deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-62786
Published: 2025-10-29
Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. A heap-based out-of-bounds WRITE occurs in decode_win_permissions, resulting in writing a NULL byte 2 bytes before the start of the buffer allocated to decoded_it. A compromised agent can potentially leverage this issue to perform remote code execution, by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can leverage this issue to potentially achieve remote code execution on the wazuh manager (the exploitability of this vulnerability depends on the specifics of the respective heap allocator). This vulnerability is fixed in 4.10.2.
CVSS Score: 8.1 (HIGH)
CWE: CWE-124
References: https://github.com/wazuh/wazuh/commit/2257d7998aaff34263169d16f4afc491564a771c; https://github.com/wazuh/wazuh/security/advisories/GHSA-2c8r-p6r5-xxmr
CVE: CVE-2025-12476
Published: 2025-10-29
Description: Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://azure-access.com/security-advisories
CVE: CVE-2025-12477
Published: 2025-10-29
Description: Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://azure-access.com/security-advisories
CVE: CVE-2025-12478
Published: 2025-10-29
Description: Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-326
References: https://azure-access.com/security-advisories
CVE: CVE-2025-12479
Published: 2025-10-29
Description: Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://azure-access.com/security-advisories
CVE: CVE-2025-1549
Published: 2025-10-29
Description: A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944.





This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.5
CWE: CWE-77
References: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00016
CVE: CVE-2025-56558
Published: 2025-10-29
Description: The Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by a client that has the correct values of AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN, and device serial number, even if a device (such as a Pure Hot+Cool device) has been removed and is not visible in the supported MyDyson app. This could allow an unexpected actor to obtain control and set the room temperature (up to 37 Celsius) if ownership of the device is transferred without wiping the device. NOTE: the Supplier's position is that this is a potential vulnerability that dates back 4 years ago in 2022 and "we are unable to replicate that anymore." Based on the submitted report, in order to leverage this issue, an attacker needs to own a Dyson device with full privileges, sniff for the AWS credentials, and then transfer ownership of that Dyson device to the victim. Even if these steps were successfully accomplished, the attacker only acquires the ability to configure the Dyson device within its safe operating range, and does not acquire the ability to execute code on the device or obtain sensitive information.
CVSS Score: 3.0 (LOW)
CWE: CWE-420
References: https://archive.org/details/dyson-acpolicy-bug-report; https://support.dyson.com.au/supporthome/Air-Treatment/Purifier/pure-hot-cool-link/385276-01/troubleshooting/machine-is-not-heating; https://www.dyson.co.uk/support/reporting-data-security-issues
CVE: CVE-2025-60595
Published: 2025-10-29
Description: SPH Engineering UgCS 5.13.0 is vulnerable to Arbitary code execution.
CVSS Score: 8.2 (HIGH)
CWE: CWE-77
References: https://github.com/Clicksafeae/CVE-2025-60595/tree/main; https://www.sphengineering.com
CVE: CVE-2025-61234
Published: 2025-10-29
Description: Incorrect access control on Dataphone A920 v2025.07.161103 exposes a service on port 8888 by default on the local network without authentication. This allows an attacker to interact with the device via a TCP socket without credentials. Additionally, sending an HTTP request to the service on port 8888 triggers an error in the response, which exposes the functionality, headers identifying Paytef dataphone packets, and the build version.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://github.com/stuxve/expose-service-8888-dataphone
CVE: CVE-2025-62787
Published: 2025-10-29
Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.10.2, a buffer over-read occurs in DecodeWinevt() when child_attr[p]->attributes[j] is accessed, because the corresponding index (j) is incorrect. A compromised agent can cause a READ operation beyond the end of the allocated buffer (which may contain sensitive information) by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can cause a buffer over-read and potentially access sensitive data. While the buffer over-read is always triggered while resolving the arguments of mdebug2, specific configuration options (analysisd.debug=2) need to be in place for the respective data to be leaked. This vulnerability is fixed in 4.10.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://github.com/wazuh/wazuh/commit/267d5d55de490469a9ec24a2b936bb3c5aa8fdda; https://github.com/wazuh/wazuh/security/advisories/GHSA-3hhq-5367-98q6; https://github.com/wazuh/wazuh/security/advisories/GHSA-3hhq-5367-98q6
CVE: CVE-2025-62788
Published: 2025-10-29
Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, w_copy_event_for_log() references memory (initially allocated in OS_CleanMSG()) after it has been freed. A compromised agent can potentially compromise the integrity of the application by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can leverage this issue to potentially compromise the integrity of the application (the use of previously freed memory may corrupt valid data, if the memory area in question has been allocated and used properly elsewhere). This vulnerability is fixed in 4.11.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://github.com/wazuh/wazuh/security/advisories/GHSA-qjcw-fjvh-8q4g
CVE: CVE-2025-62789
Published: 2025-10-29
Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, fim_alert() implementation does not check whether the return value of ctime_r is NULL or not before calling strdup() on it. A compromised agent can cause a crash of analysisd by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can cause analysisd to crash and make it unavailable. This vulnerability is fixed in 4.11.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-252, CWE-476
References: https://github.com/wazuh/wazuh/security/advisories/GHSA-8rvq-mm2f-8q22
CVE: CVE-2025-62790
Published: 2025-10-29
Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, fim_fetch_attributes_state() implementation does not check whether time_string is NULL or not before calling strlen() on it. A compromised agent can cause a crash of analysisd by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can cause analysisd to crash and make it unavailable. This vulnerability is fixed in 4.11.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-252, CWE-476
References: https://github.com/wazuh/wazuh/security/advisories/GHSA-9xj3-vc52-48p9
CVE: CVE-2025-62791
Published: 2025-10-29
Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, DecodeCiscat() implementation does not check the return the value of cJSON_GetObjectItem() for a possible NULL value in case of an error. A compromised agent can cause a crash of analysisd by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can cause analysisd to crash and make it unavailable. This vulnerability is fixed in 4.11.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-252, CWE-476, CWE-476
References: https://github.com/wazuh/wazuh/security/advisories/GHSA-gcwf-6p6m-gvm7
CVE: CVE-2025-62792
Published: 2025-10-29
Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.12.0, a buffer over-read occurs in w_expression_match() when strlen() is called on str_test, because the corresponding buffer is not being properly NULL terminated during its allocation in OS_CleanMSG(). A compromised agent can cause a READ operation beyond the end of the allocated buffer (which may contain sensitive information) by sending a specially crafted message to the wazuh manager. An attacker who is able to craft and send an agent message to the wazuh manager can cause a buffer over-read and potentially access sensitive data. This vulnerability is fixed in 4.12.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-170
References: https://github.com/wazuh/wazuh/security/advisories/GHSA-2672-vfhm-xhr6
CVE: CVE-2025-11232
Published: 2025-10-29
Description: To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at the default setting, which is "[^A-Za-z0-9.-]"; "hostname-char-replacement" must be empty (the default); and "ddns-qualifying-suffix" must *NOT* be empty (the default is empty). DDNS updates do not need to be enabled for this issue to manifest. A client that sends certain option content would then cause kea-dhcp4 to exit unexpectedly.
This issue affects Kea versions 3.0.1 through 3.0.1 and 3.1.1 through 3.1.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-823
References: https://kb.isc.org/docs/cve-2025-11232; http://www.openwall.com/lists/oss-security/2025/10/29/5
CVE: CVE-2025-35980
Published: 2025-10-29
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2025. Notes: none.
CVE: CVE-2025-57227
Published: 2025-10-29
Description: An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via placing a crafted executable file into a parent folder.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://www.exploit-db.com/exploits/51707
CVE: CVE-2025-62797
Published: 2025-10-29
Description: FluxCP is a web-based Control Panel for rAthena servers written in PHP. A critical Cross-Site Request Forgery (CSRF) vulnerability exists in the FluxCP-based website template used by multiple rAthena/Ragnarok servers. State-changing POST endpoints accept browser-initiated requests that are authorized solely by the session cookie without per-request anti-CSRF tokens or robust Origin/Referer validation. An attacker who can lure a logged-in user to an attacker-controlled page can cause that user to perform sensitive actions without their intent. This vulnerability is fixed with commit e3f130c.
CWE: CWE-352
References: https://github.com/rathena/FluxCP/commit/e3f130c4a2ccd615a3ee2ee0302ecbfbd84747e6; https://github.com/rathena/FluxCP/security/advisories/GHSA-5w2g-8cqq-r4fr; https://github.com/rathena/FluxCP/security/advisories/GHSA-5w2g-8cqq-r4fr
CVE: CVE-2025-64100
Published: 2025-10-29
Description: CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.9 and 2.11.4, session ids could be fixed by an attacker if the site is configured with server-side session storage (CKAN uses cookie-based session storage by default). The attacker would need to either set a cookie on the victim's browser or steal the victim's currently valid session. Session identifiers are now regenerated after each login. This vulnerability has been fixed in CKAN 2.10.9 and 2.11.4
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-384
References: https://github.com/ckan/ckan/commit/c2fe437f88be850a6edf7a[PII_REDACTED]8819fab5; https://github.com/ckan/ckan/security/advisories/GHSA-2hvh-cw5c-8q8q
CVE: CVE-2018-25120
Published: 2025-10-29
Description: D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/Mail_Test' and uses several form parameters directly in a call to a system email utility without proper input validation. An unauthenticated remote attacker can supply crafted form data that injects shell commands, resulting in execution as root on the device. NOTE: The DNS-343 product line has been declared end-of-life.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/jamesbercegay/advisories/blob/master/%5BGTSA-00128%5D%20D-Link%20DNS-343%20ShareCenter%201.05%20Remote%20Root.txt; https://qkl.seebug.org/vuldb/ssvid-97088; https://www.dlink.com/al/sq/products/dns-343-sharecenter-4-bay-network-storage-enclosure
CVE: CVE-2025-61876
Published: 2025-10-29
Description: Insecure Direct Object Reference (IDOR) in /tenants/{id} API endpoint in Inforcer Platform version 2.0.153 allows an authenticated user with low privileges to enumerate and access tenant information belonging to other clients via modification of the tenant ID in the request URL.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-639
References: https://silvatech.uk/cve-2025-61876-inforcer-platform/; https://www.inforcer.com/platform; https://silvatech.uk/cve-2025-61876-inforcer-platform/
CVE: CVE-2025-64101
Published: 2025-10-29
Description: Zitadel is open-source identity infrastructure software. Prior to 4.6.0, 3.4.3, and 2.71.18, a potential vulnerability exists in ZITADEL's password reset mechanism. ZITADEL utilizes the Forwarded or X-Forwarded-Host header from incoming requests to construct the URL for the password reset confirmation link. This link, containing a secret code, is then emailed to the user. If an attacker can manipulate these headers (e.g., via host header injection), they could cause ZITADEL to generate a password reset link pointing to a malicious domain controlled by the attacker. If the user clicks this manipulated link in the email, the secret reset code embedded in the URL can be captured by the attacker. This captured code could then be used to reset the user's password and gain unauthorized access to their account. It's important to note that this specific attack vector is mitigated for accounts that have Multi-Factor Authentication (MFA) or Passwordless authentication enabled. This vulnerability is fixed in 4.6.0, 3.4.3, and 2.71.18.
CVSS Score: 8.1 (HIGH)
CWE: CWE-601, CWE-640
References: https://github.com/zitadel/zitadel/commit/72a5c33e6ac302b978d564bd049f9364f5a989b1; https://github.com/zitadel/zitadel/security/advisories/GHSA-mwmh-7px9-4c23
CVE: CVE-2025-64102
Published: 2025-10-29
Description: Zitadel is open-source identity infrastructure software. Prior to 4.6.0, 3.4.3, and 2.71.18, an attacker can perform an online brute-force attack on OTP, TOTP, and passwords. While Zitadel allows preventing online brute force attacks in scenarios like TOTP, Email OTP, or passwords using a lockout mechanism. The mechanism is not enabled by default and can cause a denial of service for the corresponding user if enabled. Additionally, the mitigation strategies were not fully implemented in the more recent resource-based APIs. This vulnerability is fixed in 4.6.0, 3.4.3, and 2.71.18.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: https://github.com/zitadel/zitadel/commit/b8db8cdf9cc8ea13f461758aef12457f8b7d972a; https://github.com/zitadel/zitadel/security/advisories/GHSA-xrw9-r35x-x878
CVE: CVE-2025-64103
Published: 2025-10-29
Description: Starting from 2.53.6, 2.54.3, and 2.55.0, Zitadel only required multi factor authentication in case the login policy has either enabled requireMFA or requireMFAForLocalUsers. If a user has set up MFA without this requirement, Zitadel would consider single factor auhtenticated sessions as valid as well and not require multiple factors. Bypassing second authentication factors weakens multifactor authentication and enables attackers to bypass the more secure factor. An attacker can target the TOTP code alone, only six digits, bypassing password verification entirely and potentially compromising accounts with 2FA enabled. This vulnerability is fixed in 4.6.0, 3.4.3, and 2.71.18.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-308
References: https://github.com/zitadel/zitadel/commit/b284f8474eed0cba[PII_REDACTED]19e7ae7963156b; https://github.com/zitadel/zitadel/security/advisories/GHSA-cfjq-28r2-4jv5
CVE: CVE-2025-64104
Published: 2025-10-29
Description: LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Prior to 2.0.11, LangGraph's SQLite store implementation contains SQL injection vulnerabilities using direct string concatenation without proper parameterization, allowing attackers to inject arbitrary SQL and bypass access controls. This vulnerability is fixed in 2.0.11.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/langchain-ai/langgraph/commit/bc9d45b476101e441cb1cc602dea03eb29232de4; https://github.com/langchain-ai/langgraph/security/advisories/GHSA-7p73-8jqx-23r8; https://github.com/langchain-ai/langgraph/security/advisories/GHSA-7p73-8jqx-23r8
CVE: CVE-2025-10920
Published: 2025-10-29
Description: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of ICNS files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27684.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2443; https://www.zerodayinitiative.com/advisories/ZDI-25-909/
CVE: CVE-2025-10921
Published: 2025-10-29
Description: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27803.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://gitlab.gnome.org/GNOME/gegl/-/commit/0e68b7471dabf2800d780819c19bd5e6462f565f; https://www.zerodayinitiative.com/advisories/ZDI-25-910/; https://lists.debian.org/debian-lts-announce/2025/10/msg00021.html
CVE: CVE-2025-10922
Published: 2025-10-29
Description: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://gitlab.gnome.org/GNOME/gimp/-/commit/3d[PII_REDACTED]31e94dfe62042d76225ecfc4c1e4; https://www.zerodayinitiative.com/advisories/ZDI-25-911/; https://lists.debian.org/debian-lts-announce/2025/10/msg00022.html
CVE: CVE-2025-10923
Published: 2025-10-29
Description: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of WBMP files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27878.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://gitlab.gnome.org/GNOME/gimp/-/commit/2d2d39f3da1d0b01ca7d71ad2b7a8725ee92ed96; https://www.zerodayinitiative.com/advisories/ZDI-25-912/
CVE: CVE-2025-10924
Published: 2025-10-29
Description: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of FF files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27836.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2448; https://www.zerodayinitiative.com/advisories/ZDI-25-913/
CVE: CVE-2025-10925
Published: 2025-10-29
Description: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of ILBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27793.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2450; https://www.zerodayinitiative.com/advisories/ZDI-25-914/