deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-49222
Published: 2025-08-21
Description: Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.9.x <= 10.9.2, 10.10.x <= 10.10.0 fail to validate upload types in remote cluster upload sessions which allows a system admin to upload non-attachment file types via shared channels that could potentially be placed in arbitrary filesystem directories.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-434
References: https://mattermost.com/security-updates
CVE: CVE-2025-49810
Published: 2025-08-21
Description: Mattermost versions 10.5.x <= 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts
CVSS Score: 3.5 (LOW)
CWE: CWE-863
References: https://mattermost.com/security-updates
CVE: CVE-2025-53971
Published: 2025-08-21
Description: Mattermost versions 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate authorization for team scheme role modifications which allows Team Admins to demote Team Members to Guests via the PUT /api/v4/teams/team-id/members/user-id/schemeRoles API endpoint.
CVSS Score: 3.8 (LOW)
CWE: CWE-863
References: https://mattermost.com/security-updates
CVE: CVE-2025-8023
Published: 2025-08-21
Description: Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.9.x <= 10.9.2 fails to sanitize path traversal sequences in template file destination paths, which allows a system admin to perform path traversal attacks via malicious path components, potentially enabling malicious file placement outside intended directories.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: https://mattermost.com/security-updates
CVE: CVE-2025-8895
Published: 2025-08-21
Description: The WP Webhooks plugin for WordPress is vulnerable to arbitrary file copy due to missing validation of user-supplied input in all versions up to, and including, 3.3.5. This makes it possible for unauthenticated attackers to copy arbitrary files on the affected site's server to arbitrary locations. This can be used to copy the contents of wp-config.php into a text file which can then be accessed in a browser to reveal database credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3347509%40wp-webhooks%2Ftrunk&old=3327632%40wp-webhooks%2Ftrunk&sfp_email=&sfph_mail=; https://wordpress.org/plugins/wp-webhooks; https://www.wordfence.com/threat-intel/vulnerabilities/id/de9c9e1e-3c3c-463a-a78c-d8bc7228da93?source=cve
CVE: CVE-2025-8064
Published: 2025-08-21
Description: The Bible SuperSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘selector_height’ parameter in all versions up to, and including, 6.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/aicwebtech/Bible-SuperSearch-WordPress-Plugin/commit/535e1a48a6d[PII_REDACTED]adfd9881a0c1878b741#diff-e60090bad955f035bce7cebd3a9a1e9555f5692fa74c17a24a31cfc1557d04d6; https://plugins.trac.wordpress.org/browser/biblesupersearch/trunk/wp/class.shortcodes.php#L270; https://plugins.trac.wordpress.org/changeset/3345278/
CVE: CVE-2025-9296
Published: 2025-08-21
Description: A security vulnerability has been detected in Emlog Pro up to 2.5.18. This affects an unknown function of the file /admin/blogger.php?action=update_avatar. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://github.com/lan041221/cvec/issues/8; https://vuldb.com/?ctiid.320901; https://vuldb.com/?id.320901
CVE: CVE-2025-47184
Published: 2025-08-21
Description: An XML external entities (XXE) injection vulnerability in the /init API endpoint in Exagid EX10 before 6.4.0 P20, 7.0.1 P12, and 7.2.0 P08 allows an authenticated, unprivileged attacker to achieve information disclosure and privilege escalation via a crafted ISys XML message.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-91
References: https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0004.md; https://www.exagrid.com/exagrid-products/exagrid-product-line/
CVE: CVE-2025-9297
Published: 2025-08-21
Description: A vulnerability was detected in Tenda i22 1.0.0.3(4687). This impacts the function formWeixinAuthInfoGet of the file /goform/wxportalauth. Performing manipulation of the argument Type results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/davybat/IoT-Vuls/blob/main/tenda/formWeixinAuthInfoGet.md; https://github.com/davybat/IoT-Vuls/blob/main/tenda/formWeixinAuthInfoGet.md#poc; https://vuldb.com/?ctiid.320902
CVE: CVE-2025-9298
Published: 2025-08-21
Description: A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/davybat/IoT-Vuls/blob/main/tenda/formQuickIndex.md; https://github.com/davybat/IoT-Vuls/blob/main/tenda/formQuickIndex.md#poc; https://vuldb.com/?ctiid.320903
CVE: CVE-2025-9299
Published: 2025-08-21
Description: A vulnerability has been found in Tenda M3 1.0.0.12. Affected by this vulnerability is the function formGetMasterPassengerAnalyseData of the file /goform/getMasterPassengerAnalyseData. The manipulation of the argument Time leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/davybat/IoT-Vuls/blob/main/tenda/formGetMasterPassengerAnalyseData.md; https://github.com/davybat/IoT-Vuls/blob/main/tenda/formGetMasterPassengerAnalyseData.md#poc; https://vuldb.com/?ctiid.320904
CVE: CVE-2025-9300
Published: 2025-08-21
Description: A vulnerability was found in saitoha libsixel up to 1.10.3. Affected by this issue is the function sixel_debug_print_palette of the file src/encoder.c of the component img2sixel. The manipulation results in stack-based buffer overflow. The attack must be initiated from a local position. The exploit has been made public and could be used. The patch is identified as 316c086e79d66b62c0c4bc66229ee894e4fdb7d1. Applying a patch is advised to resolve this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-121, CWE-787
References: https://drive.google.com/file/d/1IIvvRFgUQZcySqeoqXXhsxd0HZCjClJ7/view?usp=sharing; https://github.com/saitoha/libsixel/commit/316c086e79d66b62c0c4bc66229ee894e4fdb7d1; https://github.com/saitoha/libsixel/issues/200
CVE: CVE-2025-34158
Published: 2025-08-21
Description: Plex Media Server (PMS) 1.41.7.x through 1.42.0.x before 1.42.1 is affected by incorrect resource transfer between spheres because /myplex/account provides the credentials of the server owner (and a /api/resources call reveals other servers accessible by that server owner).
CVSS Score: 8.5 (HIGH)
CWE: CWE-669
References: https://forums.plex.tv/t/plex-media-server-security-update/928341; https://github.com/lufinkey/vulnerability-research/blob/main/CVE-2025-34158/README.md; https://github.com/lufinkey/vulnerability-research/tree/main/CVE-2025-34158
CVE: CVE-2025-51818
Published: 2025-08-21
Description: MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component. This allows an attacker to execute arbitrary commands
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-552
References: https://github.com/Y4y17/CVE/blob/main/Arbitrary%20file%20deletion%20vulnerability.md
CVE: CVE-2025-55366
Published: 2025-08-21
Description: Incorrect access control in the component \controller\UserController.java of jshERP v3.5 allows attackers to arbitrarily reset user account passwords and execute a horizontal privilege escalation attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://jsherp.com; https://github.com/cina666/CVE/blob/main/jshERP/CVE-2025-55366.md; https://github.com/jishenghua/jshERP
CVE: CVE-2025-55367
Published: 2025-08-21
Description: Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://jsherp.com; https://github.com/cina666/CVE/blob/main/jshERP/CVE-2025-55367.md; https://github.com/jishenghua/jshERP
CVE: CVE-2025-55368
Published: 2025-08-21
Description: Incorrect access control in the component \controller\RoleController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://jsherp.com; https://github.com/cina666/CVE/blob/main/jshERP/CVE-2025-55368.md; https://github.com/jishenghua/jshERP
CVE: CVE-2025-55370
Published: 2025-08-21
Description: Incorrect access control in the component \controller\ResourceController.java of jshERP v3.5 allows unauthorized attackers to obtain all the corresponding ID data by modifying the ID value.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: http://jsherp.com; https://github.com/cina666/CVE/blob/main/jshERP/%E8%B6%8A%E6%9D%83%E8%8E%B7%E5%8F%96%E4%BB%BB%E6%84%8F%E8%B4%A6%E5%8F%B7%E4%BF%A1%E6%81%AF%E5%AE%9E%E7%8E%B0%E4%BB%BB%E6%84%8F%E7%99%BB%E5%BD%95.md; https://github.com/jishenghua/jshERP
CVE: CVE-2025-55564
Published: 2025-08-21
Description: Tenda AC15 v15.03.05.19_multi_TD01 has a stack overflow via the list parameter in the fromSetIpMacBind function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: http://tendaac15v10brv15030519multitd01.com; https://github.com/clxhzg/CVE/blob/main/Tenda/AC15/SetIpMacBind.md
CVE: CVE-2025-9301
Published: 2025-08-21
Description: A vulnerability was determined in cmake 4.1.20250725-gb5cce23. This affects the function cmForEachFunctionBlocker::ReplayItems of the file cmForEachCommand.cxx. This manipulation causes reachable assertion. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. Patch name: 37e27f71bc356d880c908040cd0cb68fa2c371b8. It is suggested to install a patch to address this issue.
CVSS Score: 3.3 (LOW)
CWE: CWE-617
References: https://drive.google.com/file/d/1TerUqQB8_lzJTwIBCBmE94zn7n-gOz4f/view?usp=sharing; https://gitlab.kitware.com/cmake/cmake/-/commit/37e27f71bc356d880c908040cd0cb68fa2c371b8; https://gitlab.kitware.com/cmake/cmake/-/issues/27135
CVE: CVE-2025-9302
Published: 2025-08-21
Description: A vulnerability was identified in PHPGurukul User Management System 1.0. This vulnerability affects unknown code of the file /signup.php. Such manipulation of the argument emailid leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/chenjunjie3/cve/issues/5; https://phpgurukul.com/; https://vuldb.com/?ctiid.320907
CVE: CVE-2025-48956
Published: 2025-08-21
Description: vLLM is an inference and serving engine for large language models (LLMs). From 0.1.0 to before 0.10.1.1, a Denial of Service (DoS) vulnerability can be triggered by sending a single HTTP GET request with an extremely large header to an HTTP endpoint. This results in server memory exhaustion, potentially leading to a crash or unresponsiveness. The attack does not require authentication, making it exploitable by any remote user. This vulnerability is fixed in 0.10.1.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/vllm-project/vllm/commit/d8b736f913a59117803d6701521d2e[PII_REDACTED]; https://github.com/vllm-project/vllm/pull/23267; https://github.com/vllm-project/vllm/security/advisories/GHSA-rxc4-3w6r-4v47
CVE: CVE-2025-50860
Published: 2025-08-21
Description: SQL Injection in the listdomains function in Easy Hosting Control Panel (EHCP) 20.04.1.b allows authenticated attackers to access or manipulate database contents via the arananalan POST parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://packetstorm.news/files/id/208535; https://www.ehcp.net/?p=402
CVE: CVE-2025-52194
Published: 2025-08-21
Description: A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://bushido-sec.com/index.php/2025/08/08/libsndfile-buffer-overflow/; https://github.com/libsndfile; https://github.com/libsndfile/libsndfile/issues/1082
CVE: CVE-2025-53251
Published: 2025-08-21
Description: Unrestricted Upload of File with Dangerous Type vulnerability in An-Themes Pin WP pin-wp allows Upload a Web Shell to a Web Server.This issue affects Pin WP: from n/a through < 7.2.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/Wordpress/Theme/pin-wp/vulnerability/wordpress-responsive-menu-plugin-6-1-4-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2025-55297
Published: 2025-08-21
Description: ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. The BluFi example bundled in ESP-IDF was vulnerable to memory overflows in two areas: Wi-Fi credential handling and Diffie–Hellman key exchange. This vulnerability is fixed in 5.4.1, 5.3.3, 5.1.6, and 5.0.9.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-131
References: https://github.com/espressif/esp-idf/commit/12b7a9e6d78012ab9184b7ccdb5524364bf7e345; https://github.com/espressif/esp-idf/commit/3fc6c93936077cb1659e1f0e0268e62cf6423e9d; https://github.com/espressif/esp-idf/commit/5f93ec3b11b6115475c34de57093b3672d594e8f
CVE: CVE-2025-55371
Published: 2025-08-21
Description: Incorrect access control in the component /controller/PersonController.java of jshERP v3.5 allows unauthorized attackers to obtain all the information of the handler by executing the getAllList method.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://jsherp.com; https://github.com/cina666/CVE/blob/main/jshERP/%E8%B6%8A%E6%9D%83%E8%87%B4%E4%BB%BB%E6%84%8F%E6%8E%A5%E7%AE%A1%E8%B4%A6%E5%8F%B7.md; https://github.com/jishenghua/jshERP
CVE: CVE-2025-55383
Published: 2025-08-21
Description: Moss before v0.15 has a file upload vulnerability. The "upload" function configuration allows attackers to upload files of any extension to any location on the target server.
CVSS Score: 8.6 (HIGH)
CWE: CWE-434
References: https://github.com/deep-project/moss/issues/16
CVE: CVE-2025-9303
Published: 2025-08-21
Description: A security flaw has been discovered in TOTOLINK A720R 4.1.5cu.630_B20250509. This issue affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument desc results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120, CWE-120
References: https://github.com/lin-3-start/lin-cve/blob/main/TOTOLINK%20A720R/TOTOLINK-A720R.md; https://github.com/lin-3-start/lin-cve/blob/main/TOTOLINK%20A720R/TOTOLINK-A720R.md#poc; https://vuldb.com/?ctiid.320908
CVE: CVE-2025-9304
Published: 2025-08-21
Description: A weakness has been identified in SourceCodester Online Bank Management System 1.0. Impacted is an unknown function of the file /bank/show.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from a remote location. The exploit has been made available to the public and could be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/CVE-Hunter-Leo/CVE/issues/7; https://vuldb.com/?ctiid.320909; https://vuldb.com/?id.320909
CVE: CVE-2025-9305
Published: 2025-08-21
Description: A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. The affected element is an unknown function of the file /bank/mnotice.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/CVE-Hunter-Leo/CVE/issues/8; https://vuldb.com/?ctiid.320910; https://vuldb.com/?id.320910
CVE: CVE-2025-52395
Published: 2025-08-21
Description: An issue in Roadcute API v.1 allows a remote attacker to execute arbitrary code via the application exposing a password reset API endpoint that fails to validate the identity of the requester properly
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/Arakiba/CVEs/tree/main/CVE-2025-52395; https://www.roadcube.com/
CVE: CVE-2025-55420
Published: 2025-08-21
Description: A Reflected Cross Site Scripting (XSS) vulnerability was found in /index.php in FoxCMS v1.2.6. When a crafted script is sent via a GET request, it is reflected unsanitized into the HTML response. This permits execution of arbitrary JavaScript code when a logged-in user submits the malicious input.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://www.notion.so/FoxCMS-V1-2-6-Reflected-XSS-in-index-php-2222b2fd021080589d27ef8e1b9ebd86?source=copy_link
CVE: CVE-2025-55742
Published: 2025-08-21
Description: UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, UnoPim contains a stored cross-site scripting vulnerability via SVG MIME/sanitizer bypass in the /admin/settings/users/create endpoint. This vulnerability is fixed in 0.2.1.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: https://github.com/unopim/unopim/commit/49d5f6ac4d5d9ef7d9cdfe01853234d531c55f75; https://github.com/unopim/unopim/commit/b596021b5a5e0656abe16c01ae0e84c95f9fe902; https://github.com/unopim/unopim/commit/b5e169e65725e0d80b6c79d57e62a25e1af6a3c3
CVE: CVE-2025-55743
Published: 2025-08-21
Description: UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, the image upload at the user creation feature performs only client side file type validation. A user can capture the request by uploading an image, capture the request through a Proxy like Burp suite. Make changes to the file extension and content. The vulnerability is fixed in 0.2.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://drive.proton.me/urls/PH1ESMKHMW#4Vxb2KNu3tmn; https://github.com/unopim/unopim/security/advisories/GHSA-v22v-xwh7-2vrm
CVE: CVE-2025-55744
Published: 2025-08-21
Description: UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, some of the endpoints of the application is vulnerable to Cross site Request forgery (CSRF). This vulnerability is fixed in 0.2.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://drive.proton.me/urls/VXNDKQ4WKR#LpvE777hl8OJ; https://github.com/unopim/unopim/security/advisories/GHSA-287x-6r2h-f9mw
CVE: CVE-2025-57753
Published: 2025-08-21
Description: vite-plugin-static-copy is rollup-plugin-copy for Vite with dev server support. Files not included in src are accessible with a crafted request. The vulnerability is fixed in 2.3.2 and 3.1.2.
CWE: CWE-22
References: https://github.com/sapphi-red/vite-plugin-static-copy/security/advisories/GHSA-pp7p-q8fx-2968; https://github.com/sapphi-red/vite-plugin-static-copy/security/advisories/GHSA-pp7p-q8fx-2968
CVE: CVE-2025-9162
Published: 2025-08-21
Description: A flaw was found in org.keycloak/keycloak-model-storage-service. The KeycloakRealmImport custom resource substitutes placeholders within imported realm documents, potentially referencing environment variables. This substitution process
allows for injection attacks when crafted realm documents are processed. An attacker can leverage this to inject malicious content during the realm import procedure. This can lead to unintended consequences within the Keycloak environment.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-526
References: https://access.redhat.com/errata/RHSA-2025:15336; https://access.redhat.com/errata/RHSA-2025:15337; https://access.redhat.com/errata/RHSA-2025:15338
CVE: CVE-2025-9306
Published: 2025-08-21
Description: A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/notice/addNotice. The manipulation of the argument noticeSubject results in cross site scripting. It is possible to launch the attack remotely. The exploit is now public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/lrjbsyh/CVE_Hunter/issues/3; https://github.com/lrjbsyh/CVE_Hunter/issues/3#issue[PII_REDACTED]; https://vuldb.com/?ctiid.320911
CVE: CVE-2025-9307
Published: 2025-08-21
Description: A flaw has been found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /admin/session.php. This manipulation of the argument sesssion causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/zzx-yyds/mycve/issues/2; https://phpgurukul.com/; https://vuldb.com/?ctiid.320912
CVE: CVE-2025-9308
Published: 2025-08-21
Description: A vulnerability has been found in yarnpkg Yarn up to 1.22.22. This impacts the function setOptions of the file src/util/request-manager.js. Such manipulation leads to inefficient regular expression complexity. Local access is required to approach this attack. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 3.3 (LOW)
CWE: CWE-400, CWE-1333, CWE-1333
References: https://github.com/yarnpkg/yarn/pull/9203; https://vuldb.com/?ctiid.320913; https://vuldb.com/?id.320913
CVE: CVE-2024-45438
Published: 2025-08-21
Description: An issue was discovered in TitanHQ SpamTitan Email Security Gateway 8.00.x before 8.00.101 and 8.01.x before 8.01.14. The file quarantine.php within the SpamTitan interface allows unauthenticated users to trigger account-level actions using a crafted GET request. Notably, when a non-existent email address is provided as part of the email parameter, SpamTitan will automatically create a user record and associate quarantine settings with it - all without requiring authentication.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284, CWE-306
References: https://docs.titanhq.com/en/13161-spamtitan-release-notes.html; https://seclists.org/fulldisclosure/2025/Sep/15; https://www.seralys.com/research/CVE-2024-45438.txt
CVE: CVE-2025-43755
Published: 2025-08-21
Description: A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.13, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.17 and 7.4 GA through update 92 allows an remote authenticated attacker to inject JavaScript into the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_type parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43755