deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-0757
Published: 2025-04-16
Description: Overview



 



The software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users. (CWE-79) 



 



Description 



 



Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, allow a malicious URL to inject content into the Analyzer plugin interface. 



 



Impact 



 



Once the malicious script is injected, the attacker can perform a variety of malicious activities. The attacker could transfer private information, such as cookies that may include session information, from the victim's machine to the attacker. The attacker could send malicious requests to a web site on behalf of the victim, which could be especially dangerous to the site if the victim has administrator privileges to manage that site.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]2445--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Improper-Neutralization-of-Input-During-Web-Page-Generation-Cross-site-Scripting-Versions-before-10-2-0-2-including-9-3-x-Impacted-CVE-2025-0757
CVE: CVE-2025-0758
Published: 2025-04-16
Description: Overview 



The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. (CWE-732) 



Description 



Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, is installed with Karaf JMX beans enabled and accessible by default. 



Impact 



When the vulnerability is leveraged, a user with local execution privileges can access functionality exposed by Karaf beans contained in the product.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-732
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]4061--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Incorrect-Permission-Assignment-for-Critical-Resource-Versions-before-10-2-0-2-including-9-3-x-Impacted-CVE-2025-0758
CVE: CVE-2025-1566
Published: 2025-04-16
Description: DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1319
References: https://issues.chromium.org/issues/b/342802975; https://issuetracker.google.com/issues/342802975
CVE: CVE-2025-1568
Published: 2025-04-16
Description: Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code into ChromeOS projects and potentially achieve Remote Code Execution and Denial of Service via editing trusted pipelines by insufficient access controls and misconfigurations in Gerrit's project.config.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://issues.chromium.org/issues/b/374279912; https://issuetracker.google.com/issues/374279912
CVE: CVE-2025-1704
Published: 2025-04-16
Description: ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices 
and intercept device management requests via loading components from the unencrypted stateful partition.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://issues.chromium.org/issues/b/359915523; https://issuetracker.google.com/issues/359915523
CVE: CVE-2025-24907
Published: 2025-04-16
Description: Overview 



 



The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory. (CWE-35) 



 



Description 



 



Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.2, including 9.3.x and 8.3.x, do not sanitize a user input used as a file path through the CGG Draw API. 



 



Impact 



 



This allows attackers to traverse the file system to access files or directories that are outside of the restricted directory.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-35
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]9005--Resolved-Hitachi-Vantara-Pentaho-Data-Integration-Analytics-Path-Traversal-Versions-before-10-2-0-2-including-9-3-x-Impacted-CVE-2025-24907
CVE: CVE-2025-24908
Published: 2025-04-16
Description: Overview 



 



The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory. (CWE-35) 



 



Description 



 



Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.2, including 9.3.x and 8.3.x, do not sanitize a user input used as a file path through the UploadFile service. 



 



Impact 



 



This allows attackers to traverse the file system to access files or directories that are outside of the restricted directory.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-35
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]9421--Resolved-Hitachi-Vantara-Pentaho-Data-Integration-Analytics-Path-Traversal-Versions-before-10-2-0-2-including-9-3-x-Impacted-CVE-2025-24908
CVE: CVE-2025-24909
Published: 2025-04-16
Description: Overview 



 



The software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users. (CWE-79) 



 



Description 



 



Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, allow a malicious URL to inject content into the Analyzer plugin interface. 



 



Impact 



 



Once the malicious script is injected, the attacker can perform a variety of malicious activities. The attacker could transfer private information, such as cookies that may include session information, from the victim's machine to the attacker. The attacker could send malicious requests to a web site on behalf of the victim, which could be especially dangerous to the site if the victim has administrator privileges to manage that site.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]4045--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Improper-Neutralization-of-Input-During-Web-Page-Generation-Cross-site-Scripting-Versions-before-10-2-0-2-including-9-3-x-Impacted-CVE-2025-24909
CVE: CVE-2025-24910
Published: 2025-04-16
Description: Overview 



 



XML documents optionally contain a Document Type Definition (DTD), which, among other features, enables the definition of XML entities. It is possible to define an entity by providing a substitution string in the form of a URI. Once the content of the URI is read, it is fed back into the application that is processing the XML. This application may echo back the data (e.g. in an error message), thereby exposing the file contents. (CWE-611) 



 



Description 



 



Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.2, including 9.3.x and 8.3.x, do not correctly protect Pentaho Data Integration MessageSourceCrawler against out-of-band XML External Entity Reference. 



 



Impact 



 



By submitting an XML file that defines an external entity with a file:// URI, an attacker can cause the processing application to read the contents of a local file. Using URIs with other schemes such as http://, the attacker can force the application to make outgoing requests to servers that the attacker cannot reach directly, which can be used to bypass firewall restrictions or hide the source of attacks such as port scanning.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-611
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]0541--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Improper-Restriction-of-XML-External-Entity-Reference-Versions-before-10-2-0-2-including-9-3-x-Impacted-CVE-2025-24910
CVE: CVE-2025-24911
Published: 2025-04-16
Description: Overview 



 



XML documents optionally contain a Document Type Definition (DTD), which, among other features, enables the definition of XML entities. It is possible to define an entity by providing a substitution string in the form of a URI. Once the content of the URI is read, it is fed back into the application that is processing the XML. This application may echo back the data (e.g. in an error message), thereby exposing the file contents. (CWE-611) 



 



Description 



 



Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.2, including 9.3.x and 8.3.x, do not correctly protect Data Access XMLParserFactoryProducer against out-of-band XML External Entity Reference. 



 



Impact 



 



By submitting an XML file that defines an external entity with a file:// URI, an attacker can cause the processing application to read the contents of a local file. Using URIs with other schemes such as http://, the attacker can force the application to make outgoing requests to servers that the attacker cannot reach directly, which can be used to bypass firewall restrictions or hide the source of attacks such as port scanning.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-611
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]6589--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Improper-Restriction-of-XML-External-Entity-Reference-Versions-before-10-2-0-2-including-9-3-x-Impacted-CVE-2025-24911
CVE: CVE-2025-2073
Published: 2025-04-16
Description: Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an out-of-bounds read, potentially leading to information disclosure
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://issues.chromium.org/issues/b/380043638; https://issuetracker.google.com/issues/380043638
CVE: CVE-2025-2400
Published: 2025-04-16
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-43704
Published: 2025-04-16
Description: Arctera/Veritas Data Insight before 7.1.2 can send cleartext credentials when configured to use HTTP Basic Authentication to a Dell Isilon OneFS server.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-319
References: https://www.veritas.com/support/en_US/security/ARC25-006
CVE: CVE-2025-1290
Published: 2025-04-17
Description: A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS. Concurrent allocation and freeing of the virtio_vsock_sock structure 
during an AF_VSOCK connect syscall can occur before a worker thread accesses it resulting in a dangling pointer and potential kernel code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-416
References: https://issues.chromium.org/issues/b/301886931; https://issuetracker.google.com/issues/301886931
CVE: CVE-2025-43708
Published: 2025-04-17
Description: VisiCut 2.1 allows stack consumption via an XML document with nested set elements, as demonstrated by a java.util.HashMap StackOverflowError when reference='../../../set/set[2]' is used, aka an "insecure deserialization" issue.
CVSS Score: 3.3 (LOW)
CWE: CWE-674
References: https://github.com/Gelcon/PoC-of-VisiCut2_1-Stack-Overflow-Vul; https://github.com/t-oster/VisiCut; https://visicut.org
CVE: CVE-2025-31338
Published: 2025-04-17
Description: A missing authorization vulnerability in the retrieve teacher Information function of Wisdom Master Pro versions 5.0 through 5.2 allows remote attackers to obtain partial user data by accessing the API functionality.
CWE: CWE-862
References: https://zuso.ai/advisory/za-2025-01
CVE: CVE-2025-31339
Published: 2025-04-17
Description: An unrestricted upload of file with dangerous type vulnerability in the course management function of Wisdom Master Pro versions 5.0 through 5.2 allows remote authenticated users to craft a malicious file.
CWE: CWE-434
References: https://zuso.ai/advisory/za-2025-02
CVE: CVE-2025-31340
Published: 2025-04-17
Description: A improper control of filename for include/require statement in PHP program vulnerability in the retrieve course Information function of Wisdom Master Pro versions 5.0 through 5.2 allows remote attackers to perform arbitrary system commands by running a malicious file.
CWE: CWE-98
References: https://zuso.ai/advisory/za-2025-03
CVE: CVE-2025-43715
Published: 2025-04-17
Description: Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins directory is created under %WINDIR%\temp and unprivileged users can place a crafted executable file by winning a race condition. This occurs because EW_CREATEDIR does not always set the CreateRestrictedDirectory error flag.
CVSS Score: 8.1 (HIGH)
CWE: CWE-754
References: https://nsis.sourceforge.io/Docs/AppendixF.html#v3.11-rl; https://sourceforge.net/p/nsis/bugs/1315/
CVE: CVE-2025-43717
Published: 2025-04-17
Description: In PEAR HTTP_Request2 before 2.7.0, multiple files in the tests directory, notably tests/_network/getparameters.php and tests/_network/postparameters.php, reflect any GET or POST parameters, leading to XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-531
References: https://github.com/pear/HTTP_Request2/blob/b1c61b[PII_REDACTED]4d757c4d3d436457ace80ea7/package.xml#L24; https://github.com/pear/HTTP_Request2/commit/07925aa77e441dba0ff0fa973a09802729cb838f; https://github.com/pear/HTTP_Request2/commit/265e05f9e08a28a38a57219516a8e4e2dfdbb147
CVE: CVE-2024-11924
Published: 2025-04-17
Description: The Icegram Express formerly known as Email Subscribers  WordPress plugin before 5.7.52 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://wpscan.com/vulnerability/70288369-132d-4211-bca0-0411736df747/
CVE: CVE-2024-13925
Published: 2025-04-17
Description: The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint that allows an attacker to flood the log files with data at the maximum size allowed for a POST parameter per request. This can result in rapid consumption of disk space, potentially filling the entire disk.
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/6aebb52f-d74a-4043-86c4-c24579f24ef4/
CVE: CVE-2025-1523
Published: 2025-04-17
Description: The Ultimate Dashboard  WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://wpscan.com/vulnerability/5a20768f-3128-4b0a-a06b-2247f3e02c99/
CVE: CVE-2025-1524
Published: 2025-04-17
Description: The Ultimate Dashboard  WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://wpscan.com/vulnerability/36aed1e4-05cb-42d2-b835-f6336f1a82cd/
CVE: CVE-2025-1525
Published: 2025-04-17
Description: The Ultimate Dashboard  WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d457733f-72e9-45e2-ac07-4e1b94e46102/
CVE: CVE-2025-3294
Published: 2025-04-17
Description: The WP Editor plugin for WordPress is vulnerable to arbitrary file update due to missing file path validation in all versions up to, and including, 1.2.9.1. This makes it possible for authenticated attackers, with Administrator-level access and above, to overwrite arbitrary files on the affected site's server which may make remote code execution possible assuming the files can be written to by the web server.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3269832%40wp-editor%2Ftrunk&old=3151053%40wp-editor%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/9298820e-3753-41b3-8ba6-9fb494e215a8?source=cve
CVE: CVE-2025-3295
Published: 2025-04-17
Description: The WP Editor plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.9.1. This makes it possible for authenticated attackers, with Administrator-level access and above, to read arbitrary files on the affected site's server which may reveal sensitive information.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3269832%40wp-editor%2Ftrunk&old=3151053%40wp-editor%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/4618c1f4-c0aa-47f5-8c0b-2cb4a021f2e0?source=cve
CVE: CVE-2025-2903
Published: 2025-04-17
Description: An attacker with knowledge of creating user accounts during VM deployment on Google Cloud Platform (GCP) using the OS Login feature, can login via SSH gaining command-line control of the operating system. This allows an attacker to gain access to sensitive data stored on the VM, install malicious software, and disrupt or disable the functionality of the VM.
CWE: CWE-267, CWE-268
References: https://portal.perforce.com/s/detail/a91PA000001Sed3YAC
CVE: CVE-2025-3113
Published: 2025-04-17
Description: A valid, authenticated user with sufficient privileges and who is aware of Continuous Compliance’s internal database configurations can leverage the application’s built-in Connector functionality to access Continuous Compliance’s internal database. This allows the user to explore the internal database schema and export its data, including the properties of Connecters and Rule Sets.
CWE: CWE-284
References: https://portal.perforce.com/s/detail/a91PA000001SeefYAC
CVE: CVE-2025-3615
Published: 2025-04-17
Description: The Fluent Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form-submission.js script in all versions up to, and including, 6.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/fluentform/tags/6.0.2/assets/js/form-submission.js; https://plugins.trac.wordpress.org/changeset/3274693/; https://wordpress.org/plugins/fluentform/#developers
CVE: CVE-2025-1532
Published: 2025-04-17
Description: Phoneservice module is affected by code injection vulnerability, successful exploitation of this vulnerability may affect service confidentiality and integrity.
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://www.honor.com/global/security/cve-2025-1532/
CVE: CVE-2025-2188
Published: 2025-04-17
Description: There is a whitelist mechanism bypass in GameCenter ,successful exploitation of this vulnerability may affect service confidentiality and integrity.
CVSS Score: 8.1 (HIGH)
CWE: CWE-290
References: https://www.honor.com/global/security/cve-2025-2188/
CVE: CVE-2025-2197
Published: 2025-04-17
Description: Browser is affected by type confusion vulnerability, successful exploitation of this vulnerability may affect service availability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-843
References: https://www.honor.com/global/security/cve-2025-2197/
CVE: CVE-2025-29931
Published: 2025-04-17
Description: A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected product does not properly validate a length field in a serialized message which it uses to determine the amount of memory to be allocated for deserialization. This could allow an unauthenticated remote attacker to cause the application to allocate exhaustive amounts of memory and subsequently create a partial denial of service condition.
Successful exploitation is only possible in redundant Telecontrol Server Basic setups and only if the connection between the redundant servers has been disrupted.
CVSS Score: 3.7 (LOW)
CWE: CWE-130
References: https://cert-portal.siemens.com/productcert/html/ssa-395348.html
CVE: CVE-2025-26477
Published: 2025-04-17
Description: Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://www.dell.com/support/kbdoc/en-in/000300068/dsa-2025-097-security-update-for-dell-objectscale-4-0-multiple-vulnerabilities
CVE: CVE-2025-26478
Published: 2025-04-17
Description: Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.
CVSS Score: 3.1 (LOW)
CWE: CWE-295
References: https://www.dell.com/support/kbdoc/en-in/000300068/dsa-2025-097-security-update-for-dell-objectscale-4-0-multiple-vulnerabilities
CVE: CVE-2025-3453
Published: 2025-04-17
Description: The Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products – Restrict Content, Protect WooCommerce Category and more plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.7 via the 'password_protected_cookie' function. This makes it possible for unauthenticated attackers to extract sensitive data including all protected site content if the 'Use Transient' setting is enabled.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://plugins.trac.wordpress.org/browser/password-protected/trunk/includes/compatibility.php; https://plugins.trac.wordpress.org/changeset/3274358/; https://www.wordfence.com/threat-intel/vulnerabilities/id/241d75ca-55e3-461a-9844-52e69904da1b?source=cve
CVE: CVE-2025-3479
Published: 2025-04-17
Description: The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Order Replay in all versions up to, and including, 1.42.0 via the 'handle_stripe_single' function due to insufficient validation on a user controlled key. This makes it possible for unauthenticated attackers to reuse a single Stripe PaymentIntent for multiple transactions. Only the first transaction is processed via Stripe, but the plugin sends a successful email message for each transaction, which may trick an administrator into fulfilling each order.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-354
References: https://plugins.trac.wordpress.org/browser/forminator/tags/1.41.2/library/modules/custom-forms/front/front-action.php#L964; https://plugins.trac.wordpress.org/changeset/3274844/; https://www.wordfence.com/threat-intel/vulnerabilities/id/c873c04e-516e-41ee-a295-b8c5235abc1b?source=cve