deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-68156
Published: 2025-12-16
Description: Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including `flatten`, `min`, `max`, `mean`, and `median`, perform recursive traversal over user-provided data structures without enforcing a maximum recursion depth. If the evaluation environment contains deeply nested or cyclic data structures, these functions may recurse indefinitely until exceed the Go runtime stack limit. This results in a stack overflow panic, causing the host application to crash. While exploitability depends on whether an attacker can influence or inject cyclic or pathologically deep data into the
evaluation environment, this behavior represents a denial-of-service (DoS) risk and affects overall library robustness. Instead of returning a recoverable evaluation error, the process may terminate unexpectedly. In affected versions, evaluation of expressions that invoke certain builtin functions on untrusted or insufficiently validated data structures can lead to a process-level crash due to stack exhaustion. This issue is most relevant in scenarios where Expr is used to evaluate expressions against externally supplied or dynamically constructed environments; cyclic references (directly or indirectly) can be introduced into arrays, maps, or structs; and there are no application-level safeguards preventing deeply nested input data. In typical use cases with controlled, acyclic data, the issue may not manifest. However, when present, the resulting panic can be used to reliably crash the application, constituting a denial of service. The issue has been fixed in the v1.17.7 versions of Expr. The patch introduces a maximum recursion depth limit for affected builtin functions. When this limit is exceeded, evaluation aborts gracefully and returns a descriptive error instead of panicking. Additionally, the maximum depth can be customized by users via `builtin.MaxDepth`, allowing applications with legitimate deep structures to raise the limit in a controlled manner. Users are strongly encouraged to upgrade to the patched release, which includes both the recursion guard and comprehensive test coverage to prevent regressions. For users who cannot immediately upgrade, some mitigations are recommended. Ensure that evaluation environments cannot contain cyclic references, validate or sanitize externally supplied data structures before passing them to Expr, and/or wrap expression evaluation with panic recovery to prevent a full process crash (as a last-resort defensive measure). These workarounds reduce risk but do not fully eliminate the issue without the patch.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/expr-lang/expr/pull/870; https://github.com/expr-lang/expr/security/advisories/GHSA-cfpf-hrx2-8rv6
CVE: CVE-2025-68270
Published: 2025-12-16
Description: The Open edX Platform is a learning management platform. Prior to commit 05d0d0936daf82c476617257aa6c35f0cd4ca060, CourseLimitedStaffRole users are able to access and edit courses in studio if they are granted the role on an org rather than on a course, and CourseLimitedStaffRole users are able to list courses they have the role on in studio even though they are not meant to have any access on the studio side for the course. Commit 05d0d0936daf82c476617257aa6c35f0cd4ca060 fixes the issue.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-862
References: https://github.com/openedx/edx-platform/commit/05d0d0936daf82c476617257aa6c35f0cd4ca060; https://github.com/openedx/edx-platform/pull/37772; https://github.com/openedx/edx-platform/pull/37773
CVE: CVE-2025-13532
Published: 2025-12-16
Description: Insecure defaults in the Server Agent component of Fortra's Core Privileged Access Manager (BoKS) can result in the selection of weak password hash algorithms.  This issue affects BoKS Server Agent 9.0 instances that support yescrypt and are running in a BoKS 8.1 domain.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-916
References: https://www.fortra.com/security/advisories/product-security/fi-2025-014
CVE: CVE-2025-65834
Published: 2025-12-16
Description: Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and height parameters. By setting these values to extremely large numbers, the application attempts to allocate excessive memory during image processing, triggering a buffer overflow in the mlt_image_fill_white function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://bytescan.net/CVE/cve-2025-65834.html; https://sourceforge.net/projects/shotcut/files/v25.10.31/shotcut-macos-25.10.31.dmg/download
CVE: CVE-2025-8872
Published: 2025-12-16
Description: On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch.

This issue was discovered internally by Arista and is not aware of any malicious uses of this issue in customer networks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://www.arista.com/en/support/advisories-notices/security-advisory/23115-security-advisory-0128
CVE: CVE-2025-0852
Published: 2025-12-16
Description: Rejected reason: Voluntarily withdrawn
CVE: CVE-2025-14466
Published: 2025-12-16
Description: A vulnerability in the web interface of the Güralp Fortimus Series, Minimus Series and Certimus Series allows an unauthenticated attacker with network access to send specially-crafted HTTP requests that can cause the web service process to deliberately restart. Although this mechanism limits the impact of the attack, it results in a brief denial-of-service condition during the restart.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-350-01.json; https://www.cisa.gov/news-events/ics-advisories/icsa-25-350-01
CVE: CVE-2025-48429
Published: 2025-12-16
Description: An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to leaking heap data. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.4 (HIGH)
CWE: CWE-119, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2214; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2214
CVE: CVE-2025-52582
Published: 2025-12-16
Description: An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.4 (HIGH)
CWE: CWE-119, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2211; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2211
CVE: CVE-2025-53618
Published: 2025-12-16
Description: An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function `grayscale_convert` is called based of the value of the malicious DICOM file specifying the intended interpretation of the image pixel data
CVSS Score: 7.4 (HIGH)
CWE: CWE-119, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2210
CVE: CVE-2025-53619
Published: 2025-12-16
Description: An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function `null_convert` is called based of the value of the malicious DICOM file specifying the intended interpretation of the image pixel data
CVSS Score: 7.4 (HIGH)
CWE: CWE-119, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2210
CVE: CVE-2025-64520
Published: 2025-12-16
Description: GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://github.com/glpi-project/glpi/commit/a3d5cc4a63ae592c0b5592ebe6d562164904dab3; https://github.com/glpi-project/glpi/security/advisories/GHSA-62p9-prpq-j62q
CVE: CVE-2025-68274
Published: 2025-12-16
Description: SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's `NewResponseFromRequest` function that affects all normal SIP operations. The vulnerability allows remote attackers to crash any SIP application by sending a single malformed SIP request without a To header. The vulnerability occurs when SIP message parsing succeeds for a request missing the To header, but the response creation code assumes the To header exists without proper nil checks. This affects routine operations like call setup, authentication, and message handling - not just error cases. This vulnerability affects all SIP applications using the sipgo library, not just specific configurations or edge cases, as long as they make use of the `NewResponseFromRequest` function. Version 1.0.0-alpha-1 contains a patch for the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-755, CWE-476
References: https://github.com/emiago/sipgo/commit/dc9669364a154ec6d134e542f6a63c31b5afe6e8; https://github.com/emiago/sipgo/security/advisories/GHSA-c623-f998-8hhv
CVE: CVE-2025-14765
Published: 2025-12-16
Description: Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_16.html; https://issues.chromium.org/issues/448294721
CVE: CVE-2025-14766
Published: 2025-12-16
Description: Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-787
References: https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_16.html; https://issues.chromium.org/issues/466786677
CVE: CVE-2025-34288
Published: 2025-12-16
Description: Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions. A user‑accessible maintenance script may be executed as root via sudo and includes an application file that is writable by a lower‑privileged user. A local attacker with access to the application account can modify this file to introduce malicious code, which is then executed with elevated privileges when the script is run. Successful exploitation results in arbitrary code execution as the root user.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-732
References: https://www.nagios.com/changelog/nagios-xi/2026r1-1/; https://www.vulncheck.com/advisories/nagios-xi-privilege-escalation-via-writable-php-include-executed-with-sudo
CVE: CVE-2025-14700
Published: 2025-12-17
Description: An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code execution via Server Side Template Injection.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-1336
References: https://gitlab.com/crafty-controller/crafty-4/-/issues/646
CVE: CVE-2025-14701
Published: 2025-12-17
Description: An input neutralization vulnerability in the Server MOTD component of Crafty Controller allows a remote, unauthenticated attacker to perform stored XSS via server MOTD modification.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://gitlab.com/crafty-controller/crafty-4/-/issues/647
CVE: CVE-2025-53524
Published: 2025-12-17
Description: Fuji Electric Monitouch V-SFT-6 is vulnerable to an out-of-bounds write 
while processing a specially crafted project file, which may allow an 
attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://felib.fujielectric.co.jp/en/document_search?tab=software&document1%5B1%5D=M10009&document2%5B1%5D=M20104&product1%5B1%5D=P10003&product2%5B1%5D=P20023&product3%5B1%5D=P30623&product4%5B1%5D=S11133&discontinued%5B1%5D=0&count=20&sort=en_title&page=1&region=en-glb; https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-01.json; https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-01
CVE: CVE-2025-11009
Published: 2025-12-17
Description: Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GT Designer3 Version1 (GOT2000) all versions and Mitsubishi Electric GT Designer3 Version1 (GOT1000) all versions allows a local unauthenticated attacker to obtain plaintext credentials from the project file for GT Designer3. This could allow the attacker to operate illegally GOT2000 series or GOT1000 series by using the obtained credentials.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-312
References: https://jvn.jp/vu/JVNVU99629801/; https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-017_en.pdf
CVE: CVE-2025-11369
Published: 2025-12-17
Description: The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to unauthorized access of data due to a missing or incorrect capability checks on the get_instagram_access_token_callback, google_map_api_key_save_callback and get_siteinfo functions in all versions up to, and including, 5.7.2. This makes it possible for authenticated attackers, with Author-level access and above, to view API keys configured for the external services.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/essential-blocks/tags/5.7.0/includes/Integrations/GoogleMap.php#L50; https://plugins.trac.wordpress.org/browser/essential-blocks/tags/5.7.0/includes/Integrations/Instagram.php#L20; https://plugins.trac.wordpress.org/browser/essential-blocks/tags/5.7.0/includes/Integrations/OpenVerse.php#L108
CVE: CVE-2025-14801
Published: 2025-12-17
Description: A security vulnerability has been detected in xiweicheng TMS up to 2.28.0. This affects the function createComment of the file /admin/blog/comment/create. Such manipulation of the argument content leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/ha1yu-Yiqiyin/warehouse/blob/main/TMS_v2.28.0_XSS-1.md; https://vuldb.com/?ctiid.336939; https://vuldb.com/?id.336939
CVE: CVE-2025-14302
Published: 2025-12-17
Description: Certain motherboard models developed by GIGABYTE has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-693
References: https://www.gigabyte.com/Support/Security?type=1; https://www.twcert.org.tw/en/cp-139-10575-e4f41-2.html; https://www.twcert.org.tw/tw/cp-132-10574-ddf09-1.html
CVE: CVE-2025-14303
Published: 2025-12-17
Description: Certain motherboard models developed by MSI has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-693
References: https://csr.msi.com/global/product-security-advisories; https://www.twcert.org.tw/en/cp-139-10577-3cd58-2.html; https://www.twcert.org.tw/tw/cp-132-10576-0a0fd-1.html
CVE: CVE-2025-13977
Published: 2025-12-17
Description: The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple attack vectors in all versions up to, and including, 6.5.3. This is due to insufficient input sanitization and output escaping in the Event Calendar widget's custom attributes handling and the Image Masking module's element ID rendering. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/tags/6.5.1/assets/front-end/js/view/event-calendar.min.js; https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/tags/6.5.1/includes/Extensions/Image_Masking.php#L498; https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/tags/6.5.1/includes/Extensions/Image_Masking.php#L587
CVE: CVE-2025-14304
Published: 2025-12-17
Description: Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd. has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-693
References: https://www.asrock.com/support/Security.asp; https://www.asrockind.com/zh-tw/security-center; https://www.twcert.org.tw/en/cp-139-10579-9205b-2.html
CVE: CVE-2025-14305
Published: 2025-12-17
Description: ListCheck.exe developed by Acer has a Local Privilege Escalation vulnerability. Authenticated local attackers can replace ListCheck.exe with a malicious executable of the same name, which will be executed by the system and result in privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://www.twcert.org.tw/en/cp-139-10581-16346-2.html; https://www.twcert.org.tw/tw/cp-132-10580-01ad5-1.html
CVE: CVE-2025-11775
Published: 2025-12-17
Description: An out-of-bounds read vulnerability has been identified in the asComSvc service. This vulnerability can be triggered by sending specially crafted requests, which may lead to a service crash or partial loss of functionality. This vulnerability only affects ASUS motherboard series products. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.
CWE: CWE-125
References: https://www.asus.com/security-advisory
CVE: CVE-2025-11901
Published: 2025-12-17
Description: An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel  B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 series chipsets. Exploitation requires physical access to internal expansion slots to install a specially crafted device and supporting software utility, and may lead to uncontrolled resource consumption that increases the risk of unauthorized direct memory access (DMA).
Refer to the 'Security Update for UEFI firmware' section on the ASUS Security Advisory for more information.
CWE: CWE-284
References: https://www.asus.com/security-advisory/
CVE: CVE-2025-13861
Published: 2025-12-17
Description: The HTML Forms – Simple WordPress Forms Plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in all versions up to and including 1.6.0 due to insufficient sanitization of fabricated file upload field metadata before displaying it in the WordPress admin dashboard. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute whenever an administrator accesses the form submissions page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/html-forms/trunk/src/functions.php#L321; https://plugins.trac.wordpress.org/browser/html-forms/trunk/src/functions.php#L357; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3419926%40html-forms%2Ftrunk&old=3407043%40html-forms%2Ftrunk&sfp_email=&sfph_mail=
CVE: CVE-2025-13880
Published: 2025-12-17
Description: The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets (Google Reviews, YouTube Feed, Photo Feeds, and More) plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the getAdvanceSettings and saveAdvanceSettings functions in all versions up to, and including, 4.0.1. This makes it possible for unauthenticated attackers to view and modify plugin's advanced settings.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/wp-social-reviews/tags/4.0.1/app/Http/Controllers/SettingsController.php#L144; https://plugins.trac.wordpress.org/browser/wp-social-reviews/tags/4.0.1/app/Http/Policies/SettingsPolicy.php#L14; https://plugins.trac.wordpress.org/browser/wp-social-reviews/tags/4.0.1/app/Http/Routes/api.php#L44
CVE: CVE-2025-14385
Published: 2025-12-17
Description: The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 10.2.3 due to insufficient input sanitization and output escaping on user-supplied attributes in the wprm-recipe-roundup-item shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-roundup.php#L244; https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-roundup.php#L372; https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/shortcodes/recipe/class-wprm-sc-name.php#L83
CVE: CVE-2025-59374
Published: 2025-12-17
Description: "UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. Only devices that met these conditions and installed the compromised versions were affected. The Live Update client has already reached End-of-Support (EOS) in October 2021, and no currently supported devices or products are affected by this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-506
References: https://www.asus.com/news/hqfgvuyz6uyayje1/; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59374
CVE: CVE-2025-64700
Published: 2025-12-17
Description: Cross-site request forgery vulnerability exists in GROWI v7.3.3 and earlier. If a user views a malicious page while logged in, the user may be tricked to do unintended operations.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://growi.co.jp/news/40/; https://jvn.jp/en/jp/JVN55745775/
CVE: CVE-2025-14154
Published: 2025-12-17
Description: The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Stored Cross-Site Scripting via guest display name in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3420771/bp-better-messages/trunk/inc/guests.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/d68bbf0d-72e9-4295-a1e1-4abeb36cae1b?source=cve