deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-36125
Published: 2025-09-09
Description: IBM Hardware Management Console - Power 10.3.1050.0 and 11.1.1110.0 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7244336
CVE: CVE-2025-43786
Published: 2025-09-09
Description: Enumeration of ERC from object entry in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 and 7.4 GA through update 92 allow attackers to determine existent ERC in the application by exploit the time response.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-79, CWE-203
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43786
CVE: CVE-2025-44594
Published: 2025-09-09
Description: halo v2.20.17 and before is vulnerable to server-side request forgery (SSRF) in /apis/uc.api.storage.halo.run/v1alpha1/attachments/-/upload-from-url.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://meadow-horn-b94.notion.site/halo-ssrf-14c42bd5b11880c09936df07f58f5bed?pvs=74
CVE: CVE-2025-47415
Published: 2025-09-09
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CRESTRON TOUCHSCREENS x70 allows Relative Path Traversal.This issue affects TOUCHSCREENS x70: from 3.000.0110.001 before 3.001.0031.001.











Confirmed Affected Hardware: TSW-760, TSW-1060 



Confirmed Affected Firmware: 3.002.1061 - (no fix released, product discontinued)



 

For x70  



The Affected Firmware:- 3.000.0110.001  and versions below 



The Fixed Firmware:- 3.001.0031.001
CWE: CWE-22
References: https://security.crestron.com; https://www.crestron.com/Software-Firmware/Firmware/Touchpanels/TS-770-TS-1070-TSS-770-TSS-1070-TSW-570/3-002-0040-001
CVE: CVE-2025-53913
Published: 2025-09-09
Description: Excessive Privileges vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows Privilege Abuse.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE, 812G, 813G, 818G.
CWE: CWE-269
References: https://fluidattacks.com/advisories/forty; https://revers3everything.com/calix-case-five-0-days-five-cves/; https://www.calix.com
CVE: CVE-2025-53914
Published: 2025-09-09
Description: Excessive Privileges vulnerability in Calix GigaCenter ONT (Broadcom SoC modules) allows Privilege Abuse.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE, 812G, 813G, 818G.
CWE: CWE-269
References: https://fluidattacks.com/advisories/sheivi; https://revers3everything.com/calix-case-five-0-days-five-cves/; https://www.calix.com
CVE: CVE-2025-54255
Published: 2025-09-09
Description: Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not require user interaction, and scope is unchanged.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-657
References: https://helpx.adobe.com/security/products/acrobat/apsb25-85.html
CVE: CVE-2025-54257
Published: 2025-09-09
Description: Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file, and scope is unchanged.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb25-85.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2222
CVE: CVE-2025-55054
Published: 2025-09-09
Description: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE: CVE-2025-58063
Published: 2025-09-09
Description: CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for DNS resolution of affected services. The `TTL()` function in `plugin/etcd/etcd.go` incorrectly casts etcd lease IDs (64-bit integers) to uint32 and uses them as TTL values. Large lease IDs become very large TTLs when cast to uint32. This enables cache pinning attacks. Version 1.12.4 contains a fix for the issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-681
References: https://github.com/coredns/coredns/commit/e1768a5d272e9da649dfb8588595e5c6e4e640bf; https://github.com/coredns/coredns/security/advisories/GHSA-93mf-426m-g6x9; https://github.com/coredns/coredns/security/advisories/GHSA-93mf-426m-g6x9
CVE: CVE-2025-58180
Published: 2025-09-09
Description: OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.2 contain a vulnerability that allows an authenticated attacker to upload a file under a specially crafted filename that will allow arbitrary command execution if said filename becomes included in a command defined in a system event handler and said event gets triggered. If no event handlers executing system commands with uploaded filenames as parameters have been configured, this vulnerability does not have an impact. The vulnerability is patched in version 1.11.3. As a workaround, OctoPrint administrators who have event handlers configured that include any kind of filename based placeholders should disable those by setting their `enabled` property to `False` or unchecking the "Enabled" checkbox in the GUI based Event Manager. Alternatively, OctoPrint administrators should set `feature.enforceReallyUniversalFilenames` to `true` in `config.yaml` and restart OctoPrint, then vet the existing uploads and make sure to delete any suspicious looking files. As always, OctoPrint administrators are advised to not expose OctoPrint on hostile networks like the public internet, and to vet who has access to their instance.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/OctoPrint/OctoPrint/commit/be4201ef58d9a7c[PII_REDACTED]8c16eada90a258b; https://github.com/OctoPrint/OctoPrint/commit/c3a940962f4658a8e035a00388781b1cbd768841; https://github.com/OctoPrint/OctoPrint/releases/tag/1.11.3
CVE: CVE-2025-58430
Published: 2025-09-09
Description: listmonk is a standalone, self-hosted, newsletter and mailing list manager. In versions up to and including 1.1.0, every http request in addition to the session cookie `session` there included `nonce`. The value is not checked and validated by the backend, removing `nonce` allows the requests to be processed correctly. This may seem harmless, but if chained to other vulnerabilities it can become a critical vulnerability. Cross-site request forgery and cross-site scripting chained together can result in improper admin account creation. As of time of publication, no patched versions are available.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-80, CWE-352
References: https://github.com/knadh/listmonk/security/advisories/GHSA-rf24-wg77-gq7w; https://github.com/knadh/listmonk/security/advisories/GHSA-rf24-wg77-gq7w
CVE: CVE-2025-58435
Published: 2025-09-09
Description: Open OnDemand is an open-source HPC portal. Prior to versions 3.1.15 and 4.0.7, noVNC interactive applications did not correctly rotate the password when TurboVNC was higher than version 3.1.2. The likelihood of exploitation is low as a user would need to share their link to an active desktop session and the other user would need to be authenticated to the portal. But obtaining the link would allow that user to perform any actions as the original user and access their data. Open OnDemand 3.1.15 and 4.0.7 have patched this vulnerability and correctly rotate passwords for any version of TurboVNC. As a workaround, downgrade TurboVNC to a version lower than 3.1.2.
CWE: CWE-262
References: https://github.com/OSC/ondemand/security/advisories/GHSA-7vh8-mw9f-5r99
CVE: CVE-2025-58442
Published: 2025-09-09
Description: Saleor is an e-commerce platform. Starting in version 3.21.0 and prior to version 3.21.16, requesting certain fields in the response of `accountRegister` may result in errors that could unintentionally reveal whether a user with the provided email already exists in Saleor. Version 3.21.16 fixes the issue. As a workaround, rate-limit the mutation to reduce the impact.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204
References: https://github.com/saleor/saleor/commit/09d671e91ea53a44352d5f685083dc05a2f55e95; https://github.com/saleor/saleor/commit/b35783838e51cfc118e07d632f64b01bc3a2c4bb; https://github.com/saleor/saleor/releases/tag/3.21.16
CVE: CVE-2025-58753
Published: 2025-09-09
Description: Copyparty is a portable file server. In versions prior to 1.19.8, there was a missing permission-check in the shares feature (the `shr` global-option). When a share was created for just one file inside a folder, it was possible to access the other files inside that folder by guessing the filenames. It was not possible to descend into subdirectories in this manner; only the sibling files were accessible. This issue did not affect filekeys or dirkeys. Version 1.19.8 fixes the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-862
References: https://github.com/9001/copyparty/commit/e0a92ba72d46074209a9c304eb2a01ca0429e60c; https://github.com/9001/copyparty/releases/tag/v1.19.8; https://github.com/9001/copyparty/security/advisories/GHSA-pxvw-4w88-6x95
CVE: CVE-2025-58758
Published: 2025-09-09
Description: TinyEnv is an environment variable loader for PHP applications. In versions 1.0.1, 1.0.2, 1.0.9, and 1.0.10, TinyEnv did not require the `.env` file to exist when loading environment variables. This could lead to unexpected behavior where the application silently ignores missing configuration, potentially causing insecure defaults or deployment misconfigurations. The issue has been fixed in version 1.0.11. All users should upgrade to 1.0.11 or later. As a workaround, users can manually verify the existence of the `.env` file before initializing TinyEnv.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-703
References: https://github.com/datahihi1/tiny-env/commit/69b7b885e6cfbf07f470fb3512360e0caa95521e; https://github.com/datahihi1/tiny-env/security/advisories/GHSA-3j7m-5g4q-gfpc
CVE: CVE-2025-58759
Published: 2025-09-09
Description: TinyEnv is an environment variable loader for PHP applications. In versions 1.0.9 and 1.0.10, TinyEnv did not properly strip inline comments inside .env values. This could lead to unexpected behavior or misconfiguration, where variables contain unintended characters (including # or comment text). Applications depending on strict environment values may expose logic errors, insecure defaults, or failed authentication. The issue is fixed in v1.0.11. Users should upgrade to the latest patched version. As a temporary workaround, avoid using inline comments in .env files, or sanitize loaded values manually.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-20
References: https://github.com/datahihi1/tiny-env/security/advisories/GHSA-72cm-7236-h43r
CVE: CVE-2025-58760
Published: 2025-09-09
Description: Tautulli is a Python based monitoring and tracking tool for Plex Media Server. The `/image` API endpoint in Tautulli v2.15.3 and earlier is vulnerable to path traversal, allowing unauthenticated attackers to read arbitrary files from the application server's filesystem. In Tautulli, the `/image` API endpoint is used to serve static images from the application's data directory to users. This endpoint can be accessed without authentication, and its intended purpose is for server background images and icons within the user interface. Attackers can exfiltrate files from the application file system, including the `tautulli.db` SQLite database containing active JWT tokens, as well as the `config.ini` file which contains the hashed admin password, the JWT token secret, and the Plex Media Server token and connection details. If the password is cracked, or if a valid JWT token is present in the database, an unauthenticated attacker can escalate their privileges to obtain administrative control over the application. Version 2.16.0 contains a fix for the issue.
CVSS Score: 8.6 (HIGH)
CWE: CWE-23
References: https://github.com/Tautulli/Tautulli/commit/47566128e2e5dde98980d59b7a51b98173bc0b40; https://github.com/Tautulli/Tautulli/security/advisories/GHSA-8g4r-8f3f-hghp
CVE: CVE-2025-58761
Published: 2025-09-09
Description: Tautulli is a Python based monitoring and tracking tool for Plex Media Server. The `real_pms_image_proxy` endpoint in Tautulli v2.15.3 and prior is vulnerable to path traversal, allowing unauthenticated attackers to read arbitrary files from the application server's filesystem. The `real_pms_image_proxy` is used to fetch an image directly from the backing Plex Media Server. The image to be fetched is specified through an `img` URL parameter, which can either be a URL or a file path. There is some validation ensuring that `img` begins with the prefix `interfaces/default/images` in order to be served from the local filesystem. However this can be bypassed by passing an `img` parameter which begins with a valid prefix, and then adjoining path traversal characters in order to reach files outside of intended directories. An attacker can exfiltrate files on the application file system, including the `tautulli.db` SQLite database containing active JWT tokens, as well as the `config.ini` file which contains the hashed admin password, the JWT token secret, and the Plex Media Server token and connection details. If the password is cracked, or if a valid JWT token is present in the database, an unauthenticated attacker can escalate their privileges to obtain administrative control over the application. Version 2.16.0 contains a fix for the issue.
CVSS Score: 8.6 (HIGH)
CWE: CWE-27
References: https://github.com/Tautulli/Tautulli/commit/ec77a70aafc555e1aad0d9981f719d1200c117f1; https://github.com/Tautulli/Tautulli/security/advisories/GHSA-r732-m675-wj7w; https://github.com/Tautulli/Tautulli/security/advisories/GHSA-r732-m675-wj7w
CVE: CVE-2025-58762
Published: 2025-09-09
Description: Tautulli is a Python based monitoring and tracking tool for Plex Media Server. In Tautulli v2.15.3 and earlier, an attacker with administrative access can use the `pms_image_proxy` endpoint to write arbitrary python scripts into the application filesystem. This leads to remote code execution when combined with the `Script` notification agent. If an attacker with administrative access changes the URL of the PMS to a server they control, they can then abuse the `pms_image_proxy` to obtain a file write into the application filesystem. This can be done by making a `pms_image_proxy` request with a URL in the `img` parameter and the desired file name in the `img_format` parameter. Tautulli then uses a hash of the desired metadata together with the `img_format` in order to construct a file path. Since the attacker controls `img_format` which occupies the end of the file path, and `img_format` is not sanitised, the attacker can then use path traversal characters to specify filename of their choosing. If the specified file does not exist, Tautaulli will then attempt to fetch the image from the configured PMS. Since the attacker controls the PMS, they can return arbitrary content in response to this request, which will then be written into the specified file. An attacker can write an arbitrary python script into a location on the application file system. The attacker can then make use of the built-in `Script` notification agent to run the local script, obtaining remote code execution on the application server. Users should upgrade to version 2.16.0 to receive a patch.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-73
References: https://github.com/Tautulli/Tautulli/commit/26e6b328112eb2cf35c164f981e0718f3a3d31a7; https://github.com/Tautulli/Tautulli/security/advisories/GHSA-pxhr-29gv-4j8v
CVE: CVE-2025-7635
Published: 2025-09-09
Description: Unauthenticated Telnet access vulnerability in Calix GigaCenter ONT allows root access.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE.
CVSS Score: 7.7 (HIGH)
CWE: CWE-306
References: https://fluidattacks.com/advisories/sal; https://revers3everything.com/calix-case-five-0-days-five-cves/; https://www.calix.com
CVE: CVE-2025-10159
Published: 2025-09-09
Description: An authentication bypass vulnerability allows remote attackers to gain administrative privileges on Sophos AP6 Series Wireless Access Points older than firmware version 1.7.2563 (MR7).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-620
References: https://www.sophos.com/en-us/security-advisories/sophos-sa-20250909-ap6
CVE: CVE-2025-10169
Published: 2025-09-09
Description: A weakness has been identified in UTT 1200GW up to 3.0.0-170831. Affected by this issue is some unknown functionality of the file /goform/ConfigWirelessBase. This manipulation of the argument ssid causes buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120
References: https://github.com/lin-3-start/lin-cve/blob/main/UTT%201200GW-1/UTT%201200GW-1.md; https://vuldb.com/?ctiid.323204; https://vuldb.com/?id.323204
CVE: CVE-2025-10170
Published: 2025-09-09
Description: A security vulnerability has been detected in UTT 1200GW up to 3.0.0-170831. This affects the function sub_4B48F8 of the file /goform/formApLbConfig. Such manipulation of the argument loadBalanceNameOld leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120
References: https://github.com/lin-3-start/lin-cve/blob/main/UTT%201200GW-2/UTT%201200GW-2.md; https://vuldb.com/?ctiid.323205; https://vuldb.com/?id.323205
CVE: CVE-2025-23342
Published: 2025-09-09
Description: The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to a privileged account . A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure and data tampering.
CVSS Score: 8.2 (HIGH)
CWE: CWE-522
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23342; https://nvidia.custhelp.com/app/answers/detail/a_id/5696; https://www.cve.org/CVERecord?id=CVE-2025-23342
CVE: CVE-2025-23343
Published: 2025-09-09
Description: The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to write files to restricted components. A successful exploit of this vulnerability may lead to information disclosure, denial of service, and data tampering.
CVSS Score: 7.6 (HIGH)
CWE: CWE-22
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23343; https://nvidia.custhelp.com/app/answers/detail/a_id/5696; https://www.cve.org/CVERecord?id=CVE-2025-23343
CVE: CVE-2025-23344
Published: 2025-09-09
Description: The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to run code on the platform host as a non-privileged user. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure and data tampering.
CVSS Score: 7.3 (HIGH)
CWE: CWE-78
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23344; https://nvidia.custhelp.com/app/answers/detail/a_id/5696; https://www.cve.org/CVERecord?id=CVE-2025-23344
CVE: CVE-2025-34176
Published: 2025-09-09
Description: In pfSense CE /suricata/suricata_ip_reputation.php, the value of the iplist parameter is not sanitized of directory traversal-related strings/characters. This value is directly used in a file existence check operation. While the contents of the file cannot be read, the server reveals whether the file exists, which enables an attacker to enumerate files on the target. The attacker must be authenticated with at least "WebCfg - Services: suricata package" permissions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/pfsense/FreeBSD-ports/commit/97852ccfd201b24ee542be30af81272485fde0b4; https://redmine.pfsense.org/issues/16414; https://www.vulncheck.com/advisories/netgate-pf-sense-ce-suricata-directory-traversal-information-disclosure
CVE: CVE-2025-34177
Published: 2025-09-09
Description: In pfSense CE /suricata/suricata_flow_stream.php, the value of the policy_name parameter is not sanitized of HTML-related strings/characters before being directly displayed. This can result in stored cross-site scripting. The attacker must be authenticated with at least "WebCfg - Services: suricata package" permissions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pfsense/FreeBSD-ports/commit/97852ccfd201b24ee542be30af81272485fde0b4; https://redmine.pfsense.org/issues/16414; https://www.vulncheck.com/advisories/netgate-pf-sense-ce-suricata-stored-xss
CVE: CVE-2025-34178
Published: 2025-09-09
Description: In pfSense CE /suricata/suricata_app_parsers.php, the value of the policy_name parameter is not sanitized of HTML-related strings/characters before being directly displayed. This can result in stored cross-site scripting. The attacker must be authenticated with at least "WebCfg - Services: suricata package" permissions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pfsense/FreeBSD-ports/commit/97852ccfd201b24ee542be30af81272485fde0b4; https://redmine.pfsense.org/issues/16414; https://www.vulncheck.com/advisories/netgate-pf-sense-ce-suricata-package-stored-xss
CVE: CVE-2025-43491
Published: 2025-09-09
Description: A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-99
References: https://support.hp.com/us-en/document/ish_12[PII_REDACTED]9615-16/hpsbpy04048
CVE: CVE-2025-44593
Published: 2025-09-09
Description: Halo prior to 2.20.13 allows bypassing file type detection and uploading malicious files such as .exe and .html files. Specifically, .html files can trigger stored XSS vulnerabilities. This vulnerability is fixed in 2.20.13
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://meadow-horn-b94.notion.site/halo-File-Upload-Vulnerability-14c42bd5b11880d58e11cd976f8e9d4f
CVE: CVE-2025-44595
Published: 2025-09-09
Description: Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archives/{name}.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://meadow-horn-b94.notion.site/halo-xss-11842bd5b118808ba6f2c199a65bb42d
CVE: CVE-2025-54083
Published: 2025-09-09
Description: Insecure Storage of Sensitive Information vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows admin access to the web interface.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE.
CWE: CWE-922
References: https://fluidattacks.com/advisories/rocola; https://revers3everything.com/calix-case-five-0-days-five-cves/; https://www.calix.com
CVE: CVE-2025-54084
Published: 2025-09-09
Description: OS Command ('OS Command Injection') vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows authenticated attackers with 'super' user credentials to execute arbitrary OS commands through improper input validation, potentially leading to full system compromise.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE.
CWE: CWE-78
References: https://fluidattacks.com/advisories/bacalao; https://revers3everything.com/calix-case-five-0-days-five-cves/; https://www.calix.com