deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-34160
Published: 2025-08-27
Description: AnyShare contains a critical unauthenticated remote code execution vulnerability in the ServiceAgent API exposed on port 10250. The endpoint /api/ServiceAgent/start_service accepts user-supplied input via POST and fails to sanitize command-like payloads. An attacker can inject shell syntax that is interpreted by the backend, enabling arbitrary command execution. The vulnerability is presumed to affect builds released prior to August 2025 and is said to be remediated in newer versions of the product, though the exact affected range remains undefined. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-07-11 UTC.
CWE: CWE-78
References: https://cn-sec.com/archives/4320091.html; https://stack.chaitin.com/vuldb/detail/b4640952-9be9-4bfa-9d7f-a0be72b35e18; https://www.aishu.cn/cn
CVE: CVE-2025-34162
Published: 2025-08-27
Description: An unauthenticated SQL injection vulnerability exists in the GetLyfsByParams endpoint of Bian Que Feijiu Intelligent Emergency and Quality Control System, accessible via the /AppService/BQMedical/WebServiceForFirstaidApp.asmx interface. The backend fails to properly sanitize user-supplied input in the strOpid parameter, allowing attackers to inject arbitrary SQL statements. This can lead to data exfiltration, authentication bypass, and potentially remote code execution, depending on backend configuration. The vulnerability is presumed to affect builds released prior to June 2025 and is said to be remediated in newer versions of the product, though the exact affected range remains undefined. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-07-23 UTC.
CWE: CWE-89
References: http://www.ivtbq.com/; https://cn-sec.com/archives/4160402.html; https://github.com/wooluo/nuclei-templates-2025hw/blob/main/bianque-medical-sql-injection.yaml
CVE: CVE-2025-34163
Published: 2025-08-27
Description: Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a crafted multipart/form-data POST request. This allows remote code execution on the server, potentially leading to full system compromise. The vulnerability is presumed to affect builds released prior to July 2025 and is said to be remediated in newer versions of the product, though the exact affected range remains undefined. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-07-23 UTC.
CWE: CWE-434
References: http://www.dongshengsoft.com/; https://cn-sec.com/archives/4243708.html; https://www.vulncheck.com/advisories/dongsheng-logisitics-software-unauth-arbitrary-file-upload
CVE: CVE-2025-34520
Published: 2025-08-27
Description: An authentication bypass vulnerability in Arcserve Unified Data Protection (UDP) allows unauthenticated attackers to gain unauthorized access to protected functionality or user accounts. By manipulating specific request parameters or exploiting a logic flaw, an attacker can bypass login mechanisms without valid credentials and access administrator-level features. This vulnerability affects all UDP versions prior to 10.2. UDP 10.2 includes the necessary patches and requires no action. Versions 8.0 through 10.1 are supported and require either patch application or upgrade to 10.2. Versions 7.x and earlier are unsupported or out of maintenance and must be upgraded to 10.2 to remediate the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://support.arcserve.com/s/article/Important-Security-Bulletin-Must-read-for-all-Arcserve-UDP-customers-on-all-versions
CVE: CVE-2025-34521
Published: 2025-08-27
Description: A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the Arcserve Unified Data Protection (UDP), where unsanitized user input is improperly reflected in HTTP responses. This flaw allows remote attackers with low privileges to craft malicious links that, when visited by another user, execute arbitrary JavaScript in the victim’s browser. Successful exploitation may lead to session hijacking, credential theft, or other client-side impacts. The vulnerability requires user interaction and occurs within a shared browser context. This vulnerability affects all UDP versions prior to 10.2. UDP 10.2 includes the necessary patches and requires no action. Versions 8.0 through 10.1 are supported and require either patch application or upgrade to 10.2. Versions 7.x and earlier are unsupported or out of maintenance and must be upgraded to 10.2 to remediate the issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://support.arcserve.com/s/article/Important-Security-Bulletin-Must-read-for-all-Arcserve-UDP-customers-on-all-versions
CVE: CVE-2025-34522
Published: 2025-08-27
Description: A heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve Unified Data Protection (UDP). This flaw can be triggered without authentication by sending specially crafted input to the target system. Improper bounds checking allows an attacker to overwrite heap memory, potentially leading to application crashes or remote code execution. Exploitation occurs in the context of the affected process and does not require user interaction. The vulnerability poses a high risk due to its pre-authentication nature and potential for full compromise. This vulnerability affects all UDP versions prior to 10.2. UDP 10.2 includes the necessary patches and requires no action. Versions 8.0 through 10.1 are supported and require either patch application or upgrade to 10.2. Versions 7.x and earlier are unsupported or out of maintenance and must be upgraded to 10.2 to remediate the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://support.arcserve.com/s/article/Important-Security-Bulletin-Must-read-for-all-Arcserve-UDP-customers-on-all-versions
CVE: CVE-2025-34523
Published: 2025-08-27
Description: A heap-based buffer overflow vulnerability exists in the exists in the network-facing input handling routines of Arcserve Unified Data Protection (UDP). This flaw is reachable without authentication and results from improper bounds checking when processing attacker-controlled input. By sending specially crafted data, a remote attacker can corrupt heap memory, potentially causing a denial of service or enabling arbitrary code execution depending on the memory layout and exploitation techniques used. This vulnerability is similar in nature to CVE-2025-34522 but affects a separate code path or component. No user interaction is required, and exploitation occurs in the context of the vulnerable process. This vulnerability affects all UDP versions prior to 10.2. UDP 10.2 includes the necessary patches and requires no action. Versions 8.0 through 10.1 are supported and require either patch application or upgrade to 10.2. Versions 7.x and earlier are unsupported or out of maintenance and must be upgraded to 10.2 to remediate the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://support.arcserve.com/s/article/Important-Security-Bulletin-Must-read-for-all-Arcserve-UDP-customers-on-all-versions
CVE: CVE-2025-36003
Published: 2025-08-28
Description: IBM Security Verify Governance Identity Manager 10.0.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages are returned. This information could be used in further attacks against the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-209
References: https://www.ibm.com/support/pages/node/7243303
CVE: CVE-2025-57845
Published: 2025-08-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-34158. Reason: This candidate is a reservation duplicate of CVE-2025-34158. Notes: All CVE users should reference CVE-2025-34158 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-7812
Published: 2025-08-28
Description: The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.6. This is due to missing or incorrect nonce validation on the adminExport() function. This makes it possible for unauthenticated attackers to update settings and execute remote code when the Server command execution setting is enabled via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/video-share-vod/trunk/inc/options.php#L728; https://plugins.trac.wordpress.org/browser/video-share-vod/trunk/video-share-vod.php#L3360; https://plugins.trac.wordpress.org/changeset/3348480/video-share-vod/trunk/video-share-vod.php
CVE: CVE-2025-8897
Published: 2025-08-28
Description: The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘'fl_builder' parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3350565/beaver-builder-lite-version/trunk/includes/ui-iframe.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/93[PII_REDACTED]-4b8c-a7d1-c982bdc8d034?source=cve
CVE: CVE-2025-9344
Published: 2025-08-28
Description: The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'uwp_profile' and 'uwp_profile_header' shortcodes in all versions up to, and including, 1.2.42 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/AyeCode/userswp/commit/2e18c3f70a3f24f4f4ef2ec44d38fda82866c902; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3349701%40userswp&new=3349701%40userswp&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/0ecba857-03d8-4a2e-9450-146d442f5533?source=cve
CVE: CVE-2025-9352
Published: 2025-08-28
Description: The Pronamic Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the description field in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pronamic/wp-pronamic-google-maps/commit/b71e6f6a8fc61ac1065a0a2789490cb058b1bffe; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3349668%40pronamic-google-maps&new=3349668%40pronamic-google-maps&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/06752651-4c7f-48dd-989c-c254c6ca7ae4?source=cve
CVE: CVE-2024-9648
Published: 2025-08-28
Description: The WP ULike Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the WP_Ulike_Pro_File_Uploader class in all versions up to, and including, 1.9.3. This makes it possible for unauthenticated attackers to upload limited arbitrary files like .php2, .php6, .php7, .phps, .pht, .phtm, .pgif, .shtml, .phar, .inc, .hphp, .ctp, .module, .html, .svg on the affected site's server which may make make other attacks like Cross-Site Scripting possible. Only versions up to 1.8.7 were confirmed vulnerable, however, the earliest tested version for a patch we have access to is 1.9.4, so we are considering 1.9.4 the patched version.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-434
References: https://wpulike.com/; https://www.wordfence.com/threat-intel/vulnerabilities/id/9b86d9ea-b842-4492-82e4-dd979fbe70cf?source=cve
CVE: CVE-2025-0951
Published: 2025-08-28
Description: Multiple plugins and/or themes for WordPress by LiquidThemes are vulnerable to unauthorized access due to a missing capability check on the liquid_reset_wordpress_before AJAX in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to deactivate all of a site's plugins. While we escalated this to Envato after not being able to establish contact, it appears the developer added a nonce check, however that is not sufficient protection as the nonce is exposed to all users with access to the dashboard.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://themeforest.net/user/liquidthemes; https://www.wordfence.com/threat-intel/vulnerabilities/id/0099c700-e1af-4d97-a518-151a9139ea35?source=cve
CVE: CVE-2025-8603
Published: 2025-08-28
Description: The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.5.148 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/trunk/assets_libraries/unitegallery/js/unitegallery.min.js; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3349280%40unlimited-elements-for-elementor&new=3349280%40unlimited-elements-for-elementor&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/40f0510a-06e3-40a9-9b93-0296f524f94a?source=cve
CVE: CVE-2025-9345
Published: 2025-08-28
Description: The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.8 via the ajax_downloadfile() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the originally intended directory.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3350045%40softdiscover-db-file-manager&new=3350045%40softdiscover-db-file-manager&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/f53cf99e-3136-4a1d-bbbd-ff484f1df5c3?source=cve
CVE: CVE-2025-9346
Published: 2025-08-28
Description: The Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 10.14.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3348957/booking/trunk/core/any/class-admin-settings-api.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/ca47486b-0761-48b8-94a7-77175ed5a37e?source=cve
CVE: CVE-2025-8977
Published: 2025-08-28
Description: The Simple Download Monitor plugin for WordPress is vulnerable to time-based SQL Injection via the order parameter in all versions up to, and including, 3.9.33 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, and permissions granted by an Administrator, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://plugins.svn.wordpress.org/simple-download-monitor/tags/3.9.33/main.php#261; https://plugins.trac.wordpress.org/browser/simple-download-monitor/tags/3.9.33/main.php#L255; https://plugins.trac.wordpress.org/changeset/3346068/
CVE: CVE-2024-13807
Published: 2025-08-28
Description: The Xagio SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.1.0.5 via the backup functionality due to weak filename structure and lack of protection in the directory. This makes it possible for unauthenticated attackers to extract sensitive data from backups which can include the entire database and site's files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/xagio-seo/tags/7.0.0.19/modules/backups/models/xagio_backups.php#L1882; https://plugins.trac.wordpress.org/changeset/3292024/; https://www.wordfence.com/threat-intel/vulnerabilities/id/9d7b7f4b-6acb-4ccb-8f2e-951012996ac7?source=cve
CVE: CVE-2025-7955
Published: 2025-08-28
Description: The RingCentral Communications plugin for WordPress is vulnerable to Authentication Bypass due to improper validation within the ringcentral_admin_login_2fa_verify() function in versions 1.5 to 1.6.8. This makes it possible for unauthenticated attackers to log in as any user simply by supplying identical bogus codes.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://plugins.trac.wordpress.org/browser/rccp-free/tags/1.6.8/ringcentral.php; https://plugins.trac.wordpress.org/changeset/3349361/; https://wordpress.org/plugins/rccp-free/#developers
CVE: CVE-2025-7956
Published: 2025-08-28
Description: The Ajax Search Lite plugin for WordPress is vulnerable to Basic Information Exposure due to missing authorization in its AJAX search handler in all versions up to, and including, 4.13.1. This makes it possible for unauthenticated attackers to issue repeated AJAX requests to leak the content of any protected post in rolling 100‑character windows.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/ajax-search-lite/tags/4.13.1/includes/classes/ajax/class-asl-search.php#L37; https://plugins.trac.wordpress.org/changeset/3349881/; https://wordpress.org/plugins/ajax-search-lite/#developers
CVE: CVE-2025-6255
Published: 2025-08-28
Description: The Dynamic AJAX Product Filters for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/dynamic-ajax-product-filters-for-woocommerce/tags/1.1.7/includes/blocks_widget_create.php#L408; https://plugins.trac.wordpress.org/changeset/3350071/; https://wordpress.org/plugins/dynamic-ajax-product-filters-for-woocommerce/#developers
CVE: CVE-2025-8073
Published: 2025-08-28
Description: The Dynamic AJAX Product Filters for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/dynamic-ajax-product-filters-for-woocommerce/tags/1.2.3/includes/filter-template.php#L1032; https://plugins.trac.wordpress.org/changeset/3350071/; https://wordpress.org/plugins/dynamic-ajax-product-filters-for-woocommerce/#developers
CVE: CVE-2025-58322
Published: 2025-08-28
Description: NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by invoking arbitrary DLLs due to improper privilege checks.
CVSS Score: 7.8 (HIGH)
CWE: CWE-266
References: https://cve.naver.com/detail/cve-2025-58322.html
CVE: CVE-2025-46409
Published: 2025-08-28
Description: Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, a function that requires authentication may be accessed by a remote unauthenticated attacker.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: https://jvn.jp/en/jp/JVN99577552/; https://www.dos-osaka.co.jp/news/2025/08/250827.html
CVE: CVE-2025-52460
Published: 2025-08-28
Description: Files or directories accessible to external parties issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If exploited, uploaded files and SS1 configuration files may be accessed by a remote unauthenticated attacker.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-552
References: https://jvn.jp/en/jp/JVN99577552/; https://www.dos-osaka.co.jp/news/2025/08/250827.html
CVE: CVE-2025-53396
Published: 2025-08-28
Description: Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier), which may allow users who can log in to a client terminal to obtain root privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-732
References: https://jvn.jp/en/jp/JVN99577552/; https://www.dos-osaka.co.jp/news/2025/08/250827.html
CVE: CVE-2025-53970
Published: 2025-08-28
Description: SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://jvn.jp/en/jp/JVN99577552/; https://www.dos-osaka.co.jp/news/2025/08/250827.html
CVE: CVE-2025-54762
Published: 2025-08-28
Description: SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://jvn.jp/en/jp/JVN99577552/; https://www.dos-osaka.co.jp/news/2025/08/250827.html
CVE: CVE-2025-54819
Published: 2025-08-28
Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, legitimate files may be overwritten by a remote authenticated attacker.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://jvn.jp/en/jp/JVN99577552/; https://www.dos-osaka.co.jp/news/2025/08/250827.html
CVE: CVE-2025-58072
Published: 2025-08-28
Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, arbitrary files may be viewed by a remote unauthenticated attacker.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://jvn.jp/en/jp/JVN99577552/; https://www.dos-osaka.co.jp/news/2025/08/250827.html
CVE: CVE-2025-58081
Published: 2025-08-28
Description: Use of hard-coded password issue/vulnerability in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to view arbitrary files with root privileges.
CVSS Score: 7.5 (HIGH)
CWE: CWE-259
References: https://jvn.jp/en/jp/JVN99577552/; https://www.dos-osaka.co.jp/news/2025/08/250827.html