deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-34317
Published: 2025-10-28
Description: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the TLS_HOSTNAME parameter when adding a new DNS entry. When a user adds a DNS entry, the application issues an HTTP POST request to /cgi-bin/dns.cgi and the TLS hostname is provided in the TLS_HOSTNAME parameter. The value of this parameter is stored and later rendered in the web interface without proper sanitation or encoding, allowing injected scripts to execute in the context of other users who view the affected DNS configuration.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.ipfire.org/show_bug.cgi?id=13892; https://www.ipfire.org/blog/ipfire-2-29-core-update-198-released; https://www.vulncheck.com/advisories/ipfire-stored-xss-via-dns-settings-dns-cgi
CVE: CVE-2025-34318
Published: 2025-10-28
Description: IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the TLS_HOSTNAME, UPSTREAM_USER, UPSTREAM_PASSWORD, ADMIN_MAIL_ADDRESS, and ADMIN_PASSWORD parameters when adding a new DNS entry. When a user adds a DNS entry, the application issues an HTTP POST request to /cgi-bin/dns.cgi and these values are provided in the corresponding parameters. The values are stored and later rendered in the web interface without proper sanitation or encoding, allowing injected scripts to execute in the context of other users who view the affected DNS configuration.
CWE: CWE-79
References: https://bugzilla.ipfire.org/show_bug.cgi?id=13893; https://www.ipfire.org/blog/ipfire-2-29-core-update-198-released; https://www.vulncheck.com/advisories/ipfire-stored-xss-via-dns-creation-proxy-cgi
CVE: CVE-2025-36081
Published: 2025-10-28
Description: IBM Concert Software

1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-117
References: https://www.ibm.com/support/pages/node/7249356
CVE: CVE-2025-36083
Published: 2025-10-28
Description: IBM Concert Software 

1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to improper clearing of heap memory before release.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-244
References: https://www.ibm.com/support/pages/node/7249356
CVE: CVE-2025-36085
Published: 2025-10-28
Description: IBM Concert 1.0.0 through 2.0.0 Software is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://www.ibm.com/support/pages/node/7249356
CVE: CVE-2025-61043
Published: 2025-10-28
Description: An out-of-bounds read vulnerability has been discovered in Monkey's Audio 11.31, specifically in the CAPECharacterHelper::GetUTF16FromUTF8 function. The issue arises from improper handling of the length of the input UTF-8 string, causing the function to read past the memory boundary. This vulnerability may result in a crash or expose sensitive data.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://tzh00203.notion.site/Monkey-s-Audio-Out-of-Bounds-Read-Vulnerability-Report-version-11-31-249b5c52018a80739852d0d9660994c9?source=copy_link
CVE: CVE-2025-61103
Published: 2025-10-28
Description: FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_lan_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/FRRouting/frr/issues/19471; https://github.com/FRRouting/frr/pull/19480; https://github.com/FRRouting/frr/pull/19480/commits/fdd957408605d4a[PII_REDACTED]aafc7e6b7c3daf3
CVE: CVE-2025-61104
Published: 2025-10-28
Description: FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_tlv function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/FRRouting/frr/issues/19471; https://github.com/FRRouting/frr/pull/19480; https://github.com/FRRouting/frr/pull/19480/commits/fdd957408605d4a[PII_REDACTED]aafc7e6b7c3daf3
CVE: CVE-2025-61106
Published: 2025-10-28
Description: FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/FRRouting/frr/issues/19471; https://github.com/FRRouting/frr/pull/19480; https://github.com/FRRouting/frr/pull/19480/commits/fdd957408605d4a[PII_REDACTED]aafc7e6b7c3daf3
CVE: CVE-2025-61107
Published: 2025-10-28
Description: FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LSA Update packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/FRRouting/frr/issues/19471; https://github.com/FRRouting/frr/pull/19480; https://github.com/FRRouting/frr/pull/19480/commits/fdd957408605d4a[PII_REDACTED]aafc7e6b7c3daf3
CVE: CVE-2025-61128
Published: 2025-10-28
Description: Stack-based buffer overflow vulnerability in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware M30HG3_V240730, and possibly other wavlink models allows attackers to execute arbitrary code via crafted referrer value POST to login.cgi.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-121
References: https://gist.github.com/shinobu-alpha/6dd5ad7f83c16360f6564db0bc121e99
CVE: CVE-2025-34294
Published: 2025-10-28
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as the behavior originates from a documentation-published Active Response example script. Please refer to this advisory ( https://github.com/wazuh/wazuh-documentation/security/advisories/GHSA-46r5-xp98-fpgg ) for further information.
CVE: CVE-2025-36386
Published: 2025-10-28
Description: IBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-305
References: https://www.ibm.com/support/pages/node/7249416
CVE: CVE-2025-56399
Published: 2025-10-28
Description: alexusmai laravel-file-manager 3.3.1 and before allows an authenticated attacker to achieve Remote Code Execution (RCE) through a crafted file upload. A file with a '.png` extension containing PHP code can be uploaded via the file manager interface. Although the upload appears to fail client-side validation, the file is still saved on the server. The attacker can then use the rename API to change the file extension to `.php`, and upon accessing it via a public URL, the server executes the embedded code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://laravel-file-manager.com; https://github.com/Theethat-Thamwasin/CVE-2025-56399
CVE: CVE-2025-60349
Published: 2025-10-28
Description: An issue was discovered in Prevx v3.0.5.220 allowing attackers to cause a denial of service via sending IOCTL code 0x22E044 to the pxscan.sys driver. Any processes listed under registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pxscan\Files will be terminated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://prevx.com; https://github.com/djackreuter/CVE-2025-60349
CVE: CVE-2025-60858
Published: 2025-10-28
Description: Reolink Video Doorbell Wi-Fi DB_566128M5MP_W stores and transmits DDNS credentials in plaintext within its configuration and update scripts, allowing attackers to intercept or extract sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://cybermaya.in/posts/Post-47/; https://reolink.com/download-center/
CVE: CVE-2025-61155
Published: 2025-10-28
Description: The GameDriverX64.sys kernel-mode anti-cheat driver (v7.23.4.7 and earlier) contains an access control vulnerability in one of its IOCTL handlers. A user-mode process can open a handle to the driver device and send specially crafted IOCTL requests. These requests are executed in kernel-mode context without proper authentication or access validation, allowing the attacker to terminate arbitrary processes, including critical system and security services, without requiring administrative privileges.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/pollotherunner/CVE-2025-61155/blob/main/advisory.md; https://www.hotta.com.tw
CVE: CVE-2025-54604
Published: 2025-10-28
Description: Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 1 of 2).
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://bitcoincore.org/en/2025/10/24/disclose-cve-2025-54604/; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures; https://github.com/bitcoin/bitcoin/releases
CVE: CVE-2025-54605
Published: 2025-10-28
Description: Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 2 of 2).
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://bitcoincore.org/en/2025/10/24/disclose-cve-2025-54605/; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures; https://github.com/bitcoin/bitcoin/releases
CVE: CVE-2025-12422
Published: 2025-10-28
Description: Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://azure-access.com/security-advisories
CVE: CVE-2025-60354
Published: 2025-10-28
Description: Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://github.com/line2222/vuln/issues/3
CVE: CVE-2025-60355
Published: 2025-10-28
Description: zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1336
References: https://github.com/line2222/vuln/issues/4
CVE: CVE-2025-60800
Published: 2025-10-28
Description: Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://github.com/jishenghua/jshERP/issues/130
CVE: CVE-2025-60805
Published: 2025-10-28
Description: An issue was discovered in BESSystem BES Application Server thru 9.5.x allowing unauthorized attackers to gain sensitive information via the "pre-resource" option in bes-web.xml.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://bes.com; http://www.bessystem.com/appserver/dtds/bes-web-app_2_5-0.dtd; https://gist.github.com/Liu2000622/7a6294f7421ef50c378a456ca9494714
CVE: CVE-2025-61080
Published: 2025-10-28
Description: A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/willyc0de/f05b44696d66b4bc[PII_REDACTED]952bf2; https://gist.github.com/willyc0de/f05b44696d66b4bc[PII_REDACTED]952bf2
CVE: CVE-2025-12423
Published: 2025-10-28
Description: Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://azure-access.com/security-advisories
CVE: CVE-2025-12424
Published: 2025-10-28
Description: Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://azure-access.com/security-advisories
CVE: CVE-2025-12425
Published: 2025-10-28
Description: Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://azure-access.com/security-advisories
CVE: CVE-2025-40843
Published: 2025-10-28
Description: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. 




CodeChecker versions up to 6.26.1 contain a buffer overflow vulnerability in the internal ldlogger library, which is executed by the CodeChecker log command.





This issue affects CodeChecker: through 6.26.1.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-121
References: https://github.com/Ericsson/codechecker/security/advisories/GHSA-5xf2-f6ch-6p8r
CVE: CVE-2025-27093
Published: 2025-10-28
Description: Sliver is a command and control framework that uses a custom Wireguard netstack. In versions 1.5.43 and earlier, and in development version 1.6.0-dev, the netstack does not limit traffic between Wireguard clients. This allows clients to communicate with each other unrestrictedly, potentially enabling leaked or recovered keypairs to be used to attack operators or allowing port forwardings to be accessible from other implants.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/BishopFox/sliver/commit/8e5c5f14506d6d60ebb3362e6b9857ab1e0d76ff; https://github.com/BishopFox/sliver/commit/9122878cbbcae543eb8210f616550382af2065fd; https://github.com/BishopFox/sliver/security/advisories/GHSA-q8j9-34qf-7vq7
CVE: CVE-2025-59837
Published: 2025-10-28
Description: Astro is a web framework that includes an image proxy. In versions 5.13.4 and later before 5.13.10, the image proxy domain validation can be bypassed by using backslashes in the href parameter, allowing server-side requests to arbitrary URLs. This can lead to server-side request forgery (SSRF) and potentially cross-site scripting (XSS). This vulnerability exists due to an incomplete fix for CVE-2025-58179. Fixed in 5.13.10.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-918
References: https://github.com/withastro/astro/commit/1e2499e8ea83ebfa233a18a7499e1ccf169e56f4; https://github.com/withastro/astro/commit/9ecf3598e2b29dd74614328fde3047ea90e67252; https://github.com/withastro/astro/security/advisories/GHSA-qcpr-679q-rhm2
CVE: CVE-2025-61235
Published: 2025-10-28
Description: An issue was discovered in Dataphone A920 v2025.07.161103. A custom packet based on public documentation can be crafted, where some fields can contain arbitrary or trivial data. Normally, such data should cause the device to reject the packet. However, due to a lack of validation, the device accepts it with no authetication and triggers the functionality instead.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://github.com/stuxve/poc-dataphone-crafted-packet
CVE: CVE-2025-62367
Published: 2025-10-28
Description: Taiga is an open source project management platform. In versions 6.8.3 and earlier, Taiga API is vulnerable to time-based blind SQL injection allowing sensitive data disclosure via response timing. This issue is fixed in version 6.9.0.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-89
References: https://github.com/taigaio/taiga-back/security/advisories/GHSA-chm9-9wwq-xffj
CVE: CVE-2025-11374
Published: 2025-10-28
Description: Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://discuss.hashicorp.com/t/hcsec-2025-29-consuls-kv-endpoint-is-vulnerable-to-denial-of-service/76724
CVE: CVE-2025-11375
Published: 2025-10-28
Description: Consul and Consul Enterprise’s (“Consul”) event endpoint is vulnerable to denial of service (DoS) due to lack of maximum value on the Content Length header. This vulnerability, CVE-2025-11375, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://discuss.hashicorp.com/t/hcsec-2025-28-consuls-event-endpoint-is-vulnerable-to-denial-of-service/76723
CVE: CVE-2025-43017
Published: 2025-10-28
Description: HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-250
References: https://support.hp.com/us-en/document/ish_13[PII_REDACTED]4617-16/hpsbhf04066
CVE: CVE-2025-61598
Published: 2025-10-28
Description: Discourse is an open source discussion platform. Version before 3.6.2 and 3.6.0.beta2, default Cache-Control response header with value no-store, no-cache was missing from error responses. This may caused unintended caching of those responses by proxies potentially leading to cache poisoning attacks. This vulnerability is fixed in 3.6.2 and 3.6.0.beta2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-524
References: https://github.com/discourse/discourse/commit/3ea1b663c82c067e5ca778db846bad1e082ba6cd; https://github.com/discourse/discourse/commit/fd567af7bf5a15c70772021acbdf5d38487a31bc; https://github.com/discourse/discourse/security/advisories/GHSA-jp9x-wwv6-cv3j
CVE: CVE-2025-62368
Published: 2025-10-28
Description: Taiga is an open source project management platform. In versions 6.8.3 and earlier, a remote code execution vulnerability exists in the Taiga API due to unsafe deserialization of untrusted data. This issue is fixed in version 6.9.0.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-502
References: https://github.com/taigaio/taiga-back/security/advisories/GHSA-cpcf-9276-fwc5
CVE: CVE-2025-62727
Published: 2025-10-28
Description: Starlette is a lightweight ASGI framework/toolkit. Starting in version 0.39.0 and prior to version 0.49.1 , an unauthenticated attacker can send a crafted HTTP Range header that triggers quadratic-time processing in Starlette's FileResponse Range parsing/merging logic. This enables CPU exhaustion per request, causing denial‑of‑service for endpoints serving files (e.g., StaticFiles or any use of FileResponse). This vulnerability is fixed in 0.49.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-407
References: https://github.com/Kludex/starlette/commit/4ea6e22b489ec388d6004cfbca52dd5b147127c5; https://github.com/Kludex/starlette/commit/69ed26a85956ef4bd0161807eb27abf49be7cd3c; https://github.com/Kludex/starlette/releases/tag/0.49.1
CVE: CVE-2025-62794
Published: 2025-10-28
Description: GitHub Workflow Updater is a VS Code extension that automatically pins GitHub Actions to specific commits for enhanced security. Before 0.0.7, any provided Github token would be stored in plaintext in the editor configuration as json on disk, rather than through the more secure "securestorage" api. An attacker with read only access to your home directory could have read this token and used it to perform actions with that token. Update to 0.0.7.
CVSS Score: 3.8 (LOW)
CWE: CWE-522
References: https://github.com/RichardoC/github-workflow-updater-extension/commit/b9518c38ac6bc2a9fda2242e6daef17f7184ad1f; https://github.com/RichardoC/github-workflow-updater-extension/security/advisories/GHSA-679x-97jw-8vjp; https://github.com/microsoft/vscode-discussions/discussions/748
CVE: CVE-2025-62796
Published: 2025-10-28
Description: PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Versions 1.7.7 through 2.0.1 allow persistent HTML injection via the unsanitized attachment filename (attachment_name) when attachments are enabled. An attacker can modify attachment_name before encryption so that, after decryption, arbitrary HTML is inserted unescaped into the page near the file size hint, enabling redirect (e.g., meta refresh) and site defacement and related phishing attacks. Script execution is normally blocked by the recommended Content Security Policy, limiting confidentiality impact. The issue was introduced in 1.7.7 and fixed in 2.0.2. Update to 2.0.2 or later. Workarounds include enforcing the recommended CSP, deploying PrivateBin on a separate domain, or disabling attachments.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-79, CWE-80
References: https://github.com/PrivateBin/PrivateBin/commit/c4f8482b3072be7ae012cace1b3f5658dcc3b42e; https://github.com/PrivateBin/PrivateBin/pull/1550; https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-867c-p784-5q6g
CVE: CVE-2025-62798
Published: 2025-10-28
Description: Sharp is a content management framework built for Laravel as a package. Prior to 9.11.1, a Cross-Site Scripting (XSS) vulnerability was discovered in code16/sharp when rendering content using the SharpShowTextField component. In affected versions, expressions wrapped in {{ & }} were evaluated by Vue. This allowed attackers to inject arbitrary JavaScript or HTML that executes in the browser when the field is displayed. The issue has been fixed in v9.11.1 .
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/code16/sharp/pull/654; https://github.com/code16/sharp/releases/tag/v9.11.1; https://github.com/code16/sharp/security/advisories/GHSA-9f58-4465-23c7
CVE: CVE-2025-62800
Published: 2025-10-28
Description: FastMCP is the standard framework for building MCP applications. Versions prior to 2.13.0 have a reflected cross-site scripting vulnerability in the OAuth client callback page (oauth_callback.py) where unescaped user-controlled values are inserted into the generated HTML, allowing arbitrary JavaScript execution in the callback server origin. The issue is fixed in version 2.13.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jlowin/fastmcp/security/advisories/GHSA-mxxr-jv3v-6pgc; https://github.com/jlowin/fastmcp/security/advisories/GHSA-mxxr-jv3v-6pgc
CVE: CVE-2025-62801
Published: 2025-10-28
Description: FastMCP is the standard framework for building MCP applications. Versions prior to 2.13.0, a command-injection vulnerability lets any attacker who can influence the server_name field of an MCP execute arbitrary OS commands on Windows hosts that run fastmcp install cursor. This vulnerability is fixed in 2.13.0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/jlowin/fastmcp/security/advisories/GHSA-rj5c-58rq-j5g5; https://github.com/jlowin/fastmcp/security/advisories/GHSA-rj5c-58rq-j5g5
CVE: CVE-2025-62802
Published: 2025-10-28
Description: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the out-of-box experience for HTML editing allows unauthenticated users to upload files. This opens a potential vector to other security issues and is not needed on most implementations. This vulnerability is fixed in 10.1.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-434, CWE-1188
References: https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-2374-6cvw-qmx6
CVE: CVE-2025-64094
Published: 2025-10-28
Description: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1,  sanitization of the content of uploaded SVG files was not covering all possible XSS scenarios. This vulnerability exists because of an incomplete fix for CVE-2025-48378. This vulnerability is fixed in 10.1.1.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-hmvq-8p83-cq52
CVE: CVE-2025-64095
Published: 2025-10-28
Description: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files. An unauthenticated user can upload and replace existing files allowing defacing a website and combined with other issue, injection XSS payloads. This vulnerability is fixed in 10.1.1.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434
References: https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-3m8r-w7xg-jqvw