deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-3495
Published: 2025-04-16
Description: Delta Electronics COMMGR v1 and v2 uses insufficiently randomized values to generate session IDs (CWE-338). An attacker could easily brute force a session ID and load and execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-338
References: https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00005_COMMGR%20-%20Insufficient%20Randomization%20Authentication%20Bypass_v1.pdf; https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-07
CVE: CVE-2025-3663
Published: 2025-04-16
Description: A vulnerability, which was classified as critical, has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. This issue affects the function setWiFiEasyCfg/setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi of the component Password Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://lavender-bicycle-a5a.notion.site/TOTOLINK-A3700R-setWiFiEasyCfg-1cb53a41781f809f807efe1284f5eb1a?pvs=4; https://vuldb.com/?ctiid.304841; https://vuldb.com/?id.304841
CVE: CVE-2025-3664
Published: 2025-04-16
Description: A vulnerability, which was classified as critical, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://lavender-bicycle-a5a.notion.site/TOTOLINK-A3700R-setWiFiEasyGuestCfg-1cb53a41781f805f9ee3f1b2d362d3f2?pvs=4; https://vuldb.com/?ctiid.304842; https://vuldb.com/?id.304842
CVE: CVE-2025-3665
Published: 2025-04-16
Description: A vulnerability has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical. Affected by this vulnerability is the function setSmartQosCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://lavender-bicycle-a5a.notion.site/TOTOLINK-A3700R-setSmartQosCfg-1cb53a41781f80ce9b7aca2c6ff9bea4?pvs=4; https://vuldb.com/?ctiid.304843; https://vuldb.com/?id.304843
CVE: CVE-2025-3698
Published: 2025-04-16
Description: Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead to  information leakage risk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-749
References: https://security.tecno.com/SRC/blogdetail/410?lang=en_US; https://security.tecno.com/SRC/securityUpdates
CVE: CVE-2025-3666
Published: 2025-04-16
Description: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical. Affected by this issue is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://lavender-bicycle-a5a.notion.site/TOTOLINK-A3700R-setDdnsCfg-1cb53a41781f8001b9c0f345a120e2e7?pvs=4; https://vuldb.com/?ctiid.304844; https://vuldb.com/?id.304844
CVE: CVE-2025-3667
Published: 2025-04-16
Description: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been classified as critical. This affects the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://lavender-bicycle-a5a.notion.site/TOTOLINK-A3700R-setUPnPCfg-1cb53a41781f802b8b16f973366ee5e3?pvs=4; https://vuldb.com/?ctiid.304845; https://vuldb.com/?id.304845
CVE: CVE-2025-3668
Published: 2025-04-16
Description: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been declared as critical. This vulnerability affects the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://lavender-bicycle-a5a.notion.site/TOTOLINK-A3700R-setScheduleCfg-1cb53a41781f8042a841e2e19e010464?pvs=4; https://vuldb.com/?ctiid.304846; https://vuldb.com/?id.304846
CVE: CVE-2024-10680
Published: 2025-04-16
Description: The Form Maker by 10Web  WordPress plugin before 1.15.32 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/240948d7-ece0-437f-b926-62937bdbd9db/
CVE: CVE-2025-3247
Published: 2025-04-16
Description: The Contact Form 7 plugin for WordPress is vulnerable to Order Replay in all versions up to, and including, 6.0.5 via the 'wpcf7_stripe_skip_spam_check' function due to insufficient validation on a user controlled key. This makes it possible for unauthenticated attackers to reuse a single Stripe PaymentIntent for multiple transactions. Only the first transaction is processed via Stripe, but the plugin sends a successful email message for each transaction, which may trick an administrator into fulfilling each order.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-354
References: https://plugins.trac.wordpress.org/browser/contact-form-7/tags/6.0.5/modules/stripe/stripe.php#L114; https://plugins.trac.wordpress.org/changeset/3270138/; https://www.wordfence.com/threat-intel/vulnerabilities/id/38257dbf-288e-4028-af65-85f5389888ac?source=cve
CVE: CVE-2025-3674
Published: 2025-04-16
Description: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been declared as critical. Affected by this vulnerability is the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://lavender-bicycle-a5a.notion.site/TOTOLINK-A3700R-setUrlFilterRules-1cb53a41781f808f9547da[PII_REDACTED]?pvs=4; https://vuldb.com/?ctiid.304963; https://vuldb.com/?id.304963
CVE: CVE-2025-3675
Published: 2025-04-16
Description: A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been rated as critical. Affected by this issue is the function setL2tpServerCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://lavender-bicycle-a5a.notion.site/TOTOLINK-A3700R-setL2tpServerCfg-1cb53a41781f80319d38dc5a8e9174ae?pvs=4; https://vuldb.com/?ctiid.304964; https://vuldb.com/?id.304964
CVE: CVE-2025-0101
Published: 2025-04-16
Description: A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes some functions to work unexpected or stop working at all. Both during runtime and after a restart.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://cert.vde.com/en/advisories/VDE-2025-007
CVE: CVE-2025-24839
Published: 2025-04-16
Description: Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to prevent Wrangler posts from triggering AI responses. This vulnerability allows users without access to the AI bot to activate it by attaching the activate_ai override property to a post via the Wrangler plugin, provided both the AI and Wrangler plugins are enabled.
CVSS Score: 3.1 (LOW)
CWE: CWE-863
References: https://mattermost.com/security-updates
CVE: CVE-2025-27538
Published: 2025-04-16
Description: Mattermost versions 10.5.x <= 10.5.1, 9.11.x <= 9.11.9 fail to enforce MFA checks in PUT /api/v4/users/user-id/mfa when the requesting user differs from the target user ID, which allows users with edit_other_users permission to activate or deactivate MFA for other users, even if those users have not set up MFA.
CVSS Score: 2.2 (LOW)
CWE: CWE-306
References: https://mattermost.com/security-updates
CVE: CVE-2025-27571
Published: 2025-04-16
Description: Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to check the "Allow Users to View Archived Channels" configuration when fetching channel metadata of a post from archived channels, which allows authenticated users to access such information when a channel is archived.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://mattermost.com/security-updates
CVE: CVE-2025-3077
Published: 2025-04-16
Description: The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button shortcode and Custom CSS field in all versions up to, and including, 28.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://support.muffingroup.com/changelog/; https://themeforest.net/item/betheme-responsive-multipurpose-wordpress-theme/7758048; https://www.wordfence.com/threat-intel/vulnerabilities/id/7a0a281d-840f-488f-b9ef-c0df8514b47c?source=cve
CVE: CVE-2025-3676
Published: 2025-04-16
Description: A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0. This affects an unknown part of the file /api/front/search/books. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/mapl3miss/novel-SQLi/blob/main/novelCMS-sqli.md; https://vuldb.com/?ctiid.304965; https://vuldb.com/?id.304965
CVE: CVE-2023-32197
Published: 2025-04-16
Description: A Improper Privilege Management vulnerability in SUSE rancher in RoleTemplateobjects when external=true is set can lead to privilege escalation in specific scenarios.This issue affects rancher: from 2.7.0 before 2.7.14, from 2.8.0 before 2.8.5.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-269
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32197; https://github.com/rancher/rancher/security/advisories/GHSA-64jq-m7rq-768h
CVE: CVE-2024-22036
Published: 2025-04-16
Description: A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot
 jail and gain root access to the Rancher container itself. In 
production environments, further privilege escalation is possible based 
on living off the land within the Rancher container itself. For the test
 and development environments, based on a –privileged Docker container, 
it is possible to escape the Docker container and gain execution access 
on the host system.


This issue affects rancher: from 2.7.0 before 2.7.16, from 2.8.0 before 2.8.9, from 2.9.0 before 2.9.3.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-269
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-22036; https://github.com/rancher/rancher/security/advisories/GHSA-h99m-6755-rgwc
CVE: CVE-2024-52281
Published: 2025-04-16
Description: A: Improper Neutralization of Input During Web Page Generation vulnerability in SUSE rancher allows a malicious actor to perform a Stored XSS attack through the cluster description field.
This issue affects rancher: from 2.9.0 before 2.9.4.
CVSS Score: 8.9 (HIGH)
CWE: CWE-79
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-52281; https://github.com/rancher/rancher/security/advisories/GHSA-2v2w-8v8c-wcm9
CVE: CVE-2025-3104
Published: 2025-04-16
Description: The WP STAGING Pro WordPress Backup Plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 6.1.2 due to missing capability checks on the getOutdatedPluginsRequest() function. This makes it possible for unauthenticated attackers to reveal outdated installed active or inactive plugins.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://wp-staging.com/wp-staging-pro-changelog/; https://www.wordfence.com/threat-intel/vulnerabilities/id/572e290e-9324-4c17-8c3b-fa67233b15c4?source=cve
CVE: CVE-2025-3677
Published: 2025-04-16
Description: A vulnerability classified as critical was found in lm-sys fastchat up to 0.2.36. This vulnerability affects the function split_files/apply_delta_low_cpu_mem of the file fastchat/model/apply_delta.py. The manipulation leads to deserialization. An attack has to be approached locally.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-502
References: https://github.com/lm-sys/FastChat/issues/3713; https://vuldb.com/?ctiid.304966; https://vuldb.com/?id.304966
CVE: CVE-2025-3678
Published: 2025-04-16
Description: A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component HELP Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119, CWE-120
References: https://fitoxs.com/exploit/exploit-a0667f99e4dc732773f505cdb86fcae1.txt; https://vuldb.com/?ctiid.304967; https://vuldb.com/?id.304967
CVE: CVE-2025-27936
Published: 2025-04-16
Description: Mattermost Plugin MSTeams versions <2.1.0 and Mattermost Server versions 10.5.x <=10.5.1 with the MS Teams plugin enabled fail to perform constant time comparison on a MSTeams plugin webhook secret which allows an attacker to retrieve the webhook secret of the MSTeams plugin via a timing attack during webhook secret comparison.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-208
References: https://mattermost.com/security-updates
CVE: CVE-2025-31363
Published: 2025-04-16
Description: Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.9 fail to restrict domains the LLM can request to contact upstream which allows an authenticated user to exfiltrate data from an arbitrary server accessible to the victim via performing a prompt injection in the AI plugin's Jira tool.
CVSS Score: 3.0 (LOW)
References: https://mattermost.com/security-updates
CVE: CVE-2025-3679
Published: 2025-04-16
Description: A vulnerability, which was classified as critical, was found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component HOST Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119, CWE-120, CWE-787
References: https://fitoxs.com/exploit/exploit-42ef6503a06aafc10808fa38b9e2e8f7.txt; https://vuldb.com/?ctiid.304968; https://vuldb.com/?id.304968
CVE: CVE-2025-3680
Published: 2025-04-16
Description: A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the component LANG Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119, CWE-120
References: https://fitoxs.com/exploit/exploit-4fcbb45637a8c2a83ec4e285bdf44ef4.txt; https://vuldb.com/?ctiid.304969; https://vuldb.com/?id.304969
CVE: CVE-2025-3681
Published: 2025-04-16
Description: A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component MODE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119, CWE-120
References: https://fitoxs.com/exploit/exploit-f2dbb39791fbe7e94d805312769e84cb.txt; https://vuldb.com/?ctiid.304970; https://vuldb.com/?id.304970
CVE: CVE-2024-58092
Published: 2025-04-16
Description: In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix legacy client tracking initialization

Get rid of the nfsd4_legacy_tracking_ops->init() call in
check_for_legacy_methods().  That will be handled in the caller
(nfsd4_client_tracking_init()).  Otherwise, we'll wind up calling
nfsd4_legacy_tracking_ops->init() twice, and the second time we'll
trigger the BUG_ON() in nfsd4_init_recdir().
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/[PII_REDACTED]3a4bf03494d921c6913e220c26cc63; https://git.kernel.org/stable/c/cdd66082b227eb695cbf54b7c121ea032e869981; https://git.kernel.org/stable/c/de71d4e211eddb670b285a0ea477a299601ce1ca
CVE: CVE-2025-22019
Published: 2025-04-16
Description: In the Linux kernel, the following vulnerability has been resolved:

bcachefs: bch2_ioctl_subvolume_destroy() fixes

bch2_evict_subvolume_inodes() was getting stuck - due to incorrectly
pruning the dcache.

Also, fix missing permissions checks.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/558317a5c61045d460a37372181e7b43c0c002bb; https://git.kernel.org/stable/c/707549600c4a012ed71c0204a7992a679880bf33; https://git.kernel.org/stable/c/82383abd39abd635511b8956284a5cc8134c4dc1
CVE: CVE-2025-22021
Published: 2025-04-16
Description: In the Linux kernel, the following vulnerability has been resolved:

netfilter: socket: Lookup orig tuple for IPv6 SNAT

nf_sk_lookup_slow_v4 does the conntrack lookup for IPv4 packets to
restore the original 5-tuple in case of SNAT, to be able to find the
right socket (if any). Then socket_match() can correctly check whether
the socket was transparent.

However, the IPv6 counterpart (nf_sk_lookup_slow_v6) lacks this
conntrack lookup, making xt_socket fail to match on the socket when the
packet was SNATed. Add the same logic to nf_sk_lookup_slow_v6.

IPv6 SNAT is used in Kubernetes clusters for pod-to-world packets, as
pods' addresses are in the fd00::/8 ULA subnet and need to be replaced
with the node's external address. Cilium leverages Envoy to enforce L7
policies, and Envoy uses transparent sockets. Cilium inserts an iptables
prerouting rule that matches on `-m socket --transparent` and redirects
the packets to localhost, but it fails to match SNATed IPv6 packets due
to that missing conntrack lookup.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/1ca2169cc19dca893c7aae6af[PII_REDACTED]5d16; https://git.kernel.org/stable/c/1ec43100f[PII_REDACTED]b7ddfc3d5c2eac19e70e7; https://git.kernel.org/stable/c/221c27259324ec1404f028d4f5a0f2ae7f63ee23
CVE: CVE-2025-22023
Published: 2025-04-16
Description: In the Linux kernel, the following vulnerability has been resolved:

usb: xhci: Don't skip on Stopped - Length Invalid

Up until commit d56b0b2ab142 ("usb: xhci: ensure skipped isoc TDs are
returned when isoc ring is stopped") in v6.11, the driver didn't skip
missed isochronous TDs when handling Stoppend and Stopped - Length
Invalid events. Instead, it erroneously cleared the skip flag, which
would cause the ring to get stuck, as future events won't match the
missed TD which is never removed from the queue until it's cancelled.

This buggy logic seems to have been in place substantially unchanged
since the 3.x series over 10 years ago, which probably speaks first
and foremost about relative rarity of this case in normal usage, but
by the spec I see no reason why it shouldn't be possible.

After d56b0b2ab142, TDs are immediately skipped when handling those
Stopped events. This poses a potential problem in case of Stopped -
Length Invalid, which occurs either on completed TDs (likely already
given back) or Link and No-Op TRBs. Such event won't be recognized
as matching any TD (unless it's the rare Link TRB inside a TD) and
will result in skipping all pending TDs, giving them back possibly
before they are done, risking isoc data loss and maybe UAF by HW.

As a compromise, don't skip and don't clear the skip flag on this
kind of event. Then the next event will skip missed TDs. A downside
of not handling Stopped - Length Invalid on a Link inside a TD is
that if the TD is cancelled, its actual length will not be updated
to account for TRBs (silently) completed before the TD was stopped.

I had no luck producing this sequence of completion events so there
is no compelling demonstration of any resulting disaster. It may be
a very rare, obscure condition. The sole motivation for this patch
is that if such unlikely event does occur, I'd rather risk reporting
a cancelled partially done isoc frame as empty than gamble with UAF.

This will be fixed more properly by looking at Stopped event's TRB
pointer when making skipping decisions, but such rework is unlikely
to be backported to v6.12, which will stay around for a few years.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/49cf6f5293aeb706dd[PII_REDACTED]36a003f37df6; https://git.kernel.org/stable/c/58d0a3fab5f4fdc112c16a4c6d382f62097afd1c; https://git.kernel.org/stable/c/6af20ac254cbd0e1178a3542767c9308e209eee5
CVE: CVE-2025-30960
Published: 2025-04-16
Description: Missing Authorization vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through <= 6.5.8.
CVSS Score: 8.3 (HIGH)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/fs-poster/vulnerability/wordpress-fs-poster-plugin-6-5-8-subscriber-site-wide-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-3682
Published: 2025-04-16
Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. This affects an unknown part of the component PASV Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119, CWE-120
References: https://fitoxs.com/exploit/exploit-e3b0c44298fc1c149afbf4c8996fb924.txt; https://vuldb.com/?ctiid.304971; https://vuldb.com/?id.304971
CVE: CVE-2025-3683
Published: 2025-04-16
Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. This vulnerability affects unknown code of the component SIZE Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119, CWE-120
References: https://fitoxs.com/exploit/exploit-5f4dcc3b5aa765d61d8327deb882cf99.txt; https://vuldb.com/?ctiid.304972; https://vuldb.com/?id.304972
CVE: CVE-2025-3684
Published: 2025-04-16
Description: A vulnerability was found in Xianqi Kindergarten Management System 2.0 Bulid 20190808. It has been rated as critical. This issue affects some unknown processing of the file stu_list.php of the component Child Management. The manipulation of the argument sex leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/Upgradeextension/xianqi/blob/main/README.md; https://vuldb.com/?ctiid.304973; https://vuldb.com/?id.304973