthenticated remote attacker can exploit this issue by sending a specially crafted serialized PHP object in the kdata GET parameter to the redirectWidgetCmd endpoint. Successful exploitation leads to execution of arbitrary PHP code in the context of the web server process.
CWE: CWE-94, CWE-502
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/kaltura_unserialize_rce.rb; https://www.exploit-db.com/exploits/39563; https://www.exploit-db.com/exploits/40404
CVE: CVE-2025-54365
Published: 2025-07-23
Description: fastapi-guard is a security library for FastAPI that provides middleware to control IPs, log requests, detect penetration attempts and more. In version 3.0.1, the regular expression patched to mitigate the ReDoS vulnerability by limiting the length of string fails to catch inputs that exceed this limit. This type of patch fails to detect cases in which the string representing the attributes of a <script> tag exceeds 100 characters. As a result, most of the regex patterns present in version 3.0.1 can be bypassed. This is fixed in version 3.0.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-185, CWE-1333
References: https://github.com/rennf93/fastapi-guard/commit/0829292c322d33dc14ab00c5451c5c138148035a; https://github.com/rennf93/fastapi-guard/commit/d9d50e8130b7b434cdc1b001b8cfd03a06729f7f; https://github.com/rennf93/fastapi-guard/security/advisories/GHSA-rrf6-pxg8-684g
CVE: CVE-2025-0765
Published: 2025-07-24
Description: An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed an unauthorized user to access custom service desk email addresses.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://gitlab.com/gitlab-org/gitlab/-/issues/515381; https://hackerone.com/reports/2956315
CVE: CVE-2025-1299
Published: 2025-07-24
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 18.0.5, all versions starting from 18.1 before 18.1.3, all versions starting from 18.2 before 18.2.1 that, under circumstances, could have allowed an unauthorized user to read deployment job logs by sending a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://gitlab.com/gitlab-org/gitlab/-/issues/519696; https://hackerone.com/reports/2969145
CVE: CVE-2025-41240
Published: 2025-07-24
Description: Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path (/opt/bitnami/*/secrets) that is located within the web server document root.
In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets by accessing specific URLs if the application is exposed externally. The issue affects deployments using the default value of usePasswordFiles=true, which mounts secrets as files into the container filesystem.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-552
References: https://github.com/bitnami/charts/security/advisories/GHSA-wgg9-9qgw-529w
CVE: CVE-2025-4393
Published: 2025-07-24
Description: Medtronic MyCareLink Patient Monitor has an internal service that deserializes data, which allows a local attacker to interact with the service by crafting a binary payload to crash the service or elevate privileges. 

This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-502
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-205-01; https://www.medtronic.com/en-us/e/product-security/security-bulletins/mycarelink-patient-monitor-vulnerabilities.html
CVE: CVE-2025-4394
Published: 2025-07-24
Description: Medtronic MyCareLink Patient Monitor uses an unencrypted filesystem on internal storage, which allows an attacker with physical access to read and modify files. 

This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-312
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-205-01; https://www.medtronic.com/en-us/e/product-security/security-bulletins/mycarelink-patient-monitor-vulnerabilities.html
CVE: CVE-2025-4395
Published: 2025-07-24
Description: Medtronic MyCareLink Patient Monitor has a built-in user account with an empty password, which allows an attacker with physical access to log in with no password and access modify system functionality. 

This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-258
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-205-01; https://www.medtronic.com/en-us/e/product-security/security-bulletins/mycarelink-patient-monitor-vulnerabilities.html
CVE: CVE-2025-4968
Published: 2025-07-24
Description: The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple Page Builder elements (Copyright Element,  Hover Box, Separator With Text, FAQ, Single Image, Custom Header, Button, Call To Action, Progress Bar, Pie Chart, Round Chart, and Line Chart) in all versions up to, and including, 8.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://kb.wpbakery.com/docs/preface/release-notes/; https://www.wordfence.com/threat-intel/vulnerabilities/id/10945855-675a-4a85-8bb2-84bc40c1b826?source=cve
CVE: CVE-2025-4976
Published: 2025-07-24
Description: An issue has been discovered in GitLab EE affecting all versions from 17.0 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under certain circumstances, could have allowed an attacker to access internal notes in GitLab Duo responses.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-213
References: https://gitlab.com/gitlab-org/gitlab/-/issues/543905; https://hackerone.com/reports/3149956
CVE: CVE-2025-7001
Published: 2025-07-24
Description: An issue has been discovered in GitLab CE/EE affecting all versions from 15.0 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed priviledged users to access certain resource_group information through the API which should have been unavailable.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1220
References: https://gitlab.com/gitlab-org/gitlab/-/issues/553163; https://hackerone.com/reports/3223993
CVE: CVE-2025-7437
Published: 2025-07-24
Description: The Ebook Store plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ebook_store_save_form function in all versions up to, and including, 5.8012. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/browser/ebook-store/trunk/functions.php#L2442; https://plugins.trac.wordpress.org/changeset/3328355; https://www.wordfence.com/threat-intel/vulnerabilities/id/0dc5c05d-51b7-4aee-bb4e-366ded45c4d8?source=cve
CVE: CVE-2025-7852
Published: 2025-07-24
Description: The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image_upload_handle() function hooked via the 'add_new_customer' route in all versions up to, and including, 1.0.6. The plugin’s image‐upload handler calls move_uploaded_file() on client‐supplied files without restricting allowed extensions or MIME types, nor sanitizing the filename. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/browser/wpbookit/trunk/core/admin/classes/controllers/class.wpb-customer-controller.php#L362; https://plugins.trac.wordpress.org/changeset/3331165/; https://wordpress.org/plugins/wpbookit/#developers
CVE: CVE-2025-26397
Published: 2025-07-24
Description: SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vulnerability requires authentication from a low-level account and local access to the host server.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-2-1_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26397
CVE: CVE-2025-7745
Published: 2025-07-24
Description: Buffer Over-read vulnerability in ABB AC500 V2.This issue affects AC500 V2: through 2.5.2.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-126
References: https://search.abb.com/library/Download.aspx?DocumentID=3ADR011432&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2025-8009
Published: 2025-07-24
Description: The Security Ninja – WordPress Security Plugin & Firewall plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.242 via the 'get_file_source' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to extract sensitive data, including the contents of any file on the server.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-36
References: https://plugins.trac.wordpress.org/browser/security-ninja/trunk/modules/core-scanner/core-scanner.php#L186; https://plugins.trac.wordpress.org/browser/security-ninja/trunk/modules/core-scanner/core-scanner.php#L33; https://plugins.trac.wordpress.org/changeset/3333048/
CVE: CVE-2025-8107
Published: 2025-07-24
Description: In OceanBase's Oracle tenant mode, a malicious user with specific privileges can achieve privilege escalation to SYS-level access by executing carefully crafted commands.




This vulnerability only affects OceanBase tenants in Oracle mode. Tenants in MySQL mode are unaffected.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-269, CWE-668
References: https://github.com/oceanbase/oceanbase/security
CVE: CVE-2025-3669
Published: 2025-07-24
Description: The Supreme Addons for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's auto_qrcodesabb shortcode in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/supreme-addons-for-beaver-builder-lite/tags/1.0.9/modules/QR-Code/QR-Code.php#L102; https://wordpress.org/plugins/supreme-addons-for-beaver-builder-lite/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/904ba3ec-efde-424c-a50b-2ce71ad91ca5?source=cve
CVE: CVE-2025-4608
Published: 2025-07-24
Description: The Structured Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sc_fs_local_business shortcode in all versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/structured-content/tags/1.6.4/class-structuredcontent.php#L188; https://plugins.trac.wordpress.org/browser/structured-content/tags/1.6.4/templates/shortcodes/local-business.php; https://plugins.trac.wordpress.org/changeset/3334624/
CVE: CVE-2025-5084
Published: 2025-07-24
Description: The Post Grid Master plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘argsArray['read_more_text']’ parameter in all versions up to, and including, 3.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Fr1t0viski/PoCs/blob/main/XSS_GridMaster; https://plugins.trac.wordpress.org/browser/ajax-filter-posts/tags/3.4.13/inc/functions.php; https://plugins.trac.wordpress.org/browser/ajax-filter-posts/tags/3.4.14/inc/functions.php
CVE: CVE-2025-6262
Published: 2025-07-24
Description: The muse.ai video embedding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's muse-ai shortcode in all versions up to, and including, 0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3362049%40muse-ai&new=3362049%40muse-ai&sfp_email=&sfph_mail=; https://wordpress.org/plugins/muse-ai/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/790d6336-0c16-4058-9ddb-d182ef56263c?source=cve