deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-20335
Published: 2025-09-03
Description: A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to write arbitrary files on an affected device.

This vulnerability is due to a lack of proper authentication controls. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to perform arbitrary file writes to specific directories in the underlying operating system.
Note: To exploit this vulnerability, Web Access must be enabled on the phone. Web Access is disabled by default.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-write-g3kcC5Df
CVE: CVE-2025-20336
Published: 2025-09-03
Description: A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device.

This vulnerability exists because the product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. An attacker could exploit this vulnerability by sending a crafted packet to the IP address of a device that has Web Access enabled. A successful exploit could allow the attacker to access sensitive information from the device.
Note: To exploit this vulnerability, Web Access must be enabled on the phone. Web Access is disabled by default.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-write-g3kcC5Df
CVE: CVE-2025-45805
Published: 2025-09-03
Description: In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://github.com/mhsinj/CVE-2025-45805; https://github.com/mohammed-alsaqqaf/CVE-2025-45805; https://phpgurukul.com/doctor-appointment-management-system-using-php-and-mysql
CVE: CVE-2025-52494
Published: 2025-09-03
Description: Adacore Ada Web Server (AWS) before 25.2 is vulnerable to a denial-of-service (DoS) condition due to improper handling of SSL handshakes during connection initialization. When a client initiates an HTTPS connection, the server performs the SSL handshake before assigning the connection to a processing slot. However, there is no specific timeout set for this phase, and the server uses the default socket timeout, which is effectively infinite. An attacker can exploit this by sending a malformed TLS ClientHello message with incorrect length values. This causes the server to wait indefinitely for data that never arrives, blocking the worker thread (Line) handling the connection. By opening multiple such connections, up to the server's maximum limit, the attacker can exhaust all available working threads, preventing the server from handling new, legitimate requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-770
References: https://adacore.com; https://docs.adacore.com/corp/security-advisories/SEC.AWS-0095-v1.pdf
CVE: CVE-2025-56752
Published: 2025-09-03
Description: A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to /user.cgi.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-287
References: https://github.com/TNCX-byte/Vulnerability_Research/blob/main/CVE-2025-56752/README.md
CVE: CVE-2025-56803
Published: 2025-09-03
Description: Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. An attacker can execute arbitrary OS commands by setting a crafted build field in the plugin's manifest.json. This field is passed to child_process.exec without validation, leading to possible RCE. NOTE: this is disputed by the Supplier because the behavior only allows a local user to attack himself via a local plugin. The local build procedure, which is essential to the attack, is not executed for plugins shared to the Figma Community.
CVSS Score: 8.4 (HIGH)
CWE: CWE-78
References: https://github.com/shinyColumn/CVE-2025-56803; https://shinycolumn.notion.site/figma-command-injection
CVE: CVE-2025-36193
Published: 2025-09-03
Description: IBM Transformation Advisor 2.0.1 through 4.3.1 incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBM Transformation Advisor Operator Catalog image.
CVSS Score: 8.4 (HIGH)
CWE: CWE-732
References: https://www.ibm.com/support/pages/node/7243632
CVE: CVE-2025-9923
Published: 2025-09-03
Description: A flaw has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /index.php. Executing manipulation of the argument page can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94
References: https://github.com/zzb1388/cve/issues/67; https://vuldb.com/?ctiid.322325; https://vuldb.com/?id.322325
CVE: CVE-2025-9924
Published: 2025-09-03
Description: A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /enquiry.php. The manipulation of the argument t2 leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/JunGu-W/cve/issues/7; https://vuldb.com/?ctiid.322326; https://vuldb.com/?id.322326
CVE: CVE-2025-53690
Published: 2025-09-03
Description: Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-502
References: https://cloud.google.com/blog/topics/threat-intelligence/viewstate-deserialization-zero-day-vulnerability; https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003865; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-53690
CVE: CVE-2025-55162
Published: 2025-09-03
Description: Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In versions below 1.32.10 and 1.33.0 through 1.33.6, 1.34.0 through 1.34.4 and 1.35.0, insufficient Session Expiration in the Envoy OAuth2 filter leads to failed logout operations. When configured with __Secure- or __Host- prefixed cookie names, the filter fails to append the required Secure attribute to the Set-Cookie header during deletion. Modern browsers ignore this invalid request, causing the session cookie to persist. This allows a user to remain logged in after they believe they have logged out, creating a session hijacking risk on shared computers. The current implementation iterates through the configured cookie names to generate deletion headers but does not check for these prefixes. This failure to properly construct the deletion header means the user's session cookies are never removed by the browser, leaving the session active and allowing the next user of the same browser to gain unauthorized access to the original user's account and data. This is fixed in versions 1.32.10, 1.33.7, 1.34.5 and 1.35.1.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-613
References: https://github.com/envoyproxy/envoy/releases/tag/v1.35.1; https://github.com/envoyproxy/envoy/security/advisories/GHSA-95j4-hw7f-v2rh; https://github.com/envoyproxy/envoy/security/advisories/GHSA-95j4-hw7f-v2rh
CVE: CVE-2025-56139
Published: 2025-09-03
Description: LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replaces the original URL in a post or comment before publishing. As a result, the stale preview remains visible while the clickable link points to a different URL, which can be malicious. This UI misrepresentation enables attackers to deceive users by displaying trusted previews for harmful links, facilitating phishing attacks and user confusion.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-449
References: https://hdhrmi.blogspot.com/2025/07/aiman-al-hadhrami-linkedin-vulnerability.html; https://hdhrmi.blogspot.com/2025/09/link-preview-mismatch-cve-2025-56139.html
CVE: CVE-2025-9365
Published: 2025-09-03
Description: Fuji Electric FRENIC-Loader 4 is vulnerable to a deserialization of untrusted data when importing a file through a specified window, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://felib.fujielectric.co.jp/en/M10009/M20029/document_detail/b2f23970-e560-4961-8013-fc72be43681a; https://www.cisa.gov/news-events/ics-advisories/icsa-25-245-02
CVE: CVE-2025-9925
Published: 2025-09-03
Description: A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of the file /detail.php. The manipulation of the argument pid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/JunGu-W/cve/issues/8; https://vuldb.com/?ctiid.322327; https://vuldb.com/?id.322327
CVE: CVE-2025-9926
Published: 2025-09-03
Description: A vulnerability was determined in projectworlds Travel Management System 1.0. Impacted is an unknown function of the file /viewsubcategory.php. This manipulation of the argument t1 causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/JunGu-W/cve/issues/9; https://vuldb.com/?ctiid.322328; https://vuldb.com/?id.322328
CVE: CVE-2025-55747
Published: 2025-09-03
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions  6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. This is fixed in version 16.10.7.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-23
References: https://github.com/xwiki/xwiki-platform/commit/9e7b4c03f2143978d891109a17159f73d4cdd318#diff-45ea9c87d5fb68cd5db0da7f78cf25e76f1325f5fe56e21618b21786fc706236R80-R81; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-qww7-89xh-x7m7; https://jira.xwiki.org/browse/XWIKI-19350
CVE: CVE-2025-55748
Published: 2025-09-03
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-2 through 16.10.6, configuration files are accessible through jsx and sx endpoints. It's possible to access and read configuration files by using URLs such as `http://localhost:8080/bin/ssx/Main/WebHome?resource=../../WEB-INF/xwiki.cfg&minify=false`. This is fixed in version 16.10.7.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23
References: https://github.com/xwiki/xwiki-platform/commit/9e7b4c03f2143978d891109a17159f73d4cdd318#diff-ee78930a9ac5ea586179fe8ab88a5fd58e369d175927d1e88a0b4dbc3ebcbf1eR62; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-m63c-3rmg-r2cf; https://jira.xwiki.org/browse/XWIKI-23109
CVE: CVE-2025-57833
Published: 2025-09-03
Description: An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().
CVSS Score: 7.1 (HIGH)
CWE: CWE-89
References: https://docs.djangoproject.com/en/dev/releases/security/; https://groups.google.com/g/django-announce; https://medium.com/@EyalSec/django-unauthenticated-0-click-rce-and-sql-injection-using-default-configuration-059964f3f898
CVE: CVE-2025-58056
Published: 2025-09-03
Description: Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In versions 4.1.124.Final, and 4.2.0.Alpha3 through 4.2.4.Final, Netty incorrectly accepts standalone newline characters (LF) as a chunk-size line terminator, regardless of a preceding carriage return (CR), instead of requiring CRLF per HTTP/1.1 standards. When combined with reverse proxies that parse LF differently (treating it as part of the chunk extension), attackers can craft requests that the proxy sees as one request but Netty processes as two, enabling request smuggling attacks. This is fixed in versions 4.1.125.Final and 4.2.5.Final.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://datatracker.ietf.org/doc/html/rfc9112#name-chunked-transfer-coding; https://github.com/JLLeitschuh/unCVEed/issues/1; https://github.com/netty/netty/commit/edb55fd8e0a3bcbd85881e423464f585183d1284
CVE: CVE-2025-8268
Published: 2025-09-03
Description: The AI Engine plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability check on the rest_list and delete_files functions in all versions up to, and including, 2.9.5. This makes it possible for unauthenticated attackers to list and delete files uploaded by other users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.5/classes/modules/files.php#L518; https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.5/classes/modules/files.php#L645; https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.5/classes/modules/files.php#L664
CVE: CVE-2025-9927
Published: 2025-09-03
Description: A vulnerability was identified in projectworlds Travel Management System 1.0. The affected element is an unknown function of the file /viewpackage.php. Such manipulation of the argument t1 leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/JunGu-W/cve/issues/10; https://vuldb.com/?ctiid.322329; https://vuldb.com/?id.322329
CVE: CVE-2025-9928
Published: 2025-09-03
Description: A security flaw has been discovered in projectworlds Travel Management System 1.0. The impacted element is an unknown function of the file /viewcategory.php. Performing manipulation of the argument t1 results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/JunGu-W/cve/issues/11; https://vuldb.com/?ctiid.322330; https://vuldb.com/?id.322330
CVE: CVE-2024-13071
Published: 2025-09-04
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft e-Mutabakat allows Cross-Site Scripting (XSS).This issue affects e-Mutabakat: from 2.02.05 before v2.02.06.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-25-0207
CVE: CVE-2024-13073
Published: 2025-09-04
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft TaskPano allows Cross-Site Scripting (XSS).This issue affects TaskPano: s1.06.04.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-25-0208
CVE: CVE-2024-56189
Published: 2025-09-04
Description: In SAEMM_DiscloseMsId of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure post authentication with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2025-04-01
CVE: CVE-2024-56190
Published: 2025-09-04
Description: In wl_update_hidden_ap_ie() of wl_cfgscan.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://source.android.com/security/bulletin/pixel/2025-04-01
CVE: CVE-2025-2411
Published: 2025-09-04
Description: Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano allows Authentication Bypass.This issue affects TaskPano: from s1.06.04 before v1.06.06.
CVSS Score: 8.6 (HIGH)
CWE: CWE-307
References: https://www.usom.gov.tr/bildirim/tr-25-0208
CVE: CVE-2025-2417
Published: 2025-09-04
Description: Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft e-Mutabakat allows Authentication Bypass.This issue affects e-Mutabakat: from 2.02.06 before v2.02.06.
CVSS Score: 8.6 (HIGH)
CWE: CWE-307
References: https://www.usom.gov.tr/bildirim/tr-25-0207
CVE: CVE-2025-36887
Published: 2025-09-04
Description: In wl_cfgscan_update_v3_schedscan_results() of  wl_cfgscan.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2025-06-01
CVE: CVE-2025-36893
Published: 2025-09-04
Description: In ReadTachyonCommands of gxp_main_actor.cc, there is a possible information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/pixel/2025-09-01
CVE: CVE-2025-36894
Published: 2025-09-04
Description: In TBD of TBD, there is a possible DoS due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://source.android.com/security/bulletin/pixel/2025-09-01
CVE: CVE-2025-36896
Published: 2025-09-04
Description: WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-394765106.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://source.android.com/security/bulletin/pixel/2025-09-01
CVE: CVE-2025-36897
Published: 2025-09-04
Description: In unknown of cd_CnMsgCodecUserApi.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2025-09-01
CVE: CVE-2025-36898
Published: 2025-09-04
Description: There is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://source.android.com/security/bulletin/pixel/2025-09-01
CVE: CVE-2025-36899
Published: 2025-09-04
Description: There is a possible escalation of privilege due to test/debugging code left in a production build. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-489
References: https://source.android.com/security/bulletin/pixel/2025-09-01
CVE: CVE-2025-36900
Published: 2025-09-04
Description: In lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190
References: https://source.android.com/security/bulletin/pixel/2025-09-01
CVE: CVE-2025-36901
Published: 2025-09-04
Description: WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396462223.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/pixel/2025-09-01
CVE: CVE-2025-36902
Published: 2025-09-04
Description: In syna_cdev_ioctl_store_pid() of syna_tcm2_sysfs.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-122
References: https://source.android.com/security/bulletin/pixel/2025-09-01
CVE: CVE-2025-36903
Published: 2025-09-04
Description: In lwis_io_buffer_write, there is a possible OOB read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2025-09-01
CVE: CVE-2025-36904
Published: 2025-09-04
Description: WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396458384.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://source.android.com/security/bulletin/pixel/2025-09-01
CVE: CVE-2025-36905
Published: 2025-09-04
Description: In gxp_mapping_create of gxp_mapping.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://source.android.com/security/bulletin/pixel/2025-09-01
CVE: CVE-2025-36906
Published: 2025-09-04
Description: In ConvertReductionOp of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://source.android.com/security/bulletin/pixel/2025-09-01
CVE: CVE-2025-36907
Published: 2025-09-04
Description: In draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege via USB fastboot, after a bootloader unlock, with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.3 (HIGH)
CWE: CWE-122, CWE-787
References: https://source.android.com/security/bulletin/pixel/2025-09-01
CVE: CVE-2025-36908
Published: 2025-09-04
Description: In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2025-09-01
CVE: CVE-2025-43772
Published: 2025-09-04
Description: Kaleo Forms Admin in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 27, and older unsupported versions does not restrict the saving of request parameters in the portlet session, which allows remote attackers to consume system memory leading to denial-of-service (DoS) conditions via crafted HTTP request.
CWE: CWE-400
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43772