deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-52983
Published: 2025-07-11
Description: A UI Discrepancy for Security Feature

vulnerability in the UI of Juniper Networks Junos OS on VM Host systems allows a network-based, unauthenticated attacker to access the device.



On VM Host Routing Engines (RE), even if the configured public key for root has been removed, remote users which are in possession of the corresponding private key can still log in as root.
This issue affects Junos OS:



  *  all versions before 22.2R3-S7,
  *  22.4 versions before 22.4R3-S5,
  *  23.2 versions before 23.2R2-S3,
  *  23.4 versions before 23.4R2-S3,
  *  24.2 versions before 24.2R1-S2, 24.2R2.
CVSS Score: 7.2 (HIGH)
CWE: CWE-446
References: https://supportportal.juniper.net/JSA100089; https://www.juniper.net/documentation/us/en/software/junos/junos-install-upgrade/topics/topic-map/vm-host-overview.html#id-routing-engines-with-vm-host-support
CVE: CVE-2025-52984
Published: 2025-07-11
Description: A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause impact to the availability of the device.

When static route points to a reject next hop and a gNMI query is processed for that static route, rpd crashes and restarts.

This issue affects:

Junos OS:   *  all versions before 21.2R3-S9,
  *  21.4 versions before 21.4R3-S10, 
  *  22.2 versions before 22.2R3-S6,
  *  22.4 versions before 22.4R3-S6,
  *  23.2 versions before 23.2R2-S3,
  *  23.4 versions before 23.4R2-S4,
  *  24.2 versions before 24.2R1-S2, 24.2R2;


Junos OS Evolved:



  *  all versions before 22.4R3-S7-EVO,
  *  23.2-EVO 

 versions before 23.2R2-S3-EVO,
  *  23.4-EVO versions before 23.4R2-S4-EVO,
  *  24.2-EVO versions before 24.2R2-EVO.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476
References: https://supportportal.juniper.net/JSA100090
CVE: CVE-2025-52985
Published: 2025-07-11
Description: A Use of Incorrect Operator

vulnerability in the Routing Engine firewall of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to bypass security restrictions.

When a firewall filter which is applied to the lo0 or re:mgmt interface references a prefix list with 'from prefix-list', and that prefix list contains more than 10 entries, the prefix list doesn't match and packets destined to or from the local device are not filtered.


This issue affects firewall filters applied to the re:mgmt interfaces as input and output, but only affects firewall filters applied to the lo0 interface as output.
This issue is applicable to IPv4 and IPv6 as a prefix list can contain IPv4 and IPv6 prefixes.
This issue affects Junos OS Evolved:

  *  23.2R2-S3-EVO versions before 23.2R2-S4-EVO,
  *  23.4R2-S3-EVO versions before 23.4R2-S5-EVO,
  *  24.2R2-EVO versions before 24.2R2-S1-EVO,
  *  24.4-EVO versions before 24.4R1-S3-EVO, 24.4R2-EVO.


This issue doesn't affect Junos OS Evolved versions before 23.2R1-EVO.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-480
References: https://supportportal.juniper.net/JSA100091
CVE: CVE-2025-52986
Published: 2025-07-11
Description: A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low privileged user to cause an impact to the availability of the device.

When RIB sharding is enabled and a user executes one of several routing related 'show' commands, a certain amount of memory is leaked. When all available memory has been consumed rpd will crash and restart.

The leak can be monitored with the CLI command:



show task memory detail | match task_shard_mgmt_cookie



where the allocated memory in bytes can be seen to continuously increase with each exploitation.



This issue affects:

Junos OS:

  *  all versions before 21.2R3-S9,
  *  21.4 versions before 21.4R3-S11,
  *  22.2 versions before 22.2R3-S7,
  *  22.4 versions before 22.4R3-S7,
  *  23.2 versions before 23.2R2-S4, 
  *  23.4 versions before 23.4R2-S4,
  *  24.2 versions before 24.2R2,
  *  24.4 versions before 24.4R1-S2, 24.4R2;


Junos OS Evolved:

  *  all versions before 22.2R3-S7-EVO
  *  22.4-EVO versions before 22.4R3-S7-EVO,
  *  23.2-EVO versions before 23.2R2-S4-EVO,
  *  23.4-EVO versions before 23.4R2-S4-EVO,
  *  24.2-EVO versions before 24.2R2-EVO, 
  *  24.4-EVO versions before 24.4R2-EVO.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://supportportal.juniper.net/JSA100092
CVE: CVE-2025-52988
Published: 2025-07-11
Description: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a high privileged, local attacker to escalated their privileges to root.

When a user provides specifically crafted arguments to the 'request system logout' command, these will be executed as root on the shell, which can completely compromise the device.
This issue affects:

Junos OS: 



  *  all versions before 21.2R3-S9,
  *  21.4 versions before 21.4R3-S8,
  *  22.2 versions before 22.2R3-S6,
  *  22.3 versions before 22.3R3-S3,
  *  22.4 versions before 22.4R3-S6,
  *  23.2 versions before 23.2R2-S1,
  *  23.4 versions before 23.4R1-S2, 23.4R2;




Junos OS Evolved:



  *  all versions before 22.4R3-S6-EVO,
  *  23.2-EVO versions before 23.2R2-S1-EVO,
  *  23.4-EVO versions before 23.4R1-S2-EVO, 23.4R2-EVO.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: https://supportportal.juniper.net/JSA100095
CVE: CVE-2025-52989
Published: 2025-07-11
Description: An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to modify the system configuration.



A user with limited configuration and commit permissions, using a specifically crafted annotate configuration command, can change any part of the device configuration.




This issue affects:

 Junos OS: 



  *  all versions before 22.2R3-S7,
  *  22.4 versions before 22.4R3-S7,
  *  23.2 versions before 23.2R2-S4,
  *  23.4 versions before 23.4R2-S4,
  *  24.2 versions before 24.2R2-S1,
  *  24.4 versions before 24.4R1-S2, 24.4R2;




Junos OS Evolved:



  *  all versions before 22.4R3-S7-EVO,
  *  23.2-EVO versions before 23.2R2-S4-EVO,
  *  23.4-EVO versions before 23.4R2-S5-EVO, 
  *  24.2-EVO versions before 24.2R2-S1-EVO



  *  24.4-EVO versions before 24.4R2-EVO.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-140
References: https://supportportal.juniper.net/JSA100096
CVE: CVE-2025-6549
Published: 2025-07-11
Description: An Incorrect Authorization vulnerability in the web server of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to reach the 

Juniper Web Device Manager

 (J-Web).

When Juniper Secure connect (JSC) is enabled on specific interfaces, or multiple interfaces are configured for J-Web, the J-Web UI is reachable over more than the intended interfaces.
This issue affects Junos OS:



  *  all versions before 21.4R3-S9,
  *  22.2 versions before 22.2R3-S5,
  *  22.4 versions before 22.4R3-S5,
  *  23.2 versions before 23.2R2-S3,
  *  23.4 versions before 23.4R2-S5,
  *  24.2 versions before 24.2R2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://supportportal.juniper.net/JSA100098
CVE: CVE-2025-7026
Published: 2025-07-11
Description: A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used as an unchecked pointer in the CommandRcx0 function. If the contents at RBX match certain expected values (e.g., '$DB$' or '2DB$'), the function performs arbitrary writes to System Management RAM (SMRAM), leading to potential privilege escalation to System Management Mode (SMM) and persistent firmware compromise.
CVSS Score: 8.2 (HIGH)
References: https://kb.cert.org/vuls/id/746790; https://www.binarly.io/advisories/brly-dva-2025-008; https://www.gigabyte.com/Support/Security
CVE: CVE-2025-7027
Published: 2025-07-11
Description: A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control both the read and write addresses used by the CommandRcx1 function. The write target is derived from an unvalidated UEFI NVRAM variable (SetupXtuBufferAddress), while the write content is read from an attacker-controlled pointer based on the RBX register. This dual-pointer dereference enables arbitrary memory writes within System Management RAM (SMRAM), leading to potential SMM privilege escalation and firmware compromise.
CVSS Score: 8.2 (HIGH)
References: https://kb.cert.org/vuls/id/746790; https://www.binarly.io/advisories/brly-2025-009; https://www.gigabyte.com/Support/Security
CVE: CVE-2025-7028
Published: 2025-07-11
Description: A vulnerability in the Software SMI handler (SwSmiInputValue 0x20) allows a local attacker to supply a crafted pointer (FuncBlock) through RBX and RCX register values. This pointer is passed unchecked into multiple flash management functions (ReadFlash, WriteFlash, EraseFlash, and GetFlashInfo) that dereference both the structure and its nested members, such as BufAddr. This enables arbitrary read/write access to System Management RAM (SMRAM), allowing an attacker to corrupt firmware memory, exfiltrate SMRAM content via flash, or install persistent implants.
CVSS Score: 7.8 (HIGH)
References: https://kb.cert.org/vuls/id/746790; https://www.binarly.io/advisories/brly-dva-2025-010; https://www.gigabyte.com/Support/Security
CVE: CVE-2025-7029
Published: 2025-07-11
Description: A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used to derive pointers (OcHeader, OcData) passed into power and thermal configuration logic. These buffers are not validated before performing multiple structured memory writes based on OcSetup NVRAM values, enabling arbitrary SMRAM corruption and potential SMM privilege escalation.
CVSS Score: 8.2 (HIGH)
References: https://kb.cert.org/vuls/id/746790; https://www.binarly.io/advisories/brly-dva-2025-011; https://www.gigabyte.com/Support/Security
CVE: CVE-2024-47065
Published: 2025-07-11
Description: Meshtastic is an open source mesh networking solution. Prior to 2.5.1, traceroute responses from the remote node are not rate limited. Given that there are SNR measurements attributed to each received transmission, this is a guaranteed way to get a remote station to reliably and continuously respond. You could easily get 100 samples in a short amount of time (estimated 2 minutes), whereas passively doing the same could take hours or days. There are secondary effects that non-ratelimited traceroute does also allow a 2:1 reflected DoS of the network as well, but these concerns are less than the problem with positional confidentiality (other DoS routes exist). This vulnerability is fixed in 2.5.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-799
References: https://github.com/meshtastic/firmware/security/advisories/GHSA-4hjx-54gf-2jh7
CVE: CVE-2025-43856
Published: 2025-07-11
Description: immich is a high performance self-hosted photo and video management solution. Prior to 1.132.0, immich is vulnerable to account hijacking through oauth2, because the state parameter is not being checked. The oauth2 state parameter is similar to a csrf token, so when the user starts the login flow this unpredictable token is generated and somehow saved in the browser session and passed to the identity provider, which will return the state parameter when redirecting the user back to immich. Before the user is logged in that parameter needs to be verified to make sure the login was actively initiated by the user in this browser session. On it's own, this wouldn't be too bad, but when immich uses the /user-settings page as a redirect_uri, it will automatically link the accounts if the user was already logged in. This means that if someone has an immich instance with a public oauth provider (like google), an attacker can - for example - embed a hidden iframe in a webpage or even just send the victim a forged oauth login url with a code that logs the victim into the attackers oauth account and redirects back to immich and links the accounts. After this, the attacker can log into the victims account using their own oauth credentials. This vulnerability is fixed in 1.132.0.
CWE: CWE-303
References: https://github.com/immich-app/immich/security/advisories/GHSA-3832-6r8h-9cfm
CVE: CVE-2025-45582
Published: 2025-07-11
Description: GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains a ../ symlink to a critical directory. Second, the victim must extract an archive that contains a critical file, specified via a relative pathname that begins with the symlink name and ends with that critical file's name. Here, the extraction follows the symlink and overwrites the critical file. This bypasses the protection mechanism of "Member name contains '..'" that would occur for a single TAR archive that attempted to specify the critical file via a ../ approach. For example, the first archive can contain "x -> ../../../../../home/victim/.ssh" and the second archive can contain x/authorized_keys. This can affect server applications that automatically extract any number of user-supplied TAR archives, and were relying on the blocking of traversal. This can also affect software installation processes in which "tar xf" is run more than once (e.g., when installing a package can automatically install two dependencies that are set up as untrusted tarballs instead of official packages). NOTE: the official GNU Tar manual has an otherwise-empty directory for each "tar xf" in its Security Rules of Thumb; however, third-party advice leads users to run "tar xf" more than once into the same directory.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-24
References: https://github.com/i900008/vulndb/blob/main/Gnu_tar_vuln.md; https://lists.gnu.org/archive/html/bug-tar/2025-08/msg00012.html; https://www.gnu.org/software/tar/
CVE: CVE-2025-47182
Published: 2025-07-11
Description: Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47182
CVE: CVE-2025-47963
Published: 2025-07-11
Description: No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-451, CWE-451
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47963
CVE: CVE-2025-47964
Published: 2025-07-11
Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-451, CWE-451
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47964
CVE: CVE-2025-7450
Published: 2025-07-11
Description: A vulnerability was found in letseeqiji gorobbs up to 1.0.8. It has been classified as critical. This affects the function ResetUserAvatar of the file controller/api/v1/user.go of the component API. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-22
References: https://github.com/letseeqiji/gorobbs/issues/18; https://vuldb.com/?ctiid.316095; https://vuldb.com/?id.316095
CVE: CVE-2025-30402
Published: 2025-07-11
Description: A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f
CVSS Score: 8.1 (HIGH)
References: https://github.com/pytorch/executorch/commit/93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f; https://www.facebook.com/security/advisories/cve-2025-30402
CVE: CVE-2025-53641
Published: 2025-07-11
Description: Postiz is an AI social media scheduling tool. From 1.45.1 to 1.62.3, the Postiz frontend application allows an attacker to inject arbitrary HTTP headers into the middleware pipeline. This flaw enables a server-side request forgery (SSRF) condition, which can be exploited to initiate unauthorized outbound requests from the server hosting the Postiz application. This vulnerability is fixed in 1.62.3.
CVSS Score: 8.2 (HIGH)
CWE: CWE-918
References: https://github.com/gitroomhq/postiz-app/commit/65eca0e2f22155b43c78724ca43617ee52e42753; https://github.com/gitroomhq/postiz-app/security/advisories/GHSA-48c8-25jq-m55f
CVE: CVE-2025-53642
Published: 2025-07-11
Description: haxcms-nodejs and haxcms-php are backends for HAXcms. The logout function within the application does not terminate a user's session or clear their cookies. Additionally, the application issues a refresh token when logging out. This vulnerability is fixed in 11.0.6.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-613
References: https://github.com/haxtheweb/issues/security/advisories/GHSA-g4f5-5w5j-p5jg
CVE: CVE-2025-7452
Published: 2025-07-11
Description: A vulnerability was found in kone-net go-chat up to f9e58d0afa9bbdb31faf25e7739da330692c4c63. It has been declared as critical. This vulnerability affects the function GetFile of the file go-chat/api/v1/file_controller.go of the component Endpoint. The manipulation of the argument fileName leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22
References: http://github.com/kone-net/go-chat/issues/14; https://github.com/kone-net/go-chat/issues/14#issue[PII_REDACTED]; https://vuldb.com/?ctiid.316096
CVE: CVE-2013-3307
Published: 2025-07-11
Description: Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.
CVSS Score: 8.3 (HIGH)
CWE: CWE-78
References: https://web.archive.org/web/[PII_REDACTED]1918/https://www.trustwave.com/spiderlabs/advisories/TWSL2013-008.txt
CVE: CVE-2025-30403
Published: 2025-07-11
Description: A heap-buffer-overflow vulnerability is possible in mvfst via a specially crafted message during a QUIC session. This issue affects mvfst versions prior to v2025.07.07.00.
CVSS Score: 8.1 (HIGH)
References: https://github.com/facebook/mvfst/commit/65b297332191de6e867c4a3139a233fc84c0e7e0; https://www.facebook.com/security/advisories/cve-2025-30403
CVE: CVE-2025-3631
Published: 2025-07-11
Description: An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://www.ibm.com/support/pages/node/7237025; https://www.ibm.com/support/pages/node/7238310
CVE: CVE-2025-7453
Published: 2025-07-11
Description: A vulnerability was found in saltbo zpan up to 1.6.5/1.7.0-beta2. It has been rated as problematic. This issue affects the function NewToken of the file zpan/internal/app/service/token.go of the component JSON Web Token Handler. The manipulation with the input 123 leads to use of hard-coded password. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.7 (LOW)
CWE: CWE-255, CWE-259
References: https://github.com/saltbo/zpan/issues/219; https://vuldb.com/?ctiid.316097; https://vuldb.com/?id.316097
CVE: CVE-2025-7454
Published: 2025-07-11
Description: A vulnerability classified as critical has been found in Campcodes Online Movie Theater Seat Reservation System 1.0. Affected is an unknown function of the file /admin/manage_theater.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/N1n3b9S/cve/issues/2; https://vuldb.com/?ctiid.316098; https://vuldb.com/?id.316098
CVE: CVE-2025-7503
Published: 2025-07-11
Description: An OEM IP camera manufactured by Shenzhen Liandian Communication Technology LTD exposes a Telnet service (port 23) with undocumented, default credentials. The Telnet service is enabled by default and is not disclosed or configurable via the device’s web interface or user manual. An attacker with network access can authenticate using default credentials and gain root-level shell access to the device. The affected firmware version is AppFHE1_V1.0.6.0 (Kernel: KerFHE1_PTZ_WIFI_V3.1.1, Hardware: HwFHE1_WF6_PTZ_WIFI_20201218). No official fix or firmware update is available, and the vendor could not be contacted. This vulnerability allows for remote code execution and privilege escalation.
CWE: CWE-798
References: https://github.com/AounShAh/Research-on-v380-cctv-ip-camera
CVE: CVE-2025-7455
Published: 2025-07-11
Description: A vulnerability classified as critical was found in Campcodes Online Movie Theater Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /manage_reserve.php. The manipulation of the argument mid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/N1n3b9S/cve/issues/3; https://vuldb.com/?ctiid.316099; https://vuldb.com/?id.316099
CVE: CVE-2025-7456
Published: 2025-07-11
Description: A vulnerability, which was classified as critical, has been found in Campcodes Online Movie Theater Seat Reservation System 1.0. Affected by this issue is some unknown functionality of the file /reserve.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/N1n3b9S/cve/issues/4; https://vuldb.com/?ctiid.316100; https://vuldb.com/?id.316100
CVE: CVE-2025-7457
Published: 2025-07-11
Description: A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1.0. This affects an unknown part of the file /admin/manage_movie.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/N1n3b9S/cve/issues/5; https://vuldb.com/?ctiid.316101; https://vuldb.com/?id.316101
CVE: CVE-2025-7459
Published: 2025-07-11
Description: A vulnerability classified as critical was found in code-projects Mobile Shop 1.0. This vulnerability affects unknown code of the file /EditMobile.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/xiajian-qx/cve-xiajian/issues/1; https://vuldb.com/?ctiid.316108
CVE: CVE-2025-53636
Published: 2025-07-11
Description: Open OnDemand is an open-source HPC portal. Users can flood logs by interacting with the shell app and generating many errors. Users who flood logs can create very large log files causing a Denial of Service (DoS) to the ondemand system. This vulnerability is fixed in 3.1.14 and 4.0.6.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-400, CWE-779
References: https://github.com/OSC/ondemand/commit/40800d68cd019c5f1c48b2deafebba6dff4abee2; https://github.com/OSC/ondemand/commit/96f29b995e1add[PII_REDACTED]e4dc8d961987e8b4; https://github.com/OSC/ondemand/security/advisories/GHSA-x5xv-fw37-v524