deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-53942
Published: 2025-12-18
Description: File Thingie 2.5.7 contains an authenticated file upload vulnerability that allows remote attackers to upload malicious PHP zip archives to the web server. Attackers can create a custom PHP payload, upload and unzip it, and then execute arbitrary system commands through a crafted PHP script with a command parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/leefish/filethingie; https://www.exploit-db.com/exploits/51436; https://www.vulncheck.com/advisories/file-thingie-authenticated-arbitrary-file-upload-remote-code-execution
CVE: CVE-2023-53943
Published: 2025-12-18
Description: GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://glpi-project.org/pt-br/; https://www.exploit-db.com/exploits/51418; https://www.vulncheck.com/advisories/glpi-username-enumeration-vulnerability-via-lost-password-endpoint
CVE: CVE-2023-53944
Published: 2025-12-18
Description: EasyPHP Webserver 14.1 contains a path traversal vulnerability that allows remote users with low privileges to access files outside the document root by bypassing SecurityManager restrictions. Attackers can send GET requests with encoded directory traversal sequences like /..%5c..%5c to read system files such as /windows/win.ini.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.easyphp.org/; https://www.exploit-db.com/exploits/51430; https://www.vulncheck.com/advisories/easyphp-webserver-path-traversal-via-directory-traversal-sequences
CVE: CVE-2024-58317
Published: 2025-12-18
Description: A cookie security configuration vulnerability in Kentico Xperience allows attackers to bypass SSL requirements when setting administration cookies via web.config. The vulnerability affects .NET Framework projects by incorrectly handling the 'requireSSL' attribute, potentially compromising session security and authentication state.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-614
References: https://devnet.kentico.com/download/hotfixes; https://www.vulncheck.com/advisories/kentico-xperience-cookie-security-configuration
CVE: CVE-2024-58318
Published: 2025-12-18
Description: A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the rich text editor component for page and form builders. Attackers can exploit this vulnerability by entering malicious URIs, potentially allowing malicious scripts to execute in users' browsers.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://devnet.kentico.com/download/hotfixes; https://www.vulncheck.com/advisories/kentico-xperience-rich-text-editor-stored-xss
CVE: CVE-2024-58319
Published: 2025-12-18
Description: A reflected cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the Pages dashboard widget configuration dialog. Attackers can exploit this vulnerability to execute malicious scripts in administrative users' browsers.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://devnet.kentico.com/download/hotfixes; https://www.vulncheck.com/advisories/kentico-xperience-pages-dashboard-widget-reflected-xss
CVE: CVE-2024-58320
Published: 2025-12-18
Description: An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration interface hostname details during authentication. Attackers can retrieve confidential hostname configuration information through a public endpoint, potentially exposing internal network details.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-497
References: https://devnet.kentico.com/download/hotfixes; https://www.vulncheck.com/advisories/kentico-xperience-authentication-information-disclosure
CVE: CVE-2024-58321
Published: 2025-12-18
Description: A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via form validation rule configuration. Attackers can exploit this vulnerability to execute malicious scripts that will run in users' browsers.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://devnet.kentico.com/download/hotfixes; https://www.vulncheck.com/advisories/kentico-xperience-form-validation-stored-xss
CVE: CVE-2024-58322
Published: 2025-12-18
Description: A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious code into shipping options configuration. This could lead to potential theft of sensitive data by executing malicious scripts in users' browsers.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://devnet.kentico.com/download/hotfixes; https://www.vulncheck.com/advisories/kentico-xperience-shipping-options-stored-xss
CVE: CVE-2024-58323
Published: 2025-12-18
Description: A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the Checkbox form component. This allows malicious scripts to execute in users' browsers by exploiting HTML support in the form builder.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://devnet.kentico.com/download/hotfixes; https://www.vulncheck.com/advisories/kentico-xperience-checkbox-form-component-stored-xss
CVE: CVE-2025-14889
Published: 2025-12-18
Description: A security flaw has been discovered in Campcodes Advanced Voting Management System 1.0. The impacted element is an unknown function of the file /admin/voters_edit.php of the component Password Handler. Performing a manipulation of the argument ID results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://gist.github.com/nikstudy576-maker/82e1e1ede9b848880aa09b87b92bc22c; https://vuldb.com/?ctiid.337378; https://vuldb.com/?id.337378
CVE: CVE-2025-64400
Published: 2025-12-18
Description: Control Panel provides an API for pre-registering  into an enrollment and organization prior to a user's first login. The API for creating users checks that the account requesting a user creation has `edit` on the enrollment-level user directory, but is missing a separate check that the enrollment editor has access (or belongs to) the organization that they are adding a user to.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-284
References: https://palantir.safebase.us/?tcuUid=52a9fd2f-1868-48cb-af01-93c589160e19
CVE: CVE-2025-65566
Published: 2025-12-18
Description: A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. When the UPF receives a PFCP Session Report Response that is missing the mandatory Cause Information Element, the session report handler dereferences a nil pointer instead of rejecting the malformed message. This triggers a panic and terminates the UPF process. An attacker who can send PFCP Session Report Response messages to the UPF's N4/PFCP endpoint can exploit this flaw to repeatedly crash the UPF and disrupt user-plane services.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/omec-project/upf/issues/958; https://github.com/omec-project/upf/issues/958
CVE: CVE-2025-67163
Published: 2025-12-18
Description: A stored cross-site scripting (XSS) vulnerability in Simple Machines Forum v2.1.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Forum Name parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20, CWE-79, CWE-83
References: https://github.com/SimpleMachines/SMF; https://github.com/SimpleMachines/SMF/blob/release-3.0/Themes/default/Stats.template.php#L26; https://github.com/SimpleMachines/SMF/security/advisories/GHSA-p2xm-x9fp-5r7x
CVE: CVE-2025-13911
Published: 2025-12-18
Description: The vulnerability affects Ignition SCADA applications where Python 
scripting is utilized for automation purposes. The vulnerability arises 
from the absence of proper security controls that restrict which Python 
libraries can be imported and executed within the scripting environment.
 The core issue lies in the Ignition service account having system 
permissions beyond what an Ignition privileged user requires. When an 
authenticated administrator uploads a malicious project file containing 
Python scripts with bind shell capabilities, the application executes 
these scripts with the same privileges as the Ignition Gateway process, 
which typically runs with SYSTEM-level permissions on Windows. 
Alternative code execution patterns could lead to similar results.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-250
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-352-01.json; https://security.inductiveautomation.com/; https://www.cisa.gov/news-events/ics-advisories/icsa-25-352-01
CVE: CVE-2025-14848
Published: 2025-12-18
Description: Advantech WebAccess/SCADA
is vulnerable to absolute directory traversal, which may allow an attacker to determine the existence of arbitrary files.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-36
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-352-06.json; https://www.advantech.com/en-us/support/details/installation?id=1-MS9MJV; https://www.cisa.gov/news-events/ics-advisories/icsa-25-352-06
CVE: CVE-2025-14849
Published: 2025-12-18
Description: Advantech WebAccess/SCADA 
is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-352-06.json; https://www.advantech.com/en-us/support/details/installation?id=1-MS9MJV; https://www.cisa.gov/news-events/ics-advisories/icsa-25-352-06
CVE: CVE-2025-14850
Published: 2025-12-18
Description: Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-352-06.json; https://www.advantech.com/en-us/support/details/installation?id=1-MS9MJV; https://www.cisa.gov/news-events/ics-advisories/icsa-25-352-06
CVE: CVE-2025-46268
Published: 2025-12-18
Description: Advantech WebAccess/SCADA 
is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-352-06.json; https://www.advantech.com/en-us/support/details/installation?id=1-MS9MJV; https://www.cisa.gov/news-events/ics-advisories/icsa-25-352-06
CVE: CVE-2025-53710
Published: 2025-12-18
Description: Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This issue resulted in bypass of access control due to the presence of a vulnerable endpoint in Foundry Container Service that executed user-controlled commands locally.
CVSS Score: 7.5 (HIGH)
CWE: CWE-653
References: https://palantir.safebase.us/?tcuUid=4dbae101-79da-433c-8184-c70b78f4701b
CVE: CVE-2025-59529
Published: 2025-12-18
Description: Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc2, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although `CLIENTS_MAX` is defined, `server_work()` unconditionally `accept()`s and `client_new()` always appends the new client and increments `n_clients`. There is no check against the limit. When client cannot be accepted as a result of maximal socket number of avahi-daemon, it logs unconditionally error per each connection. Unprivileged local users can exhaust daemon memory and file descriptors, causing a denial of service system-wide for mDNS/DNS-SD. Exhausting local file descriptors causes increased system load caused by logging errors of each of request. Overloading prevents glibc calls using nss-mdns plugins to resolve `*.local.` names and link-local addresses. As of time of publication, no known patched versions are available, but a candidate fix is available in pull request 808, and some workarounds are available. Simple clients are offered for nss-mdns package functionality. It is not possible to disable the unix socket `/run/avahi-daemon/socket`, but resolution requests received via DBus are not affected directly. Tools avahi-resolve, avahi-resolve-address and avahi-resolve-host-name are not affected, they use DBus interface. It is possible to change permissions of unix socket after avahi-daemon is started. But avahi-daemon does not provide any configuration for it. Additional access restrictions like SELinux can also prevent unwanted tools to access the socket and keep resolution working for trusted users.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/avahi/avahi/pull/808; https://github.com/avahi/avahi/security/advisories/GHSA-73wf-3xmj-x82q; https://zeropath.com/blog/avahi-simple-protocol-server-dos-cve-2025-59529
CVE: CVE-2025-62000
Published: 2025-12-18
Description: BullWall Ransomware Containment may not always detect an encrypted file. This issue affects a specific file inspection method that evaluates file content based on header bytes. An authenticated attacker could encrypt files, preserving the first four bytes and preventing this particular method from triggering. The affected product implements additional integrity-based detection mechanisms capable of identifying file corruption or encryption for some common file extensions independent of header bytes. As a result, this vulnerability does not represent a complete bypass of ransomware detection, but a limitation of one detection method when evaluated independently. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions may also be affected. BullWall plans to improve detection method documentation.
CVSS Score: 7.1 (HIGH)
CWE: CWE-1023
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-352-01.json; https://www.cve.org/CVERecord?id=CVE-2025-62000
CVE: CVE-2025-62001
Published: 2025-12-18
Description: BullWall Ransomware Containment supports configurable file and directory exclusions such as '$RECYCLE.BIN' to balance monitoring scope and performance. Certain exclusion patterns could allow an authenticated attacker to rename directories in a way that avoids monitoring. Fixed in 4.6.1.14 and 5.0.0.42, which remove hardcoded exclusion behavior and exposes exclusion handling as configurable settings.
CVSS Score: 8.8 (HIGH)
CWE: CWE-420
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-352-01.json; https://www.cve.org/CVERecord?id=CVE-2025-62001
CVE: CVE-2025-62002
Published: 2025-12-18
Description: BullWall Ransomware Containment considers the number of files modified to trigger detection. An authenticated attacker could encrypt a single (possibly large) file without triggering detection if thresholds are configured to require multiple file changes. The number of files to trigger detection can be configured by the user. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions may also be affected.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-358
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-352-01.json; https://www.cve.org/CVERecord?id=CVE-2025-62002
CVE: CVE-2025-62003
Published: 2025-12-18
Description: BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for RDP connections. A remote, authenticated attacker can potentially bypass detection during this delay. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions may also be affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-367
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-352-01.json; https://www.cve.org/CVERecord?id=CVE-2025-62003
CVE: CVE-2025-62004
Published: 2025-12-18
Description: BullWall Server Intrusion Protection (SIP) services are initialized after login services during system startup. A local, authenticated attacker can log in after boot and before SIP MFA is running. The SIP services do not retroactively enforce MFA or disconnect sessions that were not subject to SIP MFA. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions mayy also be affected. BullWall plans to improve detection method documentation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-367
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-352-01.json; https://www.cve.org/CVERecord?id=CVE-2025-62004
CVE: CVE-2025-63947
Published: 2025-12-18
Description: A Reflected Cross-Site Scripting (XSS) vulnerability exists in phpMsAdmin version 2.2 in the database_mode.php file. An attacker can execute arbitrary web script or HTML via the dbname parameter after a user is authenticated.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/solonbarroso/vulnerability-research/blob/main/advisories/phpMsAdmin/CVE-2025-63947.md; https://github.com/solonbarroso/vulnerability-research/blob/main/advisories/phpMsAdmin/CVE-pending-phpMsAdmin.md
CVE: CVE-2025-63948
Published: 2025-12-18
Description: A SQL Injection vulnerability exists in phpMsAdmin version 2.2 in the database_mode.php file. An attacker can execute arbitrary SQL commands via the dbname parameter, potentially leading to information disclosure or database manipulation.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://github.com/solonbarroso/vulnerability-research/blob/main/advisories/phpMsAdmin/CVE-2025-63948.md; https://github.com/solonbarroso/vulnerability-research/blob/main/advisories/phpMsAdmin/CVE-pending-phpMsAdmin.md
CVE: CVE-2025-63949
Published: 2025-12-18
Description: A Reflected Cross-Site Scripting (XSS) vulnerability in yohanawi Hotel Management System (commit 87e004a) allows a remote attacker to execute arbitrary web script via the 'error' parameter in pages/room.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/solonbarroso/vulnerability-research/blob/main/advisories/Hotel-Management-System/CVE-2025-63949.md; https://github.com/solonbarroso/vulnerability-research/blob/main/advisories/Hotel-Management-System/CVE-pending-XSS.md
CVE: CVE-2025-63950
Published: 2025-12-18
Description: An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca[PII_REDACTED]42c0b (2023-02-28). The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize() function without validation. This allows a remote, unauthenticated attacker to inject arbitrary PHP objects, leading to a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://github.com/solonbarroso/vulnerability-research/blob/main/advisories/Twittodon/CVE-2025-63950.md; https://github.com/solonbarroso/vulnerability-research/blob/main/advisories/Twittodon/CVE-pending-Deserialization.md
CVE: CVE-2025-63951
Published: 2025-12-18
Description: An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi-Jukebox-RFID project through commit 4b2334f0ae0e87c0568876fc41c48c38aa9a7014 (2025-10-07). The 'rss' GET parameter receives data that is passed directly to the unserialize() function without validation. This allows a remote, unauthenticated attacker to inject arbitrary PHP objects, causing the application to process them and leading to errors or a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://github.com/solonbarroso/vulnerability-research/blob/main/advisories/RPi-Jukebox-RFID/CVE-2025-63951.md; https://github.com/solonbarroso/vulnerability-research/blob/main/advisories/RPi-Jukebox-RFID/CVE-pending-Deserialization.md
CVE: CVE-2025-67653
Published: 2025-12-18
Description: Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence of arbitrary files.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-352-06.json; https://www.advantech.com/en-us/support/details/installation?id=1-MS9MJV; https://www.cisa.gov/news-events/ics-advisories/icsa-25-352-06
CVE: CVE-2025-68161
Published: 2025-12-18
Description: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the  verifyHostName https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName  configuration attribute or the  log4j2.sslVerifyHostName https://logging.apache.org/log4j/2.x/manual/systemproperties.html#log4j2.sslVerifyHostName  system property is set to true.

This issue may allow a man-in-the-middle attacker to intercept or redirect log traffic under the following conditions:

  *  The attacker is able to intercept or redirect network traffic between the client and the log receiver.
  *  The attacker can present a server certificate issued by a certification authority trusted by the Socket Appender’s configured trust store (or by the default Java trust store if no custom trust store is configured).


Users are advised to upgrade to Apache Log4j Core version 2.25.3, which addresses this issue.

As an alternative mitigation, the Socket Appender may be configured to use a private or restricted trust root to limit the set of trusted certificates.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-297, CWE-295
References: https://github.com/apache/logging-log4j2/pull/4002; https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx; https://logging.apache.org/cyclonedx/vdr.xml
CVE: CVE-2025-13427
Published: 2025-12-18
Description: An authentication bypass vulnerability in Google Cloud Dialogflow CX Messenger allowed unauthenticated users to interact with restricted chat agents, gaining access to the agents' knowledge and the ability to trigger their intents, by manipulating initialization parameters or crafting specific API requests. 

All versions after August 20th, 2025 have been updated to protect from this vulnerability. No user action is required for this.
CWE: CWE-287
References: https://docs.cloud.google.com/dialogflow/docs/release-notes#December_11_2025
CVE: CVE-2025-34449
Published: 2025-12-18
Description: Genymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the sc_device_msg_deserialize() function. A compromised device can send crafted messages that cause out-of-bounds reads, which may result in memory corruption or a denial-of-service condition. This vulnerability may allow further exploitation on the host system.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://github.com/Genymobile/scrcpy/commit/3e40b24; https://github.com/Genymobile/scrcpy/issues/6415; https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2025-003-scrcpy-global-buffer-overflow.md
CVE: CVE-2025-34450
Published: 2025-12-18
Description: merbanan/rtl_433 versions up to and including 25.02 and prior to commit 25e47f8 contain a stack-based buffer overflow vulnerability in the function parse_rfraw() located in src/rfraw.c. When processing crafted or excessively large raw RF input data, the application may write beyond the bounds of a stack buffer, resulting in memory corruption or a crash. This vulnerability can be exploited to cause a denial of service and, under certain conditions, may be leveraged for further exploitation depending on the execution environment and available mitigations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/dd32/rtl_433/commit/25e47f8; https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2025-004-rtl_433-rfraw-parse-overflow.md; https://github.com/merbanan/rtl_433/issues/3375