deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-6686
Published: 2025-07-02
Description: The Magic Buttons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's magic-button shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on the 'text' user supplied attribute. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3333894%40magic-buttons-for-elementor&new=3333894%40magic-buttons-for-elementor; https://wordpress.org/plugins/magic-buttons-for-elementor/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/4379f2c5-3533-45f7-a4ef-0b3320eb5d04?source=cve
CVE: CVE-2025-6687
Published: 2025-07-02
Description: The Magic Buttons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's magic-button shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on the 'icon' user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.svn.wordpress.org/magic-buttons-for-elementor/trunk/magic_buttons_shortcodes.php; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3333894%40magic-buttons-for-elementor&new=3333894%40magic-buttons-for-elementor; https://wordpress.org/plugins/magic-buttons-for-elementor/#developers
CVE: CVE-2025-52462
Published: 2025-07-02
Description: Cross-site scripting vulnerability exists in Active! mail 6 BuildInfo: 6.30.01004145 to 6.60.06008562. If this vulnerability is exploited, an arbitrary script may be executed on the logged-in user's web browser when the user is accessing a specially crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN89505333/; https://www.qualitia.com/jp/news/2025/07/02_1100.html
CVE: CVE-2025-52463
Published: 2025-07-02
Description: Cross-site request forgery vulnerability exists in Active! mail 6 BuildInfo: 6.60.06008562 and earlier. If this vulnerability is exploited, unintended E-mail may be sent when a user accesses a specially crafted URL while being logged in.
CVSS Score: 3.1 (LOW)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN89505333/; https://www.qualitia.com/jp/news/2025/07/02_1100.html
CVE: CVE-2025-6463
Published: 2025-07-02
Description: The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'entry_delete_upload_files' function in all versions up to, and including, 1.44.2. This makes it possible for unauthenticated attackers to include arbitrary file paths in a form submission. The file will be deleted when the form submission is deleted, whether by an Administrator or via auto-deletion determined by plugin settings. This can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
CVSS Score: 8.8 (HIGH)
CWE: CWE-73
References: https://plugins.trac.wordpress.org/browser/forminator/trunk/library/model/class-form-entry-model.php#L1249; https://plugins.trac.wordpress.org/changeset/3319860/forminator#file3; https://www.wordfence.com/threat-intel/vulnerabilities/id/6dc9b4cb-d36b-4693-a7b9-1dad123b6639?source=cve
CVE: CVE-2024-13451
Published: 2025-07-02
Description: The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.17.4 via file uploads due to insufficient directory listing prevention and lack of randomization of file names. This makes it possible for unauthenticated attackers to extract sensitive data including files uploaded via a form. The vulnerability was partially patched in version 2.17.5.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/bit-form/trunk/includes/Core/Util/FileHandler.php; https://plugins.trac.wordpress.org/changeset/3233293/; https://www.wordfence.com/threat-intel/vulnerabilities/id/b23bdba3-8947-47e4-b208-55e42865ab72?source=cve
CVE: CVE-2025-6464
Published: 2025-07-02
Description: The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.44.2 via deserialization of untrusted input in the 'entry_delete_upload_files' function. This makes it possible for unauthenticated attackers to inject a PHP Object through a PHAR file. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. Deserialization occurs when the form submission is deleted, whether by an Administrator or via auto-deletion determined by plugin settings.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://plugins.trac.wordpress.org/browser/forminator/trunk/library/model/class-form-entry-model.php#L1249; https://plugins.trac.wordpress.org/browser/forminator/trunk/library/model/class-form-entry-model.php#L1263; https://plugins.trac.wordpress.org/changeset?old_path=%2Fforminator&old=3319860&new_path=%2Fforminator&new=3319860&sfp_email=&sfph_mail=
CVE: CVE-2024-13786
Published: 2025-07-02
Description: The education theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.6.10 via deserialization of untrusted input in the 'themerex_callback_view_more_posts' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://themeforest.net/item/education-center-training-courses-wordpress-theme/10652918#item-description__change-log; https://www.wordfence.com/threat-intel/vulnerabilities/id/d0b27bc8-617a-4f98-954f-e49f87dca311?source=cve
CVE: CVE-2025-6017
Published: 2025-07-02
Description: A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI. This information should only be accessible to authorized users and may result in the loss of confidentiality of administrative information, which could be leaked to unauthorized actors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-359
References: https://access.redhat.com/security/cve/CVE-2025-6017; https://bugzilla.redhat.com/show_bug.cgi?id=2372362
CVE: CVE-2025-24328
Published: 2025-07-02
Description: Sending a crafted SOAP "set" operation message within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause Nokia Single RAN baseband OAM service component restart with software versions earlier than release 24R1-SR 1.0 MP. This issue has been corrected to release 24R1-SR 1.0 MP and later.

The OAM service component restarts automatically after the stack overflow without causing a base station restart or network service degradation, and without leaving any permanent impact on the Nokia Single RAN baseband OAM service.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-121
References: https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2025-24328/
CVE: CVE-2025-24329
Published: 2025-07-02
Description: Sending a crafted SOAP "provision" operation message archive field within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause path traversal issue in Nokia Single RAN baseband software with versions earlier than release 24R1-SR 1.0 MP. This issue has been corrected to release 24R1-SR 1.0 MP and later.

Beginning with release 24R1-SR 1.0 MP, the OAM service software utilizes libarchive APIs with security options enabled, effectively mitigating the reported path traversal issue.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2025-24329/
CVE: CVE-2025-24330
Published: 2025-07-02
Description: Sending a crafted SOAP "provision" operation message PlanId field within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause path traversal issue in Nokia Single RAN baseband software with versions earlier than release 24R1-SR 1.0 MP. This issue has been corrected to release 24R1-SR 1.0 MP and later.

Beginning with release 24R1-SR 1.0 MP, the OAM service software performed PlanId field input validations mitigate the reported path traversal issue.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2025-24330/
CVE: CVE-2025-24331
Published: 2025-07-02
Description: The Single RAN baseband OAM service is intended to run as an unprivileged service. However, it initially starts with root privileges and assigns certain capabilities before dropping to an unprivileged level. The capabilities retained from the root period are considered extensive after the privilege drop and, in theory, could potentially allow actions beyond the intended scope of the OAM service. These actions could include gaining root privileges, accessing root-owned files, modifying them as the file owner, and then returning them to root ownership. This issue has been corrected starting from release 24R1-SR 0.2 MP and later.

Beginning with release 24R1-SR 0.2 MP, the OAM service software capabilities are restricted to the minimum necessary.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-250
References: https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2025-24331/
CVE: CVE-2025-24332
Published: 2025-07-02
Description: Nokia Single RAN AirScale baseband allows an authenticated administrative user access to all physical boards after performing a single login to the baseband system board. The baseband does not re-authenticate the user when they connect from the baseband system board to the baseband capacity boards using the internal bsoc SSH service, which is available only internally within the baseband and through the internal backplane between the boards. The bsoc SSH allows login from one board to another via the baseband internal backplane using an SSH private key present on the baseband system board.

This bsoc SSH capability was previously considered an administrative functionality but has now been restricted to be available only to baseband root-privileged administrators. This restriction mitigates the possibility of misuse with lower-level privileges (e.g., from baseband software images). This mitigation is included starting from release 23R4-SR 3.0 MP and later
CVSS Score: 7.1 (HIGH)
CWE: CWE-288
References: https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2025-24332/
CVE: CVE-2025-24333
Published: 2025-07-02
Description: Nokia Single RAN baseband software earlier than 24R1-SR 1.0 MP contains administrative shell input validation fault, which authenticated admin user can, in theory, potentially use for injecting arbitrary commands for unprivileged baseband OAM service process execution via special characters added to baseband internal COMA_config.xml file.

This issue has been corrected starting from release 24R1-SR 1.0 MP and later, by adding proper input validation to OAM service process which prevents injecting special characters via baseband internal COMA_config.xml file.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-77
References: https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2025-24333/
CVE: CVE-2025-24334
Published: 2025-07-02
Description: The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the exact software release version by sending a specific HTTP POST request through the Mobile Network Operator (MNO) internal RAN management network.
CVSS Score: 3.3 (LOW)
CWE: CWE-497
References: https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2025-24334/
CVE: CVE-2025-24335
Published: 2025-07-02
Description: Nokia Single RAN baseband software versions earlier than 24R1-SR 2.1 MP contain a SOAP message input validation flaw, which in theory could potentially be used for causing resource exhaustion in the Single RAN baseband OAM service.

No practical exploit has been detected for this flaw. However, the issue has been corrected starting from release 24R1-SR 2.1 MP by adding sufficient input validation for received SOAP requests, effectively mitigating the reported issue.
CVSS Score: 2.0 (LOW)
CWE: CWE-1287
References: https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2025-24335/
CVE: CVE-2025-27021
Published: 2025-07-02
Description: The misconfiguration in the sudoers configuration of the operating system in
 Infinera G42 version R6.1.3 allows low privileged OS users to 
read/write physical memory via devmem command line tool. 
This could 
allow sensitive information disclosure, denial of service, and privilege 
escalation by tampering with kernel memory.


Details: The output of "sudo -l" reports the presence of "devmem" command 
executable as super user without using a password. This command allows 
to read and write an arbitrary memory area of the target device, 
specifying an absolute address.
CVSS Score: 7.0 (HIGH)
CWE: CWE-266
References: https://euvd.enisa.europa.eu/vulnerability/CVE-2025-27021; https://www.cvcn.gov.it/cvcn/cve/CVE-2025-27021
CVE: CVE-2025-27022
Published: 2025-07-02
Description: A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 
allows remote authenticated users to download all OS files via HTTP 
requests.


Details: 

Lack or insufficient validation of user-supplied input allows 
authenticated users to access all files on the target machine file 
system that are readable to the user account used to run the httpd 
service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://euvd.enisa.europa.eu/vulnerability/CVE-2025-27022; https://www.cvcn.gov.it/cvcn/cve/CVE-2025-27022
CVE: CVE-2025-27023
Published: 2025-07-02
Description: Lack or insufficent input validation in WebGUI CLI web in Infinera G42 
version R6.1.3 allows remote authenticated users to read all OS files 
via crafted CLI commands.


Details: The web interface based management of the Infinera G42 appliance enables the feature of
 executing a restricted set of commands. This feature 
also offers the option to execute a script-file already present on the target
 device. When a non-script or incorrect file is specified, the content 
of the file is shown along with an error message. Due to an execution of the http service with a privileged user all files on the file system can be viewed this way.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://euvd.enisa.europa.eu/vulnerability/CVE-2025-27023; https://www.cvcn.gov.it/cvcn/cve/CVE-2025-27023
CVE: CVE-2025-27024
Published: 2025-07-02
Description: Unrestricted access to OS file system in SFTP service in Infinera G42 
version R6.1.3 allows remote authenticated users to read/write OS files 
via SFTP connections.


Details: Account members of the Network Administrator profile can access the 
target machine via SFTP with the same credentials used for SSH CLI 
access and are able to read all files according to the OS permission instead of remaining inside the chrooted directory position.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-280
References: https://euvd.enisa.europa.eu/vulnerability/CVE-2025-27024; https://www.cvcn.gov.it/cvcn/cve/CVE-2025-27024
CVE: CVE-2025-27025
Published: 2025-07-02
Description: The target device exposes a service on a specific TCP port with a configured
 endpoint. The access to that endpoint is granted using a Basic Authentication
 method. The endpoint accepts also the PUT method and it is possible to 
write files on the target device file system. Files are written as root.
 Using Postman it is possible to perform a Directory Traversal attack 
and write files into any location of the device file system. Similarly to the PUT method, it is possible to leverage the 
same mechanism to read any file from the file system by using the GET 
method.
CVSS Score: 8.8 (HIGH)
CWE: CWE-280
References: https://euvd.enisa.europa.eu/vulnerability/CVE-2025-27025; https://www.cvcn.gov.it/cvcn/cve/CVE-2025-27025
CVE: CVE-2025-2330
Published: 2025-07-02
Description: The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button+modal' widget in all versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/widgetkit-for-elementor/trunk/elements/button-modal/template/view.php#L86; https://plugins.trac.wordpress.org/changeset/3283765/widgetkit-for-elementor/tags/2.5.5/elements/button-modal/template/view.php; https://wordpress.org/plugins/widgetkit-for-elementor/#developers
CVE: CVE-2025-4946
Published: 2025-07-02
Description: The Vikinger theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the vikinger_delete_activity_media_ajax() function in all versions up to, and including, 1.9.32. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Note: Requires Vikinger Media plugin to be installed and active.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://themeforest.net/item/vikinger-buddypress-and-gamipress-social-community/28612259; https://www.wordfence.com/threat-intel/vulnerabilities/id/22d8f1db-1b7e-4b68-a381-01f51dd34b2b?source=cve
CVE: CVE-2025-39362
Published: 2025-07-02
Description: Missing Authorization vulnerability in Mollie Mollie Payments for WooCommerce mollie-payments-for-woocommerce.This issue affects Mollie Payments for WooCommerce: from n/a through <= 8.0.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/mollie-payments-for-woocommerce/vulnerability/wordpress-mollie-payments-for-woocommerce-plugin-8-0-1-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE: CVE-2024-35164
Published: 2025-07-02
Description: The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers via text-based protocols like SSH. If a malicious user has access to a text-based connection, a specially-crafted sequence of console codes could allow arbitrary code to be executed
with the privileges of the running guacd process.




Users are recommended to upgrade to version 1.6.0, which fixes this issue.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-129
References: https://lists.apache.org/thread/sgs8lplbkrpvd3hrvcnnxh3028h4py70; http://www.openwall.com/lists/oss-security/2025/07/01/2
CVE: CVE-2025-46647
Published: 2025-07-02
Description: A vulnerability of plugin openid-connect in Apache APISIX.

This vulnerability will only have an impact if all of the following conditions are met:
1. Use the openid-connect plugin with introspection mode
2. The auth service connected to openid-connect provides services to multiple issuers
3. Multiple issuers share the same private key and relies only on the issuer being different

If affected by this vulnerability, it would allow an attacker with a valid account on one of the issuers to log into the other issuer.




This issue affects Apache APISIX: until 3.12.0.

Users are recommended to upgrade to version 3.12.0 or higher.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-302
References: https://lists.apache.org/thread/yrpp2cd3o4qkxlrh421mq8gsrt0k4x0w; http://www.openwall.com/lists/oss-security/2025/07/02/1
CVE: CVE-2025-27026
Published: 2025-07-02
Description: A missing double-check feature in the WebGUI for CLI deactivation in Infinera G42 
version R6.1.3 allows an authenticated administrator to make other 
management interfaces unavailable via local and network interfaces. The CLI deactivation via the WebGUI does not only stop CLI interface but deactivates also Linux Shell, WebGUI and Physical Serial Console access. No 
confirmation is asked at deactivation time. Loosing access to these services device administrators are at risk of completely loosing device control.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-1220
References: https://euvd.enisa.europa.eu/vulnerability/CVE-2025-27026; https://www.cvcn.gov.it/cvcn/cve/CVE-2025-27026
CVE: CVE-2025-34057
Published: 2025-07-02
Description: An information disclosure vulnerability exists in Ruijie NBR series routers (known to affect NBR2000G, NBR1300G, and NBR1000 models) via the /WEB_VMS/LEVEL15/ endpoint. By crafting a specific POST request with modified Cookie headers and specially formatted parameters, an unauthenticated attacker can retrieve administrative account credentials in plaintext. This flaw allows direct disclosure of sensitive user data due to improper authentication checks and insecure backend logic. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.
CWE: CWE-306
References: https://vulncheck.com/advisories/ruijie-nbr-router-administrative-credential-disclosure; https://vulners.com/seebug/SSV:89107; https://www.seebug.org/vuldb/ssvid-89107
CVE: CVE-2025-34067
Published: 2025-07-02
Description: An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. The endpoint /bic/ssoService/v1/applyCT deserializes untrusted user input, allowing an attacker to trigger Fastjson's auto-type feature to load arbitrary Java classes. By referencing a malicious class via an LDAP URL, an attacker can achieve remote code execution on the underlying system. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.
CWE: CWE-502
References: https://github.com/PeiQi0/PeiQi-WIKI-Book/blob/main/docs/wiki/iot/HIKVISION/HIKVISION%20%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%20applyCT%20Fastjson%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md; https://s4e.io/tools/hikvision-applyct-remote-code-execution; https://vulncheck.com/advisories/hikvision-ismp-rce-applyct