deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-39724
Published: 2025-09-05
Description: In the Linux kernel, the following vulnerability has been resolved:

serial: 8250: fix panic due to PSLVERR

When the PSLVERR_RESP_EN parameter is set to 1, the device generates
an error response if an attempt is made to read an empty RBR (Receive
Buffer Register) while the FIFO is enabled.

In serial8250_do_startup(), calling serial_port_out(port, UART_LCR,
UART_LCR_WLEN8) triggers dw8250_check_lcr(), which invokes
dw8250_force_idle() and serial8250_clear_and_reinit_fifos(). The latter
function enables the FIFO via serial_out(p, UART_FCR, p->fcr).
Execution proceeds to the serial_port_in(port, UART_RX).
This satisfies the PSLVERR trigger condition.

When another CPU (e.g., using printk()) is accessing the UART (UART
is busy), the current CPU fails the check (value & ~UART_LCR_SPAR) ==
(lcr & ~UART_LCR_SPAR) in dw8250_check_lcr(), causing it to enter
dw8250_force_idle().

Put serial_port_out(port, UART_LCR, UART_LCR_WLEN8) under the port->lock
to fix this issue.

Panic backtrace:
[    0.442336] Oops - unknown exception [#1]
[    0.442343] epc : dw8250_serial_in32+0x1e/0x4a
[    0.442351]  ra : serial8250_do_startup+0x2c8/0x88e
...
[    0.442416] console_on_rootfs+0x26/0x70
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/0b882f00655afefbc7729c6b5aec86f7a5473a3d; https://git.kernel.org/stable/c/38c0ea484dedb58cb3a[PII_REDACTED]e16be0d1031; https://git.kernel.org/stable/c/68c4613e89f000e8198f9ace643082c697921c9f
CVE: CVE-2025-39725
Published: 2025-09-05
Description: In the Linux kernel, the following vulnerability has been resolved:

mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list

In shrink_folio_list(), the hwpoisoned folio may be large folio, which
can't be handled by unmap_poisoned_folio().  For THP, try_to_unmap_one()
must be passed with TTU_SPLIT_HUGE_PMD to split huge PMD first and then
retry.  Without TTU_SPLIT_HUGE_PMD, we will trigger null-ptr deref of
pvmw.pte.  Even we passed TTU_SPLIT_HUGE_PMD, we will trigger a
WARN_ON_ONCE due to the page isn't in swapcache.

Since UCE is rare in real world, and race with reclaimation is more rare,
just skipping the hwpoisoned large folio is enough.  memory_failure() will
handle it if the UCE is triggered again.

This happens when memory reclaim for large folio races with
memory_failure(), and will lead to kernel panic.  The race is as
follows:

cpu0      cpu1
 shrink_folio_list memory_failure
  TestSetPageHWPoison
  unmap_poisoned_folio
  --> trigger BUG_ON due to
  unmap_poisoned_folio couldn't
   handle large folio

[tujinjiang@huawei.com: add comment to unmap_poisoned_folio()]
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/656eaddbc952e1baae2f69281c22debe22140312; https://git.kernel.org/stable/c/9f1e8cd0b7c4c944e9921b52a6661b5eda2705ab; https://git.kernel.org/stable/c/c1101113d45838a823188ae25c61af97552a28ae
CVE: CVE-2025-39726
Published: 2025-09-05
Description: In the Linux kernel, the following vulnerability has been resolved:

s390/ism: fix concurrency management in ism_cmd()

The s390x ISM device data sheet clearly states that only one
request-response sequence is allowable per ISM function at any point in
time.  Unfortunately as of today the s390/ism driver in Linux does not
honor that requirement. This patch aims to rectify that.

This problem was discovered based on Aliaksei's bug report which states
that for certain workloads the ISM functions end up entering error state
(with PEC 2 as seen from the logs) after a while and as a consequence
connections handled by the respective function break, and for future
connection requests the ISM device is not considered -- given it is in a
dysfunctional state. During further debugging PEC 3A was observed as
well.

A kernel message like
[ 1211.244319] zpci: 061a:00:00.0: Event 0x2 reports an error for PCI function 0x61a
is a reliable indicator of the stated function entering error state
with PEC 2. Let me also point out that a kernel message like
[ 1211.244325] zpci: 061a:00:00.0: The ism driver bound to the device does not support error recovery
is a reliable indicator that the ISM function won't be auto-recovered
because the ISM driver currently lacks support for it.

On a technical level, without this synchronization, commands (inputs to
the FW) may be partially or fully overwritten (corrupted) by another CPU
trying to issue commands on the same function. There is hard evidence that
this can lead to DMB token values being used as DMB IOVAs, leading to
PEC 2 PCI events indicating invalid DMA. But this is only one of the
failure modes imaginable. In theory even completely losing one command
and executing another one twice and then trying to interpret the outputs
as if the command we intended to execute was actually executed and not
the other one is also possible.  Frankly, I don't feel confident about
providing an exhaustive list of possible consequences.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://git.kernel.org/stable/c/1194ad0d44d66b273a02a3a22882dc863a68d764; https://git.kernel.org/stable/c/897e8601b9cff1d054cdd53047f568b0e1995726; https://git.kernel.org/stable/c/faf44487dfc80817f178dc8de7a0b73f960d019b
CVE: CVE-2025-9709
Published: 2025-09-05
Description: On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection (EM-FI) in Nordic Semiconductor nRF52810 allow attacker to perform EM Fault Injection and bypass APPROTECT at runtime, requiring the least amount of modification to the hardware system possible.
CWE: CWE-1191, CWE-1319
References: https://nvd.nist.gov/vuln/detail/CVE-2020-27211; https://raelize.com/upload/research/2022/No_Hat_2022_-_Glitching_devices_for_code_execution_v1.1.pdf; https://raelize.com/upload/research/2025/Dartmouth_202505_False-Injections-Tales-of-Physics-Misconceptions-and-Weird-Machines_v1.1.pdf
CVE: CVE-2025-9057
Published: 2025-09-05
Description: The Biagiotti Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 2.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://themeforest.net/item/biagiotti-beauty-and-cosmetics-shop/24645919; https://www.wordfence.com/threat-intel/vulnerabilities/id/c4e1ce97-c390-4b87-b68d-bbce93d4665f?source=cve
CVE: CVE-2025-10025
Published: 2025-09-05
Description: A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/semester.php. The manipulation of the argument semester leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/zzx-yyds/mycve/issues/3; https://phpgurukul.com/; https://vuldb.com/?ctiid.322740
CVE: CVE-2025-10026
Published: 2025-09-05
Description: A vulnerability was found in itsourcecode POS Point of Sale System 1.0. Affected by this vulnerability is an unknown functionality of the file /inventory/main/vendors/datatables/unit_testing/templates/-complex_header.php. The manipulation of the argument scripts results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/AlphabugX/CVE-Report/blob/main/CVE-003.md; https://itsourcecode.com/; https://vuldb.com/?ctiid.322741
CVE: CVE-2025-10043
Published: 2025-09-05
Description: Rejected reason: Considered by the maintainers a bug scenario experienced rather than a vulnerability.
CVE: CVE-2025-10044
Published: 2025-09-05
Description: A flaw was found in Keycloak. Keycloak’s account console and other pages accept arbitrary text in the error_description query parameter. This text is directly rendered in error pages without validation or sanitization. While HTML encoding prevents XSS, an attacker can craft URLs with misleading messages (e.g., fake support phone numbers or URLs), which are displayed within the trusted Keycloak UI. This creates a phishing vector, potentially tricking users into contacting malicious actors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://access.redhat.com/errata/RHSA-2025:16399; https://access.redhat.com/errata/RHSA-2025:16400; https://access.redhat.com/errata/RHSA-2025:19923
CVE: CVE-2025-9566
Published: 2025-09-05
Description: There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.

Binary-Affected: podman
Upstream-version-introduced: v4.0.0
Upstream-version-fixed: v5.6.1
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://access.redhat.com/errata/RHBA-2025:15692; https://access.redhat.com/errata/RHBA-2025:15712; https://access.redhat.com/errata/RHBA-2025:16158
CVE: CVE-2025-10059
Published: 2025-09-05
Description: An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument (lsid) is provided in a case when it is not applicable. This affects MongoDB Server v6.0 versions prior to 6.0.x, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v8.0 versions prior to 8.0.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: https://jira.mongodb.org/browse/SERVER-100901; https://jira.mongodb.org/browse/SERVER-100909
CVE: CVE-2025-10060
Published: 2025-09-05
Description: MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server crash during commit. This issue may be triggered by improper WriteUnitOfWork state management.  This issue affects MongoDB Server v6.0 versions prior to 6.0.25, MongoDB Server v7.0 versions prior to 7.0.22 and MongoDB Server v8.0 versions prior to 8.0.12
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-672
References: https://jira.mongodb.org/browse/SERVER-95524
CVE: CVE-2025-10061
Published: 2025-09-05
Description: An authorized user can cause a crash in the MongoDB Server through a specially crafted $group query. This vulnerability is related to the incorrect handling of certain accumulator functions when additional parameters are specified within the $group operation. This vulnerability could lead to denial of service if triggered repeatedly. This issue affects MongoDB Server v6.0 versions prior to 6.0.25, MongoDB Server v7.0 versions prior to 7.0.22, MongoDB Server v8.0 versions prior to 8.0.12 and MongoDB Server v8.1 versions prior to 8.1.2
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://jira.mongodb.org/browse/SERVER-99616
CVE: CVE-2025-53791
Published: 2025-09-05
Description: Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53791
CVE: CVE-2025-10027
Published: 2025-09-05
Description: A vulnerability was determined in itsourcecode POS Point of Sale System 1.0. Affected by this issue is some unknown functionality of the file /inventory/main/vendors/datatables/unit_testing/templates/2512.php. This manipulation of the argument scripts causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/AlphabugX/CVE-Report/blob/main/CVE-004.md; https://itsourcecode.com/; https://vuldb.com/?ctiid.322742
CVE: CVE-2025-57807
Published: 2025-09-05
Description: ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include  insecure functions: SeekBlob(), which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob(), which then expands by quantum + length (amortized) instead of offset + length, and copies to data + offset. When offset ≫ extent, the copy targets memory beyond the allocation, producing a deterministic heap write on 64-bit builds. No 2⁶⁴ arithmetic wrap, external delegates, or policy settings are required. This is fixed in version 14.8.2.
CVSS Score: 3.8 (LOW)
CWE: CWE-122, CWE-131, CWE-787
References: https://github.com/ImageMagick/ImageMagick/commit/077a417a19a5ea8c85559b602754a5b928eef23e; https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-23hg-53q6-hqfg; https://lists.debian.org/debian-lts-announce/2025/09/msg00012.html
CVE: CVE-2025-58366
Published: 2025-09-05
Description: Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public (unauthenticated) /public/catalogs endpoint.vOnly instances using private helm repositories (i.e setting username & password in the catalogs configuration) are affected. This is fixed in version 4.9.0.
CWE: CWE-522
References: https://github.com/InseeFrLab/onyxia-api/pull/613; https://github.com/InseeFrLab/onyxia-api/releases/tag/v4.9.0; https://github.com/InseeFrLab/onyxia/security/advisories/GHSA-m773-6vm8-8x6q
CVE: CVE-2025-58367
Published: 2025-09-05
Description: DeepDiff is a project focused on Deep Difference and search of any Python data. Versions 5.0.0 through 8.6.0 are vulnerable to class pollution via the Delta class constructor, and when combined with a gadget available in DeltaDiff, it can lead to Denial of Service and Remote Code Execution (via insecure Pickle deserialization) exploitation. The gadget available in DeepDiff allows `deepdiff.serialization.SAFE_TO_IMPORT` to be modified to allow dangerous classes such as posix.system, and then perform insecure Pickle deserialization via the Delta class. This potentially allows any Python code to be executed, given that the input to Delta is user-controlled. Depending on the application where DeepDiff is used, this can also lead to other vulnerabilities. This is fixed in version 8.6.1.
CWE: CWE-915
References: https://github.com/seperman/deepdiff/commit/c69c06c13f75e849c770ade3f556cd16209fd183; https://github.com/seperman/deepdiff/releases/tag/8.6.1; https://github.com/seperman/deepdiff/security/advisories/GHSA-mw26-5g2v-hqw3
CVE: CVE-2025-58369
Published: 2025-09-05
Description: fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS session, if one side of the connection shuts down `write` while the peer side is awaiting more data to progress the TLS handshake, the peer side will spin loop on the socket read, fully utilizing a CPU. The CPU is consumed until the overall connection is closed, potentially shutting down a fs2-io powered server. This issue is fixed in versions  2.5.13, 3.12.1, and 3.13.0-M7.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://github.com/typelevel/fs2/commit/46e2dc3abf994dcf3d0b804b2ddb3c10c04d4976; https://github.com/typelevel/fs2/commit/5c6c4c6c1ef330f7e6b53661ecc63d5f5ba8885c; https://github.com/typelevel/fs2/commit/edf0c4f2e660360d1c1a8c5377ce32294de89238
CVE: CVE-2025-58370
Published: 2025-09-05
Description: Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions below 3.26.0 contain a vulnerability in the command parsing logic where the Bash parameter expansion and indirect reference were not handled correctly. If the agent was configured to auto-approve execution of certain commands, an attacker able to influence prompts could abuse this weakness to execute additional arbitrary commands alongside the intended one. This is fixed in version 3.26.0.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-2rm5-cvcm-7592
CVE: CVE-2025-58371
Published: 2025-09-05
Description: Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.26.6 and below, a Github workflow used unsanitized pull request metadata in a privileged context, allowing an attacker to craft malicious input and achieve Remote Code Execution (RCE) on the Actions runner. The workflow runs with broad permissions and access to repository secrets. It is possible for an attacker to execute arbitrary commands on the runner, push or modify code in the repository, access secrets, and create malicious releases or packages, resulting in a complete compromise of the repository and its associated services. This is fixed in version 3.26.7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/RooCodeInc/Roo-Code/commit/a0384f35d5ae3b7f66506cc62dda25d9bb673f49; https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-xr6r-vj48-29f6
CVE: CVE-2025-58372
Published: 2025-09-05
Description: Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a vulnerability where certain VS Code workspace configuration files (.code-workspace) are not protected in the same way as the .vscode folder. If the agent was configured to auto-approve file writes, an attacker able to influence prompts (for example via prompt injection) could cause malicious workspace settings or tasks to be written. These tasks could then be executed automatically when the workspace is reopened, resulting in arbitrary code execution. This issue is fixed in version 3.26.0.
CVSS Score: 8.1 (HIGH)
CWE: CWE-94, CWE-732
References: https://github.com/RooCodeInc/Roo-Code/commit/296edfc829a7c6efc8b5dbe09aa766a9aed79598; https://github.com/RooCodeInc/Roo-Code/releases/tag/v3.26.0; https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-4pqh-4ggm-jfmm
CVE: CVE-2025-58373
Published: 2025-09-05
Description: Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a vulnerability where .rooignore protections could be bypassed using symlinks. This allows an attacker with write access to the workspace to trick the extension into reading files that were intended to be excluded. As a result, sensitive files such as .env or configuration files could be exposed. An attacker able to modify files within the workspace could gain unauthorized access to sensitive information by bypassing .rooignore rules. This could include secrets, configuration details, or other excluded project data. This is fixed in version 3.26.0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://github.com/RooCodeInc/Roo-Code/pull/7405; https://github.com/RooCodeInc/Roo-Code/releases/tag/v3.26.0; https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-p76r-7mc3-qh7c
CVE: CVE-2021-26383
Published: 2025-09-06
Description: Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised userspace to invoke a command with malformed arguments leading to out of bounds memory access, potentially resulting in loss of integrity or availability.
CVSS Score: 7.9 (HIGH)
CWE: CWE-787
References: https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html; https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html; https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html
CVE: CVE-2025-58375
Published: 2025-09-06
Description: Rejected reason: This CVE is a duplicate of another CVE.
CVE: CVE-2025-58439
Published: 2025-09-06
Description: ERP is a free and open source Enterprise Resource Planning tool. In versions below 14.89.2 and 15.0.0 through 15.75.1, lack of validation of parameters left certain endpoints vulnerable to error-based SQL Injection. Some information like version could be retrieved. This issue is fixed in versions 14.89.2 and 15.76.0.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://github.com/frappe/erpnext/pull/49219; https://github.com/frappe/erpnext/pull/49220; https://github.com/frappe/erpnext/security/advisories/GHSA-fvjw-5w9q-6v39
CVE: CVE-2025-6067
Published: 2025-09-06
Description: The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `data-caption` and `data-linktext` parameters in all versions up to, and including, 6.6.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/easy-facebook-likebox/trunk/facebook/frontend/assets/js/public.js#L81; https://plugins.trac.wordpress.org/log/easy-facebook-likebox/; https://www.wordfence.com/threat-intel/vulnerabilities/id/89eb2229-a507-4f7c-be31-58959d3eca62?source=cve
CVE: CVE-2025-7366
Published: 2025-09-06
Description: The The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 19.9.7. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://themeforest.net/item/rehub-directory-multi-vendor-shop-coupon-affiliate-theme/7646339#item-description__19-9-8-15-augl-2025; https://www.wordfence.com/threat-intel/vulnerabilities/id/4f726479-c170-4e84-a5a7-2a82d0f62ad0?source=cve
CVE: CVE-2025-7368
Published: 2025-09-06
Description: The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajax_action_re_getfullcontent' function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected posts that they should not have access to.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://themeforest.net/item/rehub-directory-multi-vendor-shop-coupon-affiliate-theme/7646339#item-description__19-9-8-15-augl-2025; https://www.wordfence.com/threat-intel/vulnerabilities/id/5f24313e-c246-44f8-b144-d95c55e71456?source=cve
CVE: CVE-2025-9849
Published: 2025-09-06
Description: The Html Social share buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zm_sh_btn' shortcode in all versions up to, and including, 2.1.16 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/alimuzzaman/html-social-share-buttons/blob/a614c9ce5731417edcf01747eacd814c754cc2d4/html-social-share.php#L307; https://plugins.trac.wordpress.org/browser/html-social-share-buttons/trunk/html-social-share.php#L304; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3355844%40html-social-share-buttons&new=3355844%40html-social-share-buttons&sfp_email=&sfph_mail=#file4