deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-42959
Published: 2025-07-08
Description: An unauthenticated attacker may exploit a scenario where a Hashed Message Authentication Code (HMAC) credential, extracted from a system missing specific security patches, is reused in a replay attack against a different system. Even if the target system is fully patched, successful exploitation could result in complete system compromise, affecting confidentiality, integrity, and availability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-308
References: https://me.sap.com/notes/3600846; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42960
Published: 2025-07-08
Description: SAP Business Warehouse and SAP BW/4HANA BEx Tools allow an authenticated attacker to gain higher access levels than intended by exploiting improper authorization checks. This could potentially impact data integrity by allowing deletion of user table entries.�It has no impact on the confidentiality and availability of the application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3608991; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42961
Published: 2025-07-08
Description: Due to a missing authorization check in SAP NetWeaver Application server for ABAP, an authenticated user with high privileges could exploit the insufficient validation of user permissions to access sensitive database tables. By leveraging overly permissive access configurations, unauthorized reading of critical data is possible, resulting in a significant impact on the confidentiality of the information stored. However, the integrity and availability of the system remain unaffected.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3610322; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42962
Published: 2025-07-08
Description: SAP Business Warehouse (Business Explorer Web) allows an attacker to create a malicious link. If an authenticated user clicks on this link, the injected script gets executed within the scope of victim�s browser. This potentially leads to an impact on confidentiality and integrity. Availability is not impacted.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3604212; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42963
Published: 2025-07-08
Description: A critical vulnerability in SAP NetWeaver Application server for Java Log Viewer enables authenticated administrator users to exploit unsafe Java object deserialization. Successful exploitation can lead to full operating system compromise, granting attackers complete control over the affected system. This results in a severe impact on the confidentiality, integrity, and availability of the application and host environment.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-502
References: https://me.sap.com/notes/3621771; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42964
Published: 2025-07-08
Description: SAP NetWeaver Enterprise Portal Administration is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-502
References: https://me.sap.com/notes/3621236; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42965
Published: 2025-07-08
Description: SAP CMC Promotion Management allows an authenticated attacker to enumerate internal network systems by submitting crafted requests during job source configuration. By analysing response times for various IP addresses and ports, the attacker can infer valid network endpoints. Successful exploitation may lead to information disclosure. This vulnerability does not impact the integrity or availability of the application.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-918
References: https://me.sap.com/notes/3598118; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42966
Published: 2025-07-08
Description: SAP NetWeaver XML Data Archiving Service allows an authenticated attacker with administrative privileges to exploit an insecure Java deserialization vulnerability by sending a specially crafted serialized Java object. This could lead to high impact on confidentiality, integrity, and availability of the application.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-502
References: https://me.sap.com/notes/3610892; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42967
Published: 2025-07-08
Description: SAP S/4HANA and SAP SCM Characteristic Propagation has remote code execution vulnerability. This allows an attacker with user level privileges to create a new report with his own code potentially gaining full control of the affected SAP system causing high impact on confidentiality, integrity, and availability of the application.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94
References: https://me.sap.com/notes/3618955; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42968
Published: 2025-07-08
Description: SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled function module which could grants access to non-sensitive information about the SAP system and OS without requiring any specific knowledge or controlled conditions. This leads to a low impact on confidentiality with no effect on integrity or availability of the application.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3621037; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42969
Published: 2025-07-08
Description: SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to inject a malicious script into a dynamically crafted URL. The victim, when tricked into clicking on this crafted URL unknowingly executes the malicious payload in their browser. On successful exploitation, the attacker can access or modify sensitive information within the scope of victim's web browser, with no impact on availability of the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3596987; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42970
Published: 2025-07-08
Description: SAPCAR improperly sanitizes the file paths while extracting SAPCAR archives. Due to this, an attacker could craft a malicious SAPCAR archive containing directory traversal sequences. When a high privileged victim extracts this malicious archive, it is then processed by SAPCAR on their system, causing files to be extracted outside the intended directory and overwriting files in arbitrary locations. This vulnerability has a high impact on the integrity and availability of the application with no impact on confidentiality.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-22
References: https://me.sap.com/notes/3595156; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42971
Published: 2025-07-08
Description: A memory corruption vulnerability exists in SAPCAR allowing an attacker to craft malicious SAPCAR archives. When a high privileged victim extracts this malicious archive, it gets processed by SAPCAR on their system, resulting in out-of-bounds memory read and write. This could lead to file extraction and file overwrite outside the intended directories. This vulnerability has low impact on the confidentiality, integrity and availability of the application.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-787
References: https://me.sap.com/notes/3595141; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42973
Published: 2025-07-08
Description: Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the affected page. This results in a limited impact on the confidentiality and integrity of user session information, while availability remains unaffected.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3606103; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42974
Published: 2025-07-08
Description: Due to missing authorization check, an attacker authenticated as a non-administrative user could call a remote-enabled function module. This could enable access to information normally restricted, resulting in low impact on confidentiality. There is no impact on integrity or availability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3610056; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42978
Published: 2025-07-08
Description: The widely used component that establishes outbound TLS connections in SAP NetWeaver Application Server Java does not reliably match the hostname that is used for the connection against the wildcard hostname defined in the received certificate of remote TLS server. This might lead to the outbound connection being established to a possibly malicious remote TLS server and hence disclose information. Integrity and Availability are not impacted.
CVSS Score: 3.5 (LOW)
CWE: CWE-940
References: https://me.sap.com/notes/3557179; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42979
Published: 2025-07-08
Description: The GuiXT application, which is integrated with SAP GUI for Windows, uses obfuscation algorithms instead of secure symmetric ciphers for storing the credentials of an RFC user on the client PC. This leads to a high impact on confidentiality because any attacker who gains access to the user hive of this user�s windows registry could recreate the original password. There is no impact on integrity or availability of the application
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-922
References: https://me.sap.com/notes/3607513; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42980
Published: 2025-07-08
Description: SAP NetWeaver Enterprise Portal Federated Portal Network is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-502
References: https://me.sap.com/notes/3620498; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42981
Published: 2025-07-08
Description: Due to an open redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft a URL link embedding a malicious script at a location not properly sanitized. When a victim clicks on this link, the script executes within the victim's browser, redirecting them to a site controlled by the attacker. This allows the attacker to access and/or modify restricted information related to the web client. While the vulnerability poses no impact on data availability, it presents a considerable risk to confidentiality and integrity.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://me.sap.com/notes/3617131; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42985
Published: 2025-07-08
Description: Due to insufficient sanitization in the SAP BusinessObjects Content Administrator Workbench, attackers could craft malicious URLs and execute scripts in a victim�s browser. This could potentially lead to the exposure or modification of web client data, resulting in low impact on confidentiality and integrity, with no impact on application availability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://me.sap.com/notes/3617380; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42986
Published: 2025-07-08
Description: Due to a missing authorization check in an obsolete RFC enabled function module in SAP BASIS, an authenticated low-privileged attacker could call a Remote Function Call (RFC), potentially accessing restricted system information. This results in low impact on confidentiality, with no impact on integrity or availability of the application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://me.sap.com/notes/3626440; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-42992
Published: 2025-07-08
Description: SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable the attacker to exploit critical files and directory permissions without breaking signature validation, resulting in potential privilege escalation. This has high impact on integrity, but low impact on confidentiality and availability of the system.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-266
References: https://me.sap.com/notes/3595143; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-43001
Published: 2025-07-08
Description: SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directories of the user or process extracting the archive, leading to privilege escalation. On successful exploitation, an attacker could modify the critical files by tampering with signed archives without breaking the signature, but it has a low impact on the confidentiality and availability of the system.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-266
References: https://me.sap.com/notes/3595143; https://url.sap/sapsecuritypatchday
CVE: CVE-2025-7154
Published: 2025-07-08
Description: A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095_B20200916/9.3.5u.6139_B20201216. Affected by this issue is the function sub_41A0F8 of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Hostname leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://github.com/FLY200503/IoT-vul/blob/master/Totolink/N200RE/README.md; https://vuldb.com/?ctiid.315092; https://vuldb.com/?id.315092
CVE: CVE-2025-7155
Published: 2025-07-08
Description: A vulnerability, which was classified as critical, was found in PHPGurukul Online Notes Sharing System 1.0. This affects an unknown part of the file /Dashboard of the component Cookie Handler. The manipulation of the argument sessionid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The original researcher disclosure suspects an XPath Injection vulnerability; however, the provided attack payload appears to be characteristic of an SQL Injection attack.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/Vanshdhawan188/Online-Notes-Sharing-System-Php-Gurukul-Python/blob/main/Online-Notes-Sharing-System-Php-Gurukul-Python-Xpath-Injection.md; https://github.com/Vanshdhawan188/Online-Notes-Sharing-System-Php-Gurukul-Python/blob/main/Online-Notes-Sharing-System-Php-Gurukul-Python-Xpath-Injection.md#-step-by-step-exploitation-poc; https://phpgurukul.com/
CVE: CVE-2025-7146
Published: 2025-07-08
Description: The iPublish System developed by Jhenggao has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to read arbitrary system file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23
References: https://www.twcert.org.tw/en/cp-139-10234-38665-2.html; https://www.twcert.org.tw/tw/cp-132-10233-45fc8-1.html
CVE: CVE-2025-7156
Published: 2025-07-08
Description: A vulnerability has been found in hitsz-ids airda 0.0.3 and classified as critical. This vulnerability affects the function execute of the file /v1/chat/completions. The manipulation of the argument question leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://vuldb.com/?ctiid.315094; https://vuldb.com/?id.315094; https://vuldb.com/?submit.606352
CVE: CVE-2025-20680
Published: 2025-07-08
Description: In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418044; Issue ID: MSV-3482.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-20681
Published: 2025-07-08
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416936; Issue ID: MSV-3446.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-20682
Published: 2025-07-08
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416937; Issue ID: MSV-3445.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-20683
Published: 2025-07-08
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416938; Issue ID: MSV-3444.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-20684
Published: 2025-07-08
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416939; Issue ID: MSV-3422.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-20685
Published: 2025-07-08
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416226; Issue ID: MSV-3409.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-20686
Published: 2025-07-08
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00415570; Issue ID: MSV-3404.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-20687
Published: 2025-07-08
Description: In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418045; Issue ID: MSV-3481.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-20688
Published: 2025-07-08
Description: In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418047; Issue ID: MSV-3480.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-20689
Published: 2025-07-08
Description: In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418048; Issue ID: MSV-3479.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-20690
Published: 2025-07-08
Description: In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418038; Issue ID: MSV-3478.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-20691
Published: 2025-07-08
Description: In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418039; Issue ID: MSV-3477.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-20692
Published: 2025-07-08
Description: In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418040; Issue ID: MSV-3476.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-20693
Published: 2025-07-08
Description: In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09812521; Issue ID: MSV-3421.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-20694
Published: 2025-07-08
Description: In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09752821; Issue ID: MSV-3342.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-124
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-20695
Published: 2025-07-08
Description: In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09741871; Issue ID: MSV-3317.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-124, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2025
CVE: CVE-2025-5570
Published: 2025-07-08
Description: The AI Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the mwai_chatbot shortcode 'id' parameter in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.8.2/classes/modules/chatbot.php#L617; https://www.wordfence.com/threat-intel/vulnerabilities/id/a32dcf96-ec75-46b1-8f1d-608411ad5147?source=cve
CVE: CVE-2025-6244
Published: 2025-07-08
Description: The Essential Addons for Elementor – Popular Elementor Templates and Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the via `Calendar` And `Business Reviews` Widgets attributes in all versions up to, and including, 6.1.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3318211/; https://www.wordfence.com/threat-intel/vulnerabilities/id/847a4fc7-3580-421e-8045-41b5a85f2d97?source=cve