deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-3221
Published: 2025-06-21
Description: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://www.ibm.com/support/pages/node/7235496
CVE: CVE-2025-3629
Published: 2025-06-21
Description: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 

could allow an authenticated user to delete another user's comments due to improper ownership management.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-282
References: https://www.ibm.com/support/pages/node/7235496
CVE: CVE-2025-6405
Published: 2025-06-21
Description: A vulnerability classified as critical was found in Campcodes Online Teacher Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit-teacher-detail.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/ASantsSec/CVE/issues/14; https://vuldb.com/?ctiid.313399; https://vuldb.com/?id.313399
CVE: CVE-2025-6406
Published: 2025-06-21
Description: A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/forgot-password.php. The manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/ASantsSec/CVE/issues/11; https://vuldb.com/?ctiid.313400; https://vuldb.com/?id.313400
CVE: CVE-2025-6407
Published: 2025-06-21
Description: A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /user-login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/ASantsSec/CVE/issues/12; https://vuldb.com/?ctiid.313401; https://vuldb.com/?id.313401
CVE: CVE-2025-6408
Published: 2025-06-21
Description: A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /doctor/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/ASantsSec/CVE/issues/15; https://vuldb.com/?ctiid.313402; https://vuldb.com/?id.313402
CVE: CVE-2025-6409
Published: 2025-06-21
Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.1 and classified as critical. This issue affects some unknown processing of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/f1rstb100d/myCVE/issues/82; https://phpgurukul.com/; https://vuldb.com/?ctiid.313403
CVE: CVE-2025-6410
Published: 2025-06-21
Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been classified as critical. Affected is an unknown function of the file /admin/edit-art-medium-detail.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/f1rstb100d/myCVE/issues/83; https://phpgurukul.com/; https://vuldb.com/?ctiid.313404
CVE: CVE-2025-6411
Published: 2025-06-21
Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/changepropic.php. The manipulation of the argument imageid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/f1rstb100d/myCVE/issues/84; https://phpgurukul.com/; https://vuldb.com/?ctiid.313405
CVE: CVE-2025-6412
Published: 2025-06-21
Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/f1rstb100d/myCVE/issues/85; https://phpgurukul.com/; https://vuldb.com/?ctiid.313406
CVE: CVE-2025-6413
Published: 2025-06-21
Description: A vulnerability classified as critical has been found in PHPGurukul Art Gallery Management System 1.1. This affects an unknown part of the file /admin/changeimage1.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/f1rstb100d/myCVE/issues/86; https://phpgurukul.com/; https://vuldb.com/?ctiid.313407
CVE: CVE-2025-6414
Published: 2025-06-21
Description: A vulnerability classified as critical was found in PHPGurukul Art Gallery Management System 1.1. This vulnerability affects unknown code of the file /admin/changeimage2.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/f1rstb100d/myCVE/issues/87; https://phpgurukul.com/; https://vuldb.com/?ctiid.313408
CVE: CVE-2025-6415
Published: 2025-06-21
Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.1. This issue affects some unknown processing of the file /admin/changeimage3.php. The manipulation of the argument editid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/f1rstb100d/myCVE/issues/88; https://phpgurukul.com/; https://vuldb.com/?ctiid.313409
CVE: CVE-2025-6416
Published: 2025-06-21
Description: A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.1. Affected is an unknown function of the file /admin/changeimage4.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/f1rstb100d/myCVE/issues/89; https://phpgurukul.com/; https://vuldb.com/?ctiid.313410
CVE: CVE-2025-6417
Published: 2025-06-21
Description: A vulnerability has been found in PHPGurukul Art Gallery Management System 1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-artist.php. The manipulation of the argument awarddetails leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/f1rstb100d/myCVE/issues/90; https://phpgurukul.com/; https://vuldb.com/?ctiid.313411
CVE: CVE-2025-6418
Published: 2025-06-21
Description: A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit_query_account.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/zzb1388/cve/issues/4; https://vuldb.com/?ctiid.313412
CVE: CVE-2025-6419
Published: 2025-06-21
Description: A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/edit_room.php. The manipulation of the argument room_type leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/zzb1388/cve/issues/5; https://vuldb.com/?ctiid.313413
CVE: CVE-2025-1987
Published: 2025-06-21
Description: A Cross-Site Scripting (XSS) vulnerability has been identified in Psono-Client’s handling of vault entries of type website_password and bookmark, as used in Bitdefender SecurePass. The client does not properly sanitize the URL field in these entries. As a result, an attacker can craft a malicious vault entry (or trick a user into creating or importing one) with a javascript:URL. When the user interacts with this entry (for example, by clicking or opening it), the application will execute the malicious JavaScript in the context of the Psono vault. This allows an attacker to run arbitrary code in the victim’s browser, potentially giving them access to the user’s password vault and sensitive data.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bitdefender.com/support/support/security-advisories/stored-xss-in-psono-client-via-malicious-vault-entry-urls
CVE: CVE-2025-6420
Published: 2025-06-21
Description: A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add_room.php. The manipulation of the argument room_type leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/zzb1388/cve/issues/6; https://vuldb.com/?ctiid.313414
CVE: CVE-2025-6421
Published: 2025-06-21
Description: A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/add_account.php. The manipulation of the argument name/admin_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/zzb1388/cve/issues/7; https://vuldb.com/?ctiid.313415
CVE: CVE-2025-52916
Published: 2025-06-21
Description: Yealink RPS before 2025-06-04 lacks SN verification attempt limits, enabling brute-force enumeration (last five digits).
CVSS Score: 2.2 (LOW)
CWE: CWE-307
References: https://dnip.ch/2025/06/25/yealink-voip-phones-insecurity-by-design/; https://seclists.org/fulldisclosure/2025/Jun/20; https://support.yealink.com/en/portal/knowledge/show?id=6476e7cd6a27da76bd06a9c9
CVE: CVE-2025-52917
Published: 2025-06-21
Description: The Yealink RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive requests.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770
References: https://dnip.ch/2025/06/25/yealink-voip-phones-insecurity-by-design/; https://seclists.org/fulldisclosure/2025/Jun/20; https://support.yealink.com/en/portal/knowledge/show?id=6476e7cd6a27da76bd06a9c9
CVE: CVE-2025-52918
Published: 2025-06-21
Description: Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-863
References: https://dnip.ch/2025/06/25/yealink-voip-phones-insecurity-by-design/; https://seclists.org/fulldisclosure/2025/Jun/20; https://support.yealink.com/en/portal/knowledge/show?id=646b44278ef325311f38303f
CVE: CVE-2025-52919
Published: 2025-06-21
Description: In Yealink RPS before 2025-05-26, the certificate upload function does not properly validate certificate content, potentially allowing invalid certificates to be uploaded.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-295
References: https://dnip.ch/2025/06/25/yealink-voip-phones-insecurity-by-design/; https://seclists.org/fulldisclosure/2025/Jun/20; https://support.yealink.com/en/portal/knowledge/show?id=6476e7cd6a27da76bd06a9c9
CVE: CVE-2025-6422
Published: 2025-06-21
Description: A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=save_settings of the component About Content Page. The manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434
References: https://github.com/Sp1d3rL1/CVE/issues/2; https://vuldb.com/?ctiid.313417; https://vuldb.com/?id.313417
CVE: CVE-2025-6446
Published: 2025-06-21
Description: A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. This issue affects some unknown processing of the file /clientdetails/admin/index.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/kakalalaww/CVE/issues/18; https://vuldb.com/?ctiid.313553
CVE: CVE-2025-6447
Published: 2025-06-22
Description: A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/kakalalaww/CVE/issues/19; https://vuldb.com/?ctiid.313554
CVE: CVE-2025-6448
Published: 2025-06-22
Description: A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_room.php. The manipulation of the argument room_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/zzb1388/cve/issues/8; https://vuldb.com/?ctiid.313555
CVE: CVE-2025-52923
Published: 2025-06-22
Description: Sangfor aTrust through 2.4.10 allows users to modify the ExecStartPre command.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-732
References: https://community.sangfor.com/forum.php?mod=viewthread&tid=10842; https://github.com/r00t7oo2jm/cVetest/blob/main/p0c.sh; https://github.com/r00t7oo2jm/cVetest/blob/main/sangf0r-poc.pdf
CVE: CVE-2025-6449
Published: 2025-06-22
Description: A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/checkout_query.php. The manipulation of the argument transaction_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/zzb1388/cve/issues/9; https://vuldb.com/?ctiid.313556
CVE: CVE-2025-6450
Published: 2025-06-22
Description: A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/confirm_reserve.php. The manipulation of the argument transaction_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/zzb1388/cve/issues/10; https://vuldb.com/?ctiid.313557
CVE: CVE-2025-6451
Published: 2025-06-22
Description: A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/delete_pending.php. The manipulation of the argument transaction_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/zzb1388/cve/issues/11; https://vuldb.com/?ctiid.313558
CVE: CVE-2025-6452
Published: 2025-06-22
Description: A vulnerability was found in CodeAstro Patient Record Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the component Generate New Report Page. The manipulation of the argument Patient Name/Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94
References: https://codeastro.com/; https://github.com/Vanshdhawan188/CodeAstro-Online-Healthcare-Patient-Record-Management-System/blob/main/CodeAstro-Online-Healthcare-Patient-Record-Management-System.md; https://github.com/Vanshdhawan188/CodeAstro-Online-Healthcare-Patient-Record-Management-System/blob/main/CodeAstro-Online-Healthcare-Patient-Record-Management-System.md#-proof-of-concept-poc
CVE: CVE-2025-6453
Published: 2025-06-22
Description: A vulnerability classified as critical has been found in diyhi bbs 6.8. Affected is the function Add of the file /src/main/java/cms/web/action/template/ForumManageAction.java of the component API. The manipulation of the argument dirName leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250618-01.md; https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250618-01.md#steps-to-reproduce; https://vuldb.com/?ctiid.313560
CVE: CVE-2025-6455
Published: 2025-06-22
Description: A vulnerability classified as critical was found in code-projects Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /messageexec.php. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/blueandhack/cve/issues/3; https://vuldb.com/?ctiid.313561
CVE: CVE-2025-6456
Published: 2025-06-22
Description: A vulnerability, which was classified as critical, has been found in code-projects Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /reservation/order.php. The manipulation of the argument Start leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/blueandhack/cve/issues/2; https://vuldb.com/?ctiid.313562
CVE: CVE-2025-6457
Published: 2025-06-22
Description: A vulnerability, which was classified as critical, was found in code-projects Online Hotel Reservation System 1.0. This affects an unknown part of the file /reservation/demo.php. The manipulation of the argument Start leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/blueandhack/cve/issues/1; https://vuldb.com/?ctiid.313563
CVE: CVE-2025-6458
Published: 2025-06-22
Description: A vulnerability has been found in code-projects Online Hotel Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/execedituser.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/Kristin5634487/cve/issues/1; https://vuldb.com/?ctiid.313564
CVE: CVE-2025-6466
Published: 2025-06-22
Description: A vulnerability was found in ageerle ruoyi-ai 2.0.0 and classified as critical. Affected by this issue is the function speechToTextTranscriptionsV2/upload of the file ruoyi-modules/ruoyi-system/src/main/java/org/ruoyi/system/service/impl/SseServiceImpl.java. The manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.1 is able to address this issue. The patch is identified as 4e93ac86d4891c59ecfcd27c051de9b3c5379315. It is recommended to upgrade the affected component.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://github.com/ageerle/ruoyi-ai/commit/4e93ac86d4891c59ecfcd27c051de9b3c5379315; https://github.com/ageerle/ruoyi-ai/issues/9; https://github.com/ageerle/ruoyi-ai/issues/9#event[PII_REDACTED]8
CVE: CVE-2025-6467
Published: 2025-06-22
Description: A vulnerability was found in code-projects Online Bidding System 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/Kristin5634487/cve/issues/2; https://vuldb.com/?ctiid.313575
CVE: CVE-2025-6468
Published: 2025-06-22
Description: A vulnerability was found in code-projects Online Bidding System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /bidnow.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/ganzhi-qcy/cve/issues/12; https://vuldb.com/?ctiid.313576
CVE: CVE-2025-6469
Published: 2025-06-22
Description: A vulnerability was found in code-projects Online Bidding System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /details.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/W2-l0mechan1c/cve/issues/2; https://vuldb.com/?ctiid.313577