deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-11853
Published: 2025-10-16
Description: A vulnerability was determined in Sismics Teedy up to 1.11. This affects an unknown function of the file /api/file of the component API Endpoint. Executing a manipulation can lead to improper access controls. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://docs.google.com/document/d/1PzTPCtavuLx_GwREvshGMQ8N5zFDmpe-OAR5kZwOZfE/edit?usp=sharing; https://vuldb.com/?ctiid.328799; https://vuldb.com/?id.328799
CVE: CVE-2025-34253
Published: 2025-10-16
Description: D-Link Nuclias Connect firmware versions <= 1.3.1.4 contain a stored cross-site scripting (XSS) vulnerability due to improper sanitization of the 'Network' field when editing the configuration, creating a profile, and adding a network. An authenticated attacker can inject arbitrary JavaScript to be executed in the context of other users viewing the profile entry. NOTE: D-Link states that a fix is under development.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10472; https://www.dlink.com/en/for-business/nuclias/nuclias-connect; https://www.vulncheck.com/advisories/dlink-nuclias-connect-stored-xss
CVE: CVE-2025-34254
Published: 2025-10-16
Description: D-Link Nuclias Connect firmware versions <= 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Login' endpoint returns distinct JSON responses depending on whether the supplied username is associated with an existing account. Because the responses differ in the `error.message`string value, an unauthenticated remote attacker can enumerate valid usernames/accounts on the server. NOTE: D-Link states that a fix is under development.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204
References: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10472; https://www.dlink.com/en/for-business/nuclias/nuclias-connect; https://www.vulncheck.com/advisories/dlink-nuclias-connect-login-account-enumeration
CVE: CVE-2025-34255
Published: 2025-10-16
Description: D-Link Nuclias Connect firmware versions <= 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Forgot Password' endpoint returns distinct JSON responses depending on whether the supplied email address is associated with an existing account. Because the responses differ in the `data.exist` boolean value, an unauthenticated remote attacker can enumerate valid email addresses/accounts on the server. NOTE: D-Link states that a fix is under development.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204
References: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10472; https://www.dlink.com/en/for-business/nuclias/nuclias-connect; https://www.vulncheck.com/advisories/dlink-nuclias-connect-forgot-password-account-enumeration
CVE: CVE-2025-60855
Published: 2025-10-16
Description: Reolink Video Doorbell WiFi DB_566128M5MP_W performs insufficient validation of firmware update signatures. This allows attackers to load malicious firmware images, resulting in arbitrary code execution with root privileges. NOTE: this is disputed by the Supplier because the integrity of updates is instead assured via a "private encryption algorithm" and other "tamper-proof verification."
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-77
References: https://cybermaya.in/posts/Post-45/; https://reolink.com/download-center/
CVE: CVE-2025-61514
Published: 2025-10-16
Description: An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-61514; https://github.com/sagemathinc/cocalc; https://github.com/sagemathinc/cocalc/commit/0d2ff5890a3ae62e941aad8a5884dd765b7e98fc
CVE: CVE-2025-61553
Published: 2025-10-16
Description: An out-of-bounds write in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-07-06) allows local attackers to cause a denial of service (host hypervisor crash) via a crafted PCI configuration space access. Given it's a heap overflow in a privileged hypervisor context, exploitation may enable arbitrary code execution or guest-to-host privilege escalation.
CVSS Score: 8.2 (HIGH)
CWE: CWE-122, CWE-787
References: https://github.com/retrage/advisories/blob/main/CVE-2025-61553/README.md; https://sourceforge.net/p/bitvisor/code/ci/48090711ade5910b601d2b0034859a6a890cc82d/
CVE: CVE-2025-62414
Published: 2025-10-16
Description: Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the “Create New Customer” feature (in the admin panel) is vulnerable to Cross-Site Scripting (XSS). An attacker with access to the admin create-customer form can inject malicious JavaScript payloads into certain input fields. These payloads may later execute in the context of an admin’s browser or another user viewing the customer data, enabling session theft or admin-level actions. This vulnerability is fixed in 2.3.8.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-80, CWE-87, CWE-79
References: https://github.com/bagisto/bagisto/security/advisories/GHSA-r9xj-mvqf-jm7w; https://github.com/bagisto/bagisto/security/advisories/GHSA-r9xj-mvqf-jm7w
CVE: CVE-2025-62415
Published: 2025-10-16
Description: Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges (e.g. admin) to upload a crafted HTML file containing embedded JavaScript. When viewed, the malicious code executes in the context of the admin/user’s browser. This vulnerability is fixed in 2.3.8.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-80, CWE-87
References: https://github.com/bagisto/bagisto/security/advisories/GHSA-67px-r26w-598x; https://github.com/bagisto/bagisto/security/advisories/GHSA-67px-r26w-598x
CVE: CVE-2025-62416
Published: 2025-10-16
Description: Bagisto is an open source laravel eCommerce platform. Bagisto v2.3.7 is vulnerable to Server-Side Template Injection (SSTI) due to unsanitized user input being processed by the server-side templating engine when rendering product descriptions. This allows an attacker with product creation privileges to inject arbitrary template expressions that are evaluated by the backend — potentially leading to Remote Code Execution (RCE) on the server. This vulnerability is fixed in 2.3.8.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-94, CWE-1336
References: https://github.com/bagisto/bagisto/security/advisories/GHSA-527q-4wqv-g9wj; https://github.com/bagisto/bagisto/security/advisories/GHSA-527q-4wqv-g9wj
CVE: CVE-2025-62417
Published: 2025-10-16
Description: Bagisto is an open source laravel eCommerce platform. When product data that begins with a spreadsheet formula character (for example =, +, -, or @) is accepted and later exported or saved into a CSV and opened in spreadsheet software, the spreadsheet will interpret that cell as a formula. This allows an attacker to supply a CSV field (e.g., product name) that contains a formula which may be evaluated by a victim’s spreadsheet application — potentially leading to data exfiltration and remote command execution (via older Excel exploits / OLE/cmd constructs or Excel macros). This vulnerability is fixed in 2.3.8.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1236
References: https://github.com/bagisto/bagisto/security/advisories/GHSA-jqrp-58fv-w8cq; https://github.com/bagisto/bagisto/security/advisories/GHSA-jqrp-58fv-w8cq
CVE: CVE-2025-62418
Published: 2025-10-16
Description: Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges (e.g. admin) to upload a crafted SVG file containing embedded JavaScript. When viewed, the malicious code executes in the context of the admin/user’s browser. This vulnerability is fixed in 2.3.8.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-80, CWE-87, CWE-79
References: https://github.com/bagisto/bagisto/security/advisories/GHSA-fg89-g389-p346; https://github.com/bagisto/bagisto/security/advisories/GHSA-fg89-g389-p346
CVE: CVE-2025-62423
Published: 2025-10-16
Description: ClipBucket V5 provides open source video hosting with PHP. In version5.5.2 - #140 and earlier, a Blind SQL injection vulnerability exists in the Admin Area’s “/admin_area/login_as_user.php” file. Exploiting this vulnerability requires access privileges to the Admin Area.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-89
References: https://github.com/MacWarrior/clipbucket-v5/commit/b3bf27e367f318c2afe9bd11368be9d00e272148; https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-3wpr-jprj-52fc; https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-3wpr-jprj-52fc
CVE: CVE-2025-62425
Published: 2025-10-16
Description: MAS (Matrix Authentication Service) is a user management and authentication service for Matrix homeservers, written and maintained by Element. A logic flaw in matrix-authentication-service 0.20.0 through 1.4.0 allows an attacker with access to an authenticated MAS session to perform sensitive operations without entering the current password. These include changing the current password, adding or removing an e-mail address and deactivating the account. The vulnerability only affects instances which have the local password database feature enabled (passwords section in the config). Patched in matrix-authentication-service 1.4.1.
CVSS Score: 8.3 (HIGH)
CWE: CWE-620
References: https://github.com/element-hq/matrix-authentication-service/commit/bce99edb6177be11f8f38c1d01f5606ce7b4b2e5; https://github.com/element-hq/matrix-authentication-service/security/advisories/GHSA-6wfp-jq3r-j9xh
CVE: CVE-2025-62427
Published: 2025-10-16
Description: The Angular SSR is a server-rise rendering tool for Angular applications. The vulnerability is a Server-Side Request Forgery (SSRF) flaw within the URL resolution mechanism of Angular's Server-Side Rendering package (@angular/ssr) before 19.2.18, 20.3.6, and 21.0.0-next.8. The function createRequestUrl uses the native URL constructor. When an incoming request path (e.g., originalUrl or url) begins with a double forward slash (//) or backslash (\\), the URL constructor treats it as a schema-relative URL. This behavior overrides the security-intended base URL (protocol, host, and port) supplied as the second argument, instead resolving the URL against the scheme of the base URL but adopting the attacker-controlled hostname. This allows an attacker to specify an external domain in the URL path, tricking the Angular SSR environment into setting the page's virtual location (accessible via DOCUMENT or PlatformLocation tokens) to this attacker-controlled domain. Any subsequent relative HTTP requests made during the SSR process (e.g., using HttpClient.get('assets/data.json')) will be incorrectly resolved against the attacker's domain, forcing the server to communicate with an arbitrary external endpoint. This vulnerability is fixed in 19.2.18, 20.3.6, and 21.0.0-next.8.
CWE: CWE-918
References: https://github.com/angular/angular-cli/commit/5271547c80662de10cb3bcb648779a83f6efedfb; https://github.com/angular/angular-cli/security/advisories/GHSA-q63q-pgmf-mxhr
CVE: CVE-2025-62428
Published: 2025-10-16
Description: Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation links. These links can redirect users to attacker-controlled domains. This vulnerability affects all users relying on email confirmation for account registration or verification. This vulnerability is fixed in 1.2.5-alpha-patch.
CWE: CWE-601
References: https://github.com/Drawing-Captcha/Drawing-Captcha-APP/issues/30; https://github.com/Drawing-Captcha/Drawing-Captcha-APP/security/advisories/GHSA-5pj8-fc6g-vv7m; https://github.com/Drawing-Captcha/Drawing-Captcha-APP/issues/30
CVE: CVE-2025-60358
Published: 2025-10-16
Description: radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/radareorg/radare2/pull/24224
CVE: CVE-2025-61554
Published: 2025-10-16
Description: A divide-by-zero in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-07-06) allows local attackers to cause a denial of service (host hypervisor crash) via a crafted PCI configuration space access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://github.com/retrage/advisories/blob/c20246f93edac1b8ad3c8c5e3e768d02405850c7/CVE-2025-61554/README.md; https://sourceforge.net/p/bitvisor/code/ci/de84887f4418fcd67945b4aa4842e035bce0dfa9
CVE: CVE-2024-42192
Published: 2025-10-16
Description: HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakage which could allow an attacker to access other computers or applications.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124066
CVE: CVE-2025-11864
Published: 2025-10-16
Description: A vulnerability was identified in NucleoidAI Nucleoid up to 0.7.10. The impacted element is the function extension.apply of the file /src/cluster.ts of the component Outbound Request Handler. Such manipulation of the argument https/ip/port/path/headers leads to server-side request forgery. The attack may be performed from remote.
CVSS Score: 7.3 (HIGH)
CWE: CWE-918
References: https://github.com/lakshayyverma/CVE-Discovery/blob/main/Nucleoid.md; https://vuldb.com/?ctiid.328809; https://vuldb.com/?id.328809
CVE: CVE-2025-11896
Published: 2025-10-16
Description: In Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stack overflow.
CWE: CWE-674
References: https://www.xpdfreader.com/security-bug/object-loops.html
CVE: CVE-2025-62504
Published: 2025-10-16
Description: Envoy is an open source edge and service proxy. Envoy versions earlier than 1.36.2, 1.35.6, 1.34.10, and 1.33.12 contain a use-after-free vulnerability in the Lua filter. When a Lua script executing in the response phase rewrites a response body so that its size exceeds the configured per_connection_buffer_limit_bytes (default 1MB), Envoy generates a local reply whose headers override the original response headers, leaving dangling references and causing a crash. This results in denial of service. Updating to versions 1.36.2, 1.35.6, 1.34.10, or 1.33.12 fixes the issue. Increasing per_connection_buffer_limit_bytes (and for HTTP/2 the initial_stream_window_size) or increasing per_request_buffer_limit_bytes / request_body_buffer_limit can reduce the likelihood of triggering the condition but does not correct the underlying memory safety flaw.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-gcxr-6vrp-wff3
CVE: CVE-2025-62506
Published: 2025-10-16
Description: MinIO is a high-performance object storage system. In all versions prior to RELEASE.2025-10-15T17-29-55Z, a privilege escalation vulnerability allows service accounts and STS (Security Token Service) accounts with restricted session policies to bypass their inline policy restrictions when performing operations on their own account, specifically when creating new service accounts for the same user. The vulnerability exists in the IAM policy validation logic where the code incorrectly relied on the DenyOnly argument when validating session policies for restricted accounts. When a session policy is present, the system should validate that the action is allowed by the session policy, not just that it is not denied. An attacker with valid credentials for a restricted service or STS account can create a new service account for itself without policy restrictions, resulting in a new service account with full parent privileges instead of being restricted by the inline policy. This allows the attacker to access buckets and objects beyond their intended restrictions and modify, delete, or create objects outside their authorized scope. The vulnerability is fixed in version RELEASE.2025-10-15T17-29-55Z.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: https://github.com/minio/minio/commit/c1a49490c78e9c3ebcad86ba[PII_REDACTED]ace190; https://github.com/minio/minio/pull/21642; https://github.com/minio/minio/security/advisories/GHSA-jjjj-jwhf-8rgr
CVE: CVE-2025-6892
Published: 2025-10-17
Description: An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authentication mechanism allows unauthorized access to protected API endpoints, including those intended for administrative functions. This vulnerability can be exploited after a legitimate user has logged in, as the system fails to properly validate session context or privilege boundaries. An attacker may leverage this flaw to perform unauthorized privileged operations. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.
CWE: CWE-863
References: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-258121-cve-2025-6892,-cve-2025-6893,-cve-2025-6894,-cve-2025-6949,-cve-2025-6950-multiple-vulnerabilities-in-netwo
CVE: CVE-2025-6893
Published: 2025-10-17
Description: An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in broken access control has been identified in the /api/v1/setting/data endpoint of the affected device. This flaw allows a low-privileged authenticated user to call the API without the required permissions, thereby gaining the ability to access or modify system configuration data. Successful exploitation may lead to privilege escalation, allowing the attacker to access or modify sensitive system settings. While the overall impact is high, there is no loss of confidentiality or integrity within any subsequent systems.
CWE: CWE-250
References: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-258121-cve-2025-6892,-cve-2025-6893,-cve-2025-6894,-cve-2025-6949,-cve-2025-6950-multiple-vulnerabilities-in-netwo
CVE: CVE-2025-6894
Published: 2025-10-17
Description: An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative `ping` function, which is restricted to higher-privileged roles. This vulnerability enables the user to perform internal network reconnaissance, potentially discovering internal hosts or services that would otherwise be inaccessible. Repeated exploitation could lead to minor resource consumption. While the overall impact is limited, it may result in some loss of confidentiality and availability on the affected device. There is no impact on the integrity of the device, and the vulnerability does not affect any subsequent systems.
CWE: CWE-250
References: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-258121-cve-2025-6892,-cve-2025-6893,-cve-2025-6894,-cve-2025-6949,-cve-2025-6950-multiple-vulnerabilities-in-netwo
CVE: CVE-2025-11898
Published: 2025-10-17
Description: Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23
References: https://www.twcert.org.tw/en/cp-139-10439-0bd15-2.html; https://www.twcert.org.tw/tw/cp-132-10438-1173e-1.html
CVE: CVE-2025-11899
Published: 2025-10-17
Description: Agentflow developed by Flowring has an Use of Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verification information, thereby logging into the system as any user. Attacker must first obtain an user ID in order to exploit this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-321
References: https://www.twcert.org.tw/en/cp-139-10439-0bd15-2.html; https://www.twcert.org.tw/tw/cp-132-10438-1173e-1.html
CVE: CVE-2025-11900
Published: 2025-10-17
Description: The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.twcert.org.tw/en/cp-139-10441-00aaf-2.html; https://www.twcert.org.tw/tw/cp-132-10440-dd55d-1.html
CVE: CVE-2025-6949
Published: 2025-10-17
Description: An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A critical authorization flaw in the API allows an authenticated, low-privileged user to create a new administrator account, including accounts with usernames identical to existing users. In certain scenarios, this vulnerability could allow an attacker to gain full administrative control over the affected device, leading to potential account impersonation. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.
CWE: CWE-250
References: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-258121-cve-2025-6892,-cve-2025-6893,-cve-2025-6894,-cve-2025-6949,-cve-2025-6950-multiple-vulnerabilities-in-netwo
CVE: CVE-2025-6950
Published: 2025-10-17
Description: An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. The system employs a hard-coded secret key to sign JSON Web Tokens (JWT) used for authentication. This insecure implementation allows an unauthenticated attacker to forge valid tokens, thereby bypassing authentication controls and impersonating any user. Exploitation of this vulnerability can result in complete system compromise, enabling unauthorized access, data theft, and full administrative control over the affected device. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems.
CWE: CWE-798
References: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-258121-cve-2025-6892,-cve-2025-6893,-cve-2025-6894,-cve-2025-6949,-cve-2025-6950-multiple-vulnerabilities-in-netwo
CVE: CVE-2025-11849
Published: 2025-10-17
Description: Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth before 1.11.0; versions of the package org.zwobble.mammoth:mammoth before 1.11.0 are vulnerable to Directory Traversal due to the lack of path or file type validation when processing a docx file containing an image with an external link (r:link attribute instead of embedded r:embed). The library resolves the URI to a file path and after reading, the content is encoded as base64 and included in the HTML output as a data URI. An attacker can read arbitrary files on the system where the conversion is performed or cause an excessive resources consumption by crafting a docx file that links to special device files such as /dev/random or /dev/zero.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://gist.github.com/AudunWA/4d690d9ae5efdafe7cf71d9c2ee90a10; https://github.com/mwilliamson/mammoth.js/commit/c54aaeb43a7941317c1f3c119ffa92090f988820; https://security.snyk.io/vuln/SNYK-DOTNET-MAMMOTH-13561968