deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-45647
Published: 2025-01-20
Description: IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expired user without prior knowledge of that password.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-620
References: https://www.ibm.com/support/pages/node/7176212
CVE: CVE-2024-51738
Published: 2025-01-20
Description: Sunshine is a self-hosted game stream host for Moonlight. In 0.23.1 and earlier, Sunshine's pairing protocol implementation does not validate request order and is thereby vulnerable to a MITM attack, potentially allowing an unauthenticated attacker to pair a client by hijacking a legitimate pairing attempt. This bug may also be used by a remote attacker to crash Sunshine. This vulnerability is fixed in 2[PII_REDACTED]40.
CVSS Score: 8.1 (HIGH)
CWE: CWE-305, CWE-476, CWE-841
References: https://github.com/LizardByte/Sunshine/commit/89f097ae65277d42b5d40163d09d92e412e6d7dd; https://github.com/LizardByte/Sunshine/security/advisories/GHSA-3hrw-xv8h-9499
CVE: CVE-2025-22131
Published: 2025-01-20
Description: PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Cross-Site Scripting (XSS) vulnerability in the code which translates the XLSX file into a HTML representation and displays it in the response.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/PHPOffice/PhpSpreadsheet/commit/4088381ccfaf241d7d42c333de0dc8c98e338743; https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-79xx-vf93-p7cx
CVE: CVE-2025-22620
Published: 2025-01-20
Description: gitoxide is an implementation of git written in Rust. Prior to 0.17.0, gix-worktree-state specifies 0777 permissions when checking out executable files, intending that the umask will restrict them appropriately. But one of the strategies it uses to set permissions is not subject to the umask. This causes files in a repository to be world-writable in some situations. This vulnerability is fixed in 0.17.0.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-281, CWE-687
References: https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-fqmf-w4xh-33rh
CVE: CVE-2025-23044
Published: 2025-01-20
Description: PwnDoc is a penetration test report generator. There is no CSRF protection in pwndoc, allowing attackers to send requests on a logged-in user's behalf. This includes GET and POST requests due to the missing SameSite= attribute on cookies and the ability to refresh cookies. Commit 14acb704891245bf1703ce6296d62112e85aa995 patches the issue.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: https://github.com/pwndoc/pwndoc/commit/14acb704891245bf1703ce6296d62112e85aa995; https://github.com/pwndoc/pwndoc/security/advisories/GHSA-9v2v-jxvw-52rq
CVE: CVE-2025-23218
Published: 2025-01-20
Description: WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adicionar_especie.php endpoint. This vulnerability allows attackers to execute arbitrary SQL commands in the database, allowing unauthorized access to sensitive information. During the exploit, it was possible to perform a complete dump of the application's database, highlighting the severity of the flaw. This vulnerability is fixed in 3.2.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/LabRedesCefetRJ/WeGIA/commit/7465f785651c0cff65059bba96b015ab54235de4; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-xhv4-88gx-hvgh
CVE: CVE-2025-23219
Published: 2025-01-20
Description: WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adicionar_cor.php endpoint. This vulnerability allows attackers to execute arbitrary SQL commands in the database, allowing unauthorized access to sensitive information. During the exploit, it was possible to perform a complete dump of the application's database, highlighting the severity of the flaw. This vulnerability is fixed in 3.2.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/LabRedesCefetRJ/WeGIA/commit/ae9c859006143bd0087b3e6e48a0677e1fff5c7e; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-h2mg-4c7q-w69v
CVE: CVE-2025-23220
Published: 2025-01-20
Description: WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adicionar_raca.php endpoint. This vulnerability allows attackers to execute arbitrary SQL commands in the database, allowing unauthorized access to sensitive information. During the exploit, it was possible to perform a complete dump of the application's database, highlighting the severity of the flaw. This vulnerability is fixed in 3.2.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/LabRedesCefetRJ/WeGIA/commit/1739e1589948a207b8a82b9bfe078cb826d420de; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-425j-h4cf-g52j
CVE: CVE-2025-24010
Published: 2025-01-20
Description: Vite is a frontend tooling framework for javascript. Vite allowed any websites to send any requests to the development server and read the response due to default CORS settings and lack of validation on the Origin header for WebSocket connections. This vulnerability is fixed in 6.0.9, 5.4.12, and 4.5.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-346, CWE-350, CWE-1385
References: https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6
CVE: CVE-2025-24013
Published: 2025-01-20
Description: CodeIgniter is a PHP full-stack web framework. Prior to 4.5.8, CodeIgniter lacked proper header validation for its name and value. The potential attacker can construct deliberately malformed headers with Header class. This could disrupt application functionality, potentially causing errors or generating invalid HTTP requests. In some cases, these malformed requests might lead to a DoS scenario if a remote service’s web application firewall interprets them as malicious and blocks further communication with the application. This vulnerability is fixed in 4.5.8.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-436
References: https://datatracker.ietf.org/doc/html/rfc7230#section-3.2; https://github.com/advisories/GHSA-wxmh-65f7-jcvw; https://github.com/codeigniter4/CodeIgniter4/commit/5f8aa24280fb09947897d6b322bf1f0e038b13b6
CVE: CVE-2025-23221
Published: 2025-01-20
Description: Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards. This vulnerability allows a user to maneuver the Webfinger mechanism to perform a GET request to any internal resource on any Host, Port, URL combination regardless of present security mechanisms, and forcing the victim’s server into an infinite loop causing Denial of Service. Moreover, this issue can also be maneuvered into performing a Blind SSRF attack. This vulnerability is fixed in 1.0.14, 1.1.11, 1.2.11, and 1.3.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-835, CWE-918
References: https://github.com/dahlia/fedify/commit/8be3c2038eebf4ae12481683a1e809b314be3151; https://github.com/dahlia/fedify/commit/c505eb82fcd6b5b17174c6659c29721bc801ab9a; https://github.com/dahlia/fedify/commit/e921134dd5097586e4563ea80b9e8d1b5460a645
CVE: CVE-2024-22347
Published: 2025-01-20
Description: IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: https://www.ibm.com/support/pages/node/7172750
CVE: CVE-2024-22348
Published: 2025-01-20
Description: IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-942
References: https://www.ibm.com/support/pages/node/7172750
CVE: CVE-2024-22349
Published: 2025-01-20
Description: IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 allows web pages to be stored locally which can be read by another user on the system.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-525
References: https://www.ibm.com/support/pages/node/7172750
CVE: CVE-2025-23214
Published: 2025-01-20
Description: Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7.
CWE: CWE-204
References: https://github.com/azukaar/Cosmos-Server/commit/ef643b4882b0ec074f4021d52583c7c00eac4691; https://github.com/azukaar/Cosmos-Server/security/advisories/GHSA-5843-2p4f-57fh
CVE: CVE-2024-13454
Published: 2025-01-20
Description: Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more easily bruteforce the private CA key when created using OpenSSL 3
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-326
References: https://community.openvpn.net/openvpn/wiki/CVE-2024-13454
CVE: CVE-2025-24014
Published: 2025-01-20
Description: Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode (-s -e), Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui version of Vim by feeding some binary characters to Vim. The function that handles the scrolling however may be triggering a redraw, which will access the ScreenLines pointer, even so this variable hasn't been allocated (since there is no screen). This vulnerability is fixed in 9.1.1043.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-787
References: https://github.com/vim/vim/commit/9d1bed5eccdbb46a26b8a484f5e9163c40e63919; https://github.com/vim/vim/security/advisories/GHSA-j3g9-wg22-v955; http://www.openwall.com/lists/oss-security/2025/01/20/4
CVE: CVE-2024-45091
Published: 2025-01-21
Description: IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.24, 7.1 through 7.1.2.10, and 7.2 through 7.2.3.13 stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-532
References: https://www.ibm.com/support/pages/node/7177857
CVE: CVE-2024-13536
Published: 2025-01-21
Description: The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87. This is due the /inc/class/fnm/export.php file being publicly accessible with error logging enabled. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://plugins.trac.wordpress.org/browser/1003-mortgage-application/trunk/inc/class/fnm/export.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/cfbc90b9-af91-49ac-ad3d-a37c17e8ba6d?source=cve
CVE: CVE-2025-23086
Published: 2025-01-21
Description: On most desktop platforms, Brave Browser versions 1.70.x-1.73.x included a feature to show a site's origin on the OS-provided file selector dialog when a site prompts the user to upload or download a file. However the origin was not correctly inferred in some cases. When combined with an open redirector vulnerability on a trusted site, this could allow a malicious site to initiate a download whose origin in the file select dialog appears as the trusted site which initiated the redirect.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://hackerone.com/reports/2888770
CVE: CVE-2024-10936
Published: 2025-01-21
Description: The String locator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.6 via deserialization of untrusted input in the 'recursive_unserialize_replace' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. An administrator must perform a search and replace action to trigger the exploit.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://plugins.trac.wordpress.org/browser/string-locator/trunk/includes/Extension/SearchReplace/Replace/class-sql.php#L170; https://plugins.trac.wordpress.org/changeset/3222952/; https://www.wordfence.com/threat-intel/vulnerabilities/id/1404f034-2d1d-44b2-87e5-61f72f215417?source=cve
CVE: CVE-2025-0371
Published: 2025-01-21
Description: The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.7.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://crocoblock.com/changelog/; https://www.wordfence.com/threat-intel/vulnerabilities/id/ded2f366-375c-4cf6-9cbd-c969a3b3d6d5?source=cve
CVE: CVE-2024-12005
Published: 2025-01-21
Description: The WP-BibTeX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on the wp_bibtex_option_page() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/wp-bibtex/trunk/wp-bibtex-options.php#L55; https://plugins.trac.wordpress.org/changeset/3225023; https://wordpress.org/plugins/wp-bibtex/#developers
CVE: CVE-2024-12104
Published: 2025-01-21
Description: The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpf_delete_file and wpf_delete_file functions in all versions up to, and including, 4.0.9. This makes it possible for unauthenticated attackers to delete project pages and files. CVE-2025-22657 may be a duplicate of this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3225314%40atarim-visual-collaboration&new=3225314%40atarim-visual-collaboration&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/7d40c658-a156-470e-bf93-a1f2ccec9c61?source=cve
CVE: CVE-2024-13404
Published: 2025-01-21
Description: The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchll' parameter in all versions up to, and including, 7.7.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3225694%40link-library&new=3225694%40link-library&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/f01362dc-4f3d-4b77-b802-01b436287237?source=cve
CVE: CVE-2024-6466
Published: 2025-01-21
Description: NEC Corporation's WebSAM DeploymentManager v6.0 to v6.80 allows an attacker to reset configurations or restart products via network with X-FRAME-OPTIONS is not specified.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1021
References: https://jpn.nec.com/security-info/secinfo/nv15-019_en.html
CVE: CVE-2025-23184
Published: 2025-01-21
Description: A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the CachedOutputStream instances may not be closed and, if backed by temporary files, may fill up the file system (it applies to servers and clients).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400
References: https://lists.apache.org/thread/lfs8l63rnctnj2skfrxyys7v8fgnt122; http://www.openwall.com/lists/oss-security/2025/01/20/3; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-11226
Published: 2025-01-21
Description: The FireCask Like & Share Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/facebook-like-send-button/tags/1.2/class-frontend.php#L121; https://plugins.trac.wordpress.org/changeset/3225838/; https://wordpress.org/plugins/facebook-like-send-button/#developers
CVE: CVE-2024-13230
Published: 2025-01-21
Description: The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to Limited SQL Injection via the ‘SuperSocializerKey’ parameter in all versions up to, and including, 7.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional values into the already existing query that can be used to extract user metadata from the database.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/super-socializer/trunk/super_socializer.php#L291; https://plugins.trac.wordpress.org/changeset/3225440/; https://www.wordfence.com/threat-intel/vulnerabilities/id/4d7b2a7f-3c67-4df1-bb15-e7f4f0035953?source=cve
CVE: CVE-2024-13444
Published: 2025-01-21
Description: The wp-greet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/wp-greet/trunk/wpg-admin.php#L124; https://plugins.trac.wordpress.org/browser/wp-greet/trunk/wpg-admin.php#L350; https://plugins.trac.wordpress.org/browser/wp-greet/trunk/wpg-form.php#L253
CVE: CVE-2024-37284
Published: 2025-01-21
Description: Improper handling of alternate encoding occurs when Elastic Defend on Windows systems attempts to scan a file or process encoded as a multibyte character. This leads to an uncaught exception causing Elastic Defend to crash which in turn will prevent it from quarantining the file and/or killing the process.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755
References: https://discuss.elastic.co/t/elastic-defend-8-13-3-security-update-esa-2024-24/373441
CVE: CVE-2024-43709
Published: 2025-01-21
Description: An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://discuss.elastic.co/t/elasticsearch-7-17-21-and-8-13-3-security-update-esa-2024-25/373442; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-52973
Published: 2025-01-21
Description: An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/log_entries/summary. This can be carried out by users with read access to the Observability-Logs feature in Kibana.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://discuss.elastic.co/t/kibana-7-17-23-and-8-14-2-security-update-esa-2024-26/373443
CVE: CVE-2025-0450
Published: 2025-01-21
Description: The Betheme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom JS functionality in all versions up to, and including, 27.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://support.muffingroup.com/changelog/; https://www.wordfence.com/threat-intel/vulnerabilities/id/340c14ea-70b9-4f60-84b3-97328432f110?source=cve
CVE: CVE-2024-57930
Published: 2025-01-21
Description: In the Linux kernel, the following vulnerability has been resolved:

tracing: Have process_string() also allow arrays

In order to catch a common bug where a TRACE_EVENT() TP_fast_assign()
assigns an address of an allocated string to the ring buffer and then
references it in TP_printk(), which can be executed hours later when the
string is free, the function test_event_printk() runs on all events as
they are registered to make sure there's no unwanted dereferencing.

It calls process_string() to handle cases in TP_printk() format that has
"%s". It returns whether or not the string is safe. But it can have some
false positives.

For instance, xe_bo_move() has:

 TP_printk("move_lacks_source:%s, migrate object %p [size %zu] from %s to %s device_id:%s",
            __entry->move_lacks_source ? "yes" : "no", __entry->bo, __entry->size,
            xe_mem_type_to_name[__entry->old_placement],
            xe_mem_type_to_name[__entry->new_placement], __get_str(device_id))

Where the "%s" references into xe_mem_type_to_name[]. This is an array of
pointers that should be safe for the event to access. Instead of flagging
this as a bad reference, if a reference points to an array, where the
record field is the index, consider it safe.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/3bcdc9039a6e9e6e47ed689a37b8d57894a3c571; https://git.kernel.org/stable/c/631b1e09e213c86d5a4ce23d45c81af473bb0ac7; https://git.kernel.org/stable/c/92bd18c74624e5eb9f96e70076aa46293f4b626f
CVE: CVE-2024-57931
Published: 2025-01-21
Description: In the Linux kernel, the following vulnerability has been resolved:

selinux: ignore unknown extended permissions

When evaluating extended permissions, ignore unknown permissions instead
of calling BUG(). This commit ensures that future permissions can be
added without interfering with older kernels.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/712137b177b45f255ce5687e679d950fcb218256; https://git.kernel.org/stable/c/900f83cf376bdaf798b6f5dcb2eae0c822e908b6; https://git.kernel.org/stable/c/c1dbd28a079553de0023e1c938c713efeeee400f