deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-24889
Published: 2025-02-13
Description: The SecureDrop Client is a desktop application for journalists to communicate with sources and work with submissions on the SecureDrop Workstation. Prior to versions 0.14.1 and 1.0.1, an attacker who has already gained code execution in a virtual machine on the SecureDrop Workstation could gain code execution in the `sd-log` virtual machine by sending a specially crafted log entry. The vulnerability is not exploitable remotely and requires an attacker to already have code execution on one of the other virtual machines (VMs) of the system. Due to the Workstation's underlying usage of Qubes for strong isolation, the vulnerability would have allowed lateral movement between any log-enabled VM and the `sd-log` VM, but no further. The SecureDrop workstation collects logs centrally in an isolated virtual machine named `sd-log` for easy export for support and debugging purposes. The `sd-log`  VM is completely isolated from the internet and ingests logs via a narrow Qubes RPC policy that allows for specific inter-VM communication via the Xen vchan protocol used by Qubes's qrexec mechanism. A path traversal bug was found in the logic used to choose where to write the log file for a specific VM: the VM name, used unsanitized in the destination path in `sd-log`, is supplied by the logging VM itself instead of being read from a trusted source, such as the Qubes environment variable `QREXEC_REMOTE_DOMAIN` that is used in the fixed implementation. An attacker could provide an arbitrary source VM name, possibly overwriting logs of other VMs, or writing a file named `syslog.log`, with attacker-controlled content, in arbitrary directories as a low-privileged user. A successful attack could potentially overwrite or add configuration to software that loads configuration files from a directory. This is exploitable to achieve code execution by setting the target directory to `/home/user/.config/autostart/` and letting it write `syslog.log`, because XFCE treats any file in that directory as a `.desktop` file regardless of its extension. Versions 0.14.1 and 1.0.1 contain a patch for this issue.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/freedomofpress/securedrop-client/commit/3012bf7289389b5ec0f5f4db0f009a17dee1f586; https://github.com/freedomofpress/securedrop-client/security/advisories/GHSA-933q-fx9h-5g46
CVE: CVE-2024-11344
Published: 2025-02-13
Description: A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
CVSS Score: 7.3 (HIGH)
CWE: CWE-843
References: https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE: CVE-2024-11345
Published: 2025-02-13
Description: A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
CVSS Score: 7.3 (HIGH)
CWE: CWE-787
References: https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE: CVE-2024-11346
Published: 2025-02-13
Description: : Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from *.*.P001 through *.*.P233, from *.*.P001 through *.*.P759, from *.*.P001 through *.*.P836.
CVSS Score: 7.3 (HIGH)
CWE: CWE-843
References: https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE: CVE-2024-11347
Published: 2025-02-13
Description: Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
CVSS Score: 7.3 (HIGH)
CWE: CWE-190
References: https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE: CVE-2025-1127
Published: 2025-02-13
Description: The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-362
References: https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE: CVE-2023-34397
Published: 2025-02-13
Description: Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will be crashed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE: CVE-2023-34398
Published: 2025-02-13
Description: Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The boost library contains a vulnerability/null pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE: CVE-2023-34399
Published: 2025-02-13
Description: Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The version of boost library contains vulnerability integer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE: CVE-2023-34400
Published: 2025-02-13
Description: Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file, service try to define header inside the file and convert it to null-terminated string. If character is missed, will return null pointer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE: CVE-2024-57378
Published: 2025-02-13
Description: Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows the unauthorized creation of internal users without assigning any existing user role, potentially leading to privilege escalation or unauthorized access to sensitive resources.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://github.com/bappe-sarker/Vulnerability-Research/tree/main/CVE-2024-57378
CVE: CVE-2025-1283
Published: 2025-02-13
Description: The Dingtian DT-R0 Series is vulnerable to an exploit that allows 
attackers to bypass login requirements by directly navigating to the 
main page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288, CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-18; https://www.dingtian-tech.com/en_us/aboutus.html?tab=contact_us
CVE: CVE-2025-20615
Published: 2025-02-13
Description: The Qardio Arm iOS application exposes sensitive data such as usernames 
and passwords in a plist file. This allows an attacker to log in to 
production-level development accounts and access an engineering backdoor
 in the application. The engineering backdoor allows the attacker to 
send hex-based commands over a UI-based terminal.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-359
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-044-01; https://www.qardio.com/about-us/#contact
CVE: CVE-2025-22896
Published: 2025-02-13
Description: mySCADA myPRO Manager


stores credentials in cleartext, which could allow an attacker to obtain sensitive information.
CVSS Score: 8.6 (HIGH)
CWE: CWE-312
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-16; https://www.myscada.org/contacts/; https://www.myscada.org/downloads/mySCADAPROManager/
CVE: CVE-2025-23411
Published: 2025-02-13
Description: mySCADA myPRO Manager
 is vulnerable to cross-site request forgery (CSRF), which could allow 
an attacker to obtain sensitive information. An attacker would need to 
trick the victim in to visiting an attacker-controlled website.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-16; https://www.myscada.org/contacts/; https://www.myscada.org/downloads/mySCADAPROManager/
CVE: CVE-2025-23421
Published: 2025-02-13
Description: An attacker could obtain firmware files and reverse engineer their 
intended use leading to loss of confidentiality and integrity of the 
hardware devices enabled by the Qardio iOS and Android applications.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-552
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-044-01; https://www.qardio.com/about-us/#contact
CVE: CVE-2025-24836
Published: 2025-02-13
Description: With a specially crafted Python script, an attacker could send 
continuous startMeasurement commands over an unencrypted Bluetooth 
connection to the affected device. This would prevent the device from 
connecting to a clinician's app to take patient readings and ostensibly 
flood it with requests, resulting in a denial-of-service condition.
CVSS Score: 7.1 (HIGH)
CWE: CWE-248
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-044-01; https://www.qardio.com/about-us/#contact
CVE: CVE-2025-24861
Published: 2025-02-13
Description: An attacker may inject commands via specially-crafted post requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-77
References: https://old.outbackpower.com/about-outback/contact/contact-us; https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-17
CVE: CVE-2025-24865
Published: 2025-02-13
Description: The administrative web interface of 
mySCADA myPRO Manager

can be accessed without authentication 
which could allow an unauthorized attacker to retrieve sensitive 
information and upload files without the associated password.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-16; https://www.myscada.org/contacts/; https://www.myscada.org/downloads/mySCADAPROManager/
CVE: CVE-2025-25067
Published: 2025-02-13
Description: mySCADA myPRO Manager
 
is vulnerable to an OS command injection which could allow a remote attacker to execute arbitrary OS commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-16; https://www.myscada.org/contacts/; https://www.myscada.org/downloads/mySCADAPROManager/
CVE: CVE-2025-25195
Published: 2025-02-13
Description: Zulip is an open source team chat application. A weekly cron job (added in 50256f[PII_REDACTED]8f521ef439cafa704e056539) demotes channels to being "inactive" after they have not received traffic for 180 days.  However, upon doing so, an event was sent to all users in the organization, not just users in the channel.  This event contained the name of the private channel. Similarly, the same commit (50256f[PII_REDACTED]8f521ef439cafa704e056539) added functionality to notify clients when channels stopped being "inactive."  The first message sent to a private channel which had not previously had any messages for over 180 days (and were thus already marked "inactive") would leak an event to all users in the organization; this event also contained the name of the private channel. Commits 75be449d456d29fef27e9d1828bafa30174284b4 and a2a1a7f8d152296c8966f1380872c0ac69e5c87e fixed the issue. This vulnerability only existed in `main`, and was not part of any published versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/zulip/zulip/commit/50256f[PII_REDACTED]8f521ef439cafa704e056539; https://github.com/zulip/zulip/commit/75be449d456d29fef27e9d1828bafa30174284b4; https://github.com/zulip/zulip/commit/a2a1a7f8d152296c8966f1380872c0ac69e5c87e
CVE: CVE-2025-25281
Published: 2025-02-13
Description: An attacker may modify the URL to discover sensitive information about the target network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://old.outbackpower.com/about-outback/contact/contact-us; https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-17
CVE: CVE-2025-26473
Published: 2025-02-13
Description: The Mojave Inverter uses the GET method for sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-598
References: https://old.outbackpower.com/about-outback/contact/contact-us; https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-17
CVE: CVE-2023-34401
Published: 2025-02-13
Description: Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder there is a file, which is encoded with proprietary UD2 codec. Due to missed size checks in the enapsulate file, attacker can achieve Out-of-Bound Read in heap memory.
CVSS Score: 3.7 (LOW)
CWE: CWE-125
References: https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE: CVE-2023-34402
Published: 2025-02-13
Description: Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulate another file, which service will drop during processing. Due to missed checks, attacker can achieve Arbitrary File Write with service speech rights.
CVSS Score: 7.7 (HIGH)
CWE: CWE-787
References: https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE: CVE-2023-34403
Published: 2025-02-13
Description: Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to this pins and get access to internal network. A race condition can be acquired and attacker can spoof “UserData” with desirable file path and access it though backup on USB.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-284
References: https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE: CVE-2023-34404
Published: 2025-02-13
Description: Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to these pins and get access to internal network. As a result, by accessing a specific port an attacker can send call request to all registered services in router and achieve command injection vulnerability.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-284
References: https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE: CVE-2023-34406
Published: 2025-02-13
Description: An issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user data import/export function of NTG (New Telematics Generation) 6 head units. To perform this attack, local access to USB interface of the car is needed. With prepared data, an attacker can cause the User-Data service to fail. The failed service instance will restart automatically.
CVSS Score: 3.3 (LOW)
CWE: CWE-190
References: https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE: CVE-2024-12054
Published: 2025-02-13
Description: ZF Roll Stability Support Plus (RSSPlus) 
is vulnerable to an authentication bypass vulnerability targeting 
deterministic RSSPlus SecurityAccess service seeds, which may allow an 
attacker to remotely (proximal/adjacent with RF equipment or via pivot 
from J2497 telematics devices) call diagnostic functions intended for 
workshop or repair scenarios. This can impact system availability, 
potentially degrading performance or erasing software, however the 
vehicle remains in a safe vehicle state.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-305
References: https://nmfta.org/wp-content/media/2022/11/Actionable_Mitigations_Options_v9_DIST.pdf; https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-03
CVE: CVE-2024-37600
Published: 2025-02-13
Description: An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021. A possible stack buffer overflow in the Service Broker service affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP address, an attacker can connect via the internal network to the Service Broker service. With prepared HTTP requests, an attacker can cause the Service-Broker service to fail.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-121
References: https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE: CVE-2024-37601
Published: 2025-02-13
Description: An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6. A possible heap buffer overflow exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause the User-Data service to fail. The failed service instance will restart automatically.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-122
References: https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE: CVE-2024-37602
Published: 2025-02-13
Description: An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021. A possible NULL pointer dereference in the Apple Car Play function affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP address, an attacker can connect via the internal network to the AirTunes / AirPlay service. With prepared HTTP requests, an attacker can cause the Car Play service to fail.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-476
References: https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE: CVE-2024-37603
Published: 2025-02-13
Description: An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6. A possible type confusion exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause the User-Data service to fail. The failed service instance will restart automatically.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-843
References: https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE: CVE-2024-53309
Published: 2025-02-13
Description: A stack-based buffer overflow vulnerability exists in Effectmatrix Total Video Converter Command Line (TVCC) 2.50 when an overly long string is passed to the "-f" parameter. This can lead to memory corruption, potentially allowing arbitrary code execution or causing a denial of service via specially crafted input.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-121
References: https://github.com/ufist/vulnerability-research/blob/main/CVE-2024-53309/CVE-2024-53309.md
CVE: CVE-2024-53310
Published: 2025-02-13
Description: A Structured Exception Handler based buffer overflow vulnerability exists in Effectmatrix Total Video Converter Command Line (TVCC) 2.50 when a specially crafted file is passed to the -ff parameter. The vulnerability occurs due to improper handling of file input with overly long characters, leading to memory corruption. This can result in arbitrary code execution or denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-122
References: https://github.com/ufist/vulnerability-research/blob/main/CVE-2024-53310/CVE-2024-53310.md
CVE: CVE-2024-53311
Published: 2025-02-13
Description: A Stack buffer overflow in the arguments parameter in Immunity Inc. Immunity Debugger v1.85 allows attackers to execute arbitrary code via a crafted input that exceeds the buffer size.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-121
References: https://github.com/ufist/vulnerability-research/blob/main/CVE-2024-53311/CVE-2024-53311.md
CVE: CVE-2024-54951
Published: 2025-02-13
Description: Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Allevon412/Monica-Stored-XSS-Vulnerability
CVE: CVE-2024-56908
Published: 2025-02-13
Description: In Perfex Crm < 3.2.1, an authenticated attacker can send a crafted HTTP POST request to the affected upload_sales_file endpoint. By providing malicious input in the rel_id parameter, combined with improper input validation, the attacker can bypass restrictions and upload arbitrary files to directories of their choice, potentially leading to remote code execution or server compromise.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-444, CWE-1287
References: https://gist.github.com/JuyLang/7406077e3e5e6b2ff35c80f1853e298f
CVE: CVE-2024-57782
Published: 2025-02-13
Description: An issue in Docker-proxy v18.09.0 allows attackers to cause a denial of service.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-400
References: https://github.com/tzzhang123456/test123/issues/2
CVE: CVE-2025-22960
Published: 2025-02-13
Description: A session hijacking vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters. Unauthenticated attackers can access exposed log files (/logs/debug/xteLog*), potentially revealing sensitive session-related information such as session IDs (sess_id) and authentication success tokens (user_check_password OK). Exploiting this flaw could allow attackers to hijack active sessions, gain unauthorized access, and escalate privileges on affected devices.
CVSS Score: 8.0 (HIGH)
CWE: CWE-200
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-22960
CVE: CVE-2025-22961
Published: 2025-02-13
Description: A critical information disclosure vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters due to Incorrect Access Control (CWE-284). Unauthenticated attackers can directly access sensitive database backup files (snapshot_users.db) via publicly exposed URLs (/logs/devcfg/snapshot/ and /logs/devcfg/user/). Exploiting this vulnerability allows retrieval of sensitive user data, including login credentials, potentially leading to full system compromise.
CVSS Score: 8.0 (HIGH)
CWE: CWE-200
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-22961
CVE: CVE-2025-22962
Published: 2025-02-13
Description: A critical remote code execution (RCE) vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters when debugging mode is enabled. An attacker with a valid session ID (sess_id) can send specially crafted POST requests to the /json endpoint, enabling arbitrary command execution on the underlying system. This vulnerability can lead to full system compromise, including unauthorized access, privilege escalation, and potentially full device takeover.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-22962
CVE: CVE-2024-10404
Published: 2025-02-14
Description: CalInvocationHandler in Brocade 
SANnav before 2.3.1b logs sensitive information in clear text. The 
vulnerability could allow an authenticated, local attacker to view 
Brocade Fabric OS switch sensitive information in clear text. An 
attacker with administrative privileges could retrieve sensitive 
information including passwords; SNMP responses that contain AuthSecret 
and PrivSecret after collecting a “supportsave” or getting access to an 
already collected “supportsave”. NOTE: this issue exists because of an incomplete fix for CVE-2024-29952
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25403
CVE: CVE-2024-55904
Published: 2025-02-14
Description: IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 / IBM UrbanCode Deploy 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.9 could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.ibm.com/support/pages/node/7182841