deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-59053
Published: 2025-09-11
Description: AIRI is a self-hosted, artificial intelligence based Grok Companion. In v0.7.2-beta.2 in the `packages/stage-ui/src/components/MarkdownRenderer.vue` path, the Markdown content is processed using the useMarkdown composable, and the processed HTML is rendered directly into the DOM using v-html. An attacker creates a card file containing malicious HTML/JavaScript, then simply processes it using the highlightTagToHtml function (which simply replaces template tags without HTML escaping), and then directly renders it using v-html, leading to cross-site scripting (XSS). The project also exposes the Tauri API, which can be called from the frontend. The MCP plugin exposes a command execution interface function in `crates/tauri-plugin-mcp/src/lib.rs`. This allows arbitrary command execution. `connect_server` directly passes the user-supplied `command` and `args` parameters to `Command::new(command).args(args)` without any input validation or whitelisting. Thus, the previous XSS exploit could achieve command execution through this interface. v0.7.2-beta.3 fixes the issue.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-94
References: https://github.com/moeru-ai/airi/commit/[PII_REDACTED]c9102a19e8f0476970df01801c8ca4; https://github.com/moeru-ai/airi/security/advisories/GHSA-9832-f8jx-hw6f; https://github.com/moeru-ai/airi/security/advisories/GHSA-9832-f8jx-hw6f
CVE: CVE-2025-59055
Published: 2025-09-11
Description: InstantCMS is a free and open source content management system. A blind Server-Side Request Forgery (SSRF) vulnerability in InstantCMS up to and including 2.17.3 allows authenticated remote attackers to make nay HTTP/HTTPS request via the package parameter. It is possible to make any HTTP/HTTPS request to any website in installer functionality. Due to such vulnerability it is possible to for example scan local network, call local services and its functions, conduct a DoS attack, and/or disclose a server's real IP if it's behind a reverse proxy. It is also possible to exhaust server resources by sending plethora of such requests. As of time of publication, no patched releases are available.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-918
References: https://github.com/instantsoft/icms2/commit/fa997bdab3429fad0c850966bfacbcb96d5ab041; https://github.com/instantsoft/icms2/security/advisories/GHSA-79hh-mhvg-whrw
CVE: CVE-2025-8061
Published: 2025-09-11
Description: A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow an authenticated local user to execute code with elevated privileges. The Lenovo Dispatcher 3.2 driver is not affected. This vulnerability does not affect systems when the Windows feature Core Isolation Memory Integrity is enabled. Lenovo systems preloaded with Windows 11 have this feature enabled by default.
CVSS Score: 7.0 (HIGH)
CWE: CWE-782
References: https://support.lenovo.com/us/en/product_security/LEN-200860
CVE: CVE-2025-8557
Published: 2025-09-11
Description: An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability:

An attacker with access to a device on the local Lenovo XClarity Orchestrator (LXCO) network segment may be able to manipulate the local device to create an alternate communication channel which could allow the attacker, under certain conditions, to directly interact with backend LXCO API services typically inaccessible to users. While access controls may limit the scope of interaction, this could result in unauthorized access to internal functionality or data. This issue is not exploitable from remote networks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-420
References: https://support.lenovo.com/us/en/product_security/LEN-201014
CVE: CVE-2025-9201
Published: 2025-09-11
Description: A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://iknow.lenovo.com.cn/detail/431735
CVE: CVE-2025-9214
Published: 2025-09-11
Description: A missing authentication vulnerability was reported in some Lenovo printers that could allow a user to view limited device information or modify network settings via the CUPS service.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-306
References: https://iknow.lenovo.com.cn/detail/431734
CVE: CVE-2025-9319
Published: 2025-09-11
Description: A potential vulnerability was reported in the Lenovo Wallpaper Client that could allow arbitrary code execution under certain conditions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-494
References: https://iknow.lenovo.com.cn/detail/431733
CVE: CVE-2025-10127
Published: 2025-09-11
Description: Daikin Europe N.V

Security Gateway is vulnerable to an authorization bypass through
 a user-controlled key vulnerability that could allow an attacker to 
bypass authentication. An unauthorized attacker could access the system 
without prior credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-254-10; https://www.daikin.eu/en_us/customers/support.html
CVE: CVE-2025-10298
Published: 2025-09-11
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-36222
Published: 2025-09-11
Description: IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQStreams without client authentication that could allow an attacker to perform unauthorized actions.
CVSS Score: 8.7 (HIGH)
CWE: CWE-1188
References: https://www.ibm.com/support/pages/node/7244646
CVE: CVE-2025-10271
Published: 2025-09-11
Description: A vulnerability was found in erjinzhi 10OA 1.0. This impacts an unknown function of the file /trial/mvc/finder. The manipulation of the argument Name results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/1276486/CVE/issues/5; https://vuldb.com/?ctiid.323641; https://vuldb.com/?id.323641
CVE: CVE-2025-10272
Published: 2025-09-11
Description: A vulnerability was determined in erjinzhi 10OA 1.0. Affected is an unknown function of the file /trial/mvc/catalogue. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/1276486/CVE/issues/6; https://vuldb.com/?ctiid.323642; https://vuldb.com/?id.323642
CVE: CVE-2025-4974
Published: 2025-09-11
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-10273
Published: 2025-09-12
Description: A vulnerability was identified in erjinzhi 10OA 1.0. Affected by this vulnerability is an unknown functionality of the file /view/file.aspx. Such manipulation of the argument File leads to path traversal. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-22
References: https://github.com/1276486/CVE/issues/8; https://vuldb.com/?ctiid.323643; https://vuldb.com/?id.323643
CVE: CVE-2025-10274
Published: 2025-09-12
Description: A security flaw has been discovered in erjinzhi 10OA 1.0. Affected by this issue is some unknown functionality of the file /trial/mvc/item. Performing manipulation of the argument Name results in cross site scripting. The attack may be initiated remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/1276486/CVE/issues/9; https://vuldb.com/?ctiid.323644; https://vuldb.com/?id.323644
CVE: CVE-2025-10275
Published: 2025-09-12
Description: A weakness has been identified in YunaiV yudao-cloud up to 2025.09. This affects an unknown part of the file /crm/business/transfer. Executing manipulation of the argument ids/newOwnerUserId can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.323645; https://vuldb.com/?id.323645; https://vuldb.com/?submit.643384
CVE: CVE-2025-55319
Published: 2025-09-12
Description: Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55319
CVE: CVE-2025-58754
Published: 2025-09-12
Description: Axios is a promise based HTTP client for the browser and Node.js. When Axios starting in version 0.28.0 and prior to versions 0.30.2 and 1.12.0 runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response. This path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested `responseType: 'stream'`. Versions 0.30.2 and 1.12.0 contain a patch for the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/axios/axios/commit/945435fc[PII_REDACTED]8202250debb8d4ae892593; https://github.com/axios/axios/commit/a1b1d3f073a988601583a604f5f9f5d05a3d0b67; https://github.com/axios/axios/commit/c30252f685e8f4326722de84923fcbc8cf557f06
CVE: CVE-2025-9807
Published: 2025-09-12
Description: The The Events Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the ‘s’ parameter in all versions up to, and including, 6.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/the-events-calendar/tags/6.15.0.1/src/Events/Custom_Tables/V1/WP_Query/Custom_Tables_Query.php#L682; https://www.wordfence.com/threat-intel/vulnerabilities/id/8ea2ce90-6c8c-4a31-8faa-4ab99879d8b8?source=cve
CVE: CVE-2025-10269
Published: 2025-09-12
Description: The Spirit Framework plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.2.13. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.
CVSS Score: 7.5 (HIGH)
CWE: CWE-98
References: https://patchstack.com/database/wordpress/plugin/spirit-framework/vulnerability/wordpress-spirit-framework-plugin-1-2-13-local-file-inclusion-vulnerability; https://www.wordfence.com/threat-intel/vulnerabilities/id/38391221-c435-4672-809a-ebabf639c9bb?source=cve
CVE: CVE-2025-10276
Published: 2025-09-12
Description: A security vulnerability has been detected in YunaiV ruoyi-vue-pro up to 2025.09. This vulnerability affects unknown code of the file /crm/contract/transfer. The manipulation of the argument id/newOwnerUserId leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.323646; https://vuldb.com/?id.323646; https://vuldb.com/?submit.643386
CVE: CVE-2025-10277
Published: 2025-09-12
Description: A vulnerability was detected in YunaiV yudao-cloud up to 2025.09. This issue affects some unknown processing of the file /crm/receivable/submit. The manipulation of the argument ID results in improper authorization. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.323647; https://vuldb.com/?id.323647; https://vuldb.com/?submit.643808
CVE: CVE-2025-43788
Published: 2025-09-12
Description: The organization selector in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q1.1 through 2024.Q1.12 and 7.4 update 81 through update 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43788
CVE: CVE-2025-43789
Published: 2025-09-12
Description: JSON Web Services in Liferay Portal 7.4.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.9, 7.4 GA through update 92 published to OSGi are registered and invoked directly as classes which allows Service Access Policies get executed.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43789
CVE: CVE-2025-10278
Published: 2025-09-12
Description: A flaw has been found in YunaiV ruoyi-vue-pro up to 2025.09. Impacted is an unknown function of the file /crm/contact/transfer. This manipulation of the argument ids/newOwnerUserId causes improper authorization. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.323648; https://vuldb.com/?id.323648; https://vuldb.com/?submit.643809
CVE: CVE-2025-9877
Published: 2025-09-12
Description: The Embed Google Datastudio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'egds' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/embed-google-data-studio/trunk/core-init.php#L144; https://www.wordfence.com/threat-intel/vulnerabilities/id/90e24dba-e251-476e-87b8-c8df1e4317d4?source=cve
CVE: CVE-2025-9879
Published: 2025-09-12
Description: The Spotify Embed Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spotify' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/spotify-embed-creator/tags/1.0.5/Spotify-Embed-Creator.php#L72; https://www.wordfence.com/threat-intel/vulnerabilities/id/4a0c744a-d4b0-45f4-9434-06ce3dec4d75?source=cve
CVE: CVE-2025-9880
Published: 2025-09-12
Description: The Side Slide Responsive Menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/side-slide-responsive-menu/tags/1.0/SideSlideMenu.class.php; https://plugins.trac.wordpress.org/browser/side-slide-responsive-menu/tags/1.0/sideslide_admin.php; https://wordpress.org/plugins/side-slide-responsive-menu/
CVE: CVE-2025-9881
Published: 2025-09-12
Description: The Ultimate Blogroll plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/ultimate-blogroll/tags/2.5.2/gui/Linkpartner.php#L34; https://wordpress.org/plugins/ultimate-blogroll/; https://www.wordfence.com/threat-intel/vulnerabilities/id/e5d82cd5-42cc-412b-8[PII_REDACTED]0407d?source=cve
CVE: CVE-2025-10094
Published: 2025-09-12
Description: An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to disrupt access to token listings and related administrative operations by creating tokens with excessively large names.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1284
References: https://about.gitlab.com/releases/2025/09/10/patch-release-gitlab-18-3-2-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/528469; https://hackerone.com/reports/3049089
CVE: CVE-2025-10287
Published: 2025-09-12
Description: A vulnerability has been found in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40. The affected element is an unknown function of the file /auth/orderQuery. Such manipulation of the argument orderNo leads to direct request. The attack may be performed from remote. A high complexity level is associated with this attack. The exploitability is described as difficult. The exploit has been disclosed to the public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.1 (LOW)
CWE: CWE-425
References: https://vuldb.com/?ctiid.323649; https://vuldb.com/?id.323649; https://vuldb.com/?submit.643387
CVE: CVE-2025-10288
Published: 2025-09-12
Description: A vulnerability was found in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40. The impacted element is an unknown function of the file /user/info/list. Performing manipulation results in improper authentication. It is possible to initiate the attack remotely. The exploit has been made public and could be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://vuldb.com/?ctiid.323650; https://vuldb.com/?id.323650; https://vuldb.com/?submit.643837
CVE: CVE-2025-10148
Published: 2025-09-12
Description: curl's websocket code did not update the 32 bit mask pattern for each new
 outgoing frame as the specification says. Instead it used a fixed mask that
persisted and was used throughout the entire connection.

A predictable mask pattern allows for a malicious server to induce traffic
between the two communicating parties that could be interpreted by an involved
proxy (configured or transparent) as genuine, real, HTTP traffic with content
and thereby poison its cache. That cached poisoned content could then be
served to all users of that proxy.
CVSS Score: 5.3 (MEDIUM)
References: https://curl.se/docs/CVE-2025-10148.html; https://curl.se/docs/CVE-2025-10148.json; https://hackerone.com/reports/3330839
CVE: CVE-2025-10291
Published: 2025-09-12
Description: A weakness has been identified in linlinjava litemall up to 1.8.0. This affects the function WxAftersaleController of the file /wx/aftersale/cancel. Executing manipulation of the argument ID can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://vuldb.com/?ctiid.323717; https://vuldb.com/?id.323717; https://vuldb.com/?submit.643390
CVE: CVE-2025-1250
Published: 2025-09-12
Description: An issue has been discovered in GitLab CE/EE affecting all versions from 15.0 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed an authenticated user to stall background job processing by sending specially crafted commit messages, merge request descriptions, or notes.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://about.gitlab.com/releases/2025/09/10/patch-release-gitlab-18-3-2-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/519335; https://hackerone.com/reports/2903896
CVE: CVE-2025-2256
Published: 2025-09-12
Description: An issue has been discovered in GitLab CE/EE affecting all versions from 7.12 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed unauthorized users to render the GitLab instance unresponsive to legitimate users by sending multiple concurrent large SAML responses.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1284
References: https://about.gitlab.com/releases/2025/09/10/patch-release-gitlab-18-3-2-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/524633; https://hackerone.com/reports/3019485
CVE: CVE-2025-3650
Published: 2025-09-12
Description: The jQuery Colorbox WordPress plugin through 4.6.3 uses the colorbox library, which does not sanitize title attributes on links before using them, allowing users with at least the contributor role to conduct XSS attacks against administrators.
CVSS Score: 3.5 (LOW)
References: https://wpscan.com/vulnerability/5afdd448-0f7e-409e-a47b-8e5c5b707639/
CVE: CVE-2025-58781
Published: 2025-09-12
Description: WTW-EAGLE App does not properly validate server certificates, which may allow a man-in-the-middle attacker to monitor encrypted traffic.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-295
References: https://apps.apple.com/jp/app/wtw-eagle/id[PII_REDACTED]?uo=4; https://jvn.jp/en/jp/JVN89109713/; https://play.google.com/store/apps/details?id=com.generalcomp.wtw
CVE: CVE-2025-6454
Published: 2025-09-12
Description: An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to make unintended internal requests through proxy environments by injecting crafted sequences.
CVSS Score: 8.5 (HIGH)
CWE: CWE-918
References: https://about.gitlab.com/releases/2025/09/10/patch-release-gitlab-18-3-2-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/550766; https://hackerone.com/reports/3162711