deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-64176
Published: 2025-11-06
Description: ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. In versions 0.6.7 and below, an attacker can upload any file they wish to the /data directory of the web application via the backup import feature. When importing a backup, an attacker can first choose a .zip file to bypass the client-side file-type verification. This could lead to stored XSS, or be used for other nefarious purposes such as malware distribution. This issue is fixed in version 0.6.8.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-79, CWE-434, CWE-434
References: https://github.com/MatiasDesuu/ThinkDashboard/commit/18d2f6aded0d6424cc4c8619731dd20563f4cfd8; https://github.com/MatiasDesuu/ThinkDashboard/security/advisories/GHSA-jvmw-hg62-jr47
CVE: CVE-2025-64177
Published: 2025-11-06
Description: ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. In versions 0.6.7 and below, there is a stored Cross-Site Scripting (XSS) vulnerability in the dashboard, which can exploited when a user clicks on a malicious bookmark, made vulnerable by the lack of scheme filtering. This is fixed in version 0.6.8.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/MatiasDesuu/ThinkDashboard/commit/16976263b22a4b0526b2c7c30294cc099258edae; https://github.com/MatiasDesuu/ThinkDashboard/security/advisories/GHSA-57f2-rhxm-fjv3
CVE: CVE-2025-64178
Published: 2025-11-06
Description: Jellysweep is a cleanup tool for the Jellyfin media server. In versions 0.12.1 and below, /api/images/cache, used to download media posters from the server, accepted a URL parameter that was directly passed to the cache package, which downloaded the poster from this URL. This URL parameter can be used to make the Jellysweep server download arbitrary content. The API endpoint can only be used by authenticated users. This issue is fixed in version 0.13.0.
CWE: CWE-918
References: https://github.com/jon4hz/jellysweep/commit/[PII_REDACTED]966418aea941e[PII_REDACTED]d55101; https://github.com/jon4hz/jellysweep/security/advisories/GHSA-xc93-q32j-cpcg
CVE: CVE-2025-64179
Published: 2025-11-06
Description: lakeFS is an open-source tool that transforms object storage into a Git-like repositories. In versions 1.69.0 and below, missing authentication in the /api/v1/usage-report/summary endpoint allows anyone to retrieve aggregate API usage counts. While no sensitive data is disclosed, the endpoint may reveal information about service activity or uptime. This issue is fixed in version 1.71.0 . To workaround the vulnerability, use a load-balancer or application level firewall in order to block the request route /api/v1/usage-report/summary.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-862
References: https://github.com/treeverse/lakeFS/commit/1c8adab852dac2387fcb00a256402b308a610c60; https://github.com/treeverse/lakeFS/security/advisories/GHSA-h238-5mwf-8xw8
CVE: CVE-2025-11458
Published: 2025-11-06
Description: Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.1 (HIGH)
CWE: CWE-122, CWE-787
References: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop.html; https://issues.chromium.org/issues/443196747
CVE: CVE-2025-11460
Published: 2025-11-06
Description: Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop.html; https://issues.chromium.org/issues/446722008
CVE: CVE-2025-11756
Published: 2025-11-06
Description: Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_14.html; https://issues.chromium.org/issues/447192722
CVE: CVE-2025-12036
Published: 2025-11-06
Description: Out of bounds memory access in V8 in Google Chrome prior to 141.0.7390.122 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_21.html; https://issues.chromium.org/issues/452296415
CVE: CVE-2025-12636
Published: 2025-11-06
Description: The Ubia camera ecosystem fails to adequately secure API credentials, 
potentially enabling an attacker to connect to backend services. The 
attacker would then be able to gain unauthorized access to available 
cameras, enabling the viewing of live feeds or modification of settings.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-310-02.json; https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-02
CVE: CVE-2025-58423
Published: 2025-11-06
Description: Due to insufficient sanitization, an attacker can upload a specially 
crafted configuration file to cause a denial-of-service condition, 
traverse directories, or read/write files, within the context of the 
local system account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-310-01.json; https://www.advantech.com/emt/contact; https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-01
CVE: CVE-2025-59171
Published: 2025-11-06
Description: Due to insufficient sanitization, an attacker can upload a specially 
crafted configuration file to traverse directories and achieve remote 
code execution with system-level permissions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-310-01.json; https://www.advantech.com/emt/contact; https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-01
CVE: CVE-2025-62630
Published: 2025-11-06
Description: Due to insufficient sanitization, an attacker can upload a specially 
crafted configuration file to traverse directories and achieve remote 
code execution with system-level permissions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-310-01.json; https://www.advantech.com/emt/contact; https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-01
CVE: CVE-2025-64302
Published: 2025-11-06
Description: Insufficient input sanitization in the dashboard label or path can allow
 an attacker to trigger a device error causing information disclosure or
 data manipulation.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-310-01.json; https://www.advantech.com/emt/contact; https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-01
CVE: CVE-2025-12789
Published: 2025-11-07
Description: A flaw was found in Red Hat Single Sign-On. This issue is an Open Redirect vulnerability that occurs during the logout process. The redirect_uri parameter associated with the openid-connect logout protocol does not properly validate the provided URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://access.redhat.com/security/cve/CVE-2025-12789; https://bugzilla.redhat.com/show_bug.cgi?id=2413001
CVE: CVE-2025-48985
Published: 2025-11-07
Description: A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade.

More details: https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk
CVSS Score: 3.7 (LOW)
CWE: CWE-20
References: https://github.com/vercel/ai/commit/930399bb9839a8baf3d349614106d78268775eed; https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk
CVE: CVE-2025-52662
Published: 2025-11-07
Description: A vulnerability in Nuxt DevTools has been fixed in version **2.6.4***. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade.

More details: https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-79
References: https://github.com/nuxt/devtools/commit/7cadbbe9; https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools
CVE: CVE-2025-11546
Published: 2025-11-07
Description: CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, EXPRESSCLUSTER X SingleServerSafe for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 allows an attacker sends specially crafted network packets to the product, arbitrary OS commands may be executed without authentication.
CWE: CWE-78
References: https://jpn.nec.com/security-info/secinfo/nv25-006_en.html
CVE: CVE-2025-5483
Published: 2025-11-07
Description: The LC Wizard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check in the ghl-wizard/inc/wp_user.php file in versions 1.2.10 to 1.3.0. This makes it possible for unauthenticated attackers to create new user accounts with the administrator role when the PRO functionality is enabled.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/3366906; https://www.wordfence.com/threat-intel/vulnerabilities/id/42dcc302-b543-42c7-99fa-605f017beb1a?source=cve
CVE: CVE-2025-64180
Published: 2025-11-07
Description: Manager-io/Manager is accounting software. In Manager Desktop and Server versions 25.11.1.3085 and below, a critical vulnerability permits unauthorized access to internal network resources. The flaw lies in the fundamental design of the DNS validation mechanism. A Time-of-Check Time-of-Use (TOCTOU) condition that allows attackers to bypass network isolation and access internal services, cloud metadata endpoints, and protected network segments. The Desktop edition requires no authentication; the Server edition requires only standard authentication. This issue is fixed in version 25.11.1.3086.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-367, CWE-918
References: https://github.com/Manager-io/Manager/security/advisories/GHSA-j2xj-xhph-p74j
CVE: CVE-2025-64184
Published: 2025-11-07
Description: Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic (page URL, image URL, page content, etc.). While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type header. This allows a remote attacker (or a Man-in-the-Middle, if the comic is served over HTTP) to write arbitrary files outside the target directory (if additional conditions are met). This issue is fixed in version 3.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/webcomics/dosage/commit/336a[PII_REDACTED]bc49eed7296b74bd582151181e; https://github.com/webcomics/dosage/security/advisories/GHSA-4vcx-3pj3-44m7
CVE: CVE-2025-64187
Published: 2025-11-07
Description: OctoPrint provides a web interface for controlling consumer 3D printers. Versions 1.11.3 and below are affected by a vulnerability that allows injection of arbitrary HTML and JavaScript into Action Command notifications and prompts popups generated by the printer. An attacker who successfully convinces a victim to print a specially crafted file could exploit this issue to disrupt ongoing prints, extract information (including sensitive configuration settings, if the targeted user has the necessary permissions for that), or perform other actions on behalf of the targeted user within the OctoPrint instance. This issue is fixed in version 1.11.4.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-80
References: https://github.com/OctoPrint/OctoPrint/commit/9112e07b1085f4c1ee9eefc[PII_REDACTED]1057a44; https://github.com/OctoPrint/OctoPrint/security/advisories/GHSA-crvm-xjhm-9h29
CVE: CVE-2025-64323
Published: 2025-11-07
Description: kgateway is a Cloud-Native API and AI Gateway. Versions 2.0.4 and below and 2.1.0-agw-cel-rbac through 2.1.0-rc.2 lack authentication, allowing any client with unrestricted network access to the xDS port to retrieve potentially sensitive configuration data including certificate data, backend service information, routing rules, and cluster metadata. This issue is solved in versions 2.0.5 and 2.1.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://github.com/kgateway-dev/kgateway/issues/10651; https://github.com/kgateway-dev/kgateway/pull/12471; https://github.com/kgateway-dev/kgateway/pull/12535
CVE: CVE-2025-64328
Published: 2025-11-07
Description: FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions 17.0.2.36 and above before 17.0.3, the filestore module within the Administrative interface is vulnerable to a post-authentication command injection by an authenticated known user via the testconnection -> check_ssh_connect() function. An attacker can leverage this vulnerability to obtain remote access to the system as an asterisk user. This issue is fixed in version 17.0.3.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://github.com/FreePBX/filestore/blob/f0e[PII_REDACTED]efd80b483ec823310ef19a59013/drivers/SSH/testconnection.php#L2; https://github.com/FreePBX/security-reporting/security/advisories/GHSA-vm9p-46mv-5xvw; https://www.freepbx.org/watch-what-we-do-with-security-fixes-%f0%9f%91%80
CVE: CVE-2025-12352
Published: 2025-11-07
Description: The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the copy_post_image() function in all versions up to, and including, 2.9.20. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. This only impacts sites that have allow_url_fopen set to `On`, the post creation form enabled along with a file upload field for the post
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/pronamic/gravityforms/blob/06de1b7e169e4f073e9d0d491e17b89365b48c20/forms_model.php#L5451C26-L5451C41; https://github.com/pronamic/gravityforms/blob/06de1b7e169e4f073e9d0d491e17b89365b48c20/includes/fields/class-gf-field-fileupload.php#L306; https://www.wordfence.com/threat-intel/vulnerabilities/id/42[PII_REDACTED]-40b9-90e7-c7f1886ef247?source=cve
CVE: CVE-2025-4519
Published: 2025-11-07
Description: The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the idonate_donor_password() function in versions 2.1.5 to 2.1.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to initiate a password reset for any user (including administrators) and elevate their privileges for full site takeover.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://plugins.trac.wordpress.org/browser/idonate/tags/2.1.9/src/Helpers/DonorFunctions.php#L410; https://plugins.trac.wordpress.org/changeset/3334424/idonate/tags/2.1.10/src/Helpers/DonorFunctions.php?old=3279142&old_path=idonate%2Ftags%2F2.1.9%2Fsrc%2FHelpers%2FDonorFunctions.php; https://wordpress.org/plugins/idonate/#developers
CVE: CVE-2025-4522
Published: 2025-11-07
Description: The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Insecure Direct Object Reference via the admin_post_donor_delete() function in versions 2.0.0 to 2.1.9. By supplying an arbitrary user_id parameter value to the wp_delete_user() function, authenticated attackers, with Subscriber-level access and above could delete arbitrary user accounts, including those of administrators.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/idonate/tags/2.1.9/src/Admin/Admin.php#L75; https://plugins.trac.wordpress.org/browser/idonate/tags/2.1.9/src/Helpers/DonorFunctions.php#L658; https://plugins.trac.wordpress.org/changeset/3334424/idonate/tags/2.1.10/src/Helpers/DonorFunctions.php?old=3279142&old_path=idonate%2Ftags%2F2.1.9%2Fsrc%2FHelpers%2FDonorFunctions.php
CVE: CVE-2025-64329
Published: 2025-11-07
Description: containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. To workaround this vulnerability, users can set up an admission controller to control accesses to pods/attach resources.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/containerd/containerd/commit/083b53cd6f19b5de7717b0ce92c11bdf95e612df; https://github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2
CVE: CVE-2025-64336
Published: 2025-11-07
Description: ClipBucket v5 is an open source video sharing platform. In versions 5.5.2-#146 and below, the Manage Photos feature is vulnerable to stored Cross-site Scripting (XSS). An authenticated regular user can upload a photo with a malicious Photo Title containing HTML/JavaScript code. While the payload does not execute in the user-facing photo gallery or detail pages, it is rendered unsafely in the Admin → Manage Photos section, resulting in JavaScript execution in the administrator’s browser. This issue is fixed in version 5.5.2-#147.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-269
References: https://github.com/MacWarrior/clipbucket-v5/commit/8e3cf79ce2721fbebde68a05a9a1a6319f086bcc; https://github.com/MacWarrior/clipbucket-v5/releases/tag/5.5.2-%23147; https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-hjc2-5329-j49w
CVE: CVE-2025-64338
Published: 2025-11-07
Description: ClipBucket v5 is an open source video sharing platform. In versions 5.5.2 - #156 and below, an authenticated regular user can create a photo collection whose Collection Name contains HTML/JavaScript payloads, which making ClipBucket’s Manage Photos feature vulnerable to Stored XSS. The payload is rendered unsafely in the Admin → Manage Photos interface, causing it to execute in the administrator’s browser, therefore allowing an attacker to target administrators and perform actions with elevated privileges. This issue is fixed in version 5.5.2 - #157.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-269, CWE-79
References: https://github.com/MacWarrior/clipbucket-v5/commit/8e3cf79ce2721fbebde68a05a9a1a6319f086bcc; https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-93rh-fxxx-j38j
CVE: CVE-2025-12520
Published: 2025-11-07
Description: The WP Airbnb Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.2 due to insufficient URL validation that allows users to pull in a malicious HTML file. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-79
References: https://cyberresearchhub.com/; https://cyberresearchhub.com/cve-2025-12520/; https://plugins.trac.wordpress.org/changeset?old_path=/wp-airbnb-review-slider/tags/4.2&new_path=/wp-airbnb-review-slider/tags/4.3&sfp_email=&sfph_mail=
CVE: CVE-2025-12527
Published: 2025-11-07
Description: The Page & Post Notes plugin for WordPress is vulnerable to unauthorized modification of notes due to a missing capability check on the 'yydev_notes_save_dashboard_data' function in all versions up to, and including, 1.3.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify notes.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/page-post-notes/trunk/include/insert-to-db.php; https://plugins.trac.wordpress.org/browser/page-post-notes/trunk/index.php#L85; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3389236%40page-post-notes&new=3389236%40page-post-notes&sfp_email=&sfph_mail=
CVE: CVE-2025-64339
Published: 2025-11-07
Description: ClipBucket v5 is an open source video sharing platform. In versions 5.5.2-#146 and below, the Manage Playlists feature is vulnerable to stored Cross-site Scripting (XSS),specifically in the Playlist Name field. An authenticated low-privileged user can create a playlist with a malicious name containing HTML/JavaScript code, which is rendered unescaped on playlist detail and listing pages. This results in arbitrary JavaScript execution in every viewer’s browser, including administrators. This issue is fixed in version 5.5.2-#147.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/MacWarrior/clipbucket-v5/commit/8e3cf79ce2721fbebde68a05a9a1a6319f086bcc; https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-c695-m4g4-v3fv
CVE: CVE-2025-64343
Published: 2025-11-07
Description: (conda) Constructor is a tool that enables users to create installers for conda package collections. In versions 3.12.2 and below, the  installation directory inherits permissions from its parent directory. Outside of restricted directories, the permissions are very permissive and often allow write access by authenticated users. Any logged in user can make modifications during the installation for both single-user and all-user installations. This constitutes a local attack vector if the installation is in a directory local users have access to. For single-user installations in a shared directory, these permissions persist after the installation. This issue is fixed in version 3.13.0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-289
References: https://github.com/conda/constructor/commit/c368383710a7c2b81ad1b0ecb9724b38d3577447; https://github.com/conda/constructor/releases/tag/3.13.0; https://github.com/conda/constructor/security/advisories/GHSA-vvpr-2qg4-2mrq
CVE: CVE-2025-64346
Published: 2025-11-07
Description: archives is a Go library for extracting archives (tar, zip, etc.). Version 1.0.0 does not prevent a malicious user to feed a specially crafted archive to the library causing RCE, modification of files or other malignancies in the context of whatever the user is running this library as, through the program that imports it. Severity depends on user permissions, environment and how arbitrary archives are passed. This issue is fixed in version 1.0.1.
CWE: CWE-22
References: https://github.com/jaredallard/archives/commit/3bddec7bd3f38afbe97ae61d1c8a8487e9ea4ef1; https://github.com/jaredallard/archives/security/advisories/GHSA-j95m-rcjp-q69h
CVE: CVE-2025-10966
Published: 2025-11-07
Description: curl's code for managing SSH connections when SFTP was done using the wolfSSH
powered backend was flawed and missed host verification mechanisms.

This prevents curl from detecting MITM attackers and more.
CVSS Score: 4.3 (MEDIUM)
References: https://curl.se/docs/CVE-2025-10966.html; https://curl.se/docs/CVE-2025-10966.json; https://hackerone.com/reports/3355218
CVE: CVE-2025-46413
Published: 2025-11-07
Description: Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-916
References: https://jvn.jp/en/jp/JVN13754005/; https://www.buffalo.jp/news/detail/20251107-01.html