deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-66909
Published: 2025-12-19
Description: Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an image decompression bomb denial of service vulnerability. The ExtendedOpenCVImage class in ai/djl/opencv/ExtendedOpenCVImage.java loads images using OpenCV's imread() function without validating dimensions or pixel count before decompression. An attacker can upload a specially crafted compressed image file (e.g., PNG) that is small when compressed but expands to gigabytes of memory when loaded. This causes immediate memory exhaustion, OutOfMemoryError, and service crash. No authentication is required if the OCR service is publicly accessible. Multiple requests can completely deny service availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-409
References: https://github.com/Xzzz111/public_cve_report/blob/main/CVE-2025-66909_report.md; https://github.com/turms-im/turms; https://github.com/turms-im/turms/blob/develop/turms-ai-serving/src/main/java/ai/djl/opencv/ExtendedOpenCVImage.java#L37
CVE: CVE-2025-66910
Published: 2025-12-19
Description: Turms Server v0.10.0-SNAPSHOT and earlier contains a plaintext password storage vulnerability in the administrator authentication system. The BaseAdminService class caches administrator passwords in plaintext within AdminInfo objects to optimize authentication performance. Upon successful login, raw passwords are stored unencrypted in memory in the rawPassword field. Attackers with local system access can extract these passwords through memory dumps, heap analysis, or debugger attachment, bypassing bcrypt protection.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-256, CWE-532
References: https://github.com/Xzzz111/public_cve_report/blob/main/CVE-2025-66910_report.md; https://github.com/turms-im/turms; https://github.com/turms-im/turms/blob/develop/turms-server-common/src/main/java/im/turms/server/common/domain/admin/bo/AdminInfo.java#L34
CVE: CVE-2025-66911
Published: 2025-12-19
Description: Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest() method in UserServiceController.java allows any authenticated user to query the online status, device information, and login timestamps of arbitrary users without proper authorization checks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284, CWE-639
References: https://github.com/Xzzz111/public_cve_report/blob/main/CVE-2025-66911_report.md; https://github.com/turms-im/turms; https://github.com/turms-im/turms/blob/develop/turms-service/src/main/java/im/turms/service/domain/user/access/servicerequest/controller/UserServiceController.java#L239
CVE: CVE-2025-14953
Published: 2025-12-19
Description: A flaw has been found in Open5GS up to 2.7.5. This impacts the function ogs_pfcp_handle_create_pdr in the library lib/pfcp/handler.c of the component FAR-ID Handler. Executing a manipulation can lead to null pointer dereference. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is said to be difficult. The exploit has been published and may be used. This patch is called 93a9fd98a8baa94289be3b982028201de4534e32. It is advisable to implement a patch to correct this issue.
CVSS Score: 3.1 (LOW)
CWE: CWE-404, CWE-476
References: https://github.com/open5gs/open5gs/; https://github.com/open5gs/open5gs/commit/93a9fd98a8baa94289be3b982028201de4534e32; https://github.com/open5gs/open5gs/issues/4179
CVE: CVE-2025-14954
Published: 2025-12-19
Description: A vulnerability has been found in Open5GS up to 2.7.6. Affected is the function ogs_pfcp_pdr_find_or_add/ogs_pfcp_far_find_or_add/ogs_pfcp_urr_find_or_add/ogs_pfcp_qer_find_or_add in the library lib/pfcp/context.c of the component QER/FAR/URR/PDR. The manipulation leads to reachable assertion. It is possible to initiate the attack remotely. The attack's complexity is rated as high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 442369dcd964f03d95429a6a01a57ed21f7779b7. Applying a patch is the recommended action to fix this issue.
CVSS Score: 3.7 (LOW)
CWE: CWE-617
References: https://github.com/open5gs/open5gs/; https://github.com/open5gs/open5gs/commit/442369dcd964f03d95429a6a01a57ed21f7779b7; https://github.com/open5gs/open5gs/issues/4181
CVE: CVE-2025-34433
Published: 2025-12-19
Description: AVideo versions 14.3.1 prior to 20.1 contain an unauthenticated remote code execution vulnerability caused by predictable generation of an installation salt using PHP uniqid(). The installation timestamp is exposed via a public endpoint, and a derived hash identifier is accessible through unauthenticated API responses, allowing attackers to brute-force the remaining entropy. The recovered salt can then be used to encrypt a malicious payload supplied to a notification API endpoint that evaluates attacker-controlled input, resulting in arbitrary code execution as the web server user.
CWE: CWE-94
References: https://chocapikk.com/posts/2025/avideo-security-vulnerabilities/; https://github.com/WWBN/AVideo/commit/4a53ab2; https://github.com/WWBN/AVideo/commit/a2bdbff
CVE: CVE-2025-53922
Published: 2025-12-19
Description: Galette is a membership management web application for non profit organizations. Starting in version 1.1.4 and prior to version 1.2.0, a user who is logged in as group manager may bypass intended restrictions on Contributions and Transactions. Version 1.2.0 fixes the issue.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-863
References: https://github.com/galette/galette/security/advisories/GHSA-5jp7-5c38-3pv6
CVE: CVE-2025-66905
Published: 2025-12-19
Description: The Takes web framework's TkFiles take thru 2.0-SNAPSHOT fails to canonicalize HTTP request paths before resolving them against the filesystem. A remote attacker can include ../ sequences in the request path to escape the configured base directory and read arbitrary files from the host system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/Xzzz111/public_cve_report/blob/main/CVE-2025-66905_report.md; https://github.com/yegor256/takes
CVE: CVE-2025-66906
Published: 2025-12-19
Description: Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://github.com/Xzzz111/public_cve_report/blob/main/CVE-2025-66906_report.md; https://github.com/turms-im/turms; https://github.com/Xzzz111/public_cve_report/blob/main/CVE-2025-66906_report.md
CVE: CVE-2025-67043
Published: 2025-12-19
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-67038. Reason: This record is a reservation duplicate of CVE-2025-67038. Notes: All CVE users should reference CVE-2025-67038 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2025-67044
Published: 2025-12-19
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-67035. Reason: This record is a reservation duplicate of CVE-2025-67035. Notes: All CVE users should reference CVE-2025-67035 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2025-67045
Published: 2025-12-19
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-67041. Reason: This record is a reservation duplicate of CVE-2025-67041. Notes: All CVE users should reference CVE-2025-67041 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2025-67046
Published: 2025-12-19
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-67037. Reason: This record is a reservation duplicate of CVE-2025-67037. Notes: All CVE users should reference CVE-2025-67037 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2025-67047
Published: 2025-12-19
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-67036. Reason: This record is a reservation duplicate of CVE-2025-67036. Notes: All CVE users should reference CVE-2025-67036 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2025-67048
Published: 2025-12-19
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-67039. Reason: This record is a reservation duplicate of CVE-2025-67039. Notes: All CVE users should reference CVE-2025-67039 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2025-67442
Published: 2025-12-19
Description: EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export lab files. This interface lacks effective input validation and filtering when processing file path parameters submitted by users.
CVSS Score: 7.6 (HIGH)
CWE: CWE-22
References: https://github.com/XunMInt/cve/blob/main/EVE-NG_20251207.md
CVE: CVE-2023-30971
Published: 2025-12-19
Description: Gotham Gaia application was found to be exposing multiple unauthenticated endpoints.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-592
References: https://palantir.safebase.us/?tcuUid=4d833960-b5a8-4750-abef-9c447fcd89fb
CVE: CVE-2024-49587
Published: 2025-12-19
Description: Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed users that did not have any permission to hit glutton backend directly and read/update/delete data. The affected service has been patched and automatically deployed to all Apollo-managed Gotham Instances
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-305
References: https://palantir.safebase.us/?tcuUid=95e2d805-dd2f-4544-b164-e61100f47b11
CVE: CVE-2025-14809
Published: 2025-12-19
Description: ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.
CVSS Score: 7.4 (HIGH)
CWE: CWE-1021
References: https://arc.net/security/bulletins#cve-2025-14809-address-bar-spoofing-risk-navigation-trigger-uri-confusion-on-arcsearch-android
CVE: CVE-2025-14812
Published: 2025-12-19
Description: ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being shown after an iframe-triggered URI-scheme navigation, increasing spoofing risk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1021
References: https://arc.net/security/bulletins#cve-2025-14812-address-bar-spoofing-risk-iframe-triggered-uri-navigation-on-arc-search-ios
CVE: CVE-2025-14955
Published: 2025-12-19
Description: A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ogs_pfcp_handle_create_pdr in the library lib/pfcp/handler.c of the component PFCP. The manipulation results in improper initialization. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitation appears to be difficult. The exploit has been made public and could be used. The patch is identified as 773117aa5472af26fc9f80e608d3386504c3bdb7. It is best practice to apply a patch to resolve this issue.
CVSS Score: 3.7 (LOW)
CWE: CWE-665
References: https://github.com/open5gs/open5gs/; https://github.com/open5gs/open5gs/commit/773117aa5472af26fc9f80e608d3386504c3bdb7; https://github.com/open5gs/open5gs/issues/4182
CVE: CVE-2025-14956
Published: 2025-12-19
Description: A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of the file src/wasm/wasm-binary.cpp. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. Patch name: 4f52bff8c4075b5630422f902dd92a0af2c9f398. It is recommended to apply a patch to fix this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-122, CWE-125
References: https://github.com/WebAssembly/binaryen/; https://github.com/WebAssembly/binaryen/commit/4f52bff8c4075b5630422f902dd92a0af2c9f398; https://github.com/WebAssembly/binaryen/issues/8089
CVE: CVE-2025-14957
Published: 2025-12-19
Description: A vulnerability was identified in WebAssembly Binaryen up to 125. This affects the function IRBuilder::makeLocalGet/IRBuilder::makeLocalSet/IRBuilder::makeLocalTee of the file src/wasm/wasm-ir-builder.cpp of the component IRBuilder. Such manipulation of the argument Index leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly available and might be used. The name of the patch is 6fb2b917a79578ab44cf3b900a6da4c27251e0d4. Applying a patch is advised to resolve this issue.
CVSS Score: 3.3 (LOW)
CWE: CWE-404, CWE-476, CWE-476
References: https://github.com/WebAssembly/binaryen/; https://github.com/WebAssembly/binaryen/commit/6fb2b917a79578ab44cf3b900a6da4c27251e0d4; https://github.com/WebAssembly/binaryen/issues/8090
CVE: CVE-2025-58052
Published: 2025-12-19
Description: Galette is a membership management web application for non profit organizations. Starting in version 0.9.6 and prior to version 1.2.0, attackers with group manager role can bypass intended restrictions allowing unauthorized access and changes despite role-based controls. Since it requires privileged access initially, exploitation is restricted to malicious insiders or compromised group managers accounts. Version 1.2.0 fixes the issue.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: https://github.com/galette/galette/security/advisories/GHSA-gp9g-gf56-fcxx
CVE: CVE-2025-58053
Published: 2025-12-19
Description: Galette is a membership management web application for non profit organizations. Prior to version 1.2.0, while updating any existing account with a self forged POST request, one can gain higher privileges. Version 1.2.0 fixes the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://github.com/galette/galette/security/advisories/GHSA-r7x8-6r56-498r
CVE: CVE-2025-63665
Published: 2025-12-19
Description: An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://gist.github.com/p80n-sec/e5eefcef155e9dd14aaaaa49f9f94cd1; https://github.com/p80n-sec/Vulnerability-Research/blob/main/CVE-2025-63665/CVE-2025-63665.md
CVE: CVE-2025-65035
Published: 2025-12-19
Description: pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. Prior to version 1.1.2, in certain conditions (database write access must first be obtained through another vulnerability or misconfiguration), user-controlled data is stored insecurely in the database via computergroup, and is later unserialized on every page load, allowing arbitrary PHP object instantiation. Version 1.1.2 fixes the issue.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-502
References: https://github.com/pluginsGLPI/databaseinventory/blob/1.1.2/CHANGELOG.md#112---2025-11-25; https://github.com/pluginsGLPI/databaseinventory/commit/08c7055d2c5fc744cb092d7d56a608e359c56f1a; https://github.com/pluginsGLPI/databaseinventory/security/advisories/GHSA-xc3r-32rx-3j4j
CVE: CVE-2025-66580
Published: 2025-12-19
Description: Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stored Cross-Site Scripting (XSS) vulnerability exists in versions prior to 0.11.1 in the Mermaid diagram rendering component. The application allows the execution of arbitrary JavaScript via `javascript:`. An attacker can exploit this to inject a malicious Model Context Protocol (MCP) server configuration, leading to Remote Code Execution (RCE) on the victim's machine when the node is clicked. Version 0.11.1 fixes the issue.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-94, CWE-79
References: https://github.com/OpenAgentPlatform/Dive/security/advisories/GHSA-xv8m-365j-x6h2; https://github.com/OpenAgentPlatform/Dive/security/advisories/GHSA-xv8m-365j-x6h2
CVE: CVE-2025-68457
Published: 2025-12-19
Description: Orejime is a consent manager that focuses on accessibility. On HTML elements handled by Orejime prior to version 2.3.2, one could run malicious code by embedding `javascript:` code within data attributes. When consenting to the related purpose, Orejime would turn data attributes into unprefixed ones (i.e. `data-href` into `href`), thus executing the code. This shouldn't have any impact on most setups, as elements handled by Orejime are generally hardcoded. The problem would only arise if somebody could inject HTML code within pages. The problem has been patched in version 2.3.2. As a workaround, the problem can be fixed outside of Orejime by sanitizing attributes which could contain executable code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/boscop-fr/orejime/issues/142; https://github.com/boscop-fr/orejime/pull/143; https://github.com/boscop-fr/orejime/security/advisories/GHSA-72mh-hgpm-6384
CVE: CVE-2025-68477
Published: 2025-12-19
Description: Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, Langflow provides an API Request component that can issue arbitrary HTTP requests within a flow. This component takes a user-supplied URL, performs only normalization and basic format checks, and then sends the request using a server-side httpx client. It does not block private IP ranges (127[.]0[.]0[.]1, the 10/172/192 ranges) or cloud metadata endpoints (169[.]254[.]169[.]254), and it returns the response body as the result. Because the flow execution endpoints (/api/v1/run, /api/v1/run/advanced) can be invoked with just an API key, if an attacker can control the API Request URL in a flow, non-blind SSRF is possible—accessing internal resources from the server’s network context. This enables requests to, and collection of responses from, internal administrative endpoints, metadata services, and internal databases/services, leading to information disclosure and providing a foothold for further attacks. Version 1.7.0 contains a patch for this issue.
CVSS Score: 7.7 (HIGH)
CWE: CWE-918
References: https://github.com/langflow-ai/langflow/security/advisories/GHSA-5993-7p27-66g5; https://github.com/langflow-ai/langflow/security/advisories/GHSA-5993-7p27-66g5
CVE: CVE-2025-14958
Published: 2025-12-19
Description: A security flaw has been discovered in floooh sokol up to 33e2271c431bf21de001e972f72da17a984da932. This vulnerability affects the function _sg_pipeline_common_init in the library sokol_gfx.h. Performing manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit has been released to the public and may be exploited. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The patch is named 33e2271c431bf21de001e972f72da17a984da932. It is suggested to install a patch to address this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-122, CWE-787
References: https://github.com/floooh/sokol/issues/1406; https://github.com/floooh/sokol/issues/1406#issuecomment[PII_REDACTED]; https://github.com/oneafter/1212/blob/main/hbf1
CVE: CVE-2025-14959
Published: 2025-12-19
Description: A weakness has been identified in code-projects Simple Stock System 1.0. This issue affects some unknown processing of the file /market/signup.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/InorSogeih/Inor/issues/1; https://vuldb.com/?ctiid.337595
CVE: CVE-2025-14960
Published: 2025-12-19
Description: A security vulnerability has been detected in code-projects Simple Blood Donor Management System 1.0. Impacted is an unknown function of the file /editeddonor.php. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/lei-loveling/CVE/issues/1; https://vuldb.com/?ctiid.337596
CVE: CVE-2025-68430
Published: 2025-12-19
Description: CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.8.1 through 2.52.0, an attacker with an account on a CVAT instance is able to retrieve the contents of any file system directory accessible to the CVAT server. The exposed information is names of contained files and subdirectories. The contents of files are not accessible. Version 2.53.0 contains a patch. No known workarounds are available.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-24
References: https://github.com/cvat-ai/cvat/commit/2c24ef0c3f8fd94f6c71cff4eafcf11bfcaa5f91; https://github.com/cvat-ai/cvat/security/advisories/GHSA-3g7v-xjh7-xmqx
CVE: CVE-2025-68478
Published: 2025-12-19
Description: Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary path is specified in the request body's `fs_path`, the server serializes the Flow object into JSON and creates/overwrites a file at that path. There is no path restriction, normalization, or allowed directory enforcement, so absolute paths (e.g., /etc/poc.txt) are interpreted as is. Version 1.7.0 fixes the issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-73, CWE-610
References: https://github.com/langflow-ai/langflow/security/advisories/GHSA-f43r-cc68-gpx4; https://github.com/langflow-ai/langflow/security/advisories/GHSA-f43r-cc68-gpx4
CVE: CVE-2025-14961
Published: 2025-12-19
Description: A vulnerability was detected in code-projects Simple Blood Donor Management System 1.0. The affected element is an unknown function of the file /editedcampaign.php. The manipulation of the argument campaignname results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/lei-loveling/CVE/issues/2; https://vuldb.com/?ctiid.337597
CVE: CVE-2025-14962
Published: 2025-12-19
Description: A flaw has been found in code-projects Simple Stock System 1.0. The impacted element is an unknown function of the file /market/chatuser.php. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94
References: https://code-projects.org/; https://github.com/wyxclcw/CVE/issues/1; https://vuldb.com/?ctiid.337598
CVE: CVE-2025-14964
Published: 2025-12-19
Description: A vulnerability has been found in TOTOLINK T10 4.1.8cu.5083_B20200521. This affects the function sprintf of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument loginAuthUrl leads to stack-based buffer overflow. The attack may be performed from remote.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-121
References: https://github.com/JackWesleyy/CVE/blob/main/TOTOLINK_T10_BOC.md; https://vuldb.com/?ctiid.337599; https://vuldb.com/?id.337599