deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-6202
Published: 2025-09-15
Description: Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhammer bit flips impacting the Hardware Integrity and the system's security. This issue affects DDR5: DIMMs produced from 2021-1 until 2024-12.
CWE: CWE-404
References: https://comsec.ethz.ch/phoenix; https://security.googleblog.com/2025/09/supporting-rowhammer-research-to.html
CVE: CVE-2025-8396
Published: 2025-09-15
Description: Insufficiently specific bounds checking on authorization header could lead to denial of service in the Temporal server on all platforms due to excessive memory allocation.This issue affects all platforms and versions of OSS Server prior to 1.26.3, 1.27.3, and 1.28.1 (i.e., fixed in 1.26.3, 1.27.3, and 1.28.1 and later). Temporal Cloud services are not impacted.
CWE: CWE-770
References: https://github.com/temporalio/temporal/releases/tag/v1.26.3; https://github.com/temporalio/temporal/releases/tag/v1.27.3; https://github.com/temporalio/temporal/releases/tag/v1.28.1
CVE: CVE-2025-10491
Published: 2025-09-15
Description: The MongoDB Windows installation MSI may leave ACLs unset on custom installation directories allowing a local attacker to introduce executable code to MongoDB's process via DLL hijacking. This issue affects MongoDB Server v6.0 version prior to 6.0.25, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://jira.mongodb.org/browse/SERVER-51366
CVE: CVE-2025-36082
Published: 2025-09-15
Description: IBM OpenPages 9.0 and 9.1 allows web page cache to be stored locally which can be read by another user on the system.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-525
References: https://www.ibm.com/support/pages/node/7244777
CVE: CVE-2025-43793
Published: 2025-09-15
Description: Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions may incorrectly identify the subdomain of a domain name and create a supercookie, which allows remote attackers who control a website that share the same TLD to read cookies set by the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1284
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43793
CVE: CVE-2025-52048
Published: 2025-09-15
Description: In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function add_tag() at `frappe/desk/doctype/tag/tag.py` is vulnerable to SQL Injection, which allows an attacker to extract information from databases by injecting a SQL query into the `dt` parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/blob/main/2025/Frappe%20Framework%20-%20Multiple%20SQL%20Injection.md; https://github.com/frappe/frappe/security/advisories/GHSA-mggw-6xqj-rphj
CVE: CVE-2025-56252
Published: 2025-09-15
Description: Cross Site Scripting (xss) vulnerability in ServitiumCRM 2.10 allowing attackers to execute arbitrary code via a crafted URL to the mobile parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/fir3storm/5a9c367b4fc1efbc444d72d800c175bb
CVE: CVE-2025-57248
Published: 2025-09-15
Description: A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file. When the file is opened, the application crashes inside libmupdf.dll, specifically in the DataPool::has_data() function.
CVSS Score: 7.3 (HIGH)
CWE: CWE-476
References: https://github.com/sumatrapdfreader/sumatrapdf/issues/5035
CVE: CVE-2025-58045
Published: 2025-09-15
Description: Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12, the patch introduced to mitigate DB2 JDBC deserialization remote code execution attacks only blacklisted the rmi parameter. The ldap parameter in the DB2 JDBC connection string was not filtered, allowing attackers to exploit the DB2 JDBC connection string to trigger server-side request forgery (SSRF). In higher versions of Java, ldap deserialization (autoDeserialize) is disabled by default, preventing remote code execution, but SSRF remains exploitable. Versions up to 2.10.12 are affected. The issue is fixed in version 2.10.13. Updating to 2.10.13 or later is recommended. No known workarounds are documented aside from upgrading.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://github.com/dataease/dataease/commit/[PII_REDACTED]5bd85af5867afbfd5f1fcc37cf03c8; https://github.com/dataease/dataease/security/advisories/GHSA-fmq3-6xhc-r845; https://github.com/dataease/dataease/security/advisories/GHSA-fmq3-6xhc-r845
CVE: CVE-2025-58046
Published: 2025-09-15
Description: Dataease is an open-source data visualization and analysis platform. In versions up to and including 2.10.12, the Impala data source is vulnerable to remote code execution due to insufficient filtering in the getJdbc method of the io.dataease.datasource.type.Impala class. Attackers can construct malicious JDBC connection strings that exploit JNDI injection and trigger RMI deserialization, ultimately enabling remote command execution. The vulnerability can be exploited by editing the data source and providing a crafted JDBC connection string that references a remote configuration file, leading to RMI-based deserialization attacks. This issue has been patched in version 2.10.13. It is recommended to upgrade to the latest version. No known workarounds exist for affected versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74, CWE-502
References: https://github.com/dataease/dataease/commit/8d04e92d44e1bac9284e9e64df5afd7f96d9373c; https://github.com/dataease/dataease/security/advisories/GHSA-mvwc-x8x9-46c3; https://github.com/dataease/dataease/security/advisories/GHSA-mvwc-x8x9-46c3
CVE: CVE-2025-59397
Published: 2025-09-15
Description: Open Web Analytics (OWA) before 1.8.1 allows owa_db.php v[value] SQL injection.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-89
References: https://github.com/Open-Web-Analytics/Open-Web-Analytics/commit/1e5531522acb8f145627c9feb0175cf8a66561ba; https://github.com/Open-Web-Analytics/Open-Web-Analytics/compare/1.8.0...1.8.1; https://github.com/Open-Web-Analytics/Open-Web-Analytics/releases/tag/1.8.1
CVE: CVE-2025-10203
Published: 2025-09-15
Description: Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that may result in arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted .DWF3WORK file.  This vulnerability affects Digilent WaveForms 3.24.3 and prior versions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-23
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/relative-path-traversal-vulnerability-in-digilent-waveforms.html
CVE: CVE-2025-10471
Published: 2025-09-15
Description: A vulnerability was detected in ZKEACMS 4.3. Impacted is the function Proxy of the file src/ZKEACMS/Controllers/MediaController.cs. Performing manipulation of the argument url results in server-side request forgery. It is possible to initiate the attack remotely. The exploit is now public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/August829/Yu/blob/main/58ead8e7e08bfb022.md; https://github.com/August829/Yu/blob/main/58ead8e7e08bfb022.md#poc; https://vuldb.com/?ctiid.323890
CVE: CVE-2025-43792
Published: 2025-09-15
Description: Remote staging in Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not properly obtain the remote address of the live site from the database which, which allows remote authenticated users to exfiltrate data to an attacker controlled server (i.e., a fake “live site”) via the _com_liferay_exportimport_web_portlet_ExportImportPortlet_remoteAddress and _com_liferay_exportimport_web_portlet_ExportImportPortlet_remotePort parameters. To successfully exploit this vulnerability, an attacker must also successfully obtain the staging server’s shared secret and add the attacker controlled server to the staging server’s whitelist.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-15
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43792
CVE: CVE-2025-49089
Published: 2025-09-15
Description: wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22
References: https://gist.github.com/Theresasu1/3a9ced1f3d8208cc9f99ce34057cf681; https://github.com/harry0703/MoneyPrinterTurbo; https://moneyprinterturbo.net
CVE: CVE-2025-57104
Published: 2025-09-15
Description: Teampel 5.1.6 is vulnerable to SQL Injection in /Common/login.aspx.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/H-kiss-me/430ebedb3e6c2675d37dc1e211b78728; https://www.teampel.com/
CVE: CVE-2025-57174
Published: 2025-09-15
Description: An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0 through 10.7.3 and possibly other previous versions. The rfpiped service listening on TCP port 555 which uses static AES encryption keys hardcoded in the binary. These keys are identical across all devices, allowing attackers to craft encrypted packets that execute arbitrary commands without authentication. This is a failed patch for CVE-2017-7318. This issue may affect other Etherhaul series devices with shared firmware.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-321
References: http://ceragon.com; http://etherhaul.com; https://semaja2.net/2025/08/02/siklu-eh-unauthenticated-rce/
CVE: CVE-2025-57176
Published: 2025-09-15
Description: On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption (metadata only) with file contents transmitted in cleartext. No authentication or path validation is performed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-04
CVE: CVE-2025-58172
Published: 2025-09-15
Description: drawnix is an all in one open-source whiteboard tool. In drawnix versions through 0.2.1, a cross-site scripting (XSS) vulnerability exists in the debug logging functionality. User controlled content is inserted directly into the DOM via innerHTML without sanitization when the global function __drawnix__web__console is invoked, as shown in apps/web/src/app/app.tsx where div.innerHTML = value is executed. This can allow arbitrary JavaScript execution in the context of the application if an attacker can cause untrusted data to be passed to the debug logger (for example via a malicious extension or other injection vector), potentially exposing user data or enabling unauthorized actions. The issue is fixed in version 0.3.0. Updating to 0.3.0 or later is recommended. No known workarounds exist.
CWE: CWE-79
References: https://github.com/plait-board/drawnix/commit/92536e63c1adcc509ac51fdd439d4794c8081c58; https://github.com/plait-board/drawnix/security/advisories/GHSA-cq57-q8hg-xhxf
CVE: CVE-2025-58177
Published: 2025-09-15
Description: n8n is an open source workflow automation platform. From 1.24.0 to before 1.107.0, there is a stored cross-site scripting (XSS) vulnerability in @n8n/n8n-nodes-langchain.chatTrigger. An authorized user can configure the LangChain Chat Trigger node with malicious JavaScript in the initialMessages field and enable public access so that the payload is executed in the browser of any user who visits the resulting public chat URL. This can be used for phishing or to steal cookies or other sensitive data from users accessing the public chat link. The issue is fixed in version 1.107.0. Updating to 1.107.0 or later is recommended. As a workaround, the affected chatTrigger node can be disabled. No other workarounds are known.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/n8n-io/n8n/commit/d4ef191be0b39b65efa68559a3b8d5dad2e102b2; https://github.com/n8n-io/n8n/pull/18148; https://github.com/n8n-io/n8n/security/advisories/GHSA-mvh4-2cm2-6hpg
CVE: CVE-2025-58748
Published: 2025-09-15
Description: Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12 the H2 data source implementation (H2.java) does not verify that a provided JDBC URL starts with jdbc:h2. This lack of validation allows a crafted JDBC configuration that substitutes the Amazon Redshift driver and leverages the socketFactory and socketFactoryArg parameters to invoke org.springframework.context.support.FileSystemXmlApplicationContext or ClassPathXmlApplicationContext with an attacker‑controlled remote XML resource, resulting in remote code execution. Versions up to and including 2.10.12 are affected. The issue is fixed in version 2.10.13. Updating to version 2.10.13 or later is the recommended remediation. No known workarounds exist.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/dataease/dataease/commit/23a45e72a7abc37d5680b0a7cf691b8df378d4ef; https://github.com/dataease/dataease/security/advisories/GHSA-23qw-9qrh-9rr8
CVE: CVE-2025-59155
Published: 2025-09-15
Description: hackmd-mcp is a Model Context Protocol server for integrating HackMD's note-taking platform with AI assistants. From 1.4.0 to before 1.5.0, hackmd-mcp contains a server-side request forgery (SSRF) vulnerability when the server is run in HTTP transport mode. Arbitrary hackmdApiUrl values supplied via the Hackmd-Api-Url HTTP header or a base64-encoded JSON query parameter are accepted without validation, allowing attackers to redirect outbound API requests to internal network services, access internal endpoints, perform network reconnaissance, and bypass network access controls. The stdio transport mode is not affected because it only accepts stdio requests. The issue is fixed in version 1.5.0, which enforces allowed endpoints and supports the ALLOWED_HACKMD_API_URLS environment variable. Users should update to 1.5.0 or later or apply documented mitigations such as switching to stdio mode, restricting outbound network access, or filtering the Hackmd-Api-Url header and related query parameter via a reverse proxy.
CWE: CWE-918
References: https://github.com/yuna0x0/hackmd-mcp/commit/43936c78a5bb3dedc74e8f080607a1125caa8c13; https://github.com/yuna0x0/hackmd-mcp/security/advisories/GHSA-g5cg-6c7v-mmpw
CVE: CVE-2025-59328
Published: 2025-09-15
Description: A vulnerability in Apache Fory allows a remote attacker to cause a Denial of Service (DoS). The issue stems from the insecure deserialization of untrusted data. An attacker can supply a large, specially crafted data payload that, when processed, consumes an excessive amount of CPU resources during the deserialization process. This leads to CPU exhaustion, rendering the application or system using the Apache Fory library unresponsive and unavailable to legitimate users.

Users of Apache Fory are strongly advised to upgrade to version 0.12.2 or later to mitigate this vulnerability. Developers of libraries and applications that depend on Apache Fory should update their dependency requirements to Apache Fory 0.12.2 or later and release new versions of their software.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-502
References: https://fory.apache.org/security/; http://www.openwall.com/lists/oss-security/2025/09/15/1
CVE: CVE-2025-43791
Published: 2025-09-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a "Rich Text" type field to (1) a web content structure, (2) a Documents and Media Document Type , or (3) custom assets that uses the Data Engine's module Rich Text field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43791
CVE: CVE-2025-52344
Published: 2025-09-15
Description: Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/SaraAlsaif/f363b307f29c865d499678eca3106b43; https://www.explorance.com/products/blue
CVE: CVE-2025-55777
Published: 2025-09-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2025-10472
Published: 2025-09-15
Description: A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6. The impacted element is the function download_video/stream_video of the file app/controllers/v1/video.py of the component URL Handler. The manipulation of the argument file_path leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://vuldb.com/?ctiid.323892; https://vuldb.com/?id.323892; https://vuldb.com/?submit.648393
CVE: CVE-2025-10473
Published: 2025-09-15
Description: A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This impacts the function filterKeyword of the file /com/ruoyi/common/utils/sql/SqlUtil.java of the component Blacklist Handler. The manipulation results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/mo957/vuln/blob/main/ruoyi_sqlinject/ruoyi_sqlinject.md; https://vuldb.com/?ctiid.323905; https://vuldb.com/?id.323905
CVE: CVE-2025-43800
Published: 2025-09-15
Description: Cross-site scripting (XSS) vulnerability in Objects in Liferay Portal 7.4.3.20 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an object with a rich text type field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43800
CVE: CVE-2025-59398
Published: 2025-09-15
Description: The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via JSON input larger than 255 characters, because a CiString<255> object is created with StringTooLarge set to Throw.
CVSS Score: 3.1 (LOW)
CWE: CWE-392
References: https://github.com/EVerest/everest-core/commit/253432ae7458ad0445f68f9d716086090c2be49c; https://github.com/EVerest/everest-core/issues/1152; https://github.com/EVerest/libocpp/commit/fb391b4ff16a0a07150e5a8eebf0856fb6623cbe
CVE: CVE-2025-59399
Published: 2025-09-15
Description: libocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary exception is thrown during error message generation.
CVSS Score: 3.1 (LOW)
CWE: CWE-460
References: https://github.com/EVerest/libocpp/commit/0b84d7f9fb3c338d470770f220a7b7f21db78878; https://github.com/EVerest/libocpp/compare/v0.27.1...v0.28.0
CVE: CVE-2025-10475
Published: 2025-09-15
Description: A weakness has been identified in SpyShelter up to 15.4.0.1015. Affected is an unknown function in the library SpyShelter.sys of the component IOCTL Handler. This manipulation causes denial of service. The attack needs to be launched locally. The exploit has been made available to the public and could be exploited. Upgrading to version 15.4.0.1028 is able to address this issue. It is advisable to upgrade the affected component.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404
References: https://vuldb.com/?ctiid.323906; https://vuldb.com/?id.323906; https://vuldb.com/?submit.648484
CVE: CVE-2025-45091
Published: 2025-09-15
Description: Seafile versions 11.0.18-Pro, 12.0.10, and 12.0.10-Pro are vulnerable to a stored Cross-Site Scripting (XSS) attack. An authenticated attacker can exploit this vulnerability by modifying their username to include a malicious XSS payload in notification and activities.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://plus.seafile.com/wiki/publish/seafile-wiki/txzO/
CVE: CVE-2025-56448
Published: 2025-09-15
Description: The Positron PX360BT SW REV 8 car alarm system is vulnerable to a replay attack due to a failure in implementing rolling code security. The alarm system does not properly rotate or invalidate used codes, allowing repeated reuse of captured transmissions. This exposes users to significant security risks, including vehicle theft and loss of trust in the alarm's anti-cloning claims.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-294
References: https://medium.com/@wagneralves_87750/cve-2025-56448-replay-attack-vulnerability-in-positron-px360bt-car-alarm-system-c9f1ccea6ebe; https://positron.com.br/blog/positron-lanca-alarme-px360bt-starter/
CVE: CVE-2025-59140
Published: 2025-09-15
Description: backlash parses collected strings with escapes. On 8 September 2025, the npm publishing account for backslash was taken over after a phishing attack. Version 0.2.1 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect cryptocurrency transactions to the attacker's own addresses from within browser environments. Local environments, server environments, command line applications, etc. are not affected. If the package was used in a browser context (e.g. a direct <script> inclusion, or via a bundling tool such as Babel, Rollup, Vite, Next.js, etc.) there is a chance the malware still exists and such bundles will need to be rebuilt. The malware seemingly only targets cryptocurrency transactions and wallets such as MetaMask. npm removed the offending package from the registry over the course of the day on 8 September, preventing further downloads from npm proper. On 13 September, the package owner published new patch versions to help cache-bust those using private registries who might still have the compromised version cached. Users should upgrade to the latest patch version, completely remove their node_modules directory, clean their package manager's global cache, and rebuild any browser bundles from scratch. Those operating private registries or registry mirrors should purge the offending versions from any caches. This issues is resolved in 0.2.2.
CWE: CWE-506
References: https://github.com/Qix-/node-backslash/security/advisories/GHSA-53mq-f4w3-f7qv; https://github.com/debug-js/debug/issues/1005; https://socket.dev/blog/npm-author-qix-compromised-in-major-supply-chain-attack