deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-34069
Published: 2025-07-02
Description: An authentication bypass vulnerability exists in GFI Kerio Control 9.4.5 due to insecure default proxy configuration and weak access control in the GFIAgent service. The non-transparent proxy on TCP port 3128 can be used to forward unauthenticated requests to internal services such as GFIAgent, bypassing firewall restrictions and exposing internal management endpoints. This enables unauthenticated attackers to access the GFIAgent service on ports 7995 and 7996, retrieve the appliance UUID, and issue administrative requests via the proxy. Exploitation results in full administrative access to the Kerio Control appliance.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://ssd-disclosure.com/ssd-advisory-kerio-control-authentication-bypass-and-rce/; https://vulncheck.com/advisories/gfi-kerio-control-auth-bypass-rce
CVE: CVE-2025-34070
Published: 2025-07-02
Description: A missing authentication vulnerability in the GFIAgent component of GFI Kerio Control 9.4.5 allows unauthenticated remote attackers to perform privileged operations. The GFIAgent service, responsible for integration with GFI AppManager, exposes HTTP services on ports 7995 and 7996 without proper authentication. The /proxy handler on port 7996 allows arbitrary forwarding to administrative endpoints when provided with an Appliance UUID, which itself can be retrieved from port 7995. This results in a complete authentication bypass, permitting access to sensitive administrative APIs.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://ssd-disclosure.com/ssd-advisory-kerio-control-authentication-bypass-and-rce/; https://vulncheck.com/advisories/gfi-kerio-control-auth-bypass-rce
CVE: CVE-2025-34071
Published: 2025-07-02
Description: A remote code execution vulnerability in GFI Kerio Control 9.4.5 allows attackers with administrative access to upload and execute arbitrary code through the firmware upgrade feature. The system upgrade mechanism accepts unsigned .img files, which can be modified to include malicious scripts within the upgrade.sh or disk image components. These modified upgrade images are not validated for authenticity or integrity, and are executed by the system post-upload, enabling root access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://ssd-disclosure.com/ssd-advisory-kerio-control-authentication-bypass-and-rce/; https://vulncheck.com/advisories/gfi-kerio-control-auth-bypass-rce
CVE: CVE-2025-34072
Published: 2025-07-02
Description: A data exfiltration vulnerability exists in Anthropic’s deprecated Slack Model Context Protocol (MCP) Server via automatic link unfurling. When an AI agent using the Slack MCP Server processes untrusted data, it can be manipulated to generate messages containing attacker-crafted hyperlinks embedding sensitive data. Slack’s link preview bots (e.g., Slack-LinkExpanding, Slackbot, Slack-ImgProxy) will then issue outbound requests to the attacker-controlled URL, resulting in zero-click exfiltration of private data.
CWE: CWE-20, CWE-200
References: https://embracethered.com/blog/posts/2025/security-advisory-anthropic-slack-mcp-server-data-leakage/; https://vulncheck.com/advisories/anthropic-slack-mcp-server-data-exfiltration
CVE: CVE-2025-34073
Published: 2025-07-02
Description: An unauthenticated command injection vulnerability exists in stamparm/maltrail (Maltrail) versions <=0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due to unsafe handling of user-supplied input passed to subprocess.check_output() in core/http.py, allowing injection of shell metacharacters. Exploitation does not require authentication and commands are executed with the privileges of the Maltrail process.
CWE: CWE-78, CWE-306
References: https://github.com/stamparm/maltrail; https://github.com/stamparm/maltrail/issues/19146; https://huntr.com/bounties/be3c5204-fbd9-448d-b97c-96a8d2941e87
CVE: CVE-2025-45029
Published: 2025-07-02
Description: WINSTAR WN572HP3 v230525 was discovered to contain a heap overflow via the CONTENT_LENGTH variable at /cgi-bin/upload.cgi.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-122
References: http://winstar.com; http://wn572hp3.com; https://yiweibu.github.io/2025/03/19/WINSTAR_WN572HP3/
CVE: CVE-2025-49588
Published: 2025-07-02
Description: Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. In version 2.10.2, the server accepts links of format file:///etc/passwd and doesn't do any validation before sending them to parsers and playwright, this can result in leak of other user's links (and in some cases it might be possible to leak environment secrets). This issue has been patched in version 2.10.3 which has not been made public at time of publication.
CWE: CWE-73
References: https://github.com/linkwarden/linkwarden/security/advisories/GHSA-rfc2-x8hr-536q; https://github.com/linkwarden/linkwarden/security/advisories/GHSA-rfc2-x8hr-536q
CVE: CVE-2025-53106
Published: 2025-07-02
Description: Graylog is a free and open log management platform. In versions 6.2.0 to before 6.2.4 and 6.3.0-alpha.1 to before 6.3.0-rc.2, Graylog users can gain elevated privileges by creating and using API tokens for the local Administrator or any other user for whom the malicious user knows the ID. For the attack to succeed, the attacker needs a user account in Graylog. They can then proceed to issue hand-crafted requests to the Graylog REST API and exploit a weak permission check for token creation. This issue has been patched in versions 6.2.4 and 6.3.0-rc.2. A workaround involves disabling the respective configuration found in System > Configuration > Users > "Allow users to create personal access tokens".
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://github.com/Graylog2/graylog2-server/commit/6936bd16a783c2944a3d2f1e[PII_REDACTED]0f90e3; https://github.com/Graylog2/graylog2-server/commit/9215b8f1fd32566c31e6f7447ed864df3590c157; https://github.com/Graylog2/graylog2-server/security/advisories/GHSA-3m86-c9x3-vwm9
CVE: CVE-2025-38092
Published: 2025-07-02
Description: In the Linux kernel, the following vulnerability has been resolved:

ksmbd: use list_first_entry_or_null for opinfo_get_list()

The list_first_entry() macro never returns NULL.  If the list is
empty then it returns an invalid pointer.  Use list_first_entry_or_null()
to check if the list is empty.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/10379171f346e6f61d30d9949500a8de4336444a; https://git.kernel.org/stable/c/334da674b25fdb7a1a4d4b89dcd7795144fc7e11; https://git.kernel.org/stable/c/c78abb646ff823e7d22faad4cc0703d4484da9e8
CVE: CVE-2025-38093
Published: 2025-07-02
Description: In the Linux kernel, the following vulnerability has been resolved:

arm64: dts: qcom: x1e80100: Add GPU cooling

Unlike the CPU, the GPU does not throttle its speed automatically when it
reaches high temperatures. With certain high GPU loads it is possible to
reach the critical hardware shutdown temperature of 120°C, endangering the
hardware and making it impossible to run certain applications.

Set up GPU cooling similar to the ACPI tables, by throttling the GPU speed
when reaching 95°C and polling every 200ms.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/5ba21fa11f473c9827f378ace8c9f983de9e0287; https://git.kernel.org/stable/c/ae664ca[PII_REDACTED]9857530dce12e09c048b12d; https://git.kernel.org/stable/c/cd9d354bdd28b20a8f3170dab3bc0f096e66d6b4
CVE: CVE-2025-52891
Published: 2025-07-02
Description: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empty XML tag can cause a segmentation fault. If SecParseXmlIntoArgs is set to On or OnlyArgs, and the request type is application/xml, and at least one XML tag is empty (eg <foo></foo>), then a segmentation fault occurs. This issue has been patched in version 2.9.11. A workaround involves setting SecParseXmlIntoArgs to Off.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/owasp-modsecurity/ModSecurity/commit/ecd7b9736836eee391d25f35d5bd06a3ce35a45d; https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-gw9c-4wfm-vj3x
CVE: CVE-2025-53006
Published: 2025-07-02
Description: DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, in both PostgreSQL and Redshift, apart from parameters like "socketfactory" and "socketfactoryarg", there are also "sslfactory" and "sslfactoryarg" with similar functionality. The difference lies in that "sslfactory" and related parameters need to be triggered after establishing the connection. Other similar parameters include "sslhostnameverifier", "sslpasswordcallback", and "authenticationPluginClassName". This issue has been patched in 2.10.11.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-153
References: https://github.com/dataease/dataease/security/advisories/GHSA-q726-5pr9-x7gm
CVE: CVE-2025-53108
Published: 2025-07-02
Description: HomeBox is a home inventory and organization system. Prior to 0.20.1, HomeBox contains a missing authorization check in the API endpoints responsible for updating and deleting inventory item attachments. This flaw allows authenticated users to perform unauthorized actions on inventory item attachments that they do not own. This issue could lead to unauthorized data manipulation or loss of critical inventory data. This issue has been patched in version 0.20.1. There are no workarounds, users must upgrade.
CWE: CWE-862
References: https://github.com/sysadminsmedia/homebox/commit/e159dd8a0b5d01d7225795bfba[PII_REDACTED]df20; https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-m6vx-pg9q-vq6m
CVE: CVE-2025-53109
Published: 2025-07-02
Description: Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 0.6.4 or 2025.7.01 resolve.
CWE: CWE-59
References: https://github.com/modelcontextprotocol/servers/commit/d00c60df9d74dba8a3bb13113f8904407cda594f; https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-q66q-fx2p-7w4m
CVE: CVE-2025-53110
Published: 2025-07-02
Description: Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files in cases where the prefix matches an allowed directory. Users are advised to upgrade to 0.6.4 or 2025.7.01 resolve.
CWE: CWE-22
References: https://github.com/modelcontextprotocol/servers/commit/cc99bdabdcad93a58877c5f3ab20e21d4394423d; https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-hc55-p739-j48w
CVE: CVE-2025-53492
Published: 2025-07-02
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - MintyDocs Extension allows Stored XSS.This issue affects Mediawiki - MintyDocs Extension: from 1.43.X before 1.43.2.
CVSS Score: 3.7 (LOW)
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MintyDocs/+/1152771; https://phabricator.wikimedia.org/T395737
CVE: CVE-2025-53493
Published: 2025-07-02
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - MintyDocs Extension allows Stored XSS.This issue affects Mediawiki - MintyDocs Extension: from 1.43.X before 1.43.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MintyDocs/+/1151800; https://phabricator.wikimedia.org/T395376
CVE: CVE-2025-53494
Published: 2025-07-02
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - TwoColConflict Extension allows Stored XSS.This issue affects Mediawiki - TwoColConflict Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/TwoColConflict/+/1150011; https://phabricator.wikimedia.org/T394938
CVE: CVE-2025-6725
Published: 2025-07-02
Description: In the PdfViewer component, a Cross-Site Scripting (XSS) vulnerability is possible if a specially-crafted document has already been loaded and the user engages with a tool that requires the DOM to be re-rendered.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.telerik.com/aspnet-core-ui/documentation/knowledge-base/kb-security-pdfviewer-xss-cve-2025-6725; https://www.telerik.com/aspnet-mvc/documentation/knowledge-base/kb-security-pdfviewer-xss-cve-2025-6725; https://www.telerik.com/blazor-ui/documentation/knowledge-base/pdfviewer-xss-vulnerability-cve-2025-6725
CVE: CVE-2025-20308
Published: 2025-07-02
Description: A vulnerability in Cisco Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root.

This vulnerability is due to insufficient restrictions during the execution of specific CLI commands. An attacker could exploit this vulnerability by logging in to the Cisco Spaces Connector CLI as the spacesadmin user and executing a specific command with crafted parameters. A successful exploit could allow the attacker to elevate privileges from the spacesadmin user and execute arbitrary commands on the underlying operating system as root.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-78
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spaces-conn-privesc-kgD2CcDU
CVE: CVE-2025-20310
Published: 2025-07-02
Description: A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.

This vulnerability exists because the web UI does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To successfully exploit this vulnerability, an attacker would need valid&nbsp;agent&nbsp;credentials.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ece-xss-CbtKtEYc
CVE: CVE-2025-52886
Published: 2025-07-02
Description: Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-416
References: https://gitlab.freedesktop.org/poppler/poppler/-/commit/04bd91684ed41d67ae0f10cde0660e4ed74ac203; https://gitlab.freedesktop.org/poppler/poppler/-/commit/ac36affcc8486de38e8905a8d6547a3464ff46e5; https://gitlab.freedesktop.org/poppler/poppler/-/issues/1581
CVE: CVE-2025-53358
Published: 2025-07-02
Description: kotaemon is an open-source RAG-based tool for document comprehension. From versions 0.10.6 and prior, in libs/ktem/ktem/index/file/ui.py, the index_fn method accepts both URLs and local file paths without validation. The pipeline streams these paths directly and stores them, enabling attackers to traverse directories (e.g. ../../../../../.env) and exfiltrate sensitive files. This issue has been patched via commit 37cdc28, in version 0.10.7 which has not been made public at time of publication.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/Cinnamon/kotaemon/commit/37cdc28ceb46e505d25221584daf1fe61e26b2cc; https://github.com/Cinnamon/kotaemon/pull/755; https://github.com/Cinnamon/kotaemon/security/advisories/GHSA-jw4w-xcvf-jq5x
CVE: CVE-2025-53359
Published: 2025-07-02
Description: ethereum is a common ethereum structs for Rust. Prior to ethereum crate v0.18.0, signature malleability (according to EIP-2) was only checked for "legacy" transactions, but not for EIP-2930, EIP-1559 and EIP-7702 transactions. This is a specification deviation. The signature malleability itself is not a security issue and not as high of a risk if the ethereum crate is used on a single-implementation blockchain. This issue has been patched in version v0.18.0. A workaround for this issue involves manually checking transaction malleability outside of the crate, however upgrading is recommended.
CWE: CWE-754
References: https://github.com/rust-ethereum/ethereum/commit/2dd9d1d5d0936ec7350093ff3a5a7169a349db77; https://github.com/rust-ethereum/ethereum/pull/67; https://github.com/rust-ethereum/ethereum/security/advisories/GHSA-3w94-vq2x-v5wr
CVE: CVE-2025-6942
Published: 2025-07-02
Description: The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate another distributed engine.
CVSS Score: 3.8 (LOW)
CWE: CWE-639
References: https://docs.delinea.com/online-help/secret-server-changelog/secret-server-change-log.htm?cshid=secret-server-changelog#Friday,_November_22,_2024; https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000060.htm; https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000061.htm
CVE: CVE-2025-6943
Published: 2025-07-02
Description: Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables.
CVSS Score: 3.8 (LOW)
CWE: CWE-269
References: https://docs.delinea.com/online-help/secret-server-changelog/secret-server-change-log.htm?cshid=secret-server-changelog#Friday,_November_22,_2024; https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000060.htm; https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000061.htm
CVE: CVE-2025-20307
Published: 2025-07-02
Description: A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface.

This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid administrative credentials.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-broadworks-xss-O696ymRA
CVE: CVE-2025-20309
Published: 2025-07-02
Description: A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that cannot be changed or deleted.

This vulnerability is due to the presence of static user credentials for the root account that are reserved for use during development. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and execute arbitrary commands as the root user.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-798
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssh-m4UBdpE7
CVE: CVE-2025-45424
Published: 2025-07-02
Description: Incorrect access control in Xinference before v1.4.0 allows attackers to access the Web GUI without authentication.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/honysyang/Xinference/blob/main/Xinference_Web/Xinference_Web_EN.docx; https://github.com/honysyang/Xinference/tree/main/Xinference_Web
CVE: CVE-2025-45814
Published: 2025-07-02
Description: Missing authentication checks in the query.fcgi endpoint of NS3000 v8.1.1.125110 , v7.2.8.124852 , and v7.x and NS2000 v7.02.08 allows attackers to execute a session hijacking attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-45814; https://novelsat.com/
CVE: CVE-2025-52841
Published: 2025-07-02
Description: Cross-Site Request Forgery (CSRF) vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This issue affects Laundry: 2.3.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://fluidattacks.com/advisories/tort; https://github.com/mohaiminur/laundry; https://fluidattacks.com/advisories/tort
CVE: CVE-2025-45813
Published: 2025-07-02
Description: ENENSYS IPGuard v2 2.10.0 was discovered to contain hardcoded credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-45813; https://www.enensys.com/
CVE: CVE-2025-49713
Published: 2025-07-02
Description: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49713
CVE: CVE-2025-34074
Published: 2025-07-02
Description: An authenticated remote code execution vulnerability exists in Lucee’s administrative interface due to insecure design in the scheduled task functionality. An administrator with access to /lucee/admin/web.cfm can configure a scheduled job to retrieve a remote .cfm file from an attacker-controlled server, which is written to the Lucee webroot and executed with the privileges of the Lucee service account. Because Lucee does not enforce integrity checks, path restrictions, or execution controls for scheduled task fetches, this feature can be abused to achieve arbitrary code execution. This issue is distinct from CVE-2024-55354.
CWE: CWE-94, CWE-829
References: https://github.com/lucee/Lucee; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/lucee_scheduled_job.rb; https://vulncheck.com/advisories/lucee-admin-interface-rce
CVE: CVE-2025-34075
Published: 2025-07-02
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Initially assigned to document an issues that allows guest VM to modify the host’s Vagrantfile via default synced folder, leading to host-side code execution. Rejected as CVE due to documented, intended behavior that does not violate a claimed security boundary.  https://developer.hashicorp.com/vagrant/docs/synced-folders