deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-47117
Published: 2025-06-10
Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html
CVE: CVE-2025-47713
Published: 2025-06-10
Description: A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can reset the password of user-accounts of Admin role type. This operation is not appropriately restricted and allows the attacker to assume control over higher-privileged user-accounts. A malicious Domain Admin attacker can impersonate an Admin user-account and gain access to sensitive APIs and resources that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of infrastructure managed by CloudStack.



Users are recommended to upgrade to Apache CloudStack 4.19.3.0 or 4.20.1.0, which fixes the issue with the following:
  *  Strict validation on Role Type hierarchy: the caller's user-account role must be equal to or higher than the target user-account's role.
  *  API privilege comparison: the caller must possess all privileges of the user they are operating on. 
  *  Two new domain-level settings (restricted to the default Admin): 
 - role.types.allowed.for.operations.on.accounts.of.same.role.type: Defines which role types are allowed to act on users of the same role type. Default: "Admin, DomainAdmin, ResourceAdmin". 
   - allow.operations.on.users.in.same.account: Allows/disallows user operations within the same account. Default: true.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://cloudstack.apache.org/blog/cve-advisories-4.19.3.0-4.20.1.0/; https://lists.apache.org/thread/y3qnwn59t8qggtdohv7k7vw39bgb3d60; https://www.shapeblue.com/shapeblue-security-advisory-apache-cloudstack-security-releases-4-19-3-0-and-4-20-1-0/
CVE: CVE-2025-47849
Published: 2025-06-10
Description: A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can get the API key and secret key of user-accounts of Admin role type in the same domain. This operation is not appropriately restricted and allows the attacker to assume control over higher-privileged user-accounts. A malicious Domain Admin attacker can impersonate an Admin user-account and gain access to sensitive APIs and resources that could result in the compromise of resource integrity and confidentiality, data loss, denial of service, and availability of infrastructure managed by CloudStack.

Users are recommended to upgrade to Apache CloudStack 4.19.3.0 or 4.20.1.0, which fixes the issue with the following:


  *  Strict validation on Role Type hierarchy: the caller's role must be equal to or higher than the target user's role. 
  *  API privilege comparison: the caller must possess all privileges of the user they are operating on. 
  *  Two new domain-level settings (restricted to the default admin): 
 - role.types.allowed.for.operations.on.accounts.of.same.role.type: Defines which role types are allowed to act on users of the same role type. Default: "Admin, DomainAdmin, ResourceAdmin". 
 - allow.operations.on.users.in.same.account: Allows/disallows user operations within the same account. Default: true.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://cloudstack.apache.org/blog/cve-advisories-4.19.3.0-4.20.1.0/; https://lists.apache.org/thread/y3qnwn59t8qggtdohv7k7vw39bgb3d60; https://www.shapeblue.com/shapeblue-security-advisory-apache-cloudstack-security-releases-4-19-3-0-and-4-20-1-0/
CVE: CVE-2025-5984
Published: 2025-06-10
Description: A vulnerability has been found in SourceCodester Online Student Clearance System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/add-fee.php. The manipulation of the argument txtamt leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://vuldb.com/?ctiid.311899; https://vuldb.com/?id.311899; https://vuldb.com/?submit.592554
CVE: CVE-2025-5985
Published: 2025-06-10
Description: A vulnerability was found in code-projects School Fees Payment System 1.0 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287
References: https://code-projects.org/; https://github.com/tuooo/CVE/issues/13; https://vuldb.com/?ctiid.311900
CVE: CVE-2024-7457
Published: 2025-06-11
Description: The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model. Instead of validating the client's authorization reference, the helper invokes AuthorizationCopyRights() using its own privileged context (root), effectively authorizing itself rather than the client. As a result, it grants the system.preferences.admin right internally, regardless of the requesting client's privileges. This flawed logic allows unprivileged clients to invoke privileged operations via XPC, including unauthorized changes to system-wide network preferences such as SOCKS, HTTP, and HTTPS proxy settings. The absence of proper code-signing checks further enables arbitrary processes to exploit this flaw, leading to man-in-the-middle (MITM) attacks through traffic redirection.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://pentraze.com/
CVE: CVE-2024-8270
Published: 2025-06-11
Description: The macOS Rocket.Chat application is affected by a vulnerability that allows bypassing  Transparency, Consent, and Control (TCC) policies, enabling the exploitation or abuse of permissions specified in its entitlements (e.g., microphone, camera, automation, network client). Since Rocket.Chat was not signed with the Hardened Runtime nor set to enforce Library Validation, it is vulnerable to DYLIB injection attacks, which can lead to unauthorized actions or escalation of permissions. Consequently, an attacker gains capabilities that are not permitted by default under the Sandbox and its application profile.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://pentraze.com/; https://pentraze.com/vulnerability-reports/
CVE: CVE-2024-9062
Published: 2025-06-11
Description: The Archify application contains a local privilege escalation vulnerability due to insufficient client validation in its privileged helper tool, com.oct4pie.archifyhelper, which is exposed via XPC. Archify follows the "factored applications" model, delegating privileged operations—such as arbitrary file deletion and file permission changes—to this helper running as root. However, the helper does not verify the code signature, entitlements, or signing flags of the connecting client. Although macOS provides secure validation mechanisms like auditToken, these are not implemented. As a result, any local process can establish a connection to the helper and invoke privileged functionality, leading to unauthorized execution of actions with root-level privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306
References: https://pentraze.com/; https://pentraze.com/vulnerability-reports/
CVE: CVE-2025-1055
Published: 2025-06-11
Description: A vulnerability in the K7RKScan.sys driver, part of the K7 Security Anti-Malware suite, allows a local low-privilege user to send crafted IOCTL requests to terminate a wide range of processes running with administrative or system-level privileges, with the exception of those inherently protected by the operating system. This flaw stems from missing access control in the driver's IOCTL handler, enabling unprivileged users to perform privileged actions in kernel space. Successful exploitation can lead to denial of service by disrupting critical services or privileged applications.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-862
References: https://pentraze.com/; https://pentraze.com/vulnerability-reports/
CVE: CVE-2025-30675
Published: 2025-06-11
Description: In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs. A malicious Domain Admin or Resource Admin can exploit this issue by intentionally specifying the 'domainid' parameter along with the 'filter=self' or 'filter=selfexecutable' values. This allows the attacker to gain unauthorized visibility into templates and ISOs under the ROOT domain.

A malicious admin can enumerate and extract metadata of templates and ISOs that belong to unrelated domains, violating isolation boundaries and potentially exposing sensitive or internal configuration details. 

This vulnerability has been fixed by ensuring the domain resolution strictly adheres to the caller's scope rather than defaulting to the ROOT domain.




Affected users are recommended to upgrade to Apache CloudStack 4.19.3.0 or 4.20.1.0.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: https://cloudstack.apache.org/blog/cve-advisories-4.19.3.0-4.20.1.0/; https://lists.apache.org/thread/y3qnwn59t8qggtdohv7k7vw39bgb3d60; https://www.shapeblue.com/shapeblue-security-advisory-apache-cloudstack-security-releases-4-19-3-0-and-4-20-1-0/
CVE: CVE-2025-32717
Published: 2025-06-11
Description: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS Score: 8.4 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32717
CVE: CVE-2025-49091
Published: 2025-06-11
Description: KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code path where if that binary is not available, Konsole falls back to using /bin/bash for the given arguments (i.e., the URL) provided. This allows an attacker to execute arbitrary code.
CVSS Score: 8.2 (HIGH)
CWE: CWE-670
References: https://invent.kde.org/utilities/konsole/-/commit/09d20dea109050b4c02fb73095f327b5642a2b75; https://invent.kde.org/utilities/konsole/-/tags; https://kde.org/info/security/advisory-20250609-1.txt
CVE: CVE-2025-4275
Published: 2025-06-11
Description: A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot.
CVSS Score: 7.8 (HIGH)
References: https://www.insyde.com/security-pledge/sa-2025002/; https://www.kb.cert.org/vuls/id/211341
CVE: CVE-2025-5958
Published: 2025-06-11
Description: Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop_10.html; https://issues.chromium.org/issues/420150619
CVE: CVE-2025-5959
Published: 2025-06-11
Description: Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop_10.html; https://issues.chromium.org/issues/422313191
CVE: CVE-2024-1243
Published: 2025-06-11
Description: Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2 hash, which can be relayed for remote code execution or used to escalate privileges to SYSTEM via AD CS certificate forging and other similar attacks.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-73
References: https://github.com/wazuh/wazuh/security/advisories/GHSA-3crh-39qv-fxj7; https://pentraze.com/; https://pentraze.com/vulnerability-reports/CVE-2024-1243/
CVE: CVE-2024-1244
Published: 2025-06-11
Description: Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2 hash, which can be relayed for remote code execution or used to escalate privileges to SYSTEM via AD CS certificate forging and other similar attacks.
CWE: CWE-20, CWE-73
References: https://pentraze.com/; https://pentraze.com/vulnerability-reports/
CVE: CVE-2025-4666
Published: 2025-06-11
Description: The Zotpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘nickname’ parameter in all versions up to, and including, 7.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/zotpress/trunk/lib/admin/admin.accounts.php#L86; https://plugins.trac.wordpress.org/browser/zotpress/trunk/lib/admin/admin.functions.php#L66; https://plugins.trac.wordpress.org/browser/zotpress/trunk/lib/admin/admin.options.form.php#L33
CVE: CVE-2025-4798
Published: 2025-06-11
Description: The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.68.10. This is due to a lack of restriction on the directory an administrator can select for storing downloads. This makes it possible for authenticated attackers, with Administrator-level access and above, to download and read any file on the server, including system and configuration files.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/wp-downloadmanager/trunk/download-options.php#L16; https://plugins.trac.wordpress.org/browser/wp-downloadmanager/trunk/download-options.php#L42; https://plugins.trac.wordpress.org/changeset/3294467/
CVE: CVE-2025-4799
Published: 2025-06-11
Description: The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file deletion due to lack of restriction on the directory a file can be deleted from in all versions up to, and including, 1.68.10. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This vulnerability can be paired with CVE-2025-4798 to delete any file within the WordPress root directory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-36
References: https://plugins.trac.wordpress.org/browser/wp-downloadmanager/trunk/download-manager.php#L215; https://plugins.trac.wordpress.org/browser/wp-downloadmanager/trunk/download-options.php#L16; https://plugins.trac.wordpress.org/browser/wp-downloadmanager/trunk/download-options.php#L42
CVE: CVE-2024-35295
Published: 2025-06-11
Description: A vulnerability has been identified in Perfect Harmony GH180 (All versions >= V8.0 < V8.3.3 with NXGPro+ controller manufactured between April 2020 to April 2025). The maintenance connection of affected devices fails to protect access to the device's control unit configuration. This could allow an attacker with physical access to the maintenance connection's door port to perform arbitrary configuration changes.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-306
References: https://cert-portal.siemens.com/productcert/html/ssa-771113.html; https://www.innomotics.com/hub/en/ISA-771113
CVE: CVE-2025-5395
Published: 2025-06-11
Description: The WordPress Automatic Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'core.php' file in all versions up to, and including, 3.115.0. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://codecanyon.net/item/wordpress-automatic-plugin/1904470#item-description__changelog; https://www.wordfence.com/threat-intel/vulnerabilities/id/57be67fd-8485-495f-b5e9-6eb52af945b7?source=cve
CVE: CVE-2025-29756
Published: 2025-06-11
Description: SunGrow's back end users system  iSolarCloud https://isolarcloud.com  uses an MQTT service to transport data from the user's connected devices to the user's web browser. 
The MQTT server however did not have sufficient restrictions in place to limit the topics that a user could subscribe to. 
While the data that is transmitted through the MQTT server is encrypted and the credentials for the MQTT server are obtained though an API call, the credentials could be used to subscribe to any topic and the encryption key can be used to decrypt all messages received.
An attack with an account on iSolarCloud.com could extract MQTT credentials and the decryption key from the browser and then use an external program to subscribe to the topic '#' and thus recieve all messages from all connected devices.
CWE: CWE-862
References: https://csirt.divd.nl/CVE-2025-29756; https://csirt.divd.nl/DIVD-2025-00009; https://isolarcloud.com
CVE: CVE-2025-5991
Published: 2025-06-11
Description: There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affected by this at all. This happens due to a race condition between how QHttp2Stream uploads the body of a
 POST request and the simultaneous handling of HTTP error responses.

This issue only affects Qt 6.9.0 and has been fixed for Qt 6.9.1.
CWE: CWE-416
References: https://codereview.qt-project.org/c/qt/qtbase/+/643777
CVE: CVE-2025-26412
Published: 2025-06-11
Description: The SIMCom SIM7600G modem supports an undocumented AT command, which allows an attacker to execute system commands with root permission on the modem. An attacker needs either physical access or remote shell access to a device that interacts directly with the modem via AT commands.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-912
References: https://r.sec-consult.com/simcom; http://seclists.org/fulldisclosure/2025/Jun/17
CVE: CVE-2025-41661
Published: 2025-06-11
Description: An unauthenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of Cross-Site Request Forgery (CSRF) protection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://certvde.com/en/advisories/VDE-2025-052
CVE: CVE-2025-41662
Published: 2025-06-11
Description: Rejected reason: CVE-2025-41662 is considered redundant or unnecessary and thus should be withdrawn. Instead, a new CVE CVE-2025-41687 has been reserved to better reflect the updated analysis.
CVE: CVE-2025-41663
Published: 2025-06-11
Description: For u-link Management API an unauthenticated remote attacker in a man-in-the-middle position can inject arbitrary commands in responses returned by WWH servers, which are then executed with elevated privileges. To get into such a position, clients would need to use insecure proxy configurations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://certvde.com/en/advisories/VDE-2025-052
CVE: CVE-2025-4315
Published: 2025-06-11
Description: The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.23. This is due to the plugin allowing a user to update arbitrary user meta through the update_user_meta() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://plugins.trac.wordpress.org/browser/cubewp-framework/tags/1.1.23/cube/classes/class-cubewp-rest-api.php#L691; https://plugins.trac.wordpress.org/changeset/3306925/cubewp-framework#file2; https://www.wordfence.com/threat-intel/vulnerabilities/id/430b7e72-72b8-4cf8-99f4-ee1d1d4b4f24?source=cve
CVE: CVE-2025-4128
Published: 2025-06-11
Description: Mattermost versions 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly restrict API access to team information, allowing guest users to bypass permissions and view information about public teams they are not members of via a direct API call to /api/v4/teams/{team_id}.
CVSS Score: 3.1 (LOW)
CWE: CWE-863
References: https://mattermost.com/security-updates
CVE: CVE-2025-4573
Published: 2025-06-11
Description: Mattermost versions 10.7.x <= 10.7.1, 10.6.x <= 10.6.3, 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly validate LDAP group ID attributes, allowing an authenticated administrator with PermissionSysconsoleWriteUserManagementGroups permission to execute LDAP search filter injection via the PUT /api/v4/ldap/groups/{remote_id}/link API when objectGUID is configured as the Group ID Attribute.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-90
References: https://mattermost.com/security-updates
CVE: CVE-2025-3302
Published: 2025-06-11
Description: The Xagio SEO – AI Powered SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘HTTP_REFERER’ parameter in all versions up to, and including, 7.1.0.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 7.1.0.0.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/xagio-seo/tags/7.0.0.34/modules/redirects/models/xagio_log404.php#L263; https://plugins.trac.wordpress.org/browser/xagio-seo/tags/7.0.0.34/modules/redirects/models/xagio_log404.php#L335; https://plugins.trac.wordpress.org/browser/xagio-seo/tags/7.0.0.34/modules/redirects/redirects.js#L554
CVE: CVE-2025-49709
Published: 2025-06-11
Description: Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1966083; https://www.mozilla.org/security/advisories/mfsa2025-47/
CVE: CVE-2025-49710
Published: 2025-06-11
Description: An integer overflow was present in `OrderedHashTable` used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1970095; https://www.mozilla.org/security/advisories/mfsa2025-47/
CVE: CVE-2025-5687
Published: 2025-06-11
Description: A vulnerability in Mozilla VPN on macOS allows privilege escalation from a normal user to root.
*This bug only affects Mozilla VPN on macOS. Other operating systems are unaffected.*. This vulnerability was fixed in Mozilla VPN 2.28.0 (macOS).
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1953736; https://www.mozilla.org/security/advisories/mfsa2025-48/