deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-0681
Published: 2025-01-30
Description: The Cloud MQTT service of the affected products supports wildcard topic 
subscription which could allow an attacker to obtain sensitive 
information from tapping the service communications.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-155
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-02; https://www.newrocktech.com/ContactUs/index.html
CVE: CVE-2025-0683
Published: 2025-01-30
Description: In its default configuration, Contec Health CMS8000 Patient Monitor transmits plain-text 
patient data to a hard-coded public IP address when a patient is hooked 
up to the monitor. This could lead to a leakage of confidential patient 
data to any device with that IP address or an attacker in a 
machine-in-the-middle scenario.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-359
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-030-01; https://www.fda.gov/medical-devices/safety-communications/cybersecurity-vulnerabilities-certain-patient-monitors-contec-and-epsimed-fda-safety-communication; https://www.bleepingcomputer.com/news/security/backdoor-found-in-two-healthcare-patient-monitors-linked-to-ip-in-china/
CVE: CVE-2025-24500
Published: 2025-01-30
Description: The vulnerability allows an unauthenticated attacker to access information in PAM database.
CWE: CWE-863
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25362
CVE: CVE-2025-24501
Published: 2025-01-30
Description: An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP request.
CWE: CWE-20
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25362
CVE: CVE-2025-24502
Published: 2025-01-30
Description: An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by spoofing the client IP address.
CWE: CWE-384
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25362
CVE: CVE-2025-24503
Published: 2025-01-30
Description: A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server.
CWE: CWE-384
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25362
CVE: CVE-2025-24504
Published: 2025-01-30
Description: An improper input validation the CSRF filter results in unsanitized user input written to the application logs.
CWE: CWE-20
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25362
CVE: CVE-2025-24505
Published: 2025-01-30
Description: This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file.
CWE: CWE-434
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25362
CVE: CVE-2025-24506
Published: 2025-01-30
Description: A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types.
CWE: CWE-203
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25362
CVE: CVE-2025-24507
Published: 2025-01-30
Description: This vulnerability allows appliance compromise at boot time.
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25362
CVE: CVE-2024-10026
Published: 2025-01-30
Description: A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-328, CWE-339, CWE-326, CWE-335
References: https://github.com/google/gvisor/commit/83f75082e5b03fafca9201d9d9939028f712b0b2; https://github.com/google/gvisor/commit/e54bfde79278cafadedbf73c68ee10cb5982f2af; https://github.com/google/gvisor/commit/f956b5ac17ae1f60a4d21999b59ba18c55f86d56
CVE: CVE-2024-10603
Published: 2025-01-30
Description: Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-340
References: https://github.com/google/gvisor/commit/5d2bf2546805afa09a6f6d9b23ec267823e32205; https://github.com/google/gvisor/commit/83f75082e5b03fafca9201d9d9939028f712b0b2; https://github.com/google/gvisor/commit/cbdb2c61b1f753834cedf2ebe68cbc335dadca52
CVE: CVE-2024-10604
Published: 2025-01-30
Description: Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-330
References: https://fuchsia.googlesource.com/fuchsia/+/40e7fbcdcd013441daf4492f1ead349a9e5b80dc; https://fuchsia.googlesource.com/fuchsia/+/a3c17a4d6b3140f9175d6cf6ac4eb4e775f8dea8; https://www.ndss-symposium.org/wp-content/uploads/2025-122-paper.pdf
CVE: CVE-2025-0142
Published: 2025-01-30
Description: Cleartext storage of sensitive information in the Zoom Jenkins Marketplace plugin before version 1.4 may allow an authenticated user to conduct a disclosure of information via network access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-312
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25001/
CVE: CVE-2025-0143
Published: 2025-01-30
Description: Out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5 may allow an unauthorized user to conduct a denial of service via network access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-787
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25002/
CVE: CVE-2025-0144
Published: 2025-01-30
Description: Out-of-bounds write in some Zoom Workplace Apps may allow an authorized user to conduct a loss of integrity via network access.
CVSS Score: 3.1 (LOW)
CWE: CWE-787
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25003/
CVE: CVE-2025-0145
Published: 2025-01-30
Description: Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-426
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25004/
CVE: CVE-2025-0146
Published: 2025-01-30
Description: Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access.
CVSS Score: 3.9 (LOW)
CWE: CWE-59
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25005/
CVE: CVE-2025-0147
Published: 2025-01-30
Description: Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to conduct an escalation of privilege via network access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25006/
CVE: CVE-2025-24802
Published: 2025-01-30
Description: Plonky2 is a SNARK implementation based on techniques from PLONK and FRI. Lookup tables, whose length is not divisible by 26 = floor(num_routed_wires / 3) always include the 0 -> 0 input-output pair. Thus a malicious prover can always prove that f(0) = 0 for any lookup table f (unless its length happens to be divisible by 26). The cause of problem is that the LookupTableGate-s are padded with zeros. A workaround from the user side is to extend the table (by repeating some entries) so that its length becomes divisible by 26. This vulnerability is fixed in 1.0.1.
CVSS Score: 8.6 (HIGH)
CWE: CWE-1240
References: https://github.com/0xPolygonZero/plonky2/blob/main/plonky2/src/plonk/prover.rs#L97; https://github.com/0xPolygonZero/plonky2/commit/091047f7f10cae082716f3738ad59a583835f7b6; https://github.com/0xPolygonZero/plonky2/security/advisories/GHSA-hj49-h7fq-px5h
CVE: CVE-2024-11609
Published: 2025-01-30
Description: AutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of EAP9 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24772.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://certvde.com/en/bulletins/bulletins/2182-automationdirect-c-more-ea9-programming-software/; https://www.zerodayinitiative.com/advisories/ZDI-24-1673/
CVE: CVE-2024-11610
Published: 2025-01-30
Description: AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of EAP9 files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24773.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://certvde.com/en/bulletins/bulletins/2182-automationdirect-c-more-ea9-programming-software/; https://www.zerodayinitiative.com/advisories/ZDI-24-1674/
CVE: CVE-2024-11611
Published: 2025-01-30
Description: AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of EAP9 files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24774.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://certvde.com/en/bulletins/bulletins/2182-automationdirect-c-more-ea9-programming-software/; https://www.zerodayinitiative.com/advisories/ZDI-24-1675/
CVE: CVE-2025-0568
Published: 2025-01-30
Description: Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-25302.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-25-049/
CVE: CVE-2025-0569
Published: 2025-01-30
Description: Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-25303.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-25-052/
CVE: CVE-2025-0570
Published: 2025-01-30
Description: Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability.

The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-25304.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-25-050/
CVE: CVE-2025-0571
Published: 2025-01-30
Description: Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability.

The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-25305.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-25-051/
CVE: CVE-2025-0572
Published: 2025-01-30
Description: Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability.

The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to write files in the context of the current user. Was ZDI-CAN-25308.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://www.zerodayinitiative.com/advisories/ZDI-25-054/
CVE: CVE-2025-0573
Published: 2025-01-30
Description: Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to write files in the context of the current user. Was ZDI-CAN-25309.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://www.zerodayinitiative.com/advisories/ZDI-25-053/
CVE: CVE-2025-0574
Published: 2025-01-30
Description: Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the parsing of URLs in the web server module. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-25318.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-25-055/
CVE: CVE-2025-0880
Published: 2025-01-30
Description: A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/updateplan.php. The manipulation of the argument planid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://vuldb.com/?ctiid.294125; https://vuldb.com/?id.294125; https://vuldb.com/?submit.488716
CVE: CVE-2025-0881
Published: 2025-01-30
Description: A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/saveroutine.php. The manipulation of the argument rname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/wizdzz/CVE/issues/1; https://vuldb.com/?ctiid.294126; https://vuldb.com/?id.294126
CVE: CVE-2025-0882
Published: 2025-01-30
Description: A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/addnewmember.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/LamentXU123/cve/blob/main/sql_injection3.md; https://vuldb.com/?ctiid.294127
CVE: CVE-2025-24885
Published: 2025-01-30
Description: pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. Missing access control on rendering custom (unprivileged) dojo pages causes ability for users to create stored XSS.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-284
References: https://github.com/pwncollege/dojo/security/advisories/GHSA-8m79-rmhw-rg84
CVE: CVE-2025-24886
Published: 2025-01-30
Description: pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. Incorrect symlink checks on user specified dojos allows for users (admin not required) to perform an LFI from the CTFd container. When a user clones or updates repositories, a check is performed to see if the repository had contained any symlinks. A malicious user could craft a repository with symlinks pointed to sensitive files and then retrieve them using the CTFd website.
CVSS Score: 7.7 (HIGH)
CWE: CWE-61, CWE-200
References: https://github.com/pwncollege/dojo/security/advisories/GHSA-fcq8-jqq5-9xmh
CVE: CVE-2023-6195
Published: 2025-01-31
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. GitLab was vulnerable to Server Side Request Forgery when an attacker uses a malicious URL in the markdown  image value when importing a GitHub repository.
CVSS Score: 2.6 (LOW)
CWE: CWE-918
References: https://gitlab.com/gitlab-org/gitlab/-/issues/432276; https://hackerone.com/reports/2249268
CVE: CVE-2024-1211
Published: 2025-01-31
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 in which cross-site request forgery may have been possible on GitLab instances configured to use JWT as an OmniAuth provider.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-352
References: https://gitlab.com/gitlab-org/gitlab/-/issues/440313; https://hackerone.com/reports/2323594
CVE: CVE-2024-23928
Published: 2025-01-31
Description: This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the telematics functionality, which operates over HTTPS. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: https://jpn.pioneer/ja/car/dl/dmh-sz700_sf700/; https://www.zerodayinitiative.com/advisories/ZDI-24-1045/
CVE: CVE-2024-23930
Published: 2025-01-31
Description: This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the Media service, which listens on TCP port 42000 by default. The issue results from improper handling of error conditions. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-404
References: https://jpn.pioneer/ja/car/dl/dmh-sz700_sf700/; https://www.zerodayinitiative.com/advisories/ZDI-24-1043/
CVE: CVE-2024-23937
Published: 2025-01-31
Description: This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the debug interface. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the device.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://community.silabs.com/a45Vm0000000Atp; https://www.zerodayinitiative.com/advisories/ZDI-24-869/
CVE: CVE-2024-23962
Published: 2025-01-31
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Alpine Halo9 devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the DLT interface, which listens on TCP port 3490 by default. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.zerodayinitiative.com/advisories/ZDI-24-847/
CVE: CVE-2024-23963
Published: 2025-01-31
Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability.

The specific flaw exists within the PBAP_DecodeVCARD function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
CVSS Score: 8.0 (HIGH)
CWE: CWE-94
References: https://www.zerodayinitiative.com/advisories/ZDI-24-850/
CVE: CVE-2024-23968
Published: 2025-01-31
Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the SrvrToSmSetAutoChnlListMsg function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://www.zerodayinitiative.com/advisories/ZDI-24-1050/