deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-30011
Published: 2025-05-13
Description: The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to send an malicious request to the application, which could disclose the internal version details of the affected system. This vulnerability has low impact on confidentiality, with no effect on integrity and availability of the application.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-497
References: https://me.sap.com/notes/3578900; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-30012
Published: 2025-05-13
Description: The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component, which allows an unauthenticated attacker to send malicious payload request in a specific encoding format. The servlet will then decode this malicious request which will result in deserialization of data in the application leading to execution of arbitrary OS command on target as SAP Administrator. This vulnerability has High impact on confidentiality, integrity, and availability of the application.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-502
References: https://me.sap.com/notes/3578900; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-30018
Published: 2025-05-13
Description: The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) allows an unauthenticated attacker to submit an application servlet request with a crafted XML file which when parsed, enables the attacker to access sensitive files and data. This vulnerability has a high impact on the application's confidentiality, with no effect on integrity and availability of the application.
CVSS Score: 8.6 (HIGH)
CWE: CWE-611
References: https://me.sap.com/notes/3578900; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-31329
Published: 2025-05-13
Description: SAP NetWeaver is vulnerable to an Information Disclosure vulnerability caused by the injection of malicious instructions into user configuration settings. An attacker with administrative privileges can craft these instructions so that when accessed by the victim, sensitive information such as user credentials is exposed. These credentials may then be used to gain unauthorized access to local or adjacent systems. This results in high impact to Confidentiality, with no significant effect on Integrity or Availability.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-141
References: https://me.sap.com/notes/3577287; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42997
Published: 2025-05-13
Description: Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on confidentiality, integrity, and availability.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-732
References: https://me.sap.com/notes/3577300; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42999
Published: 2025-05-13
Description: SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-502
References: https://me.sap.com/notes/3604119; https://url.sap/sapsecuritypatchday; https://onapsis.com/blog/active-exploitation-of-sap-vulnerability-cve-2025-31324/
CVE: CVE-2025-43000
Published: 2025-05-13
Description: Under certain conditions Promotion Management Wizard (PMW) allows an attacker to access information which would otherwise be restricted.This has High impact on Confidentiality with Low impact on Integrity and Availability of the application.
CVSS Score: 7.9 (HIGH)
CWE: CWE-862
References: https://me.sap.com/notes/3586013; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-43002
Published: 2025-05-13
Description: SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check. This could cause a low impact on confidentiality but integrity and availability of the application are not impacted.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-472
References: https://me.sap.com/notes/3227940; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-43003
Published: 2025-05-13
Description: SAP S/4 HANA allows an authenticated attacker with user privileges to configure a field not intended for their access and create a custom UI layout displaying this field. On performing this step the attacker could gain access to highly sensitive information. This could cause a high impact on confidentiality and minimal impact on integrity and availability of the application.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-749
References: https://me.sap.com/notes/3596033; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-43004
Published: 2025-05-13
Description: Due to a security misconfiguration vulnerability, customers can develop Production Operator Dashboards (PODs) that enable outside users to access customer data when they access these dashboards. Since no mechanisms exist to enforce authentication, malicious unauthenticated users can view non-sensitive customer information. However, this does not affect data integrity or availability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3571096; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-43005
Published: 2025-05-13
Description: SAP GUI for Windows allows an unauthenticated attacker to exploit insecure obfuscation algorithms used by the GuiXT application to store user credentials. While this issue does not impact the Integrity or Availability of the application, it may have a Low impact on the Confidentiality of data.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-256
References: https://me.sap.com/notes/3574520; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-43006
Published: 2025-05-13
Description: SAP Supplier Relationship Management (Master Data Management Catalogue) allows an unauthenticated attacker to execute malicious scripts in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3588455; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-43007
Published: 2025-05-13
Description: SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on confidentiality, integrity and availability of the application.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/2719724; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-43008
Published: 2025-05-13
Description: Due to missing authorization check, an unauthorized user can view the files of other company. This might lead to disclosure of personal data of employees. There is no impact on integrity and availability.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3585992; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-43009
Published: 2025-05-13
Description: SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on Confidentiality, integrity and availability of the application.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/2491817; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-43010
Published: 2025-05-13
Description: SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer (MDL)) allows an authenticated attacker with SAP standard authorization to execute a certain function module remotely and replace arbitrary ABAP programs, including SAP standard programs. This is due to lack of input validation and no authorization checks. This has low Confidentiality impact but high impact on integrity and availability to the application.
CVSS Score: 8.3 (HIGH)
CWE: CWE-94
References: https://me.sap.com/notes/3600859; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-43011
Published: 2025-05-13
Description: Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted functionalities or data. This can lead to a high impact on confidentiality with no impact on the integrity or availability of the application.
CVSS Score: 7.7 (HIGH)
CWE: CWE-862
References: https://me.sap.com/notes/3591978; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-35471
Published: 2025-05-13
Description: conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users. By writing a specially crafted openssl.cnf file in OPENSSLDIR, a non-privileged local user can execute arbitrary code with the privileges of the user or process loading openssl-feedstock DLLs. Miniforge before 24.5.0 is also affected.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: https://github.com/conda-forge/openssl-feedstock/commit/066e83c5226bafe90a9c0575b077ce30cd5f5921; https://github.com/conda-forge/openssl-feedstock/issues/201
CVE: CVE-2025-4396
Published: 2025-05-13
Description: The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 (Free) and <= 2.27.5 (Premium) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries to already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/relevanssi/tags/4.24.4/lib/search-tax-query.php#L371; https://plugins.trac.wordpress.org/browser/relevanssi/tags/4.24.4/lib/search-tax-query.php#L409; https://plugins.trac.wordpress.org/browser/relevanssi/tags/4.24.4/lib/search.php#L1016
CVE: CVE-2025-22246
Published: 2025-05-13
Description: Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.
CVSS Score: 3.0 (LOW)
CWE: CWE-532
References: https://www.cloudfoundry.org/blog/cve-2025-22246-uaa-private-key-exposure/
CVE: CVE-2025-22249
Published: 2025-05-13
Description: VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious crafted payload URL.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25711
CVE: CVE-2025-4632
Published: 2025-05-13
Description: Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://security.samsungtv.com/securityUpdates#SVP-MAY-2025; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-4632
CVE: CVE-2025-3107
Published: 2025-05-13
Description: The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby' parameter in all versions up to, and including, 4.9.9.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/newsletters-lite/tags/4.9.9.8/helpers/shortcode.php#L1094; https://plugins.trac.wordpress.org/changeset/3290691/; https://plugins.trac.wordpress.org/changeset/3290691/newsletters-lite/trunk/helpers/shortcode.php
CVE: CVE-2025-4317
Published: 2025-05-13
Description: The TheGem theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the thegem_get_logo_url() function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://codex-themes.com/thegem/changelog.html; https://themeforest.net/item/thegem-creative-multipurpose-highperformance-wordpress-theme/16061685; https://www.wordfence.com/threat-intel/vulnerabilities/id/d379bc09-7788-4a29-b23f-7f42afe04fd4?source=cve
CVE: CVE-2025-4339
Published: 2025-05-13
Description: The TheGem theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxApi() function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary theme options.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://codex-themes.com/thegem/changelog.html; https://themeforest.net/item/thegem-creative-multipurpose-highperformance-wordpress-theme/16061685; https://www.wordfence.com/threat-intel/vulnerabilities/id/f2358979-25b9-4c52-88dc-25390be6bd22?source=cve
CVE: CVE-2025-4473
Published: 2025-05-13
Description: The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_request() function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to control where the plugin sends outgoing emails. By pointing SMTP to their own server, attackers could capture password reset emails intended for administrators, and elevate their privileges for full site takeover.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/includes/admin/function-admin.php#L3055; https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/includes/admin/layout/settings_tab/email/class-fed-email.php#L122; https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/route/class-fed-request.php#L35
CVE: CVE-2025-4474
Published: 2025-05-13
Description: The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the fed_admin_setting_form_function() function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to overwrite the plugin’s 'register' role setting to make new user registrations default to the administrator role, leading to an elevation of privileges to that of an administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/includes/admin/request/admin.php#L26; https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/includes/admin/request/tabs/login.php#L14; https://plugins.trac.wordpress.org/changeset/3290623/
CVE: CVE-2025-27696
Published: 2025-05-13
Description: Incorrect Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions.

This issue affects Apache Superset: through 4.1.1.

Users are recommended to upgrade to version 4.1.2 or above, which fixes the issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863, CWE-863
References: https://lists.apache.org/thread/k2od03bxnxs6vcp80sr03ywcxl194413; http://www.openwall.com/lists/oss-security/2025/05/12/3
CVE: CVE-2025-3916
Published: 2025-05-13
Description: CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to
exploit these issues to potentially execute arbitrary code while the end user opens a malicious project file (SSD
file) provided by the attacker.
CWE: CWE-121
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-133-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-133-03.pdf
CVE: CVE-2025-41645
Published: 2025-05-13
Description: An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake.
CVSS Score: 8.6 (HIGH)
CWE: CWE-669
References: https://cert.vde.com/en/advisories/VDE-2025-010
CVE: CVE-2024-23815
Published: 2025-05-13
Description: A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is allowed from networks outside of a highly protected zone), Desigo CC (All versions if access from Installed Clients to Desigo CC server is only allowed within highly protected zones). The affected server application fails to authenticate specific client requests. Modification of the client binary could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database via the event port (default: 4998/tcp)
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://cert-portal.siemens.com/productcert/html/ssa-523418.html
CVE: CVE-2024-51444
Published: 2025-05-13
Description: A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The application insufficiently validates user input for database read queries. This could allow an authenticated remote attacker to conduct an SQL injection attack that bypasses authorization controls and allows to download any data from the application's database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://cert-portal.siemens.com/productcert/html/ssa-162255.html
CVE: CVE-2024-51445
Published: 2025-05-13
Description: A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The affected application contains a XML External Entity Injection (XXE) vulnerability in the docx import feature. This could allow an authenticated remote attacker to read arbitrary data from the application server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://cert-portal.siemens.com/productcert/html/ssa-162255.html
CVE: CVE-2024-51446
Published: 2025-05-13
Description: A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The file upload feature of the affected application improperly sanitizes xml files. This could allow an authenticated remote attacker to conduct a stored cross-site scripting attack by uploading specially crafted xml files that are later downloaded and viewed by other users of the application.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://cert-portal.siemens.com/productcert/html/ssa-162255.html
CVE: CVE-2024-51447
Published: 2025-05-13
Description: A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2). The login implementation of the affected application contains an observable response discrepancy vulnerability when validating usernames. This could allow an unauthenticated remote attacker to distinguish between valid and invalid usernames.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204
References: https://cert-portal.siemens.com/productcert/html/ssa-162255.html
CVE: CVE-2025-22248
Published: 2025-05-13
Description: The bitnami/pgpool Docker image, and the bitnami/postgres-ha k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the database inside the cluster. The PGPOOL_SR_CHECK_USER is the user that Pgpool itself uses to perform streaming replication checks against nodes, and should not be at trust level. This allows to log into a PostgreSQL database using the repgmr user without authentication. If Pgpool is exposed externally, a potential attacker could use this user to get access to the service. This is also present within the bitnami/postgres-ha Kubernetes Helm chart.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1188
References: https://github.com/bitnami/charts/security/advisories/GHSA-mx38-x658-5fwj
CVE: CVE-2025-24007
Published: 2025-05-13
Description: A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions). Affected devices only provide weak password obfuscation. An attacker with network access could retrieve and de-obfuscate the safety password used for protection against inadvertent operating errors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://cert-portal.siemens.com/productcert/html/ssa-222768.html
CVE: CVE-2025-24008
Published: 2025-05-13
Description: A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions). The affected devices do not encrypt data in transit. An attacker with network access could eavesdrop the connection and retrieve sensitive information, including obfuscated safety passwords.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-311
References: https://cert-portal.siemens.com/productcert/html/ssa-222768.html
CVE: CVE-2025-24009
Published: 2025-05-13
Description: A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions). The affected devices do not require authentication to access critical resources. An attacker with network access could retrieve sensitive information from certain data records, including obfuscated safety passwords.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-732
References: https://cert-portal.siemens.com/productcert/html/ssa-222768.html
CVE: CVE-2025-24510
Published: 2025-05-13
Description: A vulnerability has been identified in MS/TP Point Pickup Module (All versions). Affected devices improperly handle specific incoming BACnet MSTP messages. This could allow an attacker residing in the same BACnet network to send a specially crafted MSTP message that results in a denial of service condition of the targeted device. A power cycle is required to restore the device's normal operation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://cert-portal.siemens.com/productcert/html/ssa-668154.html
CVE: CVE-2025-26389
Published: 2025-05-13
Description: A vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0). The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with root privileges.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78
References: https://cert-portal.siemens.com/productcert/html/ssa-047424.html
CVE: CVE-2025-26390
Published: 2025-05-13
Description: A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as
Administrator user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://cert-portal.siemens.com/productcert/html/ssa-047424.html