deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-10859
Published: 2025-09-30
Description: Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed all tabs. This vulnerability was fixed in Firefox for iOS 143.1.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-359
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1684624; https://www.mozilla.org/security/advisories/mfsa2025-79/
CVE: CVE-2025-11152
Published: 2025-09-30
Description: Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3.
CVSS Score: 8.6 (HIGH)
CWE: CWE-190
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1987246; https://www.mozilla.org/security/advisories/mfsa2025-80/
CVE: CVE-2025-11153
Published: 2025-09-30
Description: JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1987481; https://www.mozilla.org/security/advisories/mfsa2025-80/
CVE: CVE-2025-34217
Published: 2025-09-30
Description: Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) contain an undocumented 'printerlogic' user with a hardcoded SSH public key in '~/.ssh/authorized_keys' and a sudoers rule granting the printerlogic_ssh group 'NOPASSWD: ALL'. Possession of the matching private key gives an attacker root access to the appliance.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-321
References: https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm; https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm; https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-undocumented-hardcoded-ssh-key
CVE: CVE-2025-52043
Published: 2025-09-30
Description: In Frappe ERPNext v15.57.5, the function import_coa() at erpnext/accounts/doctype/chart_of_accounts_importer/chart_of_accounts_importer.py is vulnerable to SQL injection, which allows an attacker to extract all information from databases by injecting a SQL query into the company parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/blob/main/2025/Frappe%20Framework%20-%20Multiple%20SQL%20Injection.md; https://github.com/frappe/erpnext/pull/49192/commits/7fa4ed6139dfb737995fe297e40f4f5440c748c3
CVE: CVE-2025-52047
Published: 2025-09-30
Description: In Frappe ErpNext v15.57.5, the function get_income_account() at erpnext/controllers/queries.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the filters.disabled parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/blob/main/2025/Frappe%20Framework%20-%20Multiple%20SQL%20Injection.md; https://github.com/frappe/erpnext/pull/49192/commits/6320f7290f93a5278ffdfaa790af70427c20a1c8
CVE: CVE-2025-52049
Published: 2025-09-30
Description: In Frappe ErpNext v15.57.5, the function get_timesheet_detail_rate() at erpnext/projects/doctype/timesheet/timesheet.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query into the timelog parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/blob/main/2025/Frappe%20Framework%20-%20Multiple%20SQL%20Injection.md; https://github.com/frappe/erpnext/pull/49192/commits/e563ed0c75fd20135a6ad288e957e75eac7d3b8d
CVE: CVE-2025-52050
Published: 2025-09-30
Description: In Frappe ERPNext 15.57.5, the function get_loyalty_program_details_with_points() at erpnext/accounts/doctype/loyalty_program/loyalty_program.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the expiry_date parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/blob/main/2025/Frappe%20Framework%20-%20Multiple%20SQL%20Injection.md; https://github.com/frappe/erpnext/pull/49192/commits/8696ba2f5d9e99c799d4aef577f72f2fae5678e7
CVE: CVE-2025-9230
Published: 2025-09-30
Description: Issue summary: An application trying to decrypt CMS messages encrypted using
password based encryption can trigger an out-of-bounds read and write.

Impact summary: This out-of-bounds read may trigger a crash which leads to
Denial of Service for an application. The out-of-bounds write can cause
a memory corruption which can have various consequences including
a Denial of Service or Execution of attacker-supplied code.

Although the consequences of a successful exploit of this vulnerability
could be severe, the probability that the attacker would be able to
perform it is low. Besides, password based (PWRI) encryption support in CMS
messages is very rarely used. For that reason the issue was assessed as
Moderate severity according to our Security Policy.

The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this
issue, as the CMS implementation is outside the OpenSSL FIPS module
boundary.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-787
References: https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45; https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280; https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def
CVE: CVE-2025-9231
Published: 2025-09-30
Description: Issue summary: A timing side-channel which could potentially allow remote
recovery of the private key exists in the SM2 algorithm implementation on 64 bit
ARM platforms.

Impact summary: A timing side-channel in SM2 signature computations on 64 bit
ARM platforms could allow recovering the private key by an attacker..

While remote key recovery over a network was not attempted by the reporter,
timing measurements revealed a timing signal which may allow such an attack.

OpenSSL does not directly support certificates with SM2 keys in TLS, and so
this CVE is not relevant in most TLS contexts.  However, given that it is
possible to add support for such certificates via a custom provider, coupled
with the fact that in such a custom provider context the private key may be
recoverable via remote timing measurements, we consider this to be a Moderate
severity issue.

The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this
issue, as SM2 is not an approved algorithm.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-385
References: https://github.com/openssl/openssl/commit/567f64386e[PII_REDACTED]2226824b6a179885a0fe; https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698; https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4
CVE: CVE-2025-9232
Published: 2025-09-30
Description: Issue summary: An application using the OpenSSL HTTP client API functions may
trigger an out-of-bounds read if the 'no_proxy' environment variable is set and
the host portion of the authority component of the HTTP URL is an IPv6 address.

Impact summary: An out-of-bounds read can trigger a crash which leads to
Denial of Service for an application.

The OpenSSL HTTP client API functions can be used directly by applications
but they are also used by the OCSP client functions and CMP (Certificate
Management Protocol) client implementation in OpenSSL. However the URLs used
by these implementations are unlikely to be controlled by an attacker.

In this vulnerable code the out of bounds read can only trigger a crash.
Furthermore the vulnerability requires an attacker-controlled URL to be
passed from an application to the OpenSSL function and the user has to have
a 'no_proxy' environment variable set. For the aforementioned reasons the
issue was assessed as Low severity.

The vulnerable code was introduced in the following patch releases:
3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.

The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this
issue, as the HTTP client implementation is outside the OpenSSL FIPS module
boundary.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: https://github.com/openssl/openssl/commit/2b4ec20e[PII_REDACTED]2922eaff25346d362dcb35; https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b; https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3
CVE: CVE-2025-11178
Published: 2025-09-30
Description: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42386, Acronis True Image for Western Digital (Windows) before build 42636, Acronis True Image for SanDisk (Windows) before build 42679, Acronis True Image OEM (Windows) before build 42575.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: https://security-advisory.acronis.com/advisories/SEC-7078
CVE: CVE-2025-28016
Published: 2025-09-30
Description: A Reflected Cross-Site Scripting (XSS) vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the fname, lname, and contact parameters.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/User%20Registration%20&%20Login%20and%20User%20Management%20System%20With%20admin%20panel/XSS%20njection%20-%20edit-profile.md
CVE: CVE-2025-56301
Published: 2025-09-30
Description: An issue was discovered in Chipsalliance Rocket-Chip commit f517abbf41abb65cea37421d3559f9739efd00a9 (2025-01-29) allowing attackers to corrupt exception handling and privilege state transitions via a flawed interaction between exception handling and MRET return mechanisms in the CSR logic when an exception is triggered during MRET execution. The Control and Status Register (CSR) logic has a flawed interaction between exception handling and exception return (MRET) mechanisms which can cause faulty trap behavior. When the MRET instruction is executed in machine mode without being in an exception state, an Instruction Access Fault may be triggered. This results in both the exception handling logic and the exception return logic activating simultaneously, leading to conflicting updates to the control and status registers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1281
References: https://github.com/chipsalliance/rocket-chip; https://github.com/chipsalliance/rocket-chip/blob/f517abbf41abb65cea37421d3559f9739efd00a9/src/main/scala/rocket/CSR.scala; https://github.com/chipsalliance/rocket-chip/blob/master/src/main/scala/rocket/CSR.scala
CVE: CVE-2025-57852
Published: 2025-09-30
Description: A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-276
References: https://access.redhat.com/errata/RHSA-2025:16981; https://access.redhat.com/errata/RHSA-2025:16982; https://access.redhat.com/errata/RHSA-2025:16983
CVE: CVE-2025-7493
Published: 2025-09-30
Description: A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-1220
References: https://access.redhat.com/errata/RHSA-2025:17084; https://access.redhat.com/errata/RHSA-2025:17085; https://access.redhat.com/errata/RHSA-2025:17086
CVE: CVE-2025-7779
Published: 2025-09-30
Description: Local privilege escalation due to insecure XPC service configuration. The following products are affected: Acronis True Image (macOS) before build 42389, Acronis True Image for SanDisk (macOS) before build 42198, Acronis True Image for Western Digital (macOS) before build 42197, Acronis True Image OEM (macOS) before build 42571.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://security-advisory.acronis.com/advisories/SEC-8193
CVE: CVE-2025-54476
Published: 2025-09-30
Description: Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class.
CWE: CWE-79
References: https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-inadequate-content-filtering-within-the-checkattribute-filter-code.html
CVE: CVE-2025-54477
Published: 2025-09-30
Description: Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-user-enumeration-in-passkey-authentication-method.html
CVE: CVE-2025-55797
Published: 2025-09-30
Description: An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://github.com/FormCms; https://github.com/FormCms/FormCms; https://github.com/KKC73/me/tree/main/CVE-2025-55797
CVE: CVE-2025-56018
Published: 2025-09-30
Description: SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in Category Management via the category name field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/@sourabhthakur2109/stored-cross-site-scripting-xss-in-sourcecodester-web-based-pharmacy-product-management-system-1e85d144079b
CVE: CVE-2025-56571
Published: 2025-09-30
Description: Finance.js v4.1.0 contains a Denial of Service (DoS) vulnerability via the IRR function’s depth parameter. Improper handling of the recursion/iteration limit can lead to excessive CPU usage, causing application stalls or crashes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-834
References: http://financejs.com; https://github.com/ebradyjobory/finance.js; https://medium.com/@nakah_/cve-2025-56571-and-cve-2025-56572-denial-of-service-vulnerabilities-in-finance-js-78f8b399f53b
CVE: CVE-2025-56572
Published: 2025-09-30
Description: An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero() parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://financejs.com; https://github.com/ebradyjobory/finance.js; https://medium.com/@nakah_/cve-2025-56571-and-cve-2025-56572-denial-of-service-vulnerabilities-in-finance-js-78f8b399f53b
CVE: CVE-2025-56676
Published: 2025-09-30
Description: TitanSystems Zender v3.9.7 contains an account takeover vulnerability in its password reset functionality. A temporary password or reset token issued to one user can be used to log in as another user, due to improper validation of token-user linkage. This allows remote attackers to gain unauthorized access to any user account by exploiting the password reset mechanism. The vulnerability occurs because the reset token is not correctly bound to the requesting account and is accepted for other user emails during login, enabling privilege escalation and information disclosure.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-1259
References: https://codecanyon.net/item/zender-android-mobile-devices-as-sms-gateway-saas-platform/26594230; https://darklotus.medium.com/cve-2025-56676-critical-vulnerability-in-zender-gateway-allows-account-takeover-2b5bcb50c762; https://previews.titansystems.ph/zender/dashboard/auth
CVE: CVE-2025-6033
Published: 2025-09-30
Description: There is a memory corruption vulnerability due to an out of bounds write in XML_Serialize() when using SymbolEditor in NI Circuit Design Suite.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.1 and prior versions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/improper-input-validation-causes-memory-corruption-vulnerabilities-in-circuit-design-suite.html
CVE: CVE-2025-6034
Published: 2025-09-30
Description: There is a memory corruption vulnerability due to an out of bounds read in DefaultFontOptions() when using SymbolEditor in NI Circuit Design Suite.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.1 and prior versions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/improper-input-validation-causes-memory-corruption-vulnerabilities-in-circuit-design-suite.html
CVE: CVE-2025-56207
Published: 2025-09-30
Description: A security flaw in the '_transfer' function of a smart contract implementation for Money Making Opportunity (MMO), an Ethereum ERC721 Non-Fungible Token (NFT) project, allows users or attackers to transfer NFTs to the zero address, leading to permanent asset loss and non-compliance with the ERC721 standard. The eth address is 0x41d3d86a84c8507a7bc14f2491ec4d188fa944e7, contract name is MoneyMakingOpportunity, and compiler version is v0.8.17+commit.8df45f5f.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1259
References: https://github.com/Monekon/CVE/blob/main/Vulnerabilities/MMO_Transfer_to_ZeroAddress.md
CVE: CVE-2025-56520
Published: 2025-09-30
Description: Dify v1.6.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/langgenius/dify/issues/22532
CVE: CVE-2025-10725
Published: 2025-09-30
Description: A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example as a data scientist using a standard Jupyter notebook, can escalate their privileges to a full cluster administrator. This allows for the complete compromise of the cluster's confidentiality, integrity, and availability. The attacker can steal sensitive data, disrupt all services, and take control of the underlying infrastructure, leading to a total breach of the platform and all applications hosted on it.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-266
References: https://access.redhat.com/errata/RHSA-2025:16981; https://access.redhat.com/errata/RHSA-2025:16982; https://access.redhat.com/errata/RHSA-2025:16983
CVE: CVE-2025-11195
Published: 2025-09-30
Description: Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can change the project name directly in the configuration file to a name that already exists. This issue stems from a lack of effective verification of the uniqueness of project names when editing them outside the application in affected versions. This vulnerability was remediated in version 7.5.021 of the product.
CVSS Score: 3.3 (LOW)
CWE: CWE-20, CWE-345, CWE-345
References: https://docs.rapid7.com/insight/releasenotes-2025sep/#application-security-insightappsec-and-appspider
CVE: CVE-2025-23291
Published: 2025-09-30
Description: NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to information disclosure.
CVSS Score: 2.4 (LOW)
CWE: CWE-312
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23291; https://nvidia.custhelp.com/app/answers/detail/a_id/5705; https://www.cve.org/CVERecord?id=CVE-2025-23291
CVE: CVE-2025-23292
Published: 2025-09-30
Description: NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to partial denial of service (UI component).
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-943
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23292; https://nvidia.custhelp.com/app/answers/detail/a_id/5705; https://www.cve.org/CVERecord?id=CVE-2025-23292
CVE: CVE-2025-23293
Published: 2025-09-30
Description: NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to information disclosure.
CVSS Score: 8.7 (HIGH)
CWE: CWE-306
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23293; https://nvidia.custhelp.com/app/answers/detail/a_id/5705; https://www.cve.org/CVERecord?id=CVE-2025-23293
CVE: CVE-2025-56200
Published: 2025-09-30
Description: A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL() function uses '://' as a delimiter to parse protocols, while browsers use ':' as the delimiter. This parsing difference allows attackers to bypass protocol and domain validation by crafting URLs leading to XSS and Open Redirect attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://validatorjs.com; https://gist.github.com/junan-98/27ae092aa40e2a057d41a0f95148f666; https://gist.github.com/junan-98/a93130505b258b9e4ec9f393e7533596
CVE: CVE-2025-56513
Published: 2025-09-30
Description: NiceHash QuickMiner 6.12.0 perform software updates over HTTP without validating digital signatures or hash checks. An attacker capable of intercepting or redirecting traffic to the update url and can hijack the update process and deliver arbitrary executables that are automatically executed, resulting in full remote code execution. This constitutes a critical supply chain attack vector. NOTE: the Supplier reports that the existence of an http://update.nicehash.com URL is a fabrication, and that there is no other use of HTTP (rather than HTTPS).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-494
References: https://medium.com/@princep49036142/hijacking-the-miner-how-nicehashminers-auto-update-pipeline-enables-zero-click-rce-ed6a36b6769b; https://medium.com/@princep49036142/hijacking-the-miner-zero-click-rce-in-nicehash-quickminer-cve-2025-56513-4a7190295e6c; https://medium.com/@princep49036142/hijacking-the-miner-how-nicehashminers-auto-update-pipeline-enables-zero-click-rce-ed6a36b6769b
CVE: CVE-2025-56675
Published: 2025-09-30
Description: The EKEN video doorbell T6 BT60PLUS_MAIN_V1.0_GC1084_20230531 periodically sends debug logs to the EKEN cloud servers with sensitive information such as the Wi-Fi SSID and password.
CVSS Score: 3.5 (LOW)
CWE: CWE-669
References: https://httpscolonforwardslashforwardslashwwwdotzoltanbalazsdotcom.com/2025/07/15/eken-wifi-leak.html
CVE: CVE-2025-57254
Published: 2025-09-30
Description: An SQL injection vulnerability in user-login.php and index.php of Karthikg1908 Hospital Management System (HMS) 1.0 allows remote attackers to execute arbitrary SQL queries via the username and password POST parameters. The application fails to properly sanitize input before embedding it into SQL queries, leading to unauthorized access or potential data breaches. This can result in privilege escalation, account takeover, or exposure of sensitive medical data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/Karthikg1908/Hospital-Management-System; https://github.com/ischyr/research-and-development/tree/main/CVE-2025-57254