deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-8449
Published: 2025-08-20
Description: CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticated user sends a specially crafted request to a specific endpoint from within the BMS network.
CWE: CWE-400
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-224-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-224-04.pdf
CVE: CVE-2025-9074
Published: 2025-08-20
Description: A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation (ECI) enabled, and with or without the "Expose daemon on tcp://localhost:2375 without TLS" option enabled.
This can lead to execution of a wide range of privileged commands to the engine API, including controlling other containers, creating new ones, managing images etc. In some circumstances (e.g. Docker Desktop for Windows with WSL backend) it also allows mounting the host drive with the same privileges as the user running Docker Desktop.
CWE: CWE-668
References: https://docs.docker.com/desktop/release-notes/#4443; https://blog.qwertysecurity.com/Articles/blog3.html; https://pvotal.tech/breaking-dockers-isolation-using-docker-cve-2025-9074/
CVE: CVE-2024-57491
Published: 2025-08-20
Description: Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://github.com/datavane/jobx/issues/48
CVE: CVE-2025-1139
Published: 2025-08-20
Description: IBM Edge Application Manager 4.5 could allow a local user to read or modify resources that they should not have authorization to access due to incorrect permission assignment.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-732
References: https://www.ibm.com/support/pages/node/7242632
CVE: CVE-2025-1142
Published: 2025-08-20
Description: IBM Edge Application Manager 4.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://www.ibm.com/support/pages/node/7242632
CVE: CVE-2025-36114
Published: 2025-08-20
Description: IBM QRadar SOAR Plugin App 1.0.0 through 5.6.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-22
References: https://www.ibm.com/support/pages/node/7242664
CVE: CVE-2025-43748
Published: 2025-08-20
Description: Insufficient CSRF protection for omni-administrator users in Liferay Portal 7.0.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.6, 2023.Q4.0 through 2023.Q4.9, 2023.Q3.1 through 2023.Q3.9, 7.4 GA through update 92, 7.3 GA through update 36, and older unsupported versions allows attackers to execute Cross-Site Request Forgery
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43748
CVE: CVE-2025-50864
Published: 2025-08-20
Description: An Origin Validation Error in the elysia-cors library thru 1.3.0 allows attackers to bypass Cross-Origin Resource Sharing (CORS) restrictions. The library incorrectly validates the supplied origin by checking if it is a substring of any domain in the site's CORS policy, rather than performing an exact match. For example, a malicious origin like "notexample.com", "example.common.net" is whitelisted when the site's CORS policy specifies "example.com." This vulnerability enables unauthorized access to user data on sites using the elysia-cors library for CORS validation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-178
References: http://elysiajs.com; https://github.com/elysiajs/elysia-cors/blob/main/src/index.ts; https://github.com/elysiajs/elysia-cors/commit/9b9eb92e32a7a4b43b6d[PII_REDACTED]701c33e221
CVE: CVE-2025-51990
Published: 2025-08-20
Description: XWiki through version 17.3.0 is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities in the Administration interface, specifically under the Presentation section of the Global Preferences panel. An authenticated administrator can inject arbitrary JavaScript payloads into the HTTP Meta Info, Footer Copyright, and Footer Version fields. These inputs are stored and subsequently rendered without proper output encoding or sanitization on public-facing pages. As a result, the injected scripts are persistently executed in the browser context of any visitor to the affected instances including both authenticated and unauthenticated users. No user interaction is required beyond visiting a page that includes the malicious content. Successful exploitation can lead to session hijacking, credential theft, unauthorized actions via session riding, or further compromise of the application through client-side attacks. The vulnerability introduces significant risk in any deployment, especially in shared or internet-facing environments where administrator credentials may be compromised.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/malcxlmj/cve-writeups/blob/main/CVE-2025-51990.md
CVE: CVE-2025-51991
Published: 2025-08-20
Description: XWiki through version 17.3.0 is vulnerable to Server-Side Template Injection (SSTI) in the Administration interface, specifically within the HTTP Meta Info field of the Global Preferences Presentation section. An authenticated administrator can inject crafted Apache Velocity template code, which is rendered on the server side without proper validation or sandboxing. This enables the execution of arbitrary template logic, which may expose internal server information or, in specific configurations, lead to further exploitation such as remote code execution or sensitive data leakage. The vulnerability resides in improper handling of dynamic template rendering within user-supplied configuration fields.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-94
References: https://github.com/malcxlmj/cve-writeups/blob/main/CVE-2025-51991.md; https://xwiki.org
CVE: CVE-2025-55482
Published: 2025-08-20
Description: Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the formSetCfm function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/SolitaryGrass/IoT_vuln/blob/main/tenda/AC6/AC6V2.0RTL_V15.03.06.23/formSetCfm/poc.md
CVE: CVE-2025-55498
Published: 2025-08-20
Description: Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/SolitaryGrass/IoT_vuln/blob/main/tenda/AC6/AC6V2.0RTL_V15.03.06.23/fromSetSysTime/poc.md
CVE: CVE-2009-10005
Published: 2025-08-20
Description: ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 expose the mimencode binary via a CGI endpoint, allowing unauthenticated attackers to retrieve arbitrary files from the filesystem. By crafting a POST request to /cgi-bin/ck/mimencode with traversal and output parameters, attackers can read sensitive files such as /etc/passwd outside the webroot.
CWE: CWE-552
References: http://www.aushack.com/200904-contentkeeper.txt; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/admin/http/contentkeeper_fileaccess.rb; https://web.archive.org/web/[PII_REDACTED]0542/http://www.contentkeeper.com/
CVE: CVE-2010-10014
Published: 2025-08-20
Description: Odin Secure FTP <= 4.1 is vulnerable to a stack-based buffer overflow when parsing directory listings received in response to an FTP LIST command. A malicious FTP server can send an overly long filename in the directory listing, which overflows a fixed-size stack buffer in the client and overwrites the Structured Exception Handler (SEH). This allows remote attackers to execute arbitrary code on the client system.
CWE: CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/odin_list_reply.rb; https://web.archive.org/web/[PII_REDACTED]3101/http://odinshare.com/secure-ftp-expert.html; https://web.archive.org/web/[PII_REDACTED]4057/https://www.corelan.be/index.php/2010/10/12/death-of-an-ftp-client/
CVE: CVE-2010-20042
Published: 2025-08-20
Description: Xion Audio Player versions prior to 1.0.126 are vulnerable to a Unicode-based stack buffer overflow triggered by opening a specially crafted .m3u playlist file. The file contains an overly long string that overwrites the Structured Exception Handler (SEH) chain, allowing an attacker to hijack execution flow and run arbitrary code.
CWE: CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/xion_m3u_sehbof.rb; https://www.exploit-db.com/exploits/14517; https://www.exploit-db.com/exploits/14633
CVE: CVE-2010-20045
Published: 2025-08-20
Description: FileWrangler <= 5.30 suffers from a stack-based buffer overflow vulnerability when parsing directory listings from an FTP server. A malicious server can send an overlong folder name in response to a LIST command, triggering memory corruption during client-side rendering. Exploitation requires passive user interaction—simply connecting to the server—without further input. Successful exploitation may lead to arbitrary code execution.
CWE: CWE-121
References: https://cursorarts.com/ca_fw.html; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/filewrangler_list_reply.rb; https://web.archive.org/web/[PII_REDACTED]4057/https://www.corelan.be/index.php/2010/10/12/death-of-an-ftp-client/
CVE: CVE-2010-20049
Published: 2025-08-20
Description: LeapFTP < 3.1.x contains a stack-based buffer overflow vulnerability in its FTP client parser. When the client receives a directory listing containing a filename longer than 528 bytes, the application fails to properly bound-check the input and overwrites the Structured Exception Handler (SEH) chain. This allows an attacker operating a malicious FTP server to execute arbitrary code on the victim’s machine when the file is listed or downloaded.
CWE: CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/leapftp_list_reply.rb; https://web.archive.org/web/[PII_REDACTED]2627/http://www.leapware.com/; https://web.archive.org/web/[PII_REDACTED]4057/https://www.corelan.be/index.php/2010/10/12/death-of-an-ftp-client/
CVE: CVE-2010-20059
Published: 2025-08-20
Description: FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface. The exec_raw.php script exposes a cmd parameter that is passed directly to the underlying shell without sanitation.
CWE: CWE-78
References: https://github.com/freenas; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/freenas_exec_raw.rb; https://sourceforge.net/projects/freenas/
CVE: CVE-2010-20103
Published: 2025-08-20
Description: A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. The backdoor implements a hidden FTP command trigger that, when invoked, causes the server to execute arbitrary shell commands with root privileges. This allows remote, unauthenticated attackers to run any OS command on the FTP server host.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-912
References: http://www.proftpd.org/; https://advisories.checkpoint.com/defense/advisories/public/2011/cpai-2010-151.html/; https://github.com/proftpd/proftpd
CVE: CVE-2011-10020
Published: 2025-08-20
Description: Kaillera Server version 0.86 is vulnerable to a denial-of-service condition triggered by sending a malformed UDP packet after the initial handshake. Once a client sends a valid HELLO0.83 packet and receives a response, any subsequent malformed packet causes the server to crash and become unresponsive. This flaw stems from improper input validation in the server’s UDP packet handler, allowing unauthenticated remote attackers to disrupt service availability.
CWE: CWE-20
References: http://kaillera.com/; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/dos/windows/games/kaillera.rb; https://www.exploit-db.com/exploits/17460
CVE: CVE-2011-10021
Published: 2025-08-20
Description: Magix Musik Maker 16 is vulnerable to a stack-based buffer overflow due to improper handling of .mmm arrangement files. The vulnerability arises from an unsafe strcpy() operation that fails to validate input length, allowing attackers to overwrite the Structured Exception Handler (SEH). By crafting a malicious .mmm file, an attacker can trigger the overflow when the file is opened, potentially leading to arbitrary code execution. This vulnerability was remediated in version 17.
CWE: CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/magix_musikmaker_16_mmm.rb; https://web.archive.org/web/[PII_REDACTED]0356/https://www.corelan.be/index.php/forum/security-advisories/corelan-11-002-magix-music-maker-16-stack-buffer-overflow/; https://www.darkreading.com/vulnerabilities-threats/another-researcher-hit-with-threat-of-german-anti-hacking-law
CVE: CVE-2011-10022
Published: 2025-08-20
Description: SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses containing an overly long Content-Type header. The vulnerability occurs due to improper bounds checking on the header value, allowing an attacker to overwrite the Structured Exception Handler (SEH) and execute arbitrary code. Exploitation requires the victim to open a media file that triggers an HTTP request to a malicious server, which responds with a crafted Content-Type header.
CWE: CWE-120
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/splayer_content_type.rb; https://www.exploit-db.com/exploits/17243; https://www.exploit-db.com/exploits/17268
CVE: CVE-2011-10023
Published: 2025-08-20
Description: MJM QuickPlayer (likely now referred to as MJM Player) version 2010 contains a stack-based buffer overflow vulnerability triggered by opening a malicious .s3m music file. The flaw occurs due to improper bounds checking in the file parser, allowing an attacker to overwrite memory and execute arbitrary code. Exploitation is achieved via a crafted payload that bypasses DEP and ASLR protections using ROP techniques, and requires user interaction to open the file.
CWE: CWE-121
References: https://mjm-software.com; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/mjm_quickplayer_s3m.rb; https://web.archive.org/web/[PII_REDACTED]4042/https://www.corelan.be/index.php/forum/security-advisories/corelan-11-003-mjm-quickplayer-2-3-2010-stack-buffer-overflow-s3m/
CVE: CVE-2011-10024
Published: 2025-08-20
Description: MJM Core Player (likely now referred to as MJM Player) 2011 is vulnerable to a stack-based buffer overflow when parsing specially crafted .s3m music files. The vulnerability arises from improper bounds checking in the file parser, allowing an attacker to overwrite memory on the stack and execute arbitrary code. Exploitation is triggered when a user opens a malicious .s3m file, and the exploit bypasses DEP and ASLR protections using a ROP chain.
CWE: CWE-121
References: https://mjm-software.com; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/mjm_coreplayer2011_s3m.rb; https://web.archive.org/web/[PII_REDACTED]5816/https://www.corelan.be/index.php/forum/security-advisories/corelan-11-004-mjm-core-multimedia-suite-2011-2-4-stack-buffer-overflow-s3m/
CVE: CVE-2011-10025
Published: 2025-08-20
Description: Subtitle Processor 7.7.1 contains a buffer overflow vulnerability in its .m3u file parser. When a crafted playlist file is opened, the application converts input to Unicode and copies it to a fixed-size stack buffer without proper bounds checking. This allows an attacker to overwrite the Structured Exception Handler (SEH) and execute arbitrary code.
CWE: CWE-120
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/subtitle_processor_m3u_bof.rb; https://sourceforge.net/projects/subtitleproc/; https://www.exploit-db.com/exploits/17217
CVE: CVE-2011-10026
Published: 2025-08-20
Description: Spreecommerce versions prior to 0.50.x contain a remote command execution vulnerability in the API's search functionality. Improper input sanitation allows attackers to inject arbitrary shell commands via the search[instance_eval] parameter, which is dynamically invoked using Ruby’s send method. This flaw enables unauthenticated attackers to execute commands on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/spree; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/spree_searchlogic_exec.rb; https://web.archive.org/web/[PII_REDACTED]3342/http://spreecommerce.com/blog/2011/04/19/security-fixes
CVE: CVE-2011-10027
Published: 2025-08-20
Description: AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files. By embedding an overly long string in a hyperlink tag, an attacker can trigger a stack-based buffer overflow due to the use of unsafe strcpy operations. This allows remote attackers to execute arbitrary code when a victim opens a malicious .rtx file. AOL Desktop is end-of-life and no longer supported. Users are encouraged to migrate to AOL Desktop Gold or alternative platforms.
CWE: CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/aol_desktop_linktag.rb; https://www.exploit-db.com/exploits/16085; https://www.exploit-db.com/exploits/16107
CVE: CVE-2011-10028
Published: 2025-08-20
Description: The RealNetworks RealArcade platform includes an ActiveX control (InstallerDlg.dll, version 2.6.0.445) that exposes a method named Exec via the StubbyUtil.ProcessMgr COM object. This method allows remote attackers to execute arbitrary commands on a victim's Windows machine without proper validation or restrictions. This platform was sometimes referred to or otherwise known as RealArcade or Arcade Games and has since consolidated with RealNetworks' platform, GameHouse.
CWE: CWE-623
References: https://advisories.checkpoint.com/defense/advisories/public/2011/cpai-2011-347.html; https://archive.org/details/com.real.arcade; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/real_arcade_installerdlg.rb
CVE: CVE-2011-10029
Published: 2025-08-20
Description: Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the __output_1() function of sfsservice.exe. This results in a denial of service (DoS) condition.
CWE: CWE-134
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/dos/windows/ftp/solarftp_user.rb; https://web.archive.org/web/[PII_REDACTED]2553/http://solarftp.com/blog/news/solar-ftp-server-2-1-2.html; https://web.archive.org/web/[PII_REDACTED]1514/https://solarftp.com/
CVE: CVE-2011-10030
Published: 2025-08-20
Description: Foxit PDF Reader <  4.3.1.0218 exposes a JavaScript API function, createDataObject(), that allows untrusted PDF content to write arbitrary files anywhere on disk. By embedding a malicious PDF that calls this API, an attacker can drop executables or scripts into privileged folders, leading to code execution the next time the system boots or the user logs in.
CWE: CWE-73
References: http://scarybeastsecurity.blogspot.com/2011/03/dangerous-file-write-bug-in-foxit-pdf.html; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/foxit_reader_filewrite.rb; https://www.exploit-db.com/exploits/16978
CVE: CVE-2012-10061
Published: 2025-08-20
Description: Sockso Music Host Server versions <= 1.5 are vulnerable to a path traversal flaw that allows unauthenticated remote attackers to read arbitrary files from the server’s filesystem. The vulnerability exists in the HTTP interface on port 4444, where the endpoint /file/ fails to properly sanitize user-supplied input. Attackers can traverse directories and access sensitive files outside the intended web root.
CWE: CWE-22
References: http://aluigi.altervista.org/adv/sockso_1-adv.txt; https://github.com/rodnaph/sockso; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/sockso_traversal.rb
CVE: CVE-2024-57157
Published: 2025-08-20
Description: Incorrect access control in Jantent v1.1 allows attackers to bypass authentication and access sensitive APIs without a token.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://github.com/jantent/Jantent/issues/9
CVE: CVE-2025-55731
Published: 2025-08-20
Description: Frappe is a full-stack web application framework. A carefully crafted request could extract data that the user would normally not have access to, via SQL injection. This vulnerability is fixed in 15.74.2 and 14.96.15.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/frappe/frappe/commit/93ee30c638bf7a7e33e2937a0adccac14c38b410; https://github.com/frappe/frappe/commit/c2b01e3eb6f50e9bd05df0440f5cbf5dfbc1badd; https://github.com/frappe/frappe/security/advisories/GHSA-5p8f-568f-vfq2
CVE: CVE-2025-55732
Published: 2025-08-20
Description: Frappe is a full-stack web application framework. Prior to 15.74.2 and 14.96.15, an attacker could implement SQL injection through specially crafted requests, allowing malicious people to access sensitive information. This vulnerability is a bypass of the official patch released for CVE-2025-52895. This vulnerability is fixed in 15.74.2 and 14.96.15.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/frappe/frappe/commit/24dd2d9420a7c68ce09875cb18586d1bf071c857; https://github.com/frappe/frappe/commit/abe2cc25e333cd794405d12caec4da0279a54e6e; https://github.com/frappe/frappe/security/advisories/GHSA-6rpr-2hjx-w9vp
CVE: CVE-2025-55751
Published: 2025-08-20
Description: OnboardLite is the result of the Influx Initiative, our vision for an improved student organization lifecycle at the University of Central Florida. An attacker can craft a link to the trusted application that, when visited, redirects the user to a malicious external site. This enables phishing, credential theft, malware delivery, and trust abuse. Any version with commit hash 6cca19e or later implements jwt signing for the redirect url parameter.
CWE: CWE-601
References: https://github.com/HackUCF/OnboardLite/commit/6cca19ea4f47af125caa08ef82594844f039e07e; https://github.com/HackUCF/OnboardLite/security/advisories/GHSA-p8c5-qp4c-qr2m
CVE: CVE-2025-9233
Published: 2025-08-20
Description: A security vulnerability has been detected in Scada-LTS up to 2.7.8.1. Impacted is an unknown function of the file view_edit.shtm. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/CVE-2025-9233.md; https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/Stored%20XSS%20endpoint%20view_edit.shtm%20parameter%20name.md#poc; https://vuldb.com/?ctiid.320766