deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-2425
Published: 2025-07-18
Description: Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET security software to clear the content of an arbitrary file on the file system.
CWE: CWE-367
References: https://support.eset.com/en/ca8840-eset-customer-advisory-toctou-race-condition-vulnerability-in-eset-products-on-windows-fixed
CVE: CVE-2025-49484
Published: 2025-07-18
Description: A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows low-privilege users to execute arbitrary SQL commands via the 'cvid' parameter in the employee application feature.
CWE: CWE-89
References: https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-49484; https://joomsky.com/js-jobs-joomla/; https://www.exploit-db.com/exploits/52373
CVE: CVE-2025-49485
Published: 2025-07-18
Description: A SQL injection vulnerability in the Balbooa Forms plugin 1.0.0-2.3.1.1 for Joomla allows privileged users to execute arbitrary SQL commands via the 'id' parameter.
CWE: CWE-89
References: https://extensions.joomla.org/extension/forms/
CVE: CVE-2025-49486
Published: 2025-07-18
Description: A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items.
CWE: CWE-79
References: https://extensions.joomla.org/extension/gallery/
CVE: CVE-2025-50056
Published: 2025-07-18
Description: A reflected XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 28 Joomla was discovered. The issue allows remote attackers to inject arbitrary web script or HTML via the crafted parameter.
CWE: CWE-79
References: https://rsjoomla.com/
CVE: CVE-2025-50057
Published: 2025-07-18
Description: A DOS vulnerability in RSFiles! component 1.16.3-1.17.7 Joomla was discovered. The issue allows unauthenticated remote attackers to deny access to service via the search feature.
CWE: CWE-400
References: https://rsjoomla.com/
CVE: CVE-2025-50058
Published: 2025-07-18
Description: A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was discovered. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the review reply component.
CWE: CWE-79
References: https://rsjoomla.com/
CVE: CVE-2025-50126
Published: 2025-07-18
Description: A stored XSS vulnerability in the RSBlog! component 1.11.6-1.14.5 Joomla was discovered. The issue allows remote authenticated users to inject arbitrary web script or HTML via the jform[tags_text] parameter.
CWE: CWE-79
References: https://rsjoomla.com/
CVE: CVE-2025-6233
Published: 2025-07-18
Description: Mattermost versions 10.8.x <= 10.8.1, 10.7.x <= 10.7.3, 10.5.x <= 10.5.7, 9.11.x <= 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: https://mattermost.com/security-updates
CVE: CVE-2025-6227
Published: 2025-07-18
Description: Mattermost versions 10.5.x <= 10.5.7, 9.11.x <= 9.11.16 fail to negotiate a new token when accepting the invite which allows a user that intercepts both invite and password to send synchronization payloads to the server that originally created the invite via the REST API.
CVSS Score: 2.2 (LOW)
CWE: CWE-522
References: https://mattermost.com/security-updates
CVE: CVE-2025-7785
Published: 2025-07-18
Description: A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0. This vulnerability affects the function sso of the file src/main/java/com/jeesite/modules/sys/web/SsoController.java. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-601
References: https://github.com/thinkgem/jeesite5/commit/3d06b8d009d0267f0255acc87ea19d29d07cedc3; https://github.com/thinkgem/jeesite5/issues/29; https://github.com/thinkgem/jeesite5/issues/29#issue[PII_REDACTED]
CVE: CVE-2024-13175
Published: 2025-07-18
Description: Authorization Bypass Through User-Controlled Key vulnerability in Vidco Software VOC TESTER allows Forceful Browsing.This issue affects VOC TESTER: before 12.41.0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-639
References: https://www.usom.gov.tr/bildirim/tr-25-0159
CVE: CVE-2025-46001
Published: 2025-07-18
Description: An arbitrary file upload vulnerability in the is_allowed_file_type() function of Filemanager v2.3.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/simogeo/Filemanager; https://github.com/zakumini/CVE-List/blob/main/CVE-2025-46001/CVE-2025-46001.md; https://www.exploit-db.com/exploits/38895
CVE: CVE-2025-46002
Published: 2025-07-18
Description: An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP request to the filemanager.php endpoint.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-23
References: https://github.com/simogeo/Filemanager; https://github.com/simogeo/Filemanager/releases/tag/v1.7.0; https://github.com/simogeo/Filemanager/releases/tag/v1.8.0
CVE: CVE-2025-7784
Published: 2025-07-18
Description: A flaw was found in the Keycloak identity and access management system when Fine-Grained Admin Permissions(FGAPv2) are enabled. An administrative user with the manage-users role can escalate their privileges to realm-admin due to improper privilege enforcement. This vulnerability allows unauthorized elevation of access rights, compromising the intended separation of administrative duties and posing a security risk to the realm.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://access.redhat.com/errata/RHSA-2025:12015; https://access.redhat.com/errata/RHSA-2025:12016; https://access.redhat.com/security/cve/CVE-2025-7784
CVE: CVE-2025-7786
Published: 2025-07-18
Description: A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrap_popin_update/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/gnuboard/g6/issues/645; https://vuldb.com/?ctiid.316847; https://vuldb.com/?id.316847
CVE: CVE-2025-46000
Published: 2025-07-18
Description: An arbitrary file upload vulnerability in the component /rsc/filemanager.rsc.class.php of Filemanager commit c75b914 v.2.5.0 allows attackers to execute arbitrary code via uploading a crafted SVG file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://github.com/simogeo/Filemanager; https://github.com/simogeo/Filemanager/commit/c75b914; https://github.com/zakumini/CVE-List/blob/main/CVE-2025-46000/CVE-2025-46000.md
CVE: CVE-2025-46732
Published: 2025-07-18
Description: OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.6.6, an IDOR vulnerability in the GrapQL `NotificationLineNotificationMarkReadMutation` and `NotificationLineNotificationDeleteMutation` mutations of OpenCTI allows an authenticated user to change the read status of a notification or delete a notification of another user in case he has knowledge of the UUID of the notification. When changing the read status of a notification, the user also receives the content of the notification they changed the read status of. Authenticated Users in OpenCTI can read, modify and delete notification of other users if they know the UUID of the notification. Version 6.6.6 fixes the issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-285
References: https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-535g-qp2c-h7vp
CVE: CVE-2025-7787
Published: 2025-07-18
Description: A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function httpJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/xuxueli/xxl-job/issues/3749; https://vuldb.com/?ctiid.316848; https://vuldb.com/?id.316848
CVE: CVE-2025-7788
Published: 2025-07-18
Description: A vulnerability has been found in Xuxueli xxl-job up to 3.1.1 and classified as critical. Affected by this vulnerability is the function commandJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77, CWE-78, CWE-78
References: https://github.com/xuxueli/xxl-job/issues/3750; https://vuldb.com/?ctiid.316849; https://vuldb.com/?id.316849
CVE: CVE-2025-53888
Published: 2025-07-18
Description: RIOT-OS, an operating system that supports Internet of Things devices, has an ineffective size check implemented with `assert()` can lead to buffer overflow in versions up to and including 2025.04. Assertions are usually compiled out in production builds. If assertions are the only defense against untrusted inputs, the software may be exposed to attacks that utilize the lack of proper input checks. In the `l2filter_add()` function shown below, `addr_len` is checked using an assertion and is subsequently used as an argument in a `memcpy()` call. When assertions are disabled, there would be no size check for `addr_len`. As a consequence, if an attacker were to provide an `addr_len` value larger than `CONFIG_L2FILTER_ADDR_MAXLEN`, they can trigger a buffer overflow and write past the `list[i].addr` buffer. If the unchecked input is attacker-controlled, the impact of the buffer overflow can range from a denial of service to arbitrary code execution. Commit f6f7de4ccc107c018630e4c15500825caf02e1c2 contains a patch for the vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/RIOT-OS/RIOT/blob/2025.04/sys/net/link_layer/l2filter/l2filter.c#L47; https://github.com/RIOT-OS/RIOT/commit/f6f7de4ccc107c018630e4c15500825caf02e1c2; https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-7972-w7f9-3j9m
CVE: CVE-2025-53945
Published: 2025-07-18
Description: apko allows users to build and publish OCI container images built from apk packages. Starting in version 0.27.0 and prior to version 0.29.5, critical files were inadvertently set to 0666, which could likely be abused for root escalation. Version 0.29.5 contains a fix for the issue.
CVSS Score: 7.0 (HIGH)
CWE: CWE-276
References: https://github.com/chainguard-dev/apko/commit/04f37e2d50d5a502e155788561fb7d40de705bd9; https://github.com/chainguard-dev/apko/commit/aedb0772d6bf6e74d8f17690946dbc791d0f6af3; https://github.com/chainguard-dev/apko/releases/tag/v0.27.0
CVE: CVE-2025-54059
Published: 2025-07-18
Description: melange allows users to build apk packages using declarative pipelines. Starting in version 0.23.0 and prior to version 0.29.5, SBOM files generated by melange in apks had file system permissions mode 666. This potentially allows an unprivileged user to tamper with apk SBOMs on a running image, potentially confusing security scanners. An attacker could also perform a DoS under special circumstances. Version 0.29.5 fixes the issue.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-276
References: https://github.com/chainguard-dev/melange/commit/1b272db2a0bb[PII_REDACTED]cc56d87236b4b64c04; https://github.com/chainguard-dev/melange/commit/e29494b4a40a91619ec1c87a09003c6d5164cea1; https://github.com/chainguard-dev/melange/pull/1836
CVE: CVE-2025-54073
Published: 2025-07-18
Description: mcp-package-docs is an MCP (Model Context Protocol) server that provides LLMs with efficient access to package documentation across multiple programming languages and language server protocol (LSP) capabilities. A command injection vulnerability exists in the `mcp-package-docs` MCP Server prior to the fix in commit cb4ad[PII_REDACTED]9fd6f2f1cf1ec4731eec56eb9. The vulnerability is caused by the unsanitized use of input parameters within a call to `child_process.exec`, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings. This introduces the possibility of shell metacharacter injection (`|`, `>`, `&&`, etc.). Commit cb4ad[PII_REDACTED]9fd6f2f1cf1ec4731eec56eb9 in version 0.1.27 contains a fix for the issue, but upgrading to 0.1.28 is recommended.
CVSS Score: 7.5 (HIGH)
CWE: CWE-77
References: https://equixly.com/blog/2025/03/29/mcp-server-new-security-nightmare; https://github.com/advisories/GHSA-3q26-f695-pp76; https://github.com/advisories/GHSA-5w57-2ccq-8w95
CVE: CVE-2025-54075
Published: 2025-07-18
Description: MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to version 0.17.2, a remote script-inclusion / stored cross-site scripting vulnerability in @nuxtjs/mdc lets a Markdown author inject a `<base href="https://attacker.tld">` element. The `<base>` tag rewrites how all subsequent relative URLs are resolved, so an attacker can make the page load scripts, styles, or images from an external, attacker-controlled origin and execute arbitrary JavaScript in the site’s context. Version 0.17.2 contains a fix for the issue.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://github.com/nuxt-modules/mdc/commit/3657a5bf2326a73cd3d906f57149146a412b962a; https://github.com/nuxt-modules/mdc/security/advisories/GHSA-cj6r-rrr9-fg82; https://github.com/nuxt-modules/mdc/security/advisories/GHSA-cj6r-rrr9-fg82
CVE: CVE-2025-54076
Published: 2025-07-18
Description: WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in versions prior to 3.4.6 in the `pre_cadastro_atendido.php` endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the `msg_e` parameter. Version 3.4.6 fixes the issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-vpvf-hffw-4qpc; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-vpvf-hffw-4qpc
CVE: CVE-2025-54077
Published: 2025-07-18
Description: WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in versions prior to 3.4.6 in the `personalizacao.php` endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the `err` parameter. Version 3.4.6 fixes the issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-4g9x-whv2-3xr4; https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-4g9x-whv2-3xr4
CVE: CVE-2025-54078
Published: 2025-07-18
Description: WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in versions prior to 3.4.6 in the `personalizacao_imagem.php` endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the `err` parameter. Version 3.4.6 fixes the issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-f4j2-mxwh-rfm7
CVE: CVE-2025-54079
Published: 2025-07-18
Description: WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.6 in the endpoint `/html/atendido/Profile_Atendido.php`, in the `idatendido` parameter. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. Version 3.4.6 fixes the issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-g4v3-j8w5-33v3
CVE: CVE-2025-7789
Published: 2025-07-18
Description: A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic. Affected by this issue is the function makeToken of the file src/main/java/com/xxl/job/admin/controller/IndexController.java of the component Token Generation. The manipulation leads to password hash with insufficient computational effort. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.7 (LOW)
CWE: CWE-326, CWE-916, CWE-326
References: https://github.com/xuxueli/xxl-job/issues/3751; https://vuldb.com/?ctiid.316850; https://vuldb.com/?id.316850
CVE: CVE-2025-7790
Published: 2025-07-18
Description: A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been classified as critical. This affects an unknown part of the file /menu_nat.asp of the component HTTP Request Handler. The manipulation of the argument out_addr/in_addr/out_port/proto leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/XiDP0/MyCVE/blob/main/CVE/D-Link%20DI_8100-16.07.26A1/menu_nat_asp/menu_nat_asp.md; https://vuldb.com/?ctiid.316851; https://vuldb.com/?id.316851
CVE: CVE-2025-7791
Published: 2025-07-18
Description: A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/i-Corner/cve/issues/9; https://phpgurukul.com/; https://vuldb.com/?ctiid.316852
CVE: CVE-2025-45156
Published: 2025-07-18
Description: Splashin iOS v2.0 fails to enforce server-side interval restrictions for location updates for free-tier users.
CVSS Score: 5.3 (MEDIUM)
References: http://splashin.com; https://carterlasalle.github.io/splashin-cve-2025/splashin-1.pdf
CVE: CVE-2025-45157
Published: 2025-07-18
Description: Insecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data for specific users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://splashin.com; https://carterlasalle.github.io/splashin-cve-2025/splashin-1.pdf
CVE: CVE-2025-47158
Published: 2025-07-18
Description: Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-302
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47158
CVE: CVE-2025-47995
Published: 2025-07-18
Description: Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1390
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47995
CVE: CVE-2025-49746
Published: 2025-07-18
Description: Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-285
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49746
CVE: CVE-2025-49747
Published: 2025-07-18
Description: Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-862
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49747
CVE: CVE-2025-50586
Published: 2025-07-18
Description: StudentManage v1.0 was discovered to contain Cross-Site Request Forgery (CSRF).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://studentmanage.com; https://gitee.com/DayCloud/student-manage; https://github.com/SimonKang949/Vulnerabilities/issues/1
CVE: CVE-2025-52162
Published: 2025-07-18
Description: agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain an XML External Entity (XXE) via the RSSReader endpoint. This vulnerability allows attackers to access sensitive data via providing a crafted XML input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: http://agorum.com; https://herolab.usd.de/security-advisories/usd-2025-0024/
CVE: CVE-2025-53762
Published: 2025-07-18
Description: Permissive list of allowed inputs in Microsoft Purview allows an authorized attacker to elevate privileges over a network.
CVSS Score: 8.7 (HIGH)
CWE: CWE-183
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53762
CVE: CVE-2025-7783
Published: 2025-07-18
Description: Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js.

This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.
CWE: CWE-330
References: https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0; https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4; https://lists.debian.org/debian-lts-announce/2025/07/msg00023.html
CVE: CVE-2025-7792
Published: 2025-07-18
Description: A vulnerability was found in Tenda FH451 1.0.0.9. It has been rated as critical. This issue affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/panda666-888/vuls/blob/main/tenda/fh451/formSafeEmailFilter.md; https://github.com/panda666-888/vuls/blob/main/tenda/fh451/formSafeEmailFilter.md#poc; https://vuldb.com/?ctiid.316853
CVE: CVE-2025-7793
Published: 2025-07-18
Description: A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary. The manipulation of the argument webSiteId leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/panda666-888/vuls/blob/main/tenda/fh451/formWebTypeLibrary.md; https://github.com/panda666-888/vuls/blob/main/tenda/fh451/formWebTypeLibrary.md#poc; https://vuldb.com/?ctiid.316854
CVE: CVE-2025-7794
Published: 2025-07-18
Description: A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/panda666-888/vuls/blob/main/tenda/fh451/fromNatStaticSetting.md; https://github.com/panda666-888/vuls/blob/main/tenda/fh451/fromNatStaticSetting.md#poc; https://vuldb.com/?ctiid.316855
CVE: CVE-2025-52164
Published: 2025-07-18
Description: Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to store credentials in plaintext.
CVSS Score: 8.2 (HIGH)
CWE: CWE-256
References: http://agorum.com; https://herolab.usd.de/security-advisories/usd-2025-0023/