deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-13223
Published: 2025-11-17
Description: Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html; https://issues.chromium.org/issues/460017370; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-13223
CVE: CVE-2025-13224
Published: 2025-11-17
Description: Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html; https://issues.chromium.org/issues/450328966
CVE: CVE-2025-13304
Published: 2025-11-17
Description: A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown code of the file /boafrm/formPingDiagnosticRun. Performing manipulation of the argument host results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120
References: https://github.com/LX-LX88/cve/issues/11; https://vuldb.com/?ctiid.332644; https://vuldb.com/?id.332644
CVE: CVE-2025-13305
Published: 2025-11-17
Description: A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07. This issue affects some unknown processing of the file /boafrm/formTracerouteDiagnosticRun. Executing manipulation of the argument host can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120, CWE-120
References: https://github.com/LX-LX88/cve/issues/12; https://vuldb.com/?ctiid.332645; https://vuldb.com/?id.332645
CVE: CVE-2025-31361
Published: 2025-11-17
Description: A privilege escalation vulnerability exists in the ControlVault WBDI Driver WBIO_USH_ADD_RECORD functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to privilege escalation. An attacker can issue an api call to trigger this vulnerability.
CVSS Score: 8.7 (HIGH)
CWE: CWE-908
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2174; https://www.dell.com/support/kbdoc/en-us/000326061/dsa-2025-228; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2174
CVE: CVE-2025-31649
Published: 2025-11-17
Description: A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API call can lead to execute priviledged operation. An attacker can issue an api call to trigger this vulnerability.
CVSS Score: 8.7 (HIGH)
CWE: CWE-908
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2173; https://www.dell.com/support/kbdoc/en-us/000326061/dsa-2025-228; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2173
CVE: CVE-2025-32089
Published: 2025-11-17
Description: A buffer overflow vulnerability exists in the CvManager_SBI functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API call can lead to a arbitrary code execution. An attacker can issue an api call to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2188; https://www.dell.com/support/kbdoc/en-us/000326061/dsa-2025-228; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2188
CVE: CVE-2025-36460
Published: 2025-11-17
Description: Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 2 (`WBIO_USH_GET_IDENTITY`)  with an improper  `ReceiveBuferSize` value.
CVSS Score: 7.3 (HIGH)
CWE: CWE-805
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2175; https://www.dell.com/support/kbdoc/en-us/000326061/dsa-2025-228
CVE: CVE-2025-36461
Published: 2025-11-17
Description: Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 0 (`WBIO_USH_GET_TEMPLATE`) and with either and an invalid  `ReceiveBuferSize`  and/or an invalid `SendBufferSize`.
CVSS Score: 7.3 (HIGH)
CWE: CWE-805
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2175; https://www.dell.com/support/kbdoc/en-us/000326061/dsa-2025-228
CVE: CVE-2025-36462
Published: 2025-11-17
Description: Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 3 (`WBIO_USH_CREATE_CHALLENGE`) with an invalid `ReceiveBuferSize`.
CVSS Score: 7.3 (HIGH)
CWE: CWE-805
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2175; https://www.dell.com/support/kbdoc/en-us/000326061/dsa-2025-228
CVE: CVE-2025-36463
Published: 2025-11-17
Description: Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 4 (`WBIO_USH_ADD_RECORD`) and with an invalid   `SendBufferSize`.
CVSS Score: 7.3 (HIGH)
CWE: CWE-805
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2175; https://www.dell.com/support/kbdoc/en-us/000326061/dsa-2025-228
CVE: CVE-2025-36553
Published: 2025-11-17
Description: A buffer overflow vulnerability exists in the CvManager functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2189; https://www.dell.com/support/kbdoc/en-us/000326061/dsa-2025-228; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2189
CVE: CVE-2025-7711
Published: 2025-11-17
Description: The The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.0.3. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/browser/classified-listing/tags/5.0.2/app/Controllers/Hooks/FilterHooks.php#L367; https://www.wordfence.com/threat-intel/vulnerabilities/id/d9b10db9-0c7c-4f13-9d98-6d407446cfb8?source=cve
CVE: CVE-2025-13226
Published: 2025-11-18
Description: Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html; https://issues.chromium.org/issues/446113732
CVE: CVE-2025-13227
Published: 2025-11-18
Description: Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html; https://issues.chromium.org/issues/446122633
CVE: CVE-2025-13228
Published: 2025-11-18
Description: Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html; https://issues.chromium.org/issues/446124893
CVE: CVE-2025-13229
Published: 2025-11-18
Description: Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html; https://issues.chromium.org/issues/446113731
CVE: CVE-2025-13230
Published: 2025-11-18
Description: Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html; https://issues.chromium.org/issues/446124892
CVE: CVE-2025-13306
Published: 2025-11-18
Description: A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5. Impacted is the function system of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77, CWE-78
References: https://github.com/LX-LX88/cve/issues/15; https://vuldb.com/?ctiid.332646; https://vuldb.com/?id.332646
CVE: CVE-2025-13323
Published: 2025-11-18
Description: A security flaw has been discovered in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /listorder.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/daojian1/Simple-Pizza-Ordering-System_V1.0_003; https://vuldb.com/?ctiid.332662
CVE: CVE-2025-13325
Published: 2025-11-18
Description: A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollment_edit1.php. Executing manipulation of the argument en_id can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/chenxiyue-2006/CVE/issues/1; https://itsourcecode.com/; https://vuldb.com/?ctiid.332669
CVE: CVE-2025-12792
Published: 2025-11-18
Description: The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC (Transparency, Consent, and Control) permissions assigned to Canva.
CVSS Score: 3.2 (LOW)
CWE: CWE-276
References: https://trust.canva.com/?tcuUid=1e77a34b-f586-450b-b30d-b6e17d15b443
CVE: CVE-2025-6599
Published: 2025-11-18
Description: An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service (DoS) attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt access to the web management interface, while other networking services remain unaffected.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-uncontrolled-resource-consumption-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-11-18-2025
CVE: CVE-2025-8693
Published: 2025-11-18
Description: A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) commands on an affected device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-uncontrolled-resource-consumption-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-11-18-2025
CVE: CVE-2025-12974
Published: 2025-11-18
Description: The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the legacy chunked upload mechanism in all versions up to, and including, 2.9.21.1. This is due to the extension blacklist not including .phar files, which can be uploaded through the chunked upload mechanism. This makes it possible for unauthenticated attackers to upload executable .phar files and achieve remote code execution on the server, granted they can discover or enumerate the upload path. In order for an attacker to achieve RCE, the web server needs to be set up to process .phar file as PHP via file handler mapping or similar.
CVSS Score: 8.1 (HIGH)
CWE: CWE-434
References: https://docs.gravityforms.com/gravityforms-change-log/; https://github.com/pronamic/gravityforms/blob/06de1b7e169e4f073e9d0d491e17b89365b48c20/common/common.php#L4178; https://github.com/pronamic/gravityforms/blob/06de1b7e169e4f073e9d0d491e17b89365b48c20/includes/upload.php#L97
CVE: CVE-2025-52457
Published: 2025-11-18
Description: Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with physical access to the device to extract device-specific keys, potentially compromising further site security. 

This issue affects Command Centre Server:

9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-208
References: https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-52457
CVE: CVE-2025-52578
Published: 2025-11-18
Description: Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communications.

This issue affects Command Centre Server: 

9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-335
References: https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-52578
CVE: CVE-2025-64734
Published: 2025-11-18
Description: Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry. 

This issue affects Command Centre Server: 

9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)),  all versions of 9.00 and prior.
CVSS Score: 2.4 (LOW)
CWE: CWE-772
References: https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-64734
CVE: CVE-2025-48593
Published: 2025-11-18
Description: In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.0 (HIGH)
CWE: CWE-416
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5ed63461b44198c80d5aff7e1af1df812f782abb; https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c69c78d7c4f623201f35831d32e6c401156e76cc; https://source.android.com/security/bulletin/2025-11-01
CVE: CVE-2025-12524
Published: 2025-11-18
Description: The Post Type Switcher plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.0.0 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Author-level access and above, to modify the post type of arbitrary posts and pages they do not own, including those created by administrators, which can lead to site disruption, broken navigation, and SEO impact.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-639
References: https://cwe.mitre.org/data/definitions/639.html; https://owasp.org/API-Security/editions/2023/en/0xa1-broken-object-level-authorization/; https://plugins.trac.wordpress.org/browser/post-type-switcher/tags/4.0.0/post-type-switcher.php#L469
CVE: CVE-2025-7623
Published: 2025-11-18
Description: Stack-based buffer overflow in the SMASH-CLP shell. An authenticated attacker with SSH access to the BMC can exploit a stack buffer overflow via a crafted SMASH command, overwrite the return address and registers, and achieve arbitrary code execution on the BMC firmware operating system
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-121
References: https://www.supermicro.com/zh_tw/support/security_BMC_IPMI_Nov_2025
CVE: CVE-2025-10089
Published: 2025-11-18
Description: Uncontrolled Search Path Element Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S Setting Application all versions, MILCO.S Setting Application (IR) all versions, MILCO.S Easy Setting Application (IR) all versions, and MILCO.S Easy Switch Application (IR) all versions allows a local attacker to execute malicious code by having installer to load a malicious DLL. However, if the signer name "Mitsubishi Electric Lighting" appears on the "Digital Signatures" tab of the properties for "MILCO.S Lighting Control.exe", the application is a fixed one. This vulnerability only affects when the installer is run, not after installation. If a user downloads directly from Mitsubishi Electric website and installs the affected product, there is no risk of malicious code being introduced.
CVSS Score: 7.7 (HIGH)
CWE: CWE-427
References: https://jvn.jp/vu/JVNVU97181602/; https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-015_en.pdf
CVE: CVE-2025-11265
Published: 2025-11-18
Description: The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vkExUnit_cta_url' and 'vkExUnit_cta_button_text' parameters in all versions up to, and including, 9.112.1. This is due to a logic error in the CTA save function that reads sanitization callbacks from the wrong variable ($custom_field_name instead of $custom_field_options), causing the sanitization to never be applied. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that execute when a user accesses an injected page.",
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-80
References: https://plugins.trac.wordpress.org/browser/vk-all-in-one-expansion-unit/tags/9.112.0.1/inc/call-to-action/package/block/index.php#L259; https://plugins.trac.wordpress.org/browser/vk-all-in-one-expansion-unit/tags/9.112.0.1/inc/call-to-action/package/block/index.php#L271; https://plugins.trac.wordpress.org/browser/vk-all-in-one-expansion-unit/tags/9.112.0.1/inc/call-to-action/package/class-vk-call-to-action.php#L198
CVE: CVE-2025-11267
Published: 2025-11-18
Description: The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_veu_custom_css' parameter in all versions up to, and including, 9.112.1. This is due to insufficient input sanitization and output escaping on the user-supplied Custom CSS value. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-80
References: https://plugins.trac.wordpress.org/browser/vk-all-in-one-expansion-unit/tags/9.112.0.1/admin/class-veu-metabox.php#L178; https://plugins.trac.wordpress.org/browser/vk-all-in-one-expansion-unit/tags/9.112.0.1/inc/css-customize/css-customize-single.php#L32; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3393317%40vk-all-in-one-expansion-unit%2Ftrunk&old=3385606%40vk-all-in-one-expansion-unit%2Ftrunk&sfp_email=&sfph_mail=
CVE: CVE-2025-8076
Published: 2025-11-18
Description: There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F. After logging into the BMC Web server, an attacker can use a specially crafted payload to trigger the Stack buffer overflow vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121
References: https://www.supermicro.com/zh_tw/support/security_BMC_IPMI_Nov_2025
CVE: CVE-2025-8404
Published: 2025-11-18
Description: Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library. An authenticated attacker with access to the BMC exploit stack buffer via a crafted  header and achieve arbitrary code execution of the BMC’s firmware operating system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-121
References: https://www.supermicro.com/zh_tw/support/security_BMC_IPMI_Nov_2025
CVE: CVE-2025-8727
Published: 2025-11-18
Description: There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F. After logging into the BMC Web server, an attacker can use a specially crafted payload to trigger the Stack buffer overflow vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121
References: https://www.supermicro.com/zh_tw/support/security_BMC_IPMI_Nov_2025