deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-13671
Published: 2025-01-30
Description: The Music Sheet Viewer plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 4.1 via the read_score_file() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. CVE-2025-25155 is likely a duplicate of this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/browser/music-sheet-viewer/trunk/music-sheet-viewer.php#L748; https://www.wordfence.com/threat-intel/vulnerabilities/id/569f1cd4-195b-41d4-85cb-f529a1eb18d4?source=cve
CVE: CVE-2024-13700
Published: 2025-01-30
Description: The Embed Swagger UI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsgui' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/embed-swagger-ui/; https://www.wordfence.com/threat-intel/vulnerabilities/id/20e2454f-f49b-413f-ae45-8b628b30a780?source=cve
CVE: CVE-2024-13705
Published: 2025-01-30
Description: The StageShow plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 9.8.6. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/stageshow/trunk/admin/stageshow_manage_seating.php#L502; https://plugins.trac.wordpress.org/changeset/3258990/stageshow/trunk/admin/stageshow_manage_seating.php; https://plugins.trac.wordpress.org/changeset/3258990/stageshow/trunk/include/stageshowlib_escaping.php
CVE: CVE-2024-13707
Published: 2025-01-30
Description: The WP Image Uploader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the gky_image_uploader_main_function() function. This makes it possible for unauthenticated attackers to delete arbitrary files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/wp-image-uploader/trunk/index.php#L85; https://www.wordfence.com/threat-intel/vulnerabilities/id/646a9885-8e0e-42a9-a113-0688c9f6dc93?source=cve
CVE: CVE-2024-13715
Published: 2025-01-30
Description: The zStore Manager Basic plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the zstore_clear_cache() function in all versions up to, and including, 3.311. This makes it possible for authenticated attackers, with Subscriber-level access and above, to clear the plugin's cache.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/zstore-manager-basic/trunk/zstore-manager.php#L441; https://www.wordfence.com/threat-intel/vulnerabilities/id/974ffc87-369a-431e-b601-8c6679d963c3?source=cve
CVE: CVE-2024-13720
Published: 2025-01-30
Description: The WP Image Uploader plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the gky_image_uploader_main_function() function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-22
References: https://plugins.trac.wordpress.org/browser/wp-image-uploader/trunk/index.php#L85; https://www.wordfence.com/threat-intel/vulnerabilities/id/4af41f69-1335-4199-bf29-c9699de50a16?source=cve
CVE: CVE-2024-13742
Published: 2025-01-30
Description: The iControlWP – Multiple WordPress Site Manager plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.4.5 via deserialization of untrusted input from the reqpars parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://plugins.trac.wordpress.org/browser/worpit-admin-dashboard-plugin/tags/4.4.5/lib/src/LegacyApi/RequestParameters.php#L42; https://plugins.trac.wordpress.org/browser/worpit-admin-dashboard-plugin/tags/4.4.5/src/api/RequestParameters.php#L14; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3231425%40worpit-admin-dashboard-plugin&new=3231425%40worpit-admin-dashboard-plugin&sfp_email=&sfph_mail=
CVE: CVE-2024-8494
Published: 2025-01-30
Description: The Elementor Website Builder Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.25.10 via the 'elementor-template' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the content of Private, Pending, and Draft Templates. The vulnerability was partially patched in version 3.24.4.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://elementor.com/; https://www.wordfence.com/threat-intel/vulnerabilities/id/94ada60f-1e20-454e-a9d7-7849be764d81?source=cve
CVE: CVE-2024-53615
Published: 2025-01-30
Description: A command injection vulnerability in the video thumbnail rendering component of Karl Ward's files.gallery v0.3.0 through 0.11.0 allows remote attackers to execute arbitrary code via a crafted video file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: https://github.com/beune/CVE-2024-53615
CVE: CVE-2024-55415
Published: 2025-01-30
Description: DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-22
References: https://github.com/thedevdojo/voyager/blob/1.6/src/Http/Controllers/VoyagerCompassController.php#L213; https://github.com/thedevdojo/voyager/blob/1.6/src/Http/Controllers/VoyagerCompassController.php#L44; https://www.sonarsource.com/blog/the-tainted-voyage-uncovering-voyagers-vulnerabilities/
CVE: CVE-2024-55416
Published: 2025-01-30
Description: DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/thedevdojo/voyager/blob/1.6/resources/views/master.blade.php#L132; https://github.com/thedevdojo/voyager/blob/1.6/src/Http/Controllers/VoyagerCompassController.php#L44; https://www.sonarsource.com/blog/the-tainted-voyage-uncovering-voyagers-vulnerabilities/
CVE: CVE-2024-55417
Published: 2025-01-30
Description: DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/thedevdojo/voyager/blob/1.6/src/Http/Controllers/VoyagerMediaController.php#L238; https://www.sonarsource.com/blog/the-tainted-voyage-uncovering-voyagers-vulnerabilities/
CVE: CVE-2025-0871
Published: 2025-01-30
Description: A vulnerability classified as problematic has been found in Maybecms 1.2. This affects an unknown part of the file /mb/admin/index.php?u=article-edit of the component Add Article. The manipulation of the argument data_info[content] leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/Upgradeextension/Maybecms/blob/main/README.md; https://vuldb.com/?ctiid.294057; https://vuldb.com/?id.294057
CVE: CVE-2025-22218
Published: 2025-01-30
Description: VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin permissions may be able to read the credentials of a VMware product integrated with VMware Aria Operations for Logs
CVSS Score: 8.5 (HIGH)
CWE: CWE-209
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25329
CVE: CVE-2025-23367
Published: 2025-01-30
Description: A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor role is supposed to have only read access permissions and should not be able to suspend the server. 
The vulnerability is caused by the Suspend and Resume handlers not performing authorization checks to validate whether the current user has the required permissions to proceed with the action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://access.redhat.com/errata/RHSA-2025:3465; https://access.redhat.com/errata/RHSA-2025:3467; https://access.redhat.com/errata/RHSA-2025:3989
CVE: CVE-2025-0872
Published: 2025-01-30
Description: A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file /addpayment.php. The manipulation of the argument id/amount/desc/inccat leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/magic[PII_REDACTED]/cve/issues/3; https://itsourcecode.com/; https://vuldb.com/?ctiid.294066
CVE: CVE-2025-22219
Published: 2025-01-30
Description: VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script that  (can perform stored cross-site scripting) may lead to arbitrary operations as admin user.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25329
CVE: CVE-2025-22220
Published: 2025-01-30
Description: VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria Operations for Logs API may be able to perform certain operations in the context of an admin user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25329
CVE: CVE-2025-22221
Published: 2025-01-30
Description: VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin privileges to VMware Aria Operations for Logs may be able to inject a malicious script that could be executed in a victim's browser when performing a delete action in the Agent Configuration.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-79
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25329
CVE: CVE-2025-22222
Published: 2025-01-30
Description: VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privileges may exploit this vulnerability to retrieve credentials for an outbound plugin if a valid service credential ID is known.
CVSS Score: 7.7 (HIGH)
CWE: CWE-497
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25329
CVE: CVE-2025-23216
Published: 2025-01-30
Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was discovered in Argo CD that exposed secret values in error messages and the diff view when an invalid Kubernetes Secret resource was synced from a repository. The vulnerability assumes the user has write access to the repository and can exploit it, either intentionally or unintentionally, by committing an invalid Secret to repository and triggering a Sync. Once exploited, any user with read access to Argo CD can view the exposed secret data. The vulnerability is fixed in v2.13.4, v2.12.10, and v2.11.13.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-200, CWE-209, CWE-209
References: https://github.com/argoproj/argo-cd/commit/6f5537bdf15ddbaa0f27a1a678632ff0743e4107; https://github.com/argoproj/argo-cd/security/advisories/GHSA-47g2-qmh2-749v; https://github.com/argoproj/gitops-engine/commit/7e21b91e9d0f64104c8a661f3f390c5e6d73ddca
CVE: CVE-2025-24376
Published: 2025-01-30
Description: kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. By design, AdmissionPolicy and AdmissionPolicyGroup can evaluate only namespaced resources. The resources to be evaluated are determined by the rules provided by the user when defining the policy. There might be Kubernetes namespaced resources that should not be validated by AdmissionPolicy and by the AdmissionPolicyGroup policies because of their sensitive nature. For example, PolicyReport are namespaced resources that contain the list of non compliant objects found inside of a namespace. An attacker can use either an AdmissionPolicy or an AdmissionPolicyGroup to prevent the creation and update of PolicyReport objects to hide non-compliant resources. Moreover, the same attacker might use a mutating AdmissionPolicy to alter the contents of the PolicyReport created inside of the namespace. Starting from the 1.21.0 release, the validation rules applied to AdmissionPolicy and AdmissionPolicyGroup have been tightened to prevent them from validating sensitive types of namespaced resources.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-155, CWE-285
References: https://github.com/kubewarden/kubewarden-controller/commit/8124039b5f0c955d0ee8c8ca12d4415282f02d2c; https://github.com/kubewarden/kubewarden-controller/security/advisories/GHSA-fc89-jghx-8pvg
CVE: CVE-2025-24784
Published: 2025-01-30
Description: kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. The policy group feature, added to by the 1.17.0 release. By being namespaced, the AdmissionPolicyGroup has a well constrained impact on cluster resources. Hence, it’s considered safe to allow non-admin users to create and manage these resources in the namespaces they own. Kubewarden policies can be allowed to query the Kubernetes API at evaluation time; these types of policies are called “context aware“. Context aware policies can perform list and get operations against a Kubernetes cluster. The queries are done using the ServiceAccount of the Policy Server instance that hosts the policy. That means that access to the cluster is determined by the RBAC rules that apply to that ServiceAccount. The AdmissionPolicyGroup CRD allowed the deployment of context aware policies. This could allow an attacker to obtain information about resources that are out of their reach, by leveraging a higher access to the cluster granted to the ServiceAccount token used to run the policy. The impact of this vulnerability depends on the privileges that have been granted to the ServiceAccount used to run the Policy Server and assumes that users are using the recommended best practices of keeping the Policy Server's ServiceAccount least privileged. By default, the Kubewarden helm chart grants access to the following resources (cluster wide) only: Namespace, Pod, Deployment and Ingress. This vulnerability is fixed in 1.21.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://github.com/kubewarden/kubewarden-controller/commit/51a88dfbb4c090ce0f76a22d98106518e0824d0b; https://github.com/kubewarden/kubewarden-controller/security/advisories/GHSA-756x-m4mj-q96c
CVE: CVE-2025-24883
Published: 2025-01-30
Description: go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.14.13.
CWE: CWE-248
References: https://github.com/ethereum/go-ethereum/commit/fa9a2ff8687ec9efe57b4b9833d5590d20f8a83f; https://github.com/ethereum/go-ethereum/security/advisories/GHSA-q26p-9cq4-7fc2
CVE: CVE-2024-2658
Published: 2025-01-30
Description: A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) allows the OpenSSL configuration file to load from a non-existent directory. An unauthorized, locally authenticated user with low privileges can potentially create the directory and load a specially crafted openssl.conf file leading to the execution of a malicious DLL (Dynamic-Link Library) with elevated privileges.
CWE: CWE-427
References: https://community.flexera.com/s/article/cve-2024-2658-flexnet-publisher-potential-local-privilege-escalation-issue; https://www.zerodayinitiative.com/advisories/ZDI-24-359/
CVE: CVE-2025-0367
Published: 2025-01-30
Description: In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnerable regular expression pattern could lead to a Regular Expression Denial of Service (ReDoS) attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1333
References: https://advisory.splunk.com/advisories/SVD-2025-0103
CVE: CVE-2025-0873
Published: 2025-01-30
Description: A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /customeredit.php. The manipulation of the argument id/address/fullname/phonenumber/email/city/comment leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/magic[PII_REDACTED]/cve/issues/5; https://itsourcecode.com/; https://vuldb.com/?ctiid.294067
CVE: CVE-2025-24099
Published: 2025-01-30
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. A local attacker may be able to elevate their privileges.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/122068; https://support.apple.com/en-us/122069; https://support.apple.com/en-us/122070
CVE: CVE-2023-29080
Published: 2025-01-30
Description: Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a predefined writable folder during installation time. The standard user account has write access to these files and folders, hence replacing them during installation time can lead to a DLL hijacking vulnerability.
CWE: CWE-552
References: https://community.revenera.com/s/article/cve-2023-29080-security-patch-for-the-possible-privileged-escalation-scenarios-identified-in-installshield-nbsp
CVE: CVE-2025-0477
Published: 2025-01-30
Description: An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users of the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1721.html
CVE: CVE-2025-0497
Published: 2025-01-30
Description: A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanUp, or ArchiveLogCleanUp packages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1721.html
CVE: CVE-2025-0498
Published: 2025-01-30
Description: A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of FactoryTalk® Security user tokens, which could allow a threat actor to steal a token and, impersonate another user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1721.html
CVE: CVE-2025-0874
Published: 2025-01-30
Description: A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management 1.0. Affected by this issue is some unknown functionality of the file /admin/approve.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/magic[PII_REDACTED]/cve/issues/8; https://vuldb.com/?ctiid.294068
CVE: CVE-2024-12248
Published: 2025-01-30
Description: Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-030-01; https://www.fda.gov/medical-devices/safety-communications/cybersecurity-vulnerabilities-certain-patient-monitors-contec-and-epsimed-fda-safety-communication
CVE: CVE-2024-44142
Published: 2025-01-30
Description: The issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/121866; http://seclists.org/fulldisclosure/2025/Feb/2
CVE: CVE-2025-0626
Published: 2025-01-30
Description: The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function also enables the network interface of the device if it is disabled. The function is triggered by attempting to update the device from the user menu. This could serve as a backdoor to the device, and could lead to a malicious actor being able to upload and overwrite files on the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-912
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-030-01; https://www.fda.gov/medical-devices/safety-communications/cybersecurity-vulnerabilities-certain-patient-monitors-contec-and-epsimed-fda-safety-communication; https://www.bleepingcomputer.com/news/security/backdoor-found-in-two-healthcare-patient-monitors-linked-to-ip-in-china/
CVE: CVE-2025-0680
Published: 2025-01-30
Description: Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-02; https://www.newrocktech.com/ContactUs/index.html