deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-14580
Published: 2025-12-12
Description: A security vulnerability has been detected in Qualitor up to 8.24.73. The impacted element is an unknown function of the file /Qualitor/html/bc/bcdocumento9/biblioteca/request/viewDocumento.php. Such manipulation of the argument cdscript leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. It is suggested to upgrade the affected component. The vendor confirms the existence of the issue: "We became aware of the issue through an earlier direct notification from the original reporter, and our engineering team promptly investigated and implemented the necessary corrective measures. (...) Updated versions containing the fix have already been provided to our customer base".
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://vuldb.com/?ctiid.336201; https://vuldb.com/?id.336201; https://vuldb.com/?submit.705193
CVE: CVE-2025-14611
Published: 2025-12-12
Description: Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication. This opens the door for future exploitation and can be leveraged with previous vulnerabilities to gain a full system compromise.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://www.huntress.com/blog/active-exploitation-gladinet-centrestack-triofox-insecure-cryptography-vulnerability; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-14611
CVE: CVE-2025-43320
Published: 2025-12-12
Description: The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26. An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125887
CVE: CVE-2025-43351
Published: 2025-12-12
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43381
Published: 2025-12-12
Description: This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to delete protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43388
Published: 2025-12-12
Description: An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-95
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43393
Published: 2025-12-12
Description: A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to break out of its sandbox.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43402
Published: 2025-12-12
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.1. An app may be able to cause unexpected system termination or corrupt process memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/126349; https://support.apple.com/en-us/126350
CVE: CVE-2025-43404
Published: 2025-12-12
Description: A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVSS Score: 3.3 (LOW)
CWE: CWE-284
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43406
Published: 2025-12-12
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-497
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43410
Published: 2025-12-12
Description: The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with physical access may be able to view deleted notes.
CVSS Score: 2.4 (LOW)
CWE: CWE-524
References: https://support.apple.com/en-us/125635; https://support.apple.com/en-us/125636; https://support.apple.com/en-us/125886
CVE: CVE-2025-43416
Published: 2025-12-12
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125886; https://support.apple.com/en-us/125887; https://support.apple.com/en-us/125888
CVE: CVE-2025-43437
Published: 2025-12-12
Description: An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 26.1 and iPadOS 26.1. An app may be able to fingerprint the user.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://support.apple.com/en-us/125632
CVE: CVE-2025-43461
Published: 2025-12-12
Description: This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Tahoe 26.1. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43463
Published: 2025-12-12
Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125887; https://support.apple.com/en-us/125888
CVE: CVE-2025-43464
Published: 2025-12-12
Description: A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.1. Visiting a website may lead to an app denial-of-service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43465
Published: 2025-12-12
Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43466
Published: 2025-12-12
Description: An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-95
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43467
Published: 2025-12-12
Description: This issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1. An app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43470
Published: 2025-12-12
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. A standard user may be able to view files made from a disk image belonging to an administrator.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43471
Published: 2025-12-12
Description: The issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-497
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43473
Published: 2025-12-12
Description: This issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43482
Published: 2025-12-12
Description: The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to cause a denial-of-service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/en-us/125886; https://support.apple.com/en-us/125887; https://support.apple.com/en-us/125888
CVE: CVE-2025-43494
Published: 2025-12-12
Description: A mail header parsing issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An attacker may be able to cause a persistent denial-of-service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43497
Published: 2025-12-12
Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to break out of its sandbox.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-862
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43506
Published: 2025-12-12
Description: A logic error was addressed with improved error handling. This issue is fixed in macOS Tahoe 26.1. iCloud Private Relay may not activate when more than one user is logged in at the same time.
CVSS Score: 7.5 (HIGH)
CWE: CWE-843
References: https://support.apple.com/en-us/125634
CVE: CVE-2025-43509
Published: 2025-12-12
Description: This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/125886; https://support.apple.com/en-us/125887; https://support.apple.com/en-us/125888
CVE: CVE-2025-43510
Published: 2025-12-12
Description: A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpected changes in memory shared between processes.
CVSS Score: 7.8 (HIGH)
CWE: CWE-667
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43511
Published: 2025-12-12
Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125884; https://support.apple.com/en-us/125886
CVE: CVE-2025-43512
Published: 2025-12-12
Description: A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/125885; https://support.apple.com/en-us/125886; https://support.apple.com/en-us/125887
CVE: CVE-2025-43513
Published: 2025-12-12
Description: A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to read sensitive location information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125886; https://support.apple.com/en-us/125887; https://support.apple.com/en-us/125888
CVE: CVE-2025-43516
Published: 2025-12-12
Description: A session management issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. A user with Voice Control enabled may be able to transcribe another user's activity.
CVSS Score: 3.3 (LOW)
CWE: CWE-384
References: https://support.apple.com/en-us/125886; https://support.apple.com/en-us/125887; https://support.apple.com/en-us/125888
CVE: CVE-2025-43517
Published: 2025-12-12
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data.
CVSS Score: 3.3 (LOW)
CWE: CWE-532
References: https://support.apple.com/en-us/125886; https://support.apple.com/en-us/125887; https://support.apple.com/en-us/125888
CVE: CVE-2025-43518
Published: 2025-12-12
Description: A logic issue was addressed with improved checks. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, watchOS 26.2. An app may be able to inappropriately access files through the spellcheck API.
CVSS Score: 3.3 (LOW)
CWE: CWE-284
References: https://support.apple.com/en-us/125884; https://support.apple.com/en-us/125886; https://support.apple.com/en-us/125887
CVE: CVE-2025-43519
Published: 2025-12-12
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://support.apple.com/en-us/125886; https://support.apple.com/en-us/125887; https://support.apple.com/en-us/125888
CVE: CVE-2025-43520
Published: 2025-12-12
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43521
Published: 2025-12-12
Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26.2. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-347
References: https://support.apple.com/en-us/125886; https://support.apple.com/en-us/125887
CVE: CVE-2025-43522
Published: 2025-12-12
Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26.2. An app may be able to access user-sensitive data.
CVSS Score: 3.3 (LOW)
CWE: CWE-347
References: https://support.apple.com/en-us/125886; https://support.apple.com/en-us/125887
CVE: CVE-2025-43523
Published: 2025-12-12
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26.2. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/125886; https://support.apple.com/en-us/125887
CVE: CVE-2025-43527
Published: 2025-12-12
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26.2. An app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-280
References: https://support.apple.com/en-us/125886; https://support.apple.com/en-us/125887
CVE: CVE-2025-43530
Published: 2025-12-12
Description: This issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/125885; https://support.apple.com/en-us/125886; https://support.apple.com/en-us/125887
CVE: CVE-2025-43532
Published: 2025-12-12
Description: A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing malicious data may lead to unexpected app termination.
CVSS Score: 2.8 (LOW)
CWE: CWE-120
References: https://support.apple.com/en-us/125884; https://support.apple.com/en-us/125885; https://support.apple.com/en-us/125886
CVE: CVE-2025-43538
Published: 2025-12-12
Description: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/125884; https://support.apple.com/en-us/125885; https://support.apple.com/en-us/125886
CVE: CVE-2025-43539
Published: 2025-12-12
Description: The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing a file may lead to memory corruption.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-119
References: https://support.apple.com/en-us/125884; https://support.apple.com/en-us/125885; https://support.apple.com/en-us/125886
CVE: CVE-2025-43542
Published: 2025-12-12
Description: This issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Tahoe 26.2, visionOS 26.2. Password fields may be unintentionally revealed when remotely controlling a device over FaceTime.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://support.apple.com/en-us/125884; https://support.apple.com/en-us/125885; https://support.apple.com/en-us/125886
CVE: CVE-2025-46276
Published: 2025-12-12
Description: An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/125884; https://support.apple.com/en-us/125885; https://support.apple.com/en-us/125886
CVE: CVE-2025-46285
Published: 2025-12-12
Description: An integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://support.apple.com/en-us/125884; https://support.apple.com/en-us/125885; https://support.apple.com/en-us/125886
CVE: CVE-2025-46287
Published: 2025-12-12
Description: An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An attacker may be able to spoof their FaceTime caller ID.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-451
References: https://support.apple.com/en-us/125884; https://support.apple.com/en-us/125885; https://support.apple.com/en-us/125886
CVE: CVE-2025-46289
Published: 2025-12-12
Description: A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-285
References: https://support.apple.com/en-us/125886; https://support.apple.com/en-us/125887; https://support.apple.com/en-us/125888
CVE: CVE-2025-67634
Published: 2025-12-12
Description: The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file into the page. The JavaScript would execute in the context of the user's browser when the user submits the page (clicks 'Next').
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-345-01.json; https://www.cisa.gov/software-acquisition-guide/tool; https://www.cve.org/CVERecord?id=CVE-2025-67634
CVE: CVE-2025-67750
Published: 2025-12-12
Description: Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows. Versions 6.10.5 and below allow a maliciously crafted flow metadata file to cause arbitrary JavaScript execution during scanning. The APIVersion rule uses new Function() to evaluate expression strings, enabling an attacker to supply a malicious expression within rule configuration or crafted flow metadata. This could compromise developer machines, CI runners, or editor environments. This issue is fixed in version 6.10.6.
CVSS Score: 8.4 (HIGH)
CWE: CWE-94
References: https://github.com/Flow-Scanner/lightning-flow-scanner/commit/10f64a5eb193d8a777e453b25e910144e4540795; https://github.com/Flow-Scanner/lightning-flow-scanner/releases/tag/core-v6.10.6; https://github.com/Flow-Scanner/lightning-flow-scanner/security/advisories/GHSA-55jh-84jv-8mx8
CVE: CVE-2025-14582
Published: 2025-12-12
Description: A vulnerability was detected in campcodes Online Student Enrollment System 1.0. This affects an unknown function of the file /admin/index.php?page=user-profile. Performing a manipulation of the argument userphoto results in unrestricted upload. The attack can be initiated remotely. The exploit is now public and may be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://github.com/CHENCHOUCHOU/vuln/issues/2; https://vuldb.com/?ctiid.336202; https://vuldb.com/?id.336202
CVE: CVE-2025-14583
Published: 2025-12-12
Description: A flaw has been found in campcodes Online Student Enrollment System 1.0. This impacts an unknown function of the file /admin/register.php. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284, CWE-434, CWE-434
References: https://github.com/CHENCHOUCHOU/vuln/issues/1; https://vuldb.com/?ctiid.336203; https://vuldb.com/?id.336203
CVE: CVE-2025-14066
Published: 2025-12-12
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-14584
Published: 2025-12-12
Description: A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/Wegetmore/CVE/issues/1; https://itsourcecode.com/; https://vuldb.com/?ctiid.336204