deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-10209
Published: 2025-09-10
Description: A security flaw has been discovered in Papermerge DMS up to 3.5.3. This issue affects some unknown processing of the component Authorization Token Handler. Performing manipulation results in improper authorization. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://docs.google.com/document/d/19j0mCR-QOuhlxAJMir00Z8_MZdydVdmE_Ak09ra2NHw/edit?usp=sharing; https://vuldb.com/?ctiid.323482; https://vuldb.com/?id.323482
CVE: CVE-2025-10210
Published: 2025-09-10
Description: A weakness has been identified in yanyutao0402 ChanCMS up to 3.3.0. Impacted is the function Search of the file app/modules/api/service/Api.js. Executing manipulation of the argument key can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e5.md; https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e5.md#poc; https://vuldb.com/?ctiid.323483
CVE: CVE-2025-43784
Published: 2025-09-10
Description: Improper Access Control vulnerability in Liferay Portal  7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.8, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows guest users to obtain object entries information via the API Builder.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43784
CVE: CVE-2025-54123
Published: 2025-09-10
Description: Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middleware functionality in Hoverfly is vulnerable to command injection vulnerability at `/api/v2/hoverfly/middleware` endpoint due to insufficient validation and sanitization in user input. The vulnerability exists in the middleware management API endpoint `/api/v2/hoverfly/middleware`. This issue is born due to combination of three code level flaws: Insufficient Input Validation in middleware.go line 94-96; Unsafe Command Execution in local_middleware.go line 14-19; and Immediate Execution During Testing in hoverfly_service.go line 173. This allows an attacker to gain remote code execution (RCE) on any system running the vulnerable Hoverfly service. Since the input is directly passed to system commands without proper checks, an attacker can upload a malicious payload or directly execute arbitrary commands (including reverse shells) on the host server with the privileges of the Hoverfly process. Commit 17e60a9bc78826deb4b782dca1c1abd3dbe60d40 in version 1.12.0 disables the set middleware API by default, and subsequent changes to documentation make users aware of the security changes of exposing the set middleware API.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-78, CWE-78
References: https://github.com/SpectoLabs/hoverfly/blob/master/core/hoverfly_service.go#L173; https://github.com/SpectoLabs/hoverfly/blob/master/core/middleware/local_middleware.go#L13; https://github.com/SpectoLabs/hoverfly/blob/master/core/middleware/middleware.go#L93
CVE: CVE-2025-59049
Published: 2025-09-10
Description: Mockoon provides way to design and run mock APIs. Prior to version 9.2.0, a mock API configuration for static file serving follows the same approach presented in the documentation page, where the server filename is generated via templating features from user input is vulnerable to Path Traversal and LFI, allowing an attacker to get any file in the mock server filesystem.
The issue may be particularly relevant in cloud hosted server instances. Version 9.2.0 fixes the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-24, CWE-73
References: https://github.com/mockoon/mockoon/blob/1ed31c4059d7f757f6cb2a43e10dc81b0d9c55a9/packages/commons-server/src/libs/server/server.ts#L1400; https://github.com/mockoon/mockoon/blob/1ed31c4059d7f757f6cb2a43e10dc81b0d9c55a9/packages/commons-server/src/libs/server/server.ts#L1551; https://github.com/mockoon/mockoon/commit/c7f6e23e87dc3b8cc44e5802af046200a797bd2e
CVE: CVE-2025-9714
Published: 2025-09-10
Description: Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-674
References: https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21; https://lists.debian.org/debian-lts-announce/2025/09/msg00035.html
CVE: CVE-2024-45669
Published: 2025-09-10
Description: IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a remote user to cause a denial of service due to improper handling of special characters that could lead to uncontrolled resource consumption.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://www.ibm.com/support/pages/node/7244514
CVE: CVE-2024-45671
Published: 2025-09-10
Description: IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 

uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: https://www.ibm.com/support/pages/node/7244514
CVE: CVE-2024-47120
Published: 2025-09-10
Description: IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a privileged user to escalate their privileges and attack surface on the host due to the containers running with unnecessary privileges.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-250
References: https://www.ibm.com/support/pages/node/7244514
CVE: CVE-2025-10211
Published: 2025-09-10
Description: A security vulnerability has been detected in yanyutao0402 ChanCMS 3.3.0. The affected element is the function CollectController of the file /cms/collect/getArticle. The manipulation of the argument taskUrl leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e7.md; https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e7.md#poc; https://vuldb.com/?ctiid.323484
CVE: CVE-2025-43783
Published: 2025-09-10
Description: Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.73 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 update 73 through update 92 allows remote attackers to inject arbitrary web script or HTML via the /c/portal/comment/discussion/get_editor path.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43783
CVE: CVE-2025-54376
Published: 2025-09-10
Description: Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, Hoverfly’s admin WebSocket endpoint /api/v2/ws/logs is not protected by the same authentication middleware that guards the REST admin API. Consequently, an unauthenticated remote attacker can stream real-time application logs (information disclosure) and/or gain insight into internal file paths, request/response bodies, and other potentially sensitive data emitted in logs. Version 1.12.0 contains a fix for the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-287, CWE-532
References: https://github.com/SpectoLabs/hoverfly/commit/ffc2cc34563de67fe1a04f7ba5d78fa2d4564424; https://github.com/SpectoLabs/hoverfly/security/advisories/GHSA-jxmr-2h4q-rhxp
CVE: CVE-2025-10216
Published: 2025-09-10
Description: A vulnerability was detected in GrandNode up to 2.3.0. The impacted element is an unknown function of the file /checkout/ConfirmOrder/ of the component Voucher Handler. The manipulation of the argument giftvouchercouponcode results in race condition. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is regarded as difficult. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.6 (LOW)
CWE: CWE-362
References: https://vuldb.com/?ctiid.323485; https://vuldb.com/?id.323485; https://vuldb.com/?submit.640784
CVE: CVE-2025-59052
Published: 2025-09-10
Description: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Angular uses a DI container (the "platform injector") to hold request-specific state during server-side rendering. For historical reasons, the container was stored as a JavaScript module-scoped global variable. When multiple requests are processed concurrently, they could inadvertently share or overwrite the global injector state. In practical terms, this can lead to one request responding with data meant for a completely different request, leaking data or tokens included on the rendered page or in response headers. As long as an attacker had network access to send any traffic that received a rendered response, they may have been able to send a large number of requests and then inspect the responses for information leaks. The APIs `bootstrapApplication`, `getPlatform`, and `destroyPlatform` were vulnerable and required SSR-only breaking changes.
The issue has been patched in all active release lines as well as in the v21 prerelease. Patched packages include `@angular/platform-server` 21.0.0-next.3, 20.3.0, 19.2.15, and 18.2.14 and `@angular/ssr` 21.0.0-next.3, 20.3.0, 19.2.16, and 18.2.21. Several workarounds are available. Disable SSR via Server Routes or builder options, remove any asynchronous behavior from custom `bootstrap` functions, remove uses of `getPlatform()` in application code, and/or ensure that the server build defines `ngJitMode` as false.
CWE: CWE-362
References: https://github.com/angular/angular-cli/pull/31108; https://github.com/angular/angular/pull/63562; https://github.com/angular/angular/security/advisories/GHSA-68x2-mx4q-78m7
CVE: CVE-2025-10218
Published: 2025-09-10
Description: A flaw has been found in lostvip-com ruoyi-go 2.1. This affects the function SelectListPage of the file modules/system/dao/SysRoleDao.go of the component Background Management Page. This manipulation of the argument sortName causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/on-theway/cve/issues/10; https://vuldb.com/?ctiid.323486; https://vuldb.com/?id.323486
CVE: CVE-2025-10229
Published: 2025-09-10
Description: A vulnerability has been found in Freshwork up to 1.2.3. This impacts an unknown function of the file /api/v2/logout. Such manipulation of the argument post_logout_redirect_uri leads to open redirect. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.2.3 will fix this issue. You should upgrade the affected component. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-601
References: https://drive.google.com/file/d/1U-xaC1pqnregoZGefyNAykhUnvnuG6hb/view?usp=sharing; https://vuldb.com/?ctiid.323487; https://vuldb.com/?id.323487
CVE: CVE-2025-10232
Published: 2025-09-10
Description: A weakness has been identified in 299ko up to 2.0.0. Affected by this issue is the function getSentDir/delete of the file plugin/filemanager/controllers/FileManagerAPIController.php. Executing manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-22
References: https://github.com/August829/Yu/blob/main/58ead8e7e08bfb010.md; https://vuldb.com/?ctiid.323501; https://vuldb.com/?id.323501
CVE: CVE-2025-10233
Published: 2025-09-10
Description: A security vulnerability has been detected in kalcaddle kodbox 1.61. This affects the function fileGet/fileSave of the file app/controller/explorer/editor.class.php. The manipulation of the argument path leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/August829/Yu/blob/main/58ead8e7e08bfb011.md; https://github.com/August829/Yu/blob/main/58ead8e7e08bfb012.md; https://vuldb.com/?ctiid.323502
CVE: CVE-2025-10234
Published: 2025-09-11
Description: A vulnerability was detected in Scada-LTS up to 2.7.8.1. This vulnerability affects unknown code of the file /data_point_edit.shtm of the component Data Point Edit Module. The manipulation of the argument Text Renderer properties results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://medium.com/@warlleyfreire/stored-xss-in-scada-lts-data-point-edit-42c7383402f0; https://vuldb.com/?ctiid.323503; https://vuldb.com/?id.323503
CVE: CVE-2025-10235
Published: 2025-09-11
Description: A flaw has been found in Scada-LTS up to 2.7.8.1. This issue affects some unknown processing of the file /reports.shtm of the component Reports Module. This manipulation of the argument Colour causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://medium.com/@warlleyfreire/stored-xss-in-scada-lts-reports-module-colour-field-4d7e6633d298; https://vuldb.com/?ctiid.323504; https://vuldb.com/?id.323504
CVE: CVE-2025-6088
Published: 2025-09-11
Description: In version 0.7.8 of danny-avila/librechat, improper authorization controls in the conversation sharing feature allow unauthorized access to other users' conversations if the conversation ID is known. Although UUIDv4 conversation IDs are generated server-side and are difficult to brute force, they can be obtained from less-protected sources such as server-side access logs, browser history, or screenshots. The vulnerability permits a logged-in user to gain read-only access to another user's conversations by exploiting the `/api/share/conversationID` endpoint, which lacks authorization checks. This issue is resolved in version v0.7.9-rc1.
CVSS Score: 3.1 (LOW)
CWE: CWE-285
References: https://github.com/danny-avila/librechat/commit/3af2666890bbf291cb7b9f3e03592d54714f0ff5; https://huntr.com/bounties/361405bb-a739-41eb-a680-4cb6193e7c76
CVE: CVE-2025-10236
Published: 2025-09-11
Description: A vulnerability has been found in binary-husky gpt_academic up to 3.91. Impacted is the function merge_tex_files_ of the file crazy_functions/latex_fns/latex_toolbox.py of the component LaTeX File Handler. Such manipulation of the argument \input{} leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/d3do-23/cvelist/blob/main/gpt_academic/Plugins_LFI.md; https://vuldb.com/?ctiid.323505; https://vuldb.com/?id.323505
CVE: CVE-2025-10245
Published: 2025-09-11
Description: A security flaw has been discovered in Display Painéis TGA up to 7.1.41. Affected by this issue is some unknown functionality of the file /gallery/rename of the component Galeria Page. The manipulation of the argument current_folder results in path traversal. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/lfparizzi/CVE-TGA-7.1.41/tree/main; https://vuldb.com/?ctiid.323545; https://vuldb.com/?id.323545
CVE: CVE-2025-10246
Published: 2025-09-11
Description: A weakness has been identified in lokibhardwaj PHP-Code-For-Unlimited-File-Upload up to 124fe[PII_REDACTED]0c81eaf7db3234b0b4e4bab3c. This affects an unknown part of the file /f.php. This manipulation of the argument h causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://vuldb.com/?ctiid.323546; https://vuldb.com/?id.323546; https://vuldb.com/?submit.642206
CVE: CVE-2025-9776
Published: 2025-09-11
Description: The CatFolders – Tame Your WordPress Media Library by Category plugin for WordPress is vulnerable to time-based SQL Injection via the CSV Import contents in all versions up to, and including, 2.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/catfolders/tags/2.5.1/includes/Models/FolderModel.php#L376; https://plugins.trac.wordpress.org/browser/catfolders/tags/2.5.1/includes/Rest/Controllers/ImportController.php#L433; https://www.wordfence.com/threat-intel/vulnerabilities/id/e585998a-d78f-4923-865c-c3a9820b583f?source=cve
CVE: CVE-2025-9910
Published: 2025-09-11
Description: Versions of the package jsondiffpatch before 0.7.2 are vulnerable to Cross-site Scripting (XSS) via HtmlFormatter::nodeBegin. An attacker can inject malicious scripts into HTML payloads that may lead to code execution if untrusted payloads were used as source for the diff, and the result renderer using the built-in html formatter on a private website.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://benjamine.github.io/jsondiffpatch/index.html; https://github.com/benjamine/jsondiffpatch/commit/0e374b5dd8d7879b329a9fc18affbd46ad50dd14; https://github.com/benjamine/jsondiffpatch/issues/383
CVE: CVE-2025-10247
Published: 2025-09-11
Description: A security vulnerability has been detected in JEPaaS 7.2.8. This vulnerability affects the function doFilterInternal of the component Filter Handler. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://github.com/c3p0ooo-Yiqiyin/JEPaaS-Access-control-bypass-vulnerability/blob/main/README.md; https://vuldb.com/?ctiid.323547; https://vuldb.com/?id.323547
CVE: CVE-2025-9034
Published: 2025-09-11
Description: The Wp Edit Password Protected  WordPress plugin before 1.3.5 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/3cf79a0b-2731-47f8-a397-995f4de7067e/; https://wpscan.com/vulnerability/3cf79a0b-2731-47f8-a397-995f4de7067e/
CVE: CVE-2025-9059
Published: 2025-09-11
Description: The Altiris Core Agent Updater package (AeXNSC.exe) is prone to an elevation of privileges vulnerability through DLL hijacking.
CWE: CWE-269, CWE-427
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36132
CVE: CVE-2025-8479
Published: 2025-09-11
Description: The Zoho Flow plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.14.1. This is due to missing or incorrect nonce validation on the zoho_flow_deactivate_plugin function. This makes it possible for unauthenticated attackers to modify typography settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/zoho-flow/tags/2.14.1/settings.php#L144; https://plugins.trac.wordpress.org/browser/zoho-flow/tags/2.14.1/settings.php#L151; https://plugins.trac.wordpress.org/browser/zoho-flow/tags/2.14.2/settings.php#L144
CVE: CVE-2025-0763
Published: 2025-09-11
Description: The Ultimate Classified Listings plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_custom_fields function in all versions up to, and including, 1.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change plugin custom fields.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/ultimate-classified-listings/tags/1.4/classes/class-admin-settings.php#L379; https://www.wordfence.com/threat-intel/vulnerabilities/id/2c368677-e436-412a-9a88-89d128d72aa0?source=cve
CVE: CVE-2025-5801
Published: 2025-09-11
Description: The Digital Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘column’ parameter in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/digital-events-calendar/trunk/shortcode/Events_List.php#L33; https://wordpress.org/plugins/digital-events-calendar/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/424c23f7-73a4-4b2b-8f52-61cb45523396?source=cve
CVE: CVE-2025-8215
Published: 2025-09-11
Description: The Responsive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3360599%40responsive-addons-for-elementor&new=3360599%40responsive-addons-for-elementor&sfp_email=&sfph_mail=; https://wordpress.org/plugins/responsive-addons-for-elementor/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/bd3dbc56-4833-4b5d-bd6c-facc3e1878ea?source=cve