deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-1801
Published: 2025-03-03
Description: A flaw was found in the Ansible aap-gateway. Concurrent requests handled by the gateway grpc service can result in concurrency issues due to race condition requests against the proxy. This issue potentially allows a less privileged user to obtain the JWT of a greater privileged user, enabling the server to be jeopardized. A user session or confidential data might be vulnerable.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://access.redhat.com/errata/RHSA-2025:1954; https://access.redhat.com/security/cve/CVE-2025-1801; https://bugzilla.redhat.com/show_bug.cgi?id=2349081
CVE: CVE-2024-41770
Published: 2025-03-03
Description: IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose application logic or other sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://www.ibm.com/support/pages/node/7184663
CVE: CVE-2024-41771
Published: 2025-03-03
Description: IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose application logic or other sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://www.ibm.com/support/pages/node/7184663
CVE: CVE-2024-43169
Published: 2025-03-03
Description: IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a user to download a malicious file without verifying the integrity of the code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-494
References: https://www.ibm.com/support/pages/node/7184506
CVE: CVE-2024-55532
Published: 2025-03-03
Description: Improper Neutralization of Formula Elements in Export CSV feature of Apache Ranger in Apache Ranger Version < 2.6.0.
Users are recommended to upgrade to version 2.6.0, which fixes this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1236
References: https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger; http://www.openwall.com/lists/oss-security/2025/03/03/2
CVE: CVE-2024-55570
Published: 2025-03-03
Description: /api/user/users in the web GUI for the Cubro EXA48200 network packet broker (build[PII_REDACTED]5018) fixed in V5.0R14.5P4-V3.3R1 allows remote authenticated users of the application to increase their privileges by sending a single HTTP PUT request with rolename=Administrator, aka incorrect access control.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-266
References: https://herolab.usd.de/security-advisories/; https://herolab.usd.de/security-advisories/usd-2024-0014/
CVE: CVE-2025-0555
Published: 2025-03-03
Description: A Cross Site Scripting (XSS) vulnerability in GitLab-EE affecting all versions from 16.6 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1 allows an attacker to bypass security controls and execute arbitrary scripts in a users browser under specific conditions.
CVSS Score: 7.7 (HIGH)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/gitlab/-/issues/514004; https://hackerone.com/reports/2939833
CVE: CVE-2025-24023
Published: 2025-03-03
Description: Flask-AppBuilder is an application development framework. Prior to 4.5.3, Flask-AppBuilder allows unauthenticated users to enumerate existing usernames by timing the response time from the server when brute forcing requests to login. This vulnerability is fixed in 4.5.3.
CVSS Score: 3.7 (LOW)
CWE: CWE-204, CWE-203
References: https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-p8q5-cvwx-wvwp
CVE: CVE-2025-25185
Published: 2025-03-03
Description: GPT Academic provides interactive interfaces for large language models. In 3.91 and earlier, GPT Academic does not properly account for soft links. An attacker can create a malicious file as a soft link pointing to a target file, then package this soft link file into a tar.gz file and upload it. Subsequently, when accessing the decompressed file from the server, the soft link will point to the target file on the victim server. The vulnerability allows attackers to read all files on the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-59
References: https://github.com/binary-husky/gpt_academic/commit/5dffe8627f681d7006cebcba27def038bb691949; https://github.com/binary-husky/gpt_academic/security/advisories/GHSA-gqp5-wm97-qxcv
CVE: CVE-2025-27094
Published: 2025-03-03
Description: Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-reset certain field configurations, leading to potential information loss. The display time attribute for the date field, the size attribute for the multiselectbox field, the default value, number of rows, and columns attributes for the text field, and the default value, size, and max characters attributes for the string field configurations are lost when added as criteria in a saved report. Additionally, in Tuleap Community Edition versions 16.4.99[PII_REDACTED] to 16.4.99[PII_REDACTED], this issue could be exploited to prevent access to tracker data by triggering a crash. This vulnerability has been fixed in Tuleap Community Edition 16.4.99[PII_REDACTED] and Tuleap Enterprise Edition 16.3-9 and 16.4-4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-440
References: https://github.com/Enalean/tuleap/commit/ef650abb4a28359a3228d6e1102a742f7c013150; https://github.com/Enalean/tuleap/security/advisories/GHSA-r85g-9wjx-pw7f; https://tuleap.net/plugins/tracker/?aid=41849
CVE: CVE-2025-27099
Published: 2025-03-03
Description: Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap allows cross-site scripting (XSS) via the tracker names used in the semantic timeframe deletion message. A tracker administrator with a semantic timeframe used by other trackers could use this vulnerability to force other tracker administrators to execute uncontrolled code. This vulnerability is fixed in Tuleap Community Edition 16.4.99[PII_REDACTED] and Tuleap Enterprise Edition 16.4-5 and 16.3-10.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-80, CWE-79
References: https://github.com/Enalean/tuleap/commit/bec10bd5c98f6570a2857f55e9656eec4b211e6c; https://github.com/Enalean/tuleap/security/advisories/GHSA-vqfj-2gqp-g89x; https://tuleap.net/plugins/tracker/?aid=41858
CVE: CVE-2025-27417
Published: 2025-03-03
Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the adicionar_status_atendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the status parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability is fixed in 3.2.16.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/LabRedesCefetRJ/WeGIA/commit/0f2644bca2afbdfff21662c51a64679dfba8c2bd; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-j3p8-xww6-wvqh; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-j3p8-xww6-wvqh
CVE: CVE-2025-27418
Published: 2025-03-03
Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the adicionar_tipo_atendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the tipo parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability is fixed in 3.2.16.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/LabRedesCefetRJ/WeGIA/commit/e2f258cc8fed8b7e5850114ce6e74bd9ba4f397f; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-ffcg-qr75-98mg; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-ffcg-qr75-98mg
CVE: CVE-2025-27419
Published: 2025-03-03
Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Denial of Service (DoS) vulnerability exists in WeGIA. This vulnerability allows any unauthenticated user to cause the server to become unresponsive by performing aggressive spidering. The vulnerability is caused by recursive crawling of dynamically generated URLs and insufficient handling of large volumes of requests. This vulnerability is fixed in 3.2.16.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/LabRedesCefetRJ/WeGIA/commit/624ddfadb3fd8f8b30ad4f601b032a9bacc86a39; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-9rp6-4mqp-g4p8
CVE: CVE-2025-27420
Published: 2025-03-03
Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the atendido_parentesco_adicionar.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the descricao parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability fix in 3.2.16.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/LabRedesCefetRJ/WeGIA/commit/add78bb177cbb29477ff2121b533651a9d673918; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-x3wr-75qx-55cw; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-x3wr-75qx-55cw
CVE: CVE-2024-45778
Published: 2025-03-03
Description: A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://access.redhat.com/security/cve/CVE-2024-45778; https://bugzilla.redhat.com/show_bug.cgi?id=2345640; https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
CVE: CVE-2024-45782
Published: 2025-03-03
Description: A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer, impacting grub's sensitive data integrity and eventually leading to a secure boot protection bypass.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://access.redhat.com/security/cve/CVE-2024-45782; https://bugzilla.redhat.com/show_bug.cgi?id=2345858
CVE: CVE-2024-53387
Published: 2025-03-03
Description: A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://gist.github.com/jackfromeast/d52c506113f33b8871d0e647411df894
CVE: CVE-2024-53388
Published: 2025-03-03
Description: A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://gist.github.com/jackfromeast/a61a5429a97985e7ff4c1d39e339d5d8
CVE: CVE-2024-57240
Published: 2025-03-03
Description: A Cross-Site Scripting (XSS) vulnerability in the Rendering Engine component in Apryse WebViewer v11.1 and earlier allows attackers to execute arbitrary code via a crafted PDF file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/devom3/43c328e23ec854090ed555a13541ca94
CVE: CVE-2025-0285
Published: 2025-03-03
Description: Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1284
References: https://paragon-software.zendesk.com/hc/en-us/articles/[PII_REDACTED]2817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys; https://www.kb.cert.org/vuls/id/726882; https://www.paragon-software.com/support/#patches
CVE: CVE-2025-0286
Published: 2025-03-03
Description: Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to execute arbitrary code on the victim machine.
CVSS Score: 8.4 (HIGH)
CWE: CWE-1284
References: https://paragon-software.zendesk.com/hc/en-us/articles/[PII_REDACTED]2817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys; https://www.kb.cert.org/vuls/id/726882; https://www.paragon-software.com/support/#patches
CVE: CVE-2025-0287
Published: 2025-03-03
Description: Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-476
References: https://paragon-software.zendesk.com/hc/en-us/articles/[PII_REDACTED]2817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys; https://www.kb.cert.org/vuls/id/726882; https://www.paragon-software.com/support/#patches
CVE: CVE-2025-0288
Published: 2025-03-03
Description: Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to write arbitrary kernel memory and perform privilege escalation.
CVSS Score: 7.8 (HIGH)
References: https://paragon-software.zendesk.com/hc/en-us/articles/[PII_REDACTED]2817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys; https://www.kb.cert.org/vuls/id/726882; https://www.paragon-software.com/support/#patches
CVE: CVE-2025-0289
Published: 2025-03-03
Description: Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.
CVSS Score: 7.8 (HIGH)
References: https://paragon-software.zendesk.com/hc/en-us/articles/[PII_REDACTED]2817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys; https://www.kb.cert.org/vuls/id/726882; https://www.paragon-software.com/support/#patches
CVE: CVE-2025-0678
Published: 2025-03-03
Description: A flaw was found in grub2. When reading data from a squash4 filesystem, grub's squash4 fs module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted filesystem may lead some of those buffer size calculations to overflow, causing it to perform a grub_malloc() operation with a smaller size than expected. As a result, the direct_read() will perform a heap based out-of-bounds write during data reading. This flaw may be leveraged to corrupt grub's internal critical data and may result in arbitrary code execution, by-passing secure boot protections.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://access.redhat.com/security/cve/CVE-2025-0678; https://bugzilla.redhat.com/show_bug.cgi?id=2346118
CVE: CVE-2025-1876
Published: 2025-03-03
Description: A vulnerability, which was classified as critical, has been found in D-Link DAP-1562 1.10. Affected by this issue is the function http_request_parse of the component HTTP Header Handler. The manipulation of the argument Authorization leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119, CWE-121, CWE-787
References: https://vuldb.com/?ctiid.298190; https://vuldb.com/?id.298190; https://vuldb.com/?submit.506106
CVE: CVE-2025-25301
Published: 2025-03-03
Description: Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query parameter that allows an image to be fetched, processed and returned. An attacker may be able to query this endpoint to view pictures hosted on the internal network of the rembg server. This issue may lead to Information Disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://securitylab.github.com/advisories/GHSL-2024-161_GHSL-2024-162_rembg/
CVE: CVE-2025-25302
Published: 2025-03-03
Description: Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the CORS middleware is setup incorrectly. All origins are reflected, which allows any website to send cross site requests to the rembg server and thus query any API. Even if authentication were to be enabled, allow_credentials is set to True, which would allow any website to send authenticated cross site requests.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-346, CWE-346
References: https://github.com/danielgatis/rembg/blob/d1e00734f8a996abf512a3a5c251c7a9a392c90a/rembg/commands/s_command.py#L93; https://securitylab.github.com/advisories/GHSL-2024-161_GHSL-2024-162_rembg/
CVE: CVE-2025-25303
Published: 2025-03-03
Description: The MouseTooltipTranslator Chrome extension allows mouseover translation of any language at once. The MouseTooltipTranslator browser extension is vulnerable to SSRF attacks. The pdf.mjs script uses the URL parameter from the current URL as the file to download and display to the extension user. Because pdf.mjs is imported in viewer.html and viewer.html is accessible to all URLs, an attacker can force the user’s browser to make a request to any arbitrary URL. After discussion with maintainer, patching this issue would require disabling a major feature of the extension in exchange for a low severity vulnerability. Decision to not patch issue.
CWE: CWE-918
References: https://github.com/ttop32/MouseTooltipTranslator/blob/0.1.127/public/manifest.json#L23; https://github.com/ttop32/MouseTooltipTranslator/blob/0.1.127/public/pdfjs/build/pdf.mjs#L13932; https://securitylab.github.com/advisories/GHSL-2024-018_MouseTooltipTranslator/
CVE: CVE-2025-27421
Published: 2025-03-03
Description: Abacus is a highly scalable and stateless counting API. A critical goroutine leak vulnerability has been identified in the Abacus server's Server-Sent Events (SSE) implementation. The issue occurs when clients disconnect from the /stream endpoint, as the server fails to properly clean up resources and terminate associated goroutines. This leads to resource exhaustion where the server continues running but eventually stops accepting new SSE connections while maintaining high memory usage. The vulnerability specifically involves improper channel cleanup in the event handling mechanism, causing goroutines to remain blocked indefinitely. This vulnerability is fixed in 1.4.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-772
References: https://github.com/JasonLovesDoggo/abacus/commit/898ff1204e11317cc161240b660e63eed5a72b33; https://github.com/JasonLovesDoggo/abacus/security/advisories/GHSA-vh64-54px-qgf8
CVE: CVE-2025-27422
Published: 2025-03-03
Description: FACTION is a PenTesting Report Generation and Collaboration Framework. Authentication is bypassed when an attacker registers a new user with admin privileges. This is possible at any time without any authorization. The request must follow the validation rules (no missing information, secure password, etc) but there are no other controls stopping them. This vulnerability is fixed in 1.4.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://github.com/factionsecurity/faction/commit/0a6848d388d6dba1c81918cce2772b1e805cd3d6; https://github.com/factionsecurity/faction/security/advisories/GHSA-97cv-f342-v2jc
CVE: CVE-2025-27423
Published: 2025-03-03
Description: Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or uncompressed) tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the is not sanitized and is taken literally from the tar archive. This allows to execute shell commands via special crafted tar archives. Whether this really happens, depends on the shell being used ('shell' option, which is set using $SHELL). The issue has been fixed as of Vim patch v9.1.1164
CVSS Score: 7.1 (HIGH)
CWE: CWE-77
References: https://github.com/vim/vim/commit/129a8446d23cd9cb4445fcfea259cba5e0487d29; https://github.com/vim/vim/commit/334a13bff78aa0ad206bc436885f63e3a0bab399; https://github.com/vim/vim/security/advisories/GHSA-wfmf-8626-q3r3
CVE: CVE-2025-27498
Published: 2025-03-03
Description: aes-gcm is a pure Rust implementation of the AES-GCM. In decrypt_in_place_detached, the decrypted ciphertext (which is the correct ciphertext) is exposed even if the tag is incorrect. This is because in decrypt_inplace in asconcore.rs, tag verification causes an error to be returned with the plaintext contents still in buffer. The vulnerability is fixed in 0.4.3.
CWE: CWE-347
References: https://github.com/RustCrypto/AEADs/commit/d1d749ba57e38e65b0e037cd744d0b17f7254037; https://github.com/RustCrypto/AEADs/security/advisories/GHSA-r38m-44fw-h886
CVE: CVE-2023-49031
Published: 2025-03-03
Description: Directory Traversal (Local File Inclusion) vulnerability in Tikit (now Advanced) eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-98
References: https://github.com/Yoshik0xF6/CVE-2023-49031
CVE: CVE-2024-51091
Published: 2025-03-03
Description: Cross Site Scripting vulnerability in seajs v.2.2.3 allows a remote attacker to execute arbitrary code via the seajs package
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/jackfromeast/176413c3bd73f825f7aeeb05e80e02a6; https://gist.github.com/jackfromeast/176413c3bd73f825f7aeeb05e80e02a6
CVE: CVE-2024-53384
Published: 2025-03-03
Description: A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjs_shims.js components
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/jackfromeast/36f98bf7542d11835c883c1d175d9b92
CVE: CVE-2025-0684
Published: 2025-03-03
Description: A flaw was found in grub2. When performing a symlink lookup from a reiserfs filesystem, grub's reiserfs fs module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciouly crafted filesystem may lead some of those buffer size calculations to overflow, causing it to perform a grub_malloc() operation with a smaller size than expected. As a result, the grub_reiserfs_read_symlink() will call grub_reiserfs_read_real() with a overflown length parameter, leading to a heap based out-of-bounds write during data reading. This flaw may be leveraged to corrupt grub's internal critical data and can result in arbitrary code execution, by-passing secure boot protections.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-787
References: https://access.redhat.com/security/cve/CVE-2025-0684; https://bugzilla.redhat.com/show_bug.cgi?id=2346119