deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-58983
Published: 2025-09-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stefano Lissa Include Me include-me allows Stored XSS.This issue affects Include Me: from n/a through <= 1.3.2.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/include-me/vulnerability/wordpress-include-me-plugin-1-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-58984
Published: 2025-09-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through <= 2.11.20.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/usc-e-shop/vulnerability/wordpress-welcart-e-commerce-plugin-2-11-20-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-58985
Published: 2025-09-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Additional Custom Product Tabs for WooCommerce product-tabs-for-woocommerce allows Stored XSS.This issue affects Additional Custom Product Tabs for WooCommerce: from n/a through <= 1.7.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/product-tabs-for-woocommerce/vulnerability/wordpress-additional-custom-product-tabs-for-woocommerce-plugin-1-7-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-58987
Published: 2025-09-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AntoineH Football Pool football-pool allows Stored XSS.This issue affects Football Pool: from n/a through <= 2.12.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/football-pool/vulnerability/wordpress-football-pool-plugin-2-12-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-58988
Published: 2025-09-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Dolson My Tickets my-tickets allows Stored XSS.This issue affects My Tickets: from n/a through <= 2.0.22.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/my-tickets/vulnerability/wordpress-my-tickets-plugin-2-0-22-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-58989
Published: 2025-09-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in silverplugins217 Dynamic Text Field For Contact Form 7 dynamic-text-field-for-contact-form-7 allows Stored XSS.This issue affects Dynamic Text Field For Contact Form 7: from n/a through <= 1.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/dynamic-text-field-for-contact-form-7/vulnerability/wordpress-dynamic-text-field-for-contact-form-7-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-58990
Published: 2025-09-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems ShopLentor woolentor-addons allows Stored XSS.This issue affects ShopLentor: from n/a through <= 3.2.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/woolentor-addons/vulnerability/wordpress-shoplentor-plugin-3-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-58991
Published: 2025-09-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Cristiano Zanca WooCommerce Booking Bundle Hours allows Stored XSS. This issue affects WooCommerce Booking Bundle Hours: from n/a through 0.7.4.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/wordpress/plugin/woo-booking-bundle-hours/vulnerability/wordpress-woocommerce-booking-bundle-hours-plugin-0-7-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2025-58993
Published: 2025-09-09
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS tutor allows SQL Injection.This issue affects Tutor LMS: from n/a through <= 3.7.4.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/Wordpress/Plugin/tutor/vulnerability/wordpress-tutor-lms-plugin-3-7-4-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2025-58997
Published: 2025-09-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Frenify Mow mow allows Code Injection.This issue affects Mow: from n/a through <= 4.10.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Theme/mow/vulnerability/wordpress-mow-theme-4-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2025-59005
Published: 2025-09-09
Description: Missing Authorization vulnerability in frenify Categorify categorify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Categorify: from n/a through <= 1.0.7.5.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/categorify/vulnerability/wordpress-categorify-plugin-1-0-7-5-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-59008
Published: 2025-09-09
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PressTigers ZIP Code Based Content Protection zip-code-based-content-protection allows SQL Injection.This issue affects ZIP Code Based Content Protection: from n/a through <= 1.0.0.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/Wordpress/Plugin/zip-code-based-content-protection/vulnerability/wordpress-zip-code-based-content-protection-plugin-1-0-0-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2025-5005
Published: 2025-09-09
Description: A vulnerability was detected in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. This affects an unknown function of the file crm/WeiXinApp/dingtalk/index_event.php. The manipulation of the argument corpurl results in server-side request forgery. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-918
References: https://github.com/jackyliu666/dingtalk; https://vuldb.com/?ctiid.323233; https://vuldb.com/?id.323233
CVE: CVE-2025-5500
Published: 2025-09-09
Description: A flaw has been found in ZhenShi Mibro Fit App 1.6.3.17499 on Android. This impacts an unknown function of the file AndroidManifest.xml of the component com.xiaoxun.xunoversea.mibrofit. This manipulation causes improper export of android application components. The attack requires local access. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-926
References: https://github.com/KMov-g/androidapps/blob/main/com.xiaoxun.xunoversea.mibrofit.md; https://github.com/KMov-g/androidapps/blob/main/com.xiaoxun.xunoversea.mibrofit.md#steps-to-reproduce; https://vuldb.com/?ctiid.323234
CVE: CVE-2025-10198
Published: 2025-09-09
Description: Sunshine for Windows, version v2[PII_REDACTED]14, contains a DLL search-order hijacking vulnerability, allowing attackers to insert a malicious DLL in user-writeable PATH directories.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://github.com/LizardByte/Sunshine/commit/9db11a906167bd962e57896223d7b9718058aeb2; https://github.com/LizardByte/Sunshine/pull/3971; https://www.kb.cert.org/vuls/id/974249
CVE: CVE-2025-10199
Published: 2025-09-09
Description: A local privilege escalation vulnerability exists in Sunshine for Windows (version v2[PII_REDACTED]14 and likely prior versions) due to an unquoted service path.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://github.com/LizardByte/Sunshine/security/advisories/GHSA-r3rw-mx4q-7vfp; https://www.kb.cert.org/vuls/id/974249
CVE: CVE-2025-57078
Published: 2025-09-09
Description: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pppoeServerWhiteMacIndex parameter in the formModifyPppAuthWhiteMac function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/formModifyPppAuthWhiteMac.md; https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/formModifyPppAuthWhiteMac.md
CVE: CVE-2025-57085
Published: 2025-09-09
Description: Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/W30E/UploadCfg.md; https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/W30E/UploadCfg.md
CVE: CVE-2025-57086
Published: 2025-09-09
Description: Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the String parameter in the formDeleteMeshNode function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/W30E/formDeleteMeshNode.md
CVE: CVE-2025-57665
Published: 2025-09-09
Description: Element Plus Link component (el-link) through 2.10.6 implements insufficient input validation for the href attribute, creating a security abstraction gap that obscures URL-based attack vectors. The component passes user-controlled href values directly to underlying anchor elements without protocol validation, URL sanitization, or security headers. This allows attackers to inject malicious URLs using dangerous protocols (javascript:, data:, file:) or redirect users to external malicious sites. While native HTML anchor elements present similar risks, UI component libraries bear additional responsibility for implementing security safeguards and providing clear risk documentation. The vulnerability enables XSS attacks, phishing campaigns, and open redirect exploits affecting applications that use Element Plus Link components with user-controlled or untrusted URL inputs.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-601
References: https://element-plus.org/en-US/component/link.html; https://github.com/element-plus/element-plus; https://github.com/element-plus/element-plus/blob/dev/packages/components/link/src/link.vue
CVE: CVE-2025-9269
Published: 2025-09-09
Description: A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device.
CWE: CWE-918
References: https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE: CVE-2025-10164
Published: 2025-09-09
Description: A security flaw has been discovered in lmsys sglang 0.4.6. Affected by this vulnerability is the function main of the file /update_weights_from_tensor. The manipulation of the argument serialized_named_tensors results in deserialization. The attack can be launched remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20, CWE-502
References: https://vuldb.com/?ctiid.323203; https://vuldb.com/?id.323203; https://vuldb.com/?submit.635919
CVE: CVE-2025-29089
Published: 2025-09-09
Description: An issue in TP-Link AX10 Ax1500 v.1.3.10 Build (20230130) allows a remote attacker to obtain sensitive information
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://intrix.com.au/articles/exposing-insecure-http-basic-authentication-tp-link-archer-ax10-cwe-id-cwe-319/; https://www.linkedin.com/in/timothy-hoekstra-91b6951b2; https://intrix.com.au/articles/exposing-insecure-http-basic-authentication-tp-link-archer-ax10-cwe-id-cwe-319/
CVE: CVE-2025-43775
Published: 2025-09-09
Description: Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.5, 2024.Q2.0 through 2024.Q2.12, 2024.Q1.1 through 2024.Q1.12, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via remote app title field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43775
CVE: CVE-2025-43781
Published: 2025-09-09
Description: Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.110 through 7.4.3.128, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.12 allows remote attackers to inject arbitrary web script or HTML via the URL in search bar portlet
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43781
CVE: CVE-2025-54242
Published: 2025-09-09
Description: Premiere Pro versions 25.3, 24.6.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file, and scope is unchanged.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/premiere_pro/apsb25-87.html
CVE: CVE-2025-54256
Published: 2025-09-09
Description: Dreamweaver Desktop versions 21.5 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must click on a malicious link, and scope is changed.
CVSS Score: 8.6 (HIGH)
CWE: CWE-352
References: https://helpx.adobe.com/security/products/dreamweaver/apsb25-91.html
CVE: CVE-2025-55047
Published: 2025-09-09
Description: CWE-798 Use of Hard-coded Credentials
CVSS Score: 8.4 (HIGH)
CWE: CWE-798
References: https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE: CVE-2025-55049
Published: 2025-09-09
Description: Use of Default Cryptographic Key (CWE-1394)
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-1394, CWE-1394
References: https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE: CVE-2025-55050
Published: 2025-09-09
Description: CWE-1242: Inclusion of Undocumented Features
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1242
References: https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE: CVE-2025-55051
Published: 2025-09-09
Description: CWE-1392: Use of Default Credentials
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-1392
References: https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE: CVE-2025-55052
Published: 2025-09-09
Description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
CVE: CVE-2025-55727
Published: 2025-09-09
Description: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the width parameter in the column macro allows remote code execution for any user who can edit any page or who can access the CKEditor converter. The width parameter is used without escaping in XWiki syntax, thus allowing XWiki syntax injection which enables remote code execution when the macro has been installed by a user with programming right, or it at least allows executing Velocity code as the wiki admin. Version 1.26.5 contains a patch for the issue.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-95, CWE-94
References: https://github.com/xwikisas/xwiki-pro-macros/blob/aed17fa3db4081846dbb6bdf76ba10cf44401c44/xwiki-pro-macros-ui/src/main/resources/Confluence/Macros/Column.xml#L438; https://github.com/xwikisas/xwiki-pro-macros/commit/05651adb4b58d03ba862d5290c645feeffd2121b; https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-hxqp-983c-m8h9
CVE: CVE-2025-55728
Published: 2025-09-09
Description: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the classes parameter in the panel macro allows remote code execution for any user who can edit any page The classes parameter is used without escaping in XWiki syntax, thus allowing XWiki syntax injection which enables remote code execution. Version 1.26.5 contains a patch for the issue.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-95, CWE-94
References: https://github.com/xwikisas/xwiki-pro-macros/blob/93ac1a38c829e3ef787379b2b45eb043a573e5f7/xwiki-pro-macros-ui/src/main/resources/XWiki/Macros/Panel.xml#L554; https://github.com/xwikisas/xwiki-pro-macros/commit/3ca815294bf54fc024b2363efbece7aa08b8efd5; https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-48f4-h726-74p5
CVE: CVE-2025-55729
Published: 2025-09-09
Description: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the ac:type in the ConfluenceLayoutSection macro allows remote code execution for any user who can edit any page The classes parameter is used without escaping in XWiki syntax, thus allowing XWiki syntax injection which enables remote code execution. Version 1.26.5 has a fix for the issue.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-116
References: https://github.com/xwikisas/xwiki-pro-macros/blob/93ac1a38c829e3ef787379b2b45eb043a573e5f7/xwiki-pro-macros-confluence-bridges/xwiki-pro-macros-confluence-bridges-ui/src/main/resources/Confluence/Macros/ConfluenceLayoutSection.xml#L518; https://github.com/xwikisas/xwiki-pro-macros/commit/06e6cf[PII_REDACTED]d0242a11e390642178d9df05; https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-22xj-jpjg-gpgw
CVE: CVE-2025-55730
Published: 2025-09-09
Description: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the title in the confluence paste code macro allows remote code execution for any user who can edit any page. The classes parameter is used without escaping in XWiki syntax, thus allowing XWiki syntax injection which enables remote code execution. Version 1.26.5 has a fix for the issue.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-116
References: https://github.com/xwikisas/xwiki-pro-macros/blob/93ac1a38c829e3ef787379b2b45eb043a573e5f7/xwiki-pro-macros-confluence-bridges/xwiki-pro-macros-confluence-bridges-ui/src/main/resources/Confluence/Macros/ConfluencePasteCodeMacro.xml#L435; https://github.com/xwikisas/xwiki-pro-macros/commit/049716df415aaf00938a91d618d382777820d2af; https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-5w8v-h22g-j2mp
CVE: CVE-2025-57060
Published: 2025-09-09
Description: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dns_forward_rule_store function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/dns_forward_rule_store.md
CVE: CVE-2025-57278
Published: 2025-09-09
Description: The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800_B10_ALK_SL_V01.01.02P42U14_06 does not implement proper session handling. After a user authenticates from a specific IP address, the router grants access to any other client using that same IP, without requiring credentials or verifying client identity. There are no session tokens, cookies, or unique identifiers in place. This flaw allows an attacker to obtain full administrative access simply by configuring their device to use the same IP address as a previously authenticated user. This results in a complete authentication bypass.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://www.lb-link.com/CPE300M-AX300-4G-LTE-Router-pd502775568.html; https://www.zyenra.com/blog/improper-ip-bound-session-authentication-in-lb-link-cpe300m
CVE: CVE-2025-34172
Published: 2025-09-09
Description: In pfSense CE /usr/local/www/haproxy/haproxy_stats.php, the value of the showsticktablecontent parameter is displayed after being read from HTTP GET requests. This can enable reflected cross-site scripting when the victim is authenticated.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/pfsense/FreeBSD-ports/commit/04d1328ab077830eb57a24bb7018c812b6358c64; https://redmine.pfsense.org/issues/16411; https://www.vulncheck.com/advisories/netgate-pf-sense-ce-ha-proxy-reflected-xss
CVE: CVE-2025-34173
Published: 2025-09-09
Description: In pfSense CE /usr/local/www/snort/snort_ip_reputation.php, the value of the iplist parameter is not sanitized of directory traversal-related characters/strings before being used to check if a file exists. While the contents of the file cannot be read, the server reveals whether a file exists, which allows an attacker to enumerate files on the target. The attacker must be authenticated with at least "WebCfg - Services: Snort package" permissions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/pfsense/FreeBSD-ports/commit/d6f462bcc446969f8955c16cfde300d5c9ab7435; https://redmine.pfsense.org/issues/16412; https://www.vulncheck.com/advisories/netgate-pf-sense-ce-snort-directory-traversal-information-disclosure
CVE: CVE-2025-34174
Published: 2025-09-09
Description: In pfSense CE /usr/local/www/status_traffic_totals.php, the value of the start-day parameter is not ensured to be a numeric value or sanitized of HTML-related characters/strings before being directly displayed in the input box. This value can be saved as the default value to be displayed to all users when visiting the Status Traffic Totals page, resulting in stored cross-site scripting. The attacker must be authenticated with at least "WebCfg - Status: Traffic Totals" permissions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pfsense/FreeBSD-ports/commit/9e412edf62113303c36c7f7d5a48b0a3fb0be893; https://redmine.pfsense.org/issues/16413; https://www.vulncheck.com/advisories/netgate-pf-sense-ce-status-traffic-totals-stored-xss
CVE: CVE-2025-34175
Published: 2025-09-09
Description: In pfSense CE /usr/local/www/suricata/suricata_filecheck.php, the value of the filehash parameter is directly displayed without sanitizing for HTML-related characters/strings. This can result in reflected cross-site scripting if the victim is authenticated.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/pfsense/FreeBSD-ports/commit/97852ccfd201b24ee542be30af81272485fde0b4; https://redmine.pfsense.org/issues/16414; https://www.vulncheck.com/advisories/netgate-pf-sense-ce-suricata-reflected-xss
CVE: CVE-2025-36011
Published: 2025-09-09
Description: IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-614
References: https://www.ibm.com/support/pages/node/7244357