deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-55092
Published: 2025-10-17
Description: In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_option_process() when processing an IPv4 packet with the timestamp option.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-126, CWE-125
References: https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-vwh7-h99r-fvwq
CVE: CVE-2025-55093
Published: 2025-10-17
Description: In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() when handling unicast DHCP messages that could cause corruption of 4 bytes of memory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-c9pq-93jp-w649
CVE: CVE-2025-55087
Published: 2025-10-17
Description: In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3 security parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-1285
References: https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-v474-mv4g-v8cx
CVE: CVE-2025-55094
Published: 2025-10-17
Description: In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in  _nx_icmpv6_validate_options() when handling a packet with ICMP6 options.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-rf32-h832-hg8r
CVE: CVE-2025-55096
Published: 2025-10-17
Description: In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_hid_report_descriptor_get()
 when parsing a descriptor of an USB HID device.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-191
References: https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-8m9v-jvjp-gmxq
CVE: CVE-2025-55097
Published: 2025-10-17
Description: In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_streaming_sampling_get() when parsing a descriptor of an USB streaming device.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-125
References: https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-r6h5-fmhc-v3j7
CVE: CVE-2025-55098
Published: 2025-10-17
Description: In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_device_type_get()
      when parsing a descriptor of an USB audio device.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-125
References: https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-4jc2-x5hv-46fq
CVE: CVE-2025-55099
Published: 2025-10-17
Description: In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_alternate_setting_locate() when parsing a descriptor with attacker-controlled frequency fields.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-125
References: https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-93mv-fcpr-9488
CVE: CVE-2025-55100
Published: 2025-10-17
Description: In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio10_sam_parse_func() when parsing a list of sampling frequencies.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-j253-w29r-9m48
CVE: CVE-2025-11895
Published: 2025-10-17
Description: The Binary MLM Plan plugin for WordPress is vulnerable to insecure direct object reference in versions up to, and including, 5.0. This is due to the bmp_user_payout_detail_of_current_user() function selecting payout records solely by id without verifying ownership. This makes it possible for authenticated attackers with the bmp_user role (often subscribers) to view other members' payout summaries via direct requests to the /bmp-account-detail/ endpoint with a crafted payout-id parameter granted they can access the shortcode output.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://plugins.trac.wordpress.org/browser/binary-mlm-plan/trunk/includes/bmp-hook-functions.php#L833; https://www.wordfence.com/threat-intel/vulnerabilities/id/adba7d0c-29ca-49c5-ac75-bb79d62f6107?source=cve
CVE: CVE-2023-28814
Published: 2025-10-17
Description: Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. Due to the improper verification of file to be uploaded, attackers may upload malicious files to the server. iSecure Center is software released for China's domestic market only, with no overseas release.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/2023-03/
CVE: CVE-2023-28815
Published: 2025-10-17
Description: Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain platform privileges and execute arbitrary commands on the system.iSecure Center is software released for China's domestic market only, with no overseas release.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-141
References: https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/2023-04/
CVE: CVE-2025-11902
Published: 2025-10-17
Description: A vulnerability was detected in yanyutao0402 ChanCMS up to 3.3.2. Affected by this vulnerability is the function findField of the file /cms/article/findField. Performing a manipulation of the argument cid results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/NarcherAlter/Security_Note/blob/main/Vulnerability_Discovery/ChanCMSv3.3.2.md; https://github.com/NarcherAlter/Security_Note/blob/main/Vulnerability_Discovery/ChanCMSv3.3.2.md#cmsarticlefindfield; https://vuldb.com/?ctiid.328912
CVE: CVE-2025-11903
Published: 2025-10-17
Description: A flaw has been found in yanyutao0402 ChanCMS up to 3.3.2. Affected by this issue is the function update of the file /cms/article/update. Executing a manipulation of the argument cid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/NarcherAlter/Security_Note/blob/main/Vulnerability_Discovery/ChanCMSv3.3.2.md#111; https://github.com/NarcherAlter/Security_Note/blob/main/Vulnerability_Discovery/ChanCMSv3.3.2.md#cmsarticleupdate; https://vuldb.com/?ctiid.328913
CVE: CVE-2025-48044
Published: 2025-10-17
Description: Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This vulnerability is associated with program files lib/ash/policy/policy.ex and program routines 'Elixir.Ash.Policy.Policy':expression/2.

This issue affects ash: from pkg:hex/ash@3.6.3 before pkg:hex/ash@3.7.1, from 3.6.3 before 3.7.1, from 79749c2685ea031ebb2de8cf60cc5edced6a8dd0 before 8b83efa225f657bfc3656ad8ee8485f9b2de923d.
CWE: CWE-863
References: https://cna.erlef.org/cves/CVE-2025-48044.html; https://github.com/ash-project/ash/commit/8b83efa225f657bfc3656ad8ee8485f9b2de923d; https://github.com/ash-project/ash/security/advisories/GHSA-pcxq-fjp3-r752
CVE: CVE-2025-60359
Published: 2025-10-17
Description: radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/radareorg/radare2/pull/24215
CVE: CVE-2025-60360
Published: 2025-10-17
Description: radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/radareorg/radare2/pull/24245
CVE: CVE-2025-11904
Published: 2025-10-17
Description: A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.2. This affects the function hasUse of the file /cms/model/hasUse. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/NarcherAlter/Security_Note/blob/main/Vulnerability_Discovery/ChanCMSv3.3.2.md#222; https://github.com/NarcherAlter/Security_Note/blob/main/Vulnerability_Discovery/ChanCMSv3.3.2.md#cmsmodelhasuse; https://vuldb.com/?ctiid.328914
CVE: CVE-2025-48087
Published: 2025-10-17
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jason C. Memberlite Shortcodes memberlite-shortcodes allows Stored XSS.This issue affects Memberlite Shortcodes: from n/a through 1.4.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/WordPress/Plugin/memberlite-shortcodes/vulnerability/wordpress-memberlite-shortcodes-plugin-1-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-55085
Published: 2025-10-17
Description: In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the parsing of HTTP header fields was missing bounds verification. A crafted server response could cause undefined behavior.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-1286
References: https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-9c77-rgp9-c2g2
CVE: CVE-2025-60361
Published: 2025-10-17
Description: radare2 v5.9.8 and before contains a memory leak in the function bochs_open.
CVSS Score: 3.3 (LOW)
CWE: CWE-401
References: https://github.com/radareorg/radare2/pull/24312
CVE: CVE-2025-11905
Published: 2025-10-17
Description: A vulnerability was found in yanyutao0402 ChanCMS up to 3.3.2. This vulnerability affects the function getArticle of the file app\modules\cms\controller\gather.js. The manipulation results in code injection. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-94, CWE-94
References: https://github.com/NarcherAlter/Security_Note/blob/main/Vulnerability_Discovery/ChanCMSv3.3.2.md#555; https://github.com/NarcherAlter/Security_Note/blob/main/Vulnerability_Discovery/ChanCMSv3.3.2.md#cmsgathergetarticle; https://vuldb.com/?ctiid.328915
CVE: CVE-2025-26625
Published: 2025-10-17
Description: Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git working tree if symbolic or hard links exist which collide with the paths of files tracked by Git LFS. The git lfs checkout and git lfs pull commands do not check for symbolic links before writing to files in the working tree, allowing an attacker to craft a repository containing symbolic or hard links that cause Git LFS to write to arbitrary file system locations accessible to the user running these commands. As well, when the git lfs checkout and git lfs pull commands are run in a bare repository, they could write to files visible outside the repository. The vulnerability is fixed in version 3.7.1. As a workaround, support for symlinks in Git may be disabled by setting the core.symlinks configuration option to false, after which further clones and fetches will not create symbolic links. However, any symbolic or hard links in existing repositories will still provide the opportunity for Git LFS to write to their targets.
CWE: CWE-59
References: https://github.com/git-lfs/git-lfs/commit/0cffe93176b870055c9dadbb3cc9a4a440e98396; https://github.com/git-lfs/git-lfs/commit/5c11ffce9a4f095ff356bc781e2a031abb46c1a8; https://github.com/git-lfs/git-lfs/commit/d02bd13f02ef76f6807581cd6b34709069cb3615
CVE: CVE-2025-49655
Published: 2025-10-17
Description: Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being enabled. The vulnerability can be triggered through both local and remote files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/keras-team/keras/pull/21575; https://hiddenlayer.com/sai_security_advisor/2025-10-keras/
CVE: CVE-2025-57567
Published: 2025-10-17
Description: A remote code execution (RCE) vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory (/themes/defaut/css/minify.php). An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel, enabling execution of system commands.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-94, CWE-284
References: http://pluxml.com; https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/CVE-2025-57567.pdf
CVE: CVE-2025-58747
Published: 2025-10-17
Description: Dify is an LLM application development platform. In Dify versions through 1.9.1, the MCP OAuth component is vulnerable to cross-site scripting when a victim connects to an attacker-controlled remote MCP server. The vulnerability exists in the OAuth flow implementation where the authorization_url provided by a remote MCP server is directly passed to window.open without validation or sanitization. An attacker can craft a malicious MCP server that returns a JavaScript URI (such as javascript:alert(1)) in the authorization_url field, which is then executed when the victim attempts to connect to the MCP server. This allows the attacker to execute arbitrary JavaScript in the context of the Dify application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/langgenius/dify/commit/bfda4ce7e6f39d43a4420e97e23a18edcfe3e3d3; https://github.com/langgenius/dify/security/advisories/GHSA-9jch-j9qf-vqfw
CVE: CVE-2025-59043
Published: 2025-10-17
Description: OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects after decoding may use significantly more memory than their serialized version. It is possible to craft a JSON payload to maximize the factor between serialized memory usage and deserialized memory usage, similar to a zip bomb, with factors reaching approximately 35. This can be used to circumvent the max_request_size configuration parameter which is intended to protect against denial of service attacks. The request body is parsed into a map very early in the request handling chain before authentication, which means an unauthenticated attacker can send a specifically crafted JSON object and cause an out-of-memory crash. Additionally, for requests with large numbers of strings, the audit subsystem can consume large quantities of CPU. The vulnerability is fixed in version 2.4.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/openbao/openbao/blob/788536bd3e10818a7b4fb00aac6affc23388e5a9/http/logical.go#L50; https://github.com/openbao/openbao/commit/d418f238bc99adc72c73109faf574cc2b672880c; https://github.com/openbao/openbao/pull/1756
CVE: CVE-2025-60279
Published: 2025-10-17
Description: A server-side request forgery (SSRF) vulnerability in Illia Cloud illia-Builder before v4.8.5 allows authenticated users to send arbitrary requests to internal services via the API. An attacker can leverage this to enumerate open ports based on response discrepancies and interact with internal services.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-918
References: https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/CVE-2025-60279.pdf; https://owasp.org/www-community/attacks/Server_Side_Request_Forgery
CVE: CVE-2025-62353
Published: 2025-10-17
Description: A path traversal vulnerability in all versions of the Windsurf IDE enables a threat actor to read and write arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://hiddenlayer.com/sai_security_advisor/2025-10-windsurf/
CVE: CVE-2025-62356
Published: 2025-10-17
Description: A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://hiddenlayer.com/sai_security_advisor/2025-10-qodogen/
CVE: CVE-2025-8414
Published: 2025-10-17
Description: Due to improper input validation, a buffer overflow vulnerability is present in 

Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain

conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerability.
CWE: CWE-20
References: https://community.silabs.com/068Vm00000WJZED
CVE: CVE-2025-62168
Published: 2025-10-17
Description: Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-209, CWE-550
References: https://github.com/squid-cache/squid/commit/0951a0681011dfca3d78c84fd7f1e19c78a4443f; https://github.com/squid-cache/squid/security/advisories/GHSA-c8cc-phh7-xmxr; http://www.openwall.com/lists/oss-security/2025/11/05/6
CVE: CVE-2025-62171
Published: 2025-10-17
Description: ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating the extent value by multiplying image columns by bits per pixel. On 32-bit systems with size_t of 4 bytes, a malicious BMP file with specific dimensions can cause this multiplication to overflow and wrap to zero. The overflow check added to address CVE-2025-57803 is placed after the overflow occurs, making it ineffective. A specially crafted 58-byte BMP file with width set to 536,870,912 and 32 bits per pixel can trigger this overflow, causing the bytes_per_line calculation to become zero. This vulnerability only affects 32-bit builds of ImageMagick where default resource limits for width, height, and area have been manually increased beyond their defaults. 64-bit systems with size_t of 8 bytes are not vulnerable, and systems using default ImageMagick resource limits are not vulnerable. The vulnerability is fixed in versions 7.1.2-7 and 6.9.13-32.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-190
References: https://github.com/ImageMagick/ImageMagick/commit/cea1693e2ded51b4cc91c70c54096cbed1691c00; https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm; https://lists.debian.org/debian-lts-announce/2025/10/msg00019.html
CVE: CVE-2025-57164
Published: 2025-10-17
Description: Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: https://github.com/FlowiseAI/Flowise; https://github.com/FlowiseAI/Flowise/blob/main/packages/components/nodes/vectorstores/Supabase/Supabase.ts#L237; https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-7944-7c6r-55vv
CVE: CVE-2025-60514
Published: 2025-10-17
Description: Tillywork v0.1.3 and below is vulnerable to SQL Injection in app/common/helpers/query.builder.helper.ts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/tillywork/tillywork/pull/288/commits/c57171fd17a857d7ec79e9051b23ace98d5c6a17; https://www.secstrike.ai/cve-2025-60514-tillywork-sql-injection-public-disclosure/
CVE: CVE-2025-62419
Published: 2025-10-17
Description: DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC URL injection vulnerability exists in the DB2 and MongoDB data source configuration handlers. In the DB2 data source handler, when the extraParams field is empty, the HOSTNAME, PORT, and DATABASE values are directly concatenated into the JDBC URL without filtering illegal parameters. This allows an attacker to inject a malicious JDBC string into the HOSTNAME field to bypass previously patched vulnerabilities CVE-2025-57773 and CVE-2025-58045. The vulnerability is fixed in version 2.10.14. No known workarounds exist.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://github.com/dataease/dataease/commit/bb320e42bf2cf862b9c4b438c1517547b53ed67b; https://github.com/dataease/dataease/security/advisories/GHSA-x4x9-mjcf-99r9
CVE: CVE-2025-62420
Published: 2025-10-17
Description: DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC driver bypass vulnerability exists in the H2 database connection handler. The getJdbc function in H2.java checks if the jdbcUrl starts with jdbc:h2 but returns a separate jdbc field as the actual connection URL. An attacker can provide a jdbcUrl that starts with jdbc:h2 while supplying a different jdbc field with an arbitrary JDBC driver and connection string. This allows an authenticated attacker to trigger arbitrary JDBC connections with malicious drivers, potentially leading to remote code execution. The vulnerability is fixed in version 2.10.14. No known workarounds exist.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://github.com/dataease/dataease/commit/bb320e42bf2cf862b9c4b438c1517547b53ed67b; https://github.com/dataease/dataease/security/advisories/GHSA-7wcv-j6gc-qc7q
CVE: CVE-2025-62421
Published: 2025-10-17
Description: DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a stored cross-site scripting vulnerability exists due to improper file upload validation and authentication bypass. The StaticResourceApi interface defines a route upload/{fileId} that uses a URL path parameter where both the filename and extension of uploaded files are controllable by users. During permission validation, the TokenFilter invokes the WhitelistUtils#match method to determine if the URL path is in the allowlist. If the requestURI ends with .js or similar extensions, it is directly deemed safe and bypasses permission checks. This allows an attacker to access "upload/1.js" while specifying arbitrary file extensions, enabling the upload of HTML files containing malicious JavaScript. The vulnerability is fixed in version 2.10.14. No known workarounds exist.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/dataease/dataease/security/advisories/GHSA-2wmv-rr3p-pf43