deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-27089
Published: 2025-02-19
Description: Directus is a real-time API and App dashboard for managing SQL database content. In affected versions if there are two overlapping policies for the `update` action that allow access to different fields, instead of correctly checking access permissions against the item they apply for the user is allowed to update the superset of fields allowed by any of the policies. E.g. have one policy allowing update access to `field_a` if the `id == 1` and one policy allowing update access to `field_b` if the `id == 2`. The user with both these policies is allowed to update both `field_a` and `field_b` for the items with ids `1` and `2`. Before v11, if a user was allowed to update an item they were allowed to update the fields that the single permission, that applied to that item, listed. With overlapping permissions this isn't as clear cut anymore and the union of fields might not be the fields the user is allowed to update for that specific item. The solution that this PR introduces is to evaluate the permissions for each field that the user tries to update in the validateItemAccess DB query, instead of only verifying access to the item as a whole. This is done by, instead of returning the actual field value, returning a flag that indicates if the user has access to that field. This uses the same case/when mechanism that is used for stripping out non permitted field that is at the core of the permissions engine. As a result, for every item that the access is validated for, the expected result is an item that has either 1 or null for all the "requested" fields instead of any of the actual field values. These results are not useful for anything other than verifying the field level access permissions. The final check in validateItemAccess can either fail if the number of items does not match the number of items the access is checked for (ie. the user does not have access to the item at all) or if not all of the passed in fields have access permissions for any of the returned items. This is a vulnerability that allows update access to unintended fields, potentially impacting the password field for user accounts. This has been addressed in version 11.1.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://github.com/directus/directus/releases/tag/v11.1.2; https://github.com/directus/directus/security/advisories/GHSA-99vm-5v2h-h6r6
CVE: CVE-2020-10095
Published: 2025-02-19
Description: Various Lexmark devices have CSRF that allows an attacker to modify the configuration of the device.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: http://support.lexmark.com/alerts/; https://www.lexmark.com/en_us/solutions/security//lexmark-security-advisories.html
CVE: CVE-2024-45777
Published: 2025-02-19
Description: A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue can be leveraged by an attacker to overwrite grub2's sensitive heap data, eventually leading to the circumvention of secure boot protections.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://access.redhat.com/errata/RHSA-2025:20532; https://access.redhat.com/security/cve/CVE-2024-45777; https://bugzilla.redhat.com/show_bug.cgi?id=2346343
CVE: CVE-2024-53974
Published: 2025-02-19
Description: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb24-69.html
CVE: CVE-2025-0893
Published: 2025-02-19
Description: Symantec Diagnostic Tool (SymDiag), prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25417
CVE: CVE-2025-1118
Published: 2025-02-19
Description: A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensitive information from the memory.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-501
References: https://access.redhat.com/errata/RHSA-2025:16154; https://access.redhat.com/security/cve/CVE-2025-1118; https://bugzilla.redhat.com/show_bug.cgi?id=2346137
CVE: CVE-2025-24806
Published: 2025-02-19
Description: Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal. If users are allowed to sign in via both username and email the regulation system treats these as separate login events. This leads to the regulation limitations being effectively doubled assuming an attacker using brute-force to find a user password. It's important to note that due to the effective operation of regulation where no user-facing sign of their regulation ban being visible either via timing or via API responses, it's effectively impossible to determine if a failure occurs due to a bad username password combination, or a effective ban blocking the attempt which heavily mitigates any form of brute-force. This occurs because the records and counting process for this system uses the method utilized for sign in rather than the effective username attribute. This has a minimal impact on account security, this impact is increased naturally in scenarios when there is no two-factor authentication required and weak passwords are used. This makes it a bit easier to brute-force a password. A patch for this issue has been applied to versions 4.38.19, and 4.39.0. Users are advised to upgrade. Users unable to upgrade should 1. Not heavily modify the default settings in a way that ends up with shorter or less frequent regulation bans. The default settings effectively mitigate any potential for this issue to be exploited. and 2. Disable the ability for users to login via an email address.
CWE: CWE-307
References: https://github.com/authelia/authelia/commit/d4a54189aa6563912f9427b96dcb01eacafa785c; https://github.com/authelia/authelia/security/advisories/GHSA-m5mf-3963-4x26
CVE: CVE-2020-13481
Published: 2025-02-19
Description: Certain Lexmark products through 2020-05-25 allow XSS which allows an attacker to obtain session credentials and other sensitive information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-200
References: http://support.lexmark.com/alerts/; https://publications.lexmark.com/publications/security-alerts/CVE-2020-13481.pdf
CVE: CVE-2020-35546
Published: 2025-02-19
Description: Lexmark MX6500 LW75.JD.P296 and previous devices have Incorrect Access Control via the access control settings.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284
References: http://support.lexmark.com; https://publications.lexmark.com/publications/security-alerts/CVE-2020-35546.pdf
CVE: CVE-2023-46271
Published: 2025-02-19
Description: Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ah_webui service, which listens on TCP port 3009 by default.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://extreme-networks.my.site.com/ExtrArticleDetail?an=000115354&q=CVE-2023-46271; https://extremenetworks.com; https://www.zerodayinitiative.com/advisories/ZDI-23-1766/
CVE: CVE-2023-46272
Published: 2025-02-19
Description: Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ah_auth service
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://extreme-networks.my.site.com/ExtrArticleDetail?an=000115355&q=CVE-2023-46272; https://www.zerodayinitiative.com/advisories/ZDI-23-1765/
CVE: CVE-2023-51293
Published: 2025-02-19
Description: A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Event Booking Calendar v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://packetstormsecurity.com/files/176495/PHPJabbers-Event-Booking-Calendar-4.0-Missing-Rate-Limiting.html; https://packetstorm.news/files/id/176495; https://www.phpjabbers.com/event-booking-calendar/#sectionDemo
CVE: CVE-2023-51296
Published: 2025-02-19
Description: PHPJabbers Event Booking Calendar v4.0 is vulnerable to Cross-Site Scripting (XSS) in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key" parameters which allows attackers to execute arbitrary code
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstorm.news/files/id/176485; https://www.phpjabbers.com/event-booking-calendar/#sectionDemo; http://packetstormsecurity.com/files/176485/PHPJabbers-Event-Booking-Calendar-4.0-Cross-Site-Scripting-HTML-Injection.html
CVE: CVE-2025-0624
Published: 2025-02-19
Description: A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grub_strcpy() function. During this step, it fails to consider the environment variable length when allocating the internal buffer, resulting in an out-of-bounds write. If correctly exploited, this issue may result in remote code execution through the same network segment grub is searching for the boot information, which can be used to by-pass secure boot protections.
CVSS Score: 7.6 (HIGH)
CWE: CWE-787
References: https://access.redhat.com/errata/RHSA-2025:2521; https://access.redhat.com/errata/RHSA-2025:2653; https://access.redhat.com/errata/RHSA-2025:2655
CVE: CVE-2025-0677
Published: 2025-02-19
Description: A flaw was found in grub2. When performing a symlink lookup, the grub's UFS module checks the inode's data size to allocate the internal buffer to read the file content, however, it fails to check if the symlink data size has overflown. When this occurs, grub_malloc() may be called with a smaller value than needed. When further reading the data from the disk into the buffer, the grub_ufs_lookup_symlink() function will write past the end of the allocated size. An attack can leverage this by crafting a malicious filesystem, and as a result, it will corrupt data stored in the heap, allowing for arbitrary code execution used to by-pass secure boot mechanisms.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-787
References: https://access.redhat.com/errata/RHSA-2025:16154; https://access.redhat.com/errata/RHSA-2025:6990; https://access.redhat.com/security/cve/CVE-2025-0677
CVE: CVE-2023-51297
Published: 2025-02-19
Description: A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: http://packetstormsecurity.com/files/176486/PHPJabbers-Hotel-Booking-System-4.0-Missing-Rate-Limiting.html; https://www.phpjabbers.com/hotel-booking-system/#sectionDemo
CVE: CVE-2023-51298
Published: 2025-02-19
Description: PHPJabbers Event Booking Calendar v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-1236
References: http://packetstormsecurity.com/files/176487/PHPJabbers-Event-Booking-Calendar-4.0-CSV-Injection.html; https://www.phpjabbers.com/event-booking-calendar/#sectionDemo
CVE: CVE-2023-51299
Published: 2025-02-19
Description: PHPJabbers Hotel Booking System v4.0 is vulnerable to HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstorm.news/files/id/176488; https://www.phpjabbers.com/hotel-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176488/PHPJabbers-Hotel-Booking-System-4.0-Cross-Site-Scripting-HTML-Injection.html
CVE: CVE-2023-51300
Published: 2025-02-19
Description: PHPJabbers Hotel Booking System v4.0 is vulnerable to Cross-Site Scripting (XSS) vulnerabilities in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key" parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstorm.news/files/id/176488; https://www.phpjabbers.com/hotel-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176488/PHPJabbers-Hotel-Booking-System-4.0-Cross-Site-Scripting-HTML-Injection.html
CVE: CVE-2023-51301
Published: 2025-02-19
Description: A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://packetstorm.news/files/id/176486; https://www.phpjabbers.com/hotel-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176486/PHPJabbers-Hotel-Booking-System-4.0-Missing-Rate-Limiting.html
CVE: CVE-2023-51302
Published: 2025-02-19
Description: PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: http://packetstormsecurity.com/files/176489/PHPJabbers-Hotel-Booking-System-4.0-CSV-Injection.html; https://www.phpjabbers.com/hotel-booking-system/#sectionDemo
CVE: CVE-2023-51303
Published: 2025-02-19
Description: PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstorm.news/files/id/176516; https://www.phpjabbers.com/event-ticketing-system/#sectionDemo; http://packetstormsecurity.com/files/176516/PHPJabbers-Event-Ticketing-System-1.0-Cross-Site-Scripting-HTML-Injection.html
CVE: CVE-2025-25196
Published: 2025-02-19
Description: OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA < v1.8.4 (Helm chart < openfga-0.2.22, docker < v.1.8.4) are vulnerable to authorization bypass when certain Check and ListObject calls are executed. Users on OpenFGA v1.8.4 or previous, specifically under the following conditions are affected by this authorization bypass vulnerability: 1. Calling Check API or ListObjects with a model that has a relation directly assignable to both public access AND userset with the same type. 2. A type bound public access tuple is assigned to an object. 3. userset tuple is not assigned to the same object. and 4. Check request's user field is a userset that has the same type as the type bound public access tuple's user type. Users are advised to upgrade to v1.8.5 which is backwards compatible. There are no known workarounds for this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-285
References: https://github.com/openfga/openfga/commit/0aee4f47e0c642de78831ceb27bb62b116f49588; https://github.com/openfga/openfga/security/advisories/GHSA-g4v5-6f5p-m38j
CVE: CVE-2025-27090
Published: 2025-02-19
Description: Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the implant to do so. The only impact that has been shown is the exposure of the server's IP address to a third party. This issue has been addressed in version 1.5.43 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/BishopFox/sliver/commit/0f340a25cf3d496ed870dae7da39eab4427bc16f; https://github.com/BishopFox/sliver/commit/10e245326070c6a5884a02e0790bb7e2baefb3a1; https://github.com/BishopFox/sliver/security/advisories/GHSA-fh4v-v779-4g2w
CVE: CVE-2023-51305
Published: 2025-02-19
Description: PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key" parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstorm.news/files/id/176491; https://www.phpjabbers.com/car-park-booking/#sectionDemo; http://packetstormsecurity.com/files/176491/PHPJabbers-Car-Park-Booking-System-3.0-Cross-Site-Scripting-HTML-Injection.html
CVE: CVE-2024-10339
Published: 2025-02-19
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-37359
Published: 2025-02-19
Description: The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination. (CWE-918) 



 



Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, do not validate the Host header of incoming HTTP/HTTPS requests.



 



By providing URLs to unexpected hosts or ports, attackers can make it appear that the server is sending the request, possibly bypassing access controls such as firewalls that prevent the attackers from accessing the URLs directly. The server can be used as a proxy to conduct port scanning of hosts in internal networks, use other URLs such as that can access documents on the system (using file://), or use other protocols such as gopher:// or tftp://, which may provide greater control over the contents of requests.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]5917--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Server-Side-Request-Forgery-Versions-before-10-2-0-0-and-9-3-0-9-including-8-3-x-Impacted-CVE-2024-37359
CVE: CVE-2024-37360
Published: 2025-02-19
Description: Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 



 



The software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users. (CWE-79)



 



Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.0 and 9.3.0.9, including 8.3.x, allow a malicious URL to inject content into the Analyzer plugin interface.



 




Once the malicious script is injected, the attacker can perform a variety of malicious activities. The attacker could transfer private information, such as cookies that may include session information, from the victim's machine to the attacker. The attacker could send malicious requests to a web site on behalf of the victim, which could be especially dangerous to the site if the victim has administrator privileges to manage that site.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]6893--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Improper-Neutralization-of-Input-During-Web-Page-Generation-Cross-site-Scripting-CVE-2024-37360
CVE: CVE-2024-5705
Published: 2025-02-19
Description: The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions. (CWE-863) 



 



 



Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, have modules enabled by default that allow execution of system level processes. 



 








When access control checks are incorrectly applied, users can access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures and denial of service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]9405--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Incorrect-Authorization-Versions-before-10-2-0-0-and-9-3-0-9-including-8-3-x-Impacted-CVE-2024-5705
CVE: CVE-2024-5706
Published: 2025-02-19
Description: The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. (CWE-99) 






Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, do not restrict JNDI identifiers during the creation of Community Dashboards, allowing control of system-level data sources. 







An attacker could gain access to or modify sensitive data or system resources. This could allow access to protected files or directories including configuration files and files containing sensitive information, which can lead to remote code execution by unauthorized users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-99
References: https://support.pentaho.com/hc/en-us/articles/[PII_REDACTED]0189--Resolved-Hitachi-Vantara-Pentaho-Data-Integration-Analytics-Improper-Control-of-Resource-Identifiers-Resource-Injection-Versions-before-10-2-0-0-and-9-3-0-9-including-8-3-x-Impacted-CVE-2024-5706
CVE: CVE-2025-21355
Published: 2025-02-19
Description: Missing Authentication for Critical Function in Microsoft Bing allows an unauthorized attacker to execute code over a network
CVSS Score: 8.6 (HIGH)
CWE: CWE-306
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21355
CVE: CVE-2025-24989
Published: 2025-02-19
Description: An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control.
This vulnerability has already been mitigated in the service and all affected customers have been notified. This update addressed the registration control bypass. Affected customers have been given instructions on reviewing their sites for potential exploitation and clean up methods. If you've not been notified this vulnerability does not affect you.
CVSS Score: 8.2 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24989; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24989
CVE: CVE-2025-25942
Published: 2025-02-19
Description: An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files. Specifically, memory allocated in SampleArray::SampleArray in Mp4Fragment.cpp is not properly released.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/axiomatic-systems/Bento4/issues/993
CVE: CVE-2025-25943
Published: 2025-02-19
Description: Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the AP4_Stz2Atom::AP4_Stz2Atom component located in Ap4Stz2Atom.cpp.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://github.com/axiomatic-systems/Bento4/issues/993