deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-33028
Published: 2025-04-15
Description: In WinZip through 29.0, there is a Mark-of-the-Web Bypass Vulnerability because of an incomplete fix for CVE-2024-8811. This vulnerability allows attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-Web, WinZip does not propagate the Mark-of-the-Web to the extracted files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. NOTE: a third party has reported that this is a false positive, and has observed that the original CVE-2025-33028.md file has been deleted on GitHub. Also, this is disputed because Mark-of-the-Web propagation can increase risk via security-warning habituation, and because the intended control sphere for file-origin metadata (e.g., HostUrl in Zone.Identifier) may be narrower than that for reading the file's content.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-830
References: https://github.com/EnisAksu/Argonis/blob/main/CVEs/CVE-2025-33028%20%28WinZip%29/CVE-2025-33028.md; https://github.com/EnisAksu/Argonis/commit/5e1ff4e5f4fdb3f32aab465f7b429e0b91299d1d; https://kb.winzip.com/help/help_whatsnew.htm
CVE: CVE-2025-3617
Published: 2025-04-15
Description: A privilege escalation vulnerability exists in the Rockwell Automation ThinManager. When the software starts up, files are deleted in the temporary folder causing the Access Control Entry of the directory to inherit permissions from the parent directory. If exploited, a threat actor could inherit elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1727.html
CVE: CVE-2025-3618
Published: 2025-04-15
Description: A denial-of-service vulnerability exists in the Rockwell Automation ThinManager. The software fails to adequately verify the outcome of memory allocation while processing Type 18 messages. If exploited, a threat actor could cause a denial-of-service on the target software.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1727.html
CVE: CVE-2023-5616
Published: 2025-04-15
Description: In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-290
References: https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/2039577; https://ubuntu.com/security/CVE-2023-5616; https://ubuntu.com/security/notices/USN-6554-1
CVE: CVE-2024-42193
Published: 2025-04-15
Description: HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized access.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295
References: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120585
CVE: CVE-2025-22900
Published: 2025-04-15
Description: Totolink N600R v4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://github.com/xyqer1/TOTOLINK-N600R-setWanConfig-StackOverflow
CVE: CVE-2025-22903
Published: 2025-04-15
Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the pin parameter in the function setWiFiWpsConfig.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-121
References: https://github.com/xyqer1/TOTLINK-N600R-setWiFiWpsConfig-StackOverflow
CVE: CVE-2025-24358
Published: 2025-04-15
Description: gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services. Prior to 1.7.2, gorilla/csrf does not validate the Origin header against an allowlist. Its executes its validation of the Referer header for cross-origin requests only when it believes the request is being served over TLS. It determines this by inspecting the r.URL.Scheme value. However, this value is never populated for "server" requests per the Go spec, and so this check does not run in practice. This vulnerability allows an attacker who has gained XSS on a subdomain or top level domain to perform authenticated form submissions against gorilla/csrf protected targets that share the same top level domain. This vulnerability is fixed in 1.7.2.
CWE: CWE-352
References: https://github.com/gorilla/csrf/commit/9dd6af1f6d30fc79fb0d972394deebdabad6b5eb; https://github.com/gorilla/csrf/security/advisories/GHSA-rq77-p4h8-4crw; https://lists.debian.org/debian-lts-announce/2025/05/msg00002.html
CVE: CVE-2025-25456
Published: 2025-04-15
Description: Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via mac2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://gist.github.com/xyqer1/ab1e6a2bd369aaada0666639c843aff0; https://github.com/xyqer1/Tenda-AC10-AdvSetMacMtuWan-mac2-StackOverflow; https://gist.github.com/xyqer1/ab1e6a2bd369aaada0666639c843aff0
CVE: CVE-2025-27791
Published: 2025-04-15
Description: Collabora Online is a collaborative online office suite based on LibreOffice technology. In versions prior to 24.04.12.4, 23.05.19, and 22.05.25, there is a path traversal flaw in handling the CheckFileInfo BaseFileName field returned from WOPI servers. This allows for a file to be written anywhere the uid running Collabora Online can write, if such a response was supplied by a malicious WOPI server. By combining this flaw with a Time of Check, Time of Use DNS lookup issue with a WOPI server address under attacker control, it is possible to present such a response to be processed by a Collabora Online instance. This issue has been patched in versions 24.04.13.1, 23.05.19, and 22.05.25.
CWE: CWE-23
References: https://github.com/CollaboraOnline/online/security/advisories/GHSA-9j32-gg3j-8w25
CVE: CVE-2025-28399
Published: 2025-04-15
Description: An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of the Address Controller class.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://github.com/20210607/cve_public/blob/main/CVE-2025-28399.md
CVE: CVE-2025-29213
Published: 2025-04-15
Description: A zip slip vulnerability in the component \service\migrate\MigrateForm.java of JEEWMS v3.7 allows attackers to execute arbitrary code via a crafted Zip file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/wy876/cve/issues/7
CVE: CVE-2025-1122
Published: 2025-04-15
Description: Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0  stable on Cr50 Boards allows an attacker with root access to gain persistence and 
Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://issues.chromium.org/issues/b/324336238; https://issuetracker.google.com/issues/324336238
CVE: CVE-2025-1292
Published: 2025-04-15
Description: Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 122.0.6261.132  stable on Cr50 Boards allows an attacker with root access to gain persistence and 
bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://issues.chromium.org/issues/b/324336238; https://issuetracker.google.com/issues/324336238
CVE: CVE-2025-2567
Published: 2025-04-15
Description: An attacker could modify or disable settings, disrupt fuel monitoring 
and supply chain operations, leading to disabling of ATG monitoring. 
This would result in potential safety hazards in fuel storage and 
transportation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-05
CVE: CVE-2025-30206
Published: 2025-04-15
Description: Dpanel is a Docker visualization panel system which provides complete Docker management functions. The Dpanel service contains a hardcoded JWT secret in its default configuration, allowing attackers to generate valid JWT tokens and compromise the host machine. This security flaw allows attackers to analyze the source code, discover the embedded secret, and craft legitimate JWT tokens. By forging these tokens, an attacker can successfully bypass authentication mechanisms, impersonate privileged users, and gain unauthorized administrative access. Consequently, this enables full control over the host machine, potentially leading to severe consequences such as sensitive data exposure, unauthorized command execution, privilege escalation, or further lateral movement within the network environment. This issue is patched in version 1.6.1. A workaround for this vulnerability involves replacing the hardcoded secret with a securely generated value and load it from secure configuration storage.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-321, CWE-453, CWE-547
References: https://github.com/donknap/dpanel/security/advisories/GHSA-j752-cjcj-w847
CVE: CVE-2025-31497
Published: 2025-04-15
Description: TEIGarage is a webservice and RESTful service to transform, convert and validate various formats, focussing on the TEI format. The Document Conversion Service contains a critical XML External Entity (XXE) Injection vulnerability in its document conversion functionality. The service processes XML files during the conversion process but fails to disable external entity processing, allowing an attacker to read arbitrary files from the server's filesystem. This vulnerability could allow attackers to read sensitive files from the server's filesystem, potentially exposing configuration files, credentials, or other confidential information. Additionally, depending on the server configuration, this could potentially be used to perform server-side request forgery (SSRF) attacks by making the server connect to internal services. This issue is patched in version 1.2.4. A workaround for this vulnerability includes disabling external entity processing in the XML parser by setting the appropriate security features (e.g., XMLConstants.FEATURE_SECURE_PROCESSING).
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://github.com/TEIC/TEIGarage/security/advisories/GHSA-w2hq-3cjc-2x55
CVE: CVE-2025-32012
Published: 2025-04-15
Description: Jellyfin is an open source self hosted media server. In versions 10.9.0 to before 10.10.7, the /System/Restart endpoint provides administrators the ability to restart their Jellyfin server. This endpoint is intended to be admins-only, but it also authorizes requests from any device in the same local network as the Jellyfin server. Due to the method Jellyfin uses to determine the source IP of a request, an unauthenticated attacker is able to spoof their IP to appear as a LAN IP, allowing them to restart the Jellyfin server process without authentication. This means that an unauthenticated attacker could mount a denial-of-service attack on any default-configured Jellyfin server by simply sending the same spoofed request every few seconds to restart the server over and over. This method of IP spoofing also bypasses some security mechanisms, cause a denial-of-service attack, and possible bypass the admin restart requirement if combined with remote code execution. This issue is patched in version 10.10.7.
CVSS Score: 7.5 (HIGH)
CWE: CWE-290
References: https://github.com/jellyfin/jellyfin/commit/f625665cb116a7e3feb8b79aaf1ed39a956e0585; https://github.com/jellyfin/jellyfin/security/advisories/GHSA-qcmf-gmhm-rfv9
CVE: CVE-2025-32438
Published: 2025-04-15
Description: make-initrd-ng is a tool for copying binaries and their dependencies. Local privilege escalation affecting all NixOS users. With systemd.shutdownRamfs.enable enabled (the default) a local user is able to create a program that will be executed by root during shutdown. Patches exist for NixOS 24.11 and 25.05 / unstable. As a workaround, set systemd.shutdownRamfs.enable = false;.
CVSS Score: 8.8 (HIGH)
CWE: CWE-378, CWE-379
References: https://github.com/NixOS/nixpkgs/commit/b17590193d8e5697000c23c66afcf11e1753734d; https://github.com/NixOS/nixpkgs/commit/fbf76bf72b161b9f4ab97704a8258776d5f3ffba; https://github.com/NixOS/nixpkgs/security/advisories/GHSA-m7pq-h9p4-8rr4
CVE: CVE-2025-32439
Published: 2025-04-15
Description: pleezer is a headless Deezer Connect player. Hook scripts in pleezer can be triggered by various events like track changes and playback state changes. In versions before 0.16.0, these scripts were spawned without proper process cleanup, leaving zombie processes in the system's process table. Even during normal usage, every track change and playback event would leave behind zombie processes. This leads to inevitable resource exhaustion over time as the system's process table fills up, eventually preventing new processes from being created. The issue is exacerbated if events occur rapidly, whether through normal use (e.g., skipping through a playlist) or potential manipulation of the Deezer Connect protocol traffic. This issue has been fixed in version 0.16.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-460
References: https://github.com/roderickvd/pleezer/security/advisories/GHSA-472w-7w45-g3w5
CVE: CVE-2025-32445
Published: 2025-04-15
Description: Argo Events is an event-driven workflow automation framework for Kubernetes. A user with permission to create/modify EventSource and Sensor custom resources can gain privileged access to the host system and cluster, even without having direct administrative privileges. The EventSource and Sensor CRs allow the corresponding orchestrated pod to be customized with spec.template and spec.template.container (with type k8s.io/api/core/v1.Container), thus, any specification under container such as command, args, securityContext , volumeMount can be specified, and applied to the EventSource or Sensor pod. With these, a user would be able to gain privileged access to the cluster host, if he/she specified the EventSource/Sensor CR with some particular properties under template. This vulnerability is fixed in v1.9.6.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-250
References: https://github.com/argoproj/argo-events/commit/18412293a699f559848b00e6e459c9ce2de0d3e2; https://github.com/argoproj/argo-events/security/advisories/GHSA-hmp7-x699-cvhq
CVE: CVE-2024-44843
Published: 2025-04-15
Description: An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass authentication and execute arbitrary coammands via supplying crafted OCPP requests.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: https://gist.github.com/Badranh/[PII_REDACTED]9db6d4709871f0c353f476; https://github.com/steve-community/steve/blob/master/src/main/java/de/rwth/idsg/steve/ocpp/ws/OcppWebSocketHandshakeHandler.java; https://github.com/steve-community/steve/issues/1546
CVE: CVE-2025-1273
Published: 2025-04-15
Description: A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://www.autodesk.com/products/autodesk-access/overview; https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0003
CVE: CVE-2025-1274
Published: 2025-04-15
Description: A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.autodesk.com/products/autodesk-access/overview; https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0007
CVE: CVE-2025-1275
Published: 2025-04-15
Description: A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://www.autodesk.com/products/autodesk-access/overview; https://www.autodesk.com/products/dwg-trueview/overview; https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0006
CVE: CVE-2025-1276
Published: 2025-04-15
Description: A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/products/autodesk-access/overview; https://www.autodesk.com/products/dwg-trueview/overview; https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0004
CVE: CVE-2025-1277
Published: 2025-04-15
Description: A maliciously crafted PDF file, when parsed through Autodesk applications, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-787
References: https://www.autodesk.com/products/autodesk-access/overview; https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0003
CVE: CVE-2025-1656
Published: 2025-04-15
Description: A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://www.autodesk.com/products/autodesk-access/overview; https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0003
CVE: CVE-2025-21573
Published: 2025-04-15
Description: Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Chatbot).  Supported versions that are affected are 5.1.0.0.0, 6.1.0.0.0 and  7.0.0.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Financial Services Revenue Management and Billing.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Financial Services Revenue Management and Billing accessible data as well as  unauthorized access to critical data or complete access to all Oracle Financial Services Revenue Management and Billing accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Financial Services Revenue Management and Billing. CVSS 3.1 Base Score 6.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L).
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-284
References: https://www.oracle.com/security-alerts/cpuapr2025.html
CVE: CVE-2025-21574
Published: 2025-04-15
Description: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).  Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and  9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://www.oracle.com/security-alerts/cpuapr2025.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2025-21575
Published: 2025-04-15
Description: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).  Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and  9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://www.oracle.com/security-alerts/cpuapr2025.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2025-21576
Published: 2025-04-15
Description: Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Personalization Server).  Supported versions that are affected are 11.3.0, 11.3.1 and  11.3.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Platform.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Commerce Platform accessible data as well as  unauthorized read access to a subset of Oracle Commerce Platform accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://www.oracle.com/security-alerts/cpuapr2025.html
CVE: CVE-2025-21577
Published: 2025-04-15
Description: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and  9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://www.oracle.com/security-alerts/cpuapr2025.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2025-21578
Published: 2025-04-15
Description: Vulnerability in Oracle Secure Backup (component: General).  Supported versions that are affected are 12.1.0.1, 12.1.0.2, 12.1.0.3, 18.1.0.0, 18.1.0.1 and  18.1.0.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup.  Successful attacks of this vulnerability can result in takeover of Oracle Secure Backup. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-732
References: https://www.oracle.com/security-alerts/cpuapr2025.html