deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-59307
Published: 2025-09-17
Description: RAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-428
References: https://jvn.jp/en/jp/JVN84697061/; https://www.century.co.jp/support/products-info/notice-r-m.html
CVE: CVE-2025-59518
Published: 2025-09-17
Description: In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize _ during rule evaluation. Thus, an administrator who can edit a rule evaluated by the Safe jail can execute commands on the server.
CVSS Score: 8.0 (HIGH)
CWE: CWE-78
References: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/commit/228d01945d48015f3f9ea8a8dc64d7e6a27750e9; https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/3462
CVE: CVE-2025-9818
Published: 2025-09-17
Description: A vulnerability (CWE-428) has been identified in the Uninterruptible Power Supply (UPS) management application provided by OMRON SOCIAL SOLUTIONS Co., Ltd., where the executable file paths of Windows services are not enclosed in quotation marks. If the installation folder path of this product contains spaces, there is a possibility that unauthorized files may be executed under the service privileges by using paths containing spaces.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-428
References: https://www.omron.com/global/en/inquiry/vulnerability_information/OMSR-2025-005_en.pdf; https://www.omron.com/jp/ja/inquiry/vulnerability_information/OMSR-2025-005_ja.pdf
CVE: CVE-2025-10042
Published: 2025-09-17
Description: The Quiz Maker plugin for WordPress is vulnerable to SQL Injection via spoofed IP headers in all versions up to, and including, 6.7.0.56 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is only exploitable in configurations where the server is set up to retrieve the IP from a user-supplied field like `X-Forwarded-For` and limit users by IP is enabled.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/quiz-maker/tags/6.7.0.52/public/class-quiz-maker-public.php; https://plugins.trac.wordpress.org/browser/quiz-maker/tags/6.7.0.52/public/class-quiz-maker-public.php#L7145; https://plugins.trac.wordpress.org/browser/quiz-maker/tags/6.7.0.57/public/class-quiz-maker-public.php#L7149
CVE: CVE-2025-10057
Published: 2025-09-17
Description: The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.28. This is due to the write_to_customfile() function writing unfiltered PHP code to a file. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject the customFunction.php file with PHP code that can be accessed to trigger remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/browser/wp-ultimate-csv-importer/tags/7.25/importExtensions/ImportHelpers.php#L585; https://plugins.trac.wordpress.org/changeset/3360428/wp-ultimate-csv-importer/trunk/importExtensions/ImportHelpers.php; https://plugins.trac.wordpress.org/changeset/3360428/wp-ultimate-csv-importer/trunk/uploadModules/DesktopUpload.php
CVE: CVE-2025-10058
Published: 2025-09-17
Description: The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the upload_function() function in all versions up to, and including, 7.27. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
CVSS Score: 8.1 (HIGH)
CWE: CWE-73
References: https://plugins.trac.wordpress.org/browser/wp-ultimate-csv-importer/tags/7.26/uploadModules/FtpUpload.php#L200; https://plugins.trac.wordpress.org/changeset/3357936/wp-ultimate-csv-importer/trunk/uploadModules/FtpUpload.php; https://plugins.trac.wordpress.org/changeset/3360611/
CVE: CVE-2025-9203
Published: 2025-09-17
Description: The Media Player Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'subtitle_ssize', 'track_title', and 'track_artist_name' parameters in version 1.0.5. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/media-player-addons-for-elementor/tags/1.0.5/widgets/b_html5_addon.php#L432; https://plugins.trac.wordpress.org/browser/media-player-addons-for-elementor/tags/1.0.5/widgets/bplayer-widget-video.php#L207; https://plugins.trac.wordpress.org/log/media-player-addons-for-elementor/
CVE: CVE-2025-9215
Published: 2025-09-17
Description: The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 via the file_download() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/d0n601/CVE-2025-9215; https://plugins.trac.wordpress.org/browser/storeengine/trunk/addons/csv/ajax/export.php#L47; https://plugins.trac.wordpress.org/changeset/3360097/storeengine/trunk/addons/csv/ajax/export.php
CVE: CVE-2025-9216
Published: 2025-09-17
Description: The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import() function in all versions up to, and including, 1.5.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/d0n601/CVE-2025-9216; https://plugins.trac.wordpress.org/browser/storeengine/trunk/addons/csv/ajax/import.php#L52; https://plugins.trac.wordpress.org/changeset/3360097/storeengine/trunk/addons/csv/ajax/import.php
CVE: CVE-2025-9447
Published: 2025-09-17
Description: An Out-Of-Bounds Read vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted PAR file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.3ds.com/trust-center/security/security-advisories/cve-2025-9447
CVE: CVE-2025-9449
Published: 2025-09-17
Description: A Use After Free vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted PAR file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.3ds.com/trust-center/security/security-advisories/cve-2025-9449
CVE: CVE-2025-9450
Published: 2025-09-17
Description: A Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted JT file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-457
References: https://www.3ds.com/trust-center/security/security-advisories/cve-2025-9450
CVE: CVE-2025-9565
Published: 2025-09-17
Description: The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocksy_newsletter_subscribe shortcode in all versions up to, and including, 2.1.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/blocksy-companion/tags/2.1.9/framework/extensions/newsletter-subscribe/extension.php#L191; https://plugins.trac.wordpress.org/browser/blocksy-companion/tags/2.1.9/framework/extensions/newsletter-subscribe/helpers.php#L65; https://plugins.trac.wordpress.org/changeset/3360000/blocksy-companion/trunk/framework/extensions/newsletter-subscribe/helpers.php
CVE: CVE-2025-9971
Published: 2025-09-17
Description: Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate the device via a specific functionality.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.planet.com.tw/en/support/security-advisory/8; https://www.twcert.org.tw/en/cp-139-10390-7ce12-2.html; https://www.twcert.org.tw/tw/cp-132-10389-265a3-1.html
CVE: CVE-2025-9972
Published: 2025-09-17
Description: Certain models of Industrial Cellular Gateway developed by Planet Technology have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.planet.com.tw/en/support/security-advisory/8; https://www.twcert.org.tw/en/cp-139-10390-7ce12-2.html; https://www.twcert.org.tw/tw/cp-132-10389-265a3-1.html
CVE: CVE-2025-9242
Published: 2025-09-17
Description: An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.3 and 2025.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015; https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242/blob/main/watchTowr-vs-WatchGuard-CVE-2025-9242.py; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9242
CVE: CVE-2025-0419
Published: 2025-09-17
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc. Zirve Nova allows Cross-Site Scripting (XSS).This issue affects Zirve Nova: from 235 through 20250131.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-25-0260
CVE: CVE-2025-59455
Published: 2025-09-17
Description: In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-362
References: https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2025-59456
Published: 2025-09-17
Description: In JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive upload
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-23
References: https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2025-59457
Published: 2025-09-17
Description: In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows
CVSS Score: 7.7 (HIGH)
CWE: CWE-183
References: https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2025-59458
Published: 2025-09-17
Description: In JetBrains Junie before 252.284.66,
251.284.66,
243.284.66,
252.284.61,
251.284.61,
243.284.61,
252.284.50,
252.284.54,
251.284.54,
251.284.50,
243.284.54,
243.284.50 code execution was possible due to improper command validation
CVSS Score: 8.3 (HIGH)
CWE: CWE-77
References: https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2025-0420
Published: 2025-09-17
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Paraşüt Software Paraşüt allows Cross-Site Scripting (XSS).This issue affects Paraşüt: from 0.0.0.65efa44e through 20250204.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-25-0261
CVE: CVE-2025-10155
Published: 2025-09-17
Description: An Improper Input Validation vulnerability in the scanning logic of mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass pickle files security checks by supplying a standard pickle file with a PyTorch-related file extension. When the pickle file incorrectly considered safe is loaded, it can lead to the execution of malicious code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/mmaitre314/picklescan/blob/58983e1c20973ac42f2df7ff15d7c8cd32f9b688/src/picklescan/scanner.py#L463; https://github.com/mmaitre314/picklescan/security/advisories/GHSA-jgw4-cr84-mqxg
CVE: CVE-2025-10156
Published: 2025-09-17
Description: An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to bypass security scans. This is achieved by crafting a ZIP archive containing a file with a bad Cyclic Redundancy Check (CRC), which causes the scanner to halt and fail to analyze the contents for malicious pickle files. When the file incorrectly considered safe is loaded, it can lead to the execution of malicious code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-755
References: https://github.com/mmaitre314/picklescan/blob/v0.0.29/src/picklescan/relaxed_zipfile.py#L35; https://github.com/mmaitre314/picklescan/security/advisories/GHSA-mjqp-26hc-grxg; https://huggingface.co/jinaai/jina-embeddings-v2-base-en/resolve/main/pytorch_model.bin?download=true
CVE: CVE-2025-10590
Published: 2025-09-17
Description: A security flaw has been discovered in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file /intranet/educar_usuario_det.php. The manipulation of the argument ref_pessoa results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94
References: https://github.com/marcelomulder/CVE/blob/main/i-educar/Cross-Site%20Scripting%20(XSS)%20Reflected%20endpoint%20%60educar_usuario_det.php%60%20parameter%20%60ref_pessoa%60.md; https://vuldb.com/?ctiid.324607; https://vuldb.com/?id.324607
CVE: CVE-2025-10591
Published: 2025-09-17
Description: A weakness has been identified in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/educar_funcao_cad.php of the component Editar Função Page. This manipulation of the argument abreviatura/tipoacao causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/marcelomulder/CVE/blob/main/i-educar/Cross-Site%20Scripting%20(XSS)%20Stored%20endpoint%20%60educar_funcao_cad.php%60%20parameters%20%60abreviatura%60,%20%60tipoacao%60.md; https://vuldb.com/?ctiid.324608; https://vuldb.com/?id.324608
CVE: CVE-2025-0546
Published: 2025-09-17
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Restriction of Rendered UI Layers or Frames vulnerability in Mevzuattr Software MevzuatTR allows Phishing, iFrame Overlay, Clickjacking, Forceful Browsing. This issue needs high privileges. This issue affects MevzuatTR: before 12.02.2025.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-1021
References: https://www.usom.gov.tr/bildirim/tr-25-0269
CVE: CVE-2025-10157
Published: 2025-09-17
Description: A Protection Mechanism Failure vulnerability in mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass the unsafe globals check. This is possible because the scanner performs an exact match for module names, allowing malicious payloads to be loaded via submodules of dangerous packages (e.g., 'asyncio.unix_events' instead of 'asyncio'). 

When the incorrectly considered safe file is loaded after scan, it can lead to the execution of malicious code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://github.com/mmaitre314/picklescan/blob/2a8383cfeb4158567f9770d86597300c9e508d0f/src/picklescan/scanner.py#L309; https://github.com/mmaitre314/picklescan/security/advisories/GHSA-f7qq-56ww-84cr; https://huggingface.co/iluem/linux_pkl/resolve/main/asyncio_asyncio_unix_events___UnixSubprocessTransport__start.pkl
CVE: CVE-2025-10439
Published: 2025-09-17
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yordam Informatics Yordam Library Automation System allows SQL Injection.This issue affects Yordam Library Automation System: from 21.5 & 21.6 before 21.7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-25-0268
CVE: CVE-2025-8411
Published: 2025-09-17
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dokuzsoft Technology E-Commerce Web Design Product allows XSS Through HTTP Headers.This issue affects E-Commerce Web Design Product: before 11.08.2025.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-25-0267
CVE: CVE-2025-8999
Published: 2025-09-17
Description: The Sydney theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'activate_modules' function in all versions up to, and including, 2.56. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate or deactivate various theme modules.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://research.cleantalk.org/cve-2025-8999/; https://themes.trac.wordpress.org/browser/sydney/2.55/inc/classes/class-sydney-modules.php#L166; https://themes.trac.wordpress.org/browser/sydney/2.55/inc/modules/class-sydney-modules.php#L72
CVE: CVE-2025-0879
Published: 2025-09-17
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Shopside Software Shopside App allows Cross-Site Scripting (XSS). This issue requires high privileges.This issue affects Shopside App: before 17.02.2025.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-25-0270
CVE: CVE-2025-10592
Published: 2025-09-17
Description: A security vulnerability has been detected in itsourcecode Online Public Access Catalog OPAC 1.0. This impacts an unknown function of the file mysearch.php of the component POST Parameter Handler. Such manipulation of the argument search_field/search_text leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/drew-byte/Online-Public-Access-Catalog-OPAC-SQLi-PoC/blob/main/README.md; https://itsourcecode.com/; https://vuldb.com/?ctiid.324609
CVE: CVE-2025-53884
Published: 2025-09-17
Description: NeuVector stores user passwords and API keys using a simple, unsalted hash. This method is vulnerable to rainbow table attack (offline attack where hashes of known passwords are precomputed).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-759
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-53884; https://github.com/neuvector/neuvector/security/advisories/GHSA-8ff6-pc43-jwv3
CVE: CVE-2025-54467
Published: 2025-09-17
Description: When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-522
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-54467; https://github.com/neuvector/neuvector/security/advisories/GHSA-w54x-xfxg-4gxq
CVE: CVE-2025-8077
Published: 2025-09-17
Description: A vulnerability exists in NeuVector versions up to and including 5.4.5, where a fixed string is used as the default password for the built-in `admin` account. If this password is not changed immediately after deployment, any workload with network access within the cluster could use the default credentials to obtain an authentication token. This token can then be used to perform any operation via NeuVector APIs.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1393
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-8077; https://github.com/neuvector/neuvector/security/advisories/GHSA-8pxw-9c75-6w56
CVE: CVE-2025-8463
Published: 2025-09-17
Description: Authorization Bypass Through User-Controlled Key vulnerability in SecHard Information Technologies SecHard allows Forceful Browsing.This issue affects SecHard: before 3.6.2-20250805.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639
References: https://www.usom.gov.tr/bildirim/tr-25-0271
CVE: CVE-2025-10593
Published: 2025-09-17
Description: A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/update_student.php. Performing manipulation of the argument stud_id results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/qcycop0101-hash/CVE/issues/13; https://vuldb.com/?ctiid.324610; https://vuldb.com/?id.324610
CVE: CVE-2025-10594
Published: 2025-09-17
Description: A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/delete_student.php. Executing manipulation of the argument stud_id can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/qcycop0101-hash/CVE/issues/14; https://vuldb.com/?ctiid.324611; https://vuldb.com/?id.324611
CVE: CVE-2025-50709
Published: 2025-09-17
Description: An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-598
References: https://github.com/mano257200/Perplexity-AI/blob/main/README.md; https://github.com/mano257200/perplexity/blob/main/README.md
CVE: CVE-2025-55904
Published: 2025-09-17
Description: Open5GS v2.7.5, prior to commit 67ba7f92bbd7a378954895d96d9d7b05d5b64615, is vulnerable to a NULL pointer dereference when a multipart/related HTTP POST request with an empty HTTP body is sent to the SBI of either AMF, AUSF, BSF, NRF, NSSF, PCF, SMF, UDM, or UDR, resulting in a denial of service. This occurs in the parse_multipart function in lib/sbi/message.c.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-476
References: https://github.com/open5gs/open5gs/commit/67ba7f92bbd7a378954895d96d9d7b05d5b64615; https://github.com/open5gs/open5gs/issues/3942; https://github.com/tsiamoulis/vuln-research/tree/main/CVE-2025-55904
CVE: CVE-2025-59474
Published: 2025-09-17
Description: Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a page intentionally accessible to users lacking Overall/Read permission, allowing attackers without Overall/Read permission to list agent names through its sidepanel executors widget.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://www.jenkins.io/security/advisory/2025-09-17/#SECURITY-3594; http://www.openwall.com/lists/oss-security/2025/09/17/1