deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-9136
Published: 2025-08-19
Description: A flaw has been found in libretro RetroArch 1.18.0/1.19.0/1.20.0. This affects the function filestream_vscanf of the file libretro-common/streams/file_stream.c. This manipulation causes out-of-bounds read. The attack needs to be launched locally. Upgrading to version 1.21.0 mitigates this issue. It is recommended to upgrade the affected component.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-125, CWE-125
References: https://github.com/libretro/RetroArch/pull/17555; https://github.com/libretro/RetroArch/pull/17555#issuecomment[PII_REDACTED]; https://github.com/libretro/RetroArch/pull/17555/commits/6446f045ec7fc6a5cac3e8ec35a2f0a5889c88e8
CVE: CVE-2025-43740
Published: 2025-08-19
Description: A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.3.120 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0 through 2025.Q1.15, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13 and 2024.Q1.9 through 2024.Q1.19 allows an remote authenticated attacker to inject JavaScript through the message boards feature available via the web interface.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43740
CVE: CVE-2025-9137
Published: 2025-08-19
Description: A vulnerability has been found in Scada-LTS 2.7.8.1. This impacts an unknown function of the file scheduled_events.shtm. Such manipulation of the argument alias leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor explains: "[T]he risks of indicated vulnerabilities seem to be minimal as all scenarios likely require admin permissions. Moreover, regardless our team fixes those vulnerabilities - the overall risk change to the user due to malicious admin actions will not be lower. An admin user - by definition - has full control over HTML and JS code that is delivered to users in regular synoptic panels. In other words - due to the design of the system it is not possible to limit the admin user to attack the users."
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://karinagante.github.io/cve-2025-9137/; https://karinagante.github.io/cve-2025-9137/#proof-of-concept-poc; https://vuldb.com/?ctiid.320517
CVE: CVE-2025-9138
Published: 2025-08-19
Description: A vulnerability was found in Scada-LTS 2.7.8.1. Affected is an unknown function of the file pointHierarchy/new/. Performing manipulation of the argument Title results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor explains: "[T]he risks of indicated vulnerabilities seem to be minimal as all scenarios likely require admin permissions. Moreover, regardless our team fixes those vulnerabilities - the overall risk change to the user due to malicious admin actions will not be lower. An admin user - by definition - has full control over HTML and JS code that is delivered to users in regular synoptic panels. In other words - due to the design of the system it is not possible to limit the admin user to attack the users."
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://karinagante.github.io/cve-2025-9138/; https://karinagante.github.io/cve-2025-9138/#proof-of-concept-poc; https://vuldb.com/?ctiid.320518
CVE: CVE-2025-9139
Published: 2025-08-19
Description: A vulnerability was determined in Scada-LTS 2.7.8.1. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/dwr/call/plaincall/WatchListDwr.init.dwr. Executing manipulation can lead to information disclosure. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized. The vendor explains: "[T]he risks of indicated vulnerabilities seem to be minimal as all scenarios likely require admin permissions. Moreover, regardless our team fixes those vulnerabilities - the overall risk change to the user due to malicious admin actions will not be lower."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://github.com/CVE-Hunters/CVE/blob/main/Scada-LTS/%20CVE-2025-9139.md; https://vuldb.com/?ctiid.320519; https://vuldb.com/?id.320519
CVE: CVE-2024-45062
Published: 2025-08-19
Description: A stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34. A specially configured printer that supports IPP-over-USB can cause a buffer overflow which can lead to a arbitrary code execution in a privileged service. To trigger the vulnerability, a malicious device would need to be connected to the vulnerable system over USB.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-121
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-2071; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2071
CVE: CVE-2025-43739
Published: 2025-08-19
Description: Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allow any authenticated user to modify the content of emails sent through the calendar portlet, allowing an attacker to send phishing emails to any other user in the same organization.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-203
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43739
CVE: CVE-2025-4044
Published: 2025-08-19
Description: Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.
CVSS Score: 8.2 (HIGH)
CWE: CWE-611
References: https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE: CVE-2025-4046
Published: 2025-08-19
Description: A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization
CVSS Score: 8.5 (HIGH)
CWE: CWE-862
References: https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE: CVE-2025-4690
Published: 2025-08-19
Description: A regular expression used by AngularJS'  linky https://docs.angularjs.org/api/ngSanitize/filter/linky  filter to detect URLs in input text is vulnerable to super-linear runtime due to backtracking. With a large carefully-crafted input, this can cause a 

 Regular expression Denial of Service (ReDoS) https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS  attack on the application.

This issue affects all versions of AngularJS.

Note:
The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see  here https://docs.angularjs.org/misc/version-support-status .
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1333
References: https://codepen.io/herodevs/pen/RNNEPzP/751b91eab7730dff277523f3d50e4b77; https://www.herodevs.com/vulnerability-directory/cve-2025-4690; https://codepen.io/herodevs/pen/RNNEPzP/751b91eab7730dff277523f3d50e4b77
CVE: CVE-2025-50461
Published: 2025-08-19
Description: A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/model_merger.py script when using the "fsdp" backend. The script calls torch.load() with weights_only=False on user-supplied .pt files, allowing attackers to execute arbitrary code if a maliciously crafted model file is loaded. An attacker can exploit this by convincing a victim to download and place a malicious model file in a local directory with a specific filename pattern. This vulnerability may lead to arbitrary code execution with the privileges of the user running the script.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: https://github.com/Anchor0221/CVE-2025-50461; https://github.com/pytorch/pytorch/blob/main/SECURITY.md#loading-untrusted-data; https://github.com/volcengine/verl
CVE: CVE-2025-50567
Published: 2025-08-19
Description: Saurus CMS Community Edition 4.7.1 contains a vulnerability in the custom DB::prepare() function, which uses preg_replace() with the deprecated /e (eval) modifier to interpolate SQL query parameters. This leads to injection of user-controlled SQL statements, potentially leading to arbitrary PHP code execution.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-89, CWE-94
References: http://saurus.com; http://saurused.com; https://github.com/rahulhoysala/security-research/blob/main/CVE-2025-50567.md
CVE: CVE-2025-54336
Published: 2025-08-19
Description: In Plesk Obsidian 18.0.70, _isAdminPasswordValid uses an == comparison. Thus, if the correct password is "0e" followed by any digit string, then an attacker can login with any other string that evaluates to 0.0 (such as the 0e0 string). This occurs in admin/plib/LoginManager.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-697
References: https://blog.aziz.tn/2025/08/cve-2025-54336.html/; https://support.plesk.com/hc/en-us/articles/[PII_REDACTED]9847-Vulnerability-CVE-2025-54336; https://www.plesk.com/blog/plesk-news-announcements/introducing-plesk-obsidian-18-0-70-anniversary-edition/
CVE: CVE-2025-9140
Published: 2025-08-19
Description: A vulnerability was identified in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this issue is some unknown functionality of the file /crm/crmapi/erp/tabdetail_moduleSave.php. The manipulation of the argument getvaluestring leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Upgrading to version 8.6.5.4 can resolve this issue. The affected component should be upgraded. The vendor explains: "All SQL injection vectors were patched via parameterized queries and input sanitization in v8.6.5+."
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://vuldb.com/?ctiid.320520; https://vuldb.com/?id.320520; https://vuldb.com/?submit.628087
CVE: CVE-2025-50579
Published: 2025-08-19
Description: A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particularly JWT tokens, due to improper validation of the Origin header. This misconfiguration enables attackers to intercept tokens using a simple browser script and exfiltrate them to a remote attacker-controlled server, potentially leading to unauthorized actions within the application.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1259
References: https://github.com/NginxProxyManager/nginx-proxy-manager; https://github.com/NginxProxyManager/nginx-proxy-manager/issues/4509
CVE: CVE-2025-50897
Published: 2025-08-19
Description: A vulnerability exists in riscv-boom SonicBOOM 1.2 (BOOMv1.2) processor implementation, where valid virtual-to-physical address translations configured with write permissions (PTE_W) in SV39 mode may incorrectly trigger a Store/AMO access fault during store instructions (sd). This occurs despite the presence of proper page table entries and valid memory access modes. The fault is reproducible when transitioning into virtual memory and attempting store operations in mapped kernel memory, indicating a potential flaw in the MMU, PMP, or memory access enforcement logic. This may cause unexpected kernel panics or denial of service in systems using BOOMv1.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-693
References: https://github.com/LuLuji04/POC-Boomv1.2; https://github.com/riscv-boom/riscv-boom; https://github.com/riscv-software-src/riscv-isa-sim
CVE: CVE-2025-51487
Published: 2025-08-19
Description: A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/GiacoLenzo2109/MoonShine_Software_PoCs; https://github.com/moonshine-software/moonshine
CVE: CVE-2025-51488
Published: 2025-08-19
Description: A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.4, allowing remote attackers to store and execute arbitrary JavaScript by including a malicious HTML payload in the Name parameter when creating a new Admin.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-79
References: https://github.com/GiacoLenzo2109/MoonShine_Software_PoCs; https://github.com/moonshine-software/moonshine
CVE: CVE-2025-51489
Published: 2025-08-19
Description: A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing remote attackers to upload a malicious SVG file when creating/updating an Article and correctly execute arbitrary JavaScript when the file link is opened.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-434
References: https://github.com/GiacoLenzo2109/MoonShine_Software_PoCs; https://github.com/moonshine-software/moonshine
CVE: CVE-2025-51510
Published: 2025-08-19
Description: MoonShine was discovered to contain a SQL injection vulnerability under the Blog -> Categories page when using the moonshine-tree-resource (version < 2.0.2) component.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://github.com/GiacoLenzo2109/MoonShine_Software_PoCs; https://github.com/lee-to/moonshine-tree-resource; https://github.com/moonshine-software/moonshine
CVE: CVE-2025-51529
Published: 2025-08-19
Description: Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 allows remote attackers to cause a denial of service (database server resource exhaustion) via unlimited database write operations to the wp_ajax_nopriv_cacsp_insert_consent_data endpoint.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://cookies.com; http://johan.com; https://gist.github.com/piotrmaciejbednarski/f738145c0ab24a110649dc16907e395b
CVE: CVE-2025-9143
Published: 2025-08-19
Description: A security flaw has been discovered in Scada-LTS 2.7.8.1. This affects an unknown part of the file mailing_lists.shtm. The manipulation of the argument name/userList/address results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://karinagante.github.io/cve-2025-9143/; https://karinagante.github.io/cve-2025-9143/#proof-of-concept-poc; https://vuldb.com/?ctiid.320521
CVE: CVE-2025-9144
Published: 2025-08-19
Description: A weakness has been identified in Scada-LTS 2.7.8.1. This vulnerability affects unknown code of the file publisher_edit.shtm. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://karinagante.github.io/cve-2025-9144/; https://karinagante.github.io/cve-2025-9144/#proof-of-concept-poc; https://vuldb.com/?ctiid.320522
CVE: CVE-2025-43738
Published: 2025-08-19
Description: A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0 through 2025.Q1.15, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.19 allows a remote authenticated user to inject JavaScript code via _com_liferay_expando_web_portlet_ExpandoPortlet_displayType parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43738
CVE: CVE-2025-50434
Published: 2025-08-19
Description: A security issue has been identified in Appian Enterprise Business Process Management version 25.3. The vulnerability is related to incorrect access control, which under certain conditions could allow unauthorized access to information. NOTE: this has been disputed because the CVE Record information does not originate from the Supplier, and the report lacks specificity about why a problem exists, how the behavior could be reproduced, and whether any action could be taken to resolve the problem.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://gist.github.com/Exploit097/11f[PII_REDACTED]2efa3ffd9d1fec152ed
CVE: CVE-2025-50938
Published: 2025-08-19
Description: Cross site scripting (XSS) vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/zhblue/hustoj; https://github.com/zhblue/hustoj/issues/1093
CVE: CVE-2025-51539
Published: 2025-08-19
Description: EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access control and insufficient input validation in a script exposed via the web interface. A remote attacker can supply a crafted path parameter to a PHP script to read arbitrary files from the filesystem. The script lacks both authentication checks and secure path handling, allowing directory traversal attacks (e.g., ../../../) to access sensitive files such as configuration files, database dumps, source code, and password reset tokens. If phpMyAdmin is exposed, extracted credentials can be used for direct administrative access. In environments without such tools, attacker-controlled file reads still allow full database extraction by targeting raw MySQL data files. The vendor states that the issue is fixed in 3.5.72.27183.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://ballpoint.fr/en/blog/ezged3-preauth-file-read-admin-takeover
CVE: CVE-2025-51540
Published: 2025-08-19
Description: EzGED3 3.5.0 stores user passwords using an insecure hashing scheme: md5(md5(password)). This hashing method is cryptographically weak and allows attackers to perform efficient offline brute-force attacks if password hashes are disclosed. The lack of salting and use of a fast, outdated algorithm makes it feasible to recover plaintext credentials using precomputed tables or GPU-based cracking tools. The vendor states that the issue is fixed in 3.5.72.27183.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-260
References: https://ballpoint.fr/en/blog/ezged3-preauth-file-read-admin-takeover
CVE: CVE-2025-8782
Published: 2025-08-19
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-9145
Published: 2025-08-19
Description: A security vulnerability has been detected in Scada-LTS 2.7.8.1. This issue affects some unknown processing of the file view_edit.shtm of the component SVG File Handler. Such manipulation of the argument backgroundImageMP leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://karinagante.github.io/cve-2025-9145/; https://karinagante.github.io/cve-2025-9145/#proof-of-concept-poc; https://vuldb.com/?ctiid.320523
CVE: CVE-2025-9146
Published: 2025-08-19
Description: A flaw has been found in Linksys E5600 1.1.0.26. The affected element is the function verify_gemtek_header of the file checkFw.sh of the component Firmware Handler. Executing manipulation can lead to risky cryptographic algorithm. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is described as difficult. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-310, CWE-327, CWE-327
References: https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Linksys/E5600.md; https://vuldb.com/?ctiid.320525; https://vuldb.com/?id.320525
CVE: CVE-2025-38554
Published: 2025-08-19
Description: In the Linux kernel, the following vulnerability has been resolved:

mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped

By inducing delays in the right places, Jann Horn created a reproducer for
a hard to hit UAF issue that became possible after VMAs were allowed to be
recycled by adding SLAB_TYPESAFE_BY_RCU to their cache.

Race description is borrowed from Jann's discovery report:
lock_vma_under_rcu() looks up a VMA locklessly with mas_walk() under
rcu_read_lock().  At that point, the VMA may be concurrently freed, and it
can be recycled by another process.  vma_start_read() then increments the
vma->vm_refcnt (if it is in an acceptable range), and if this succeeds,
vma_start_read() can return a recycled VMA.

In this scenario where the VMA has been recycled, lock_vma_under_rcu()
will then detect the mismatching ->vm_mm pointer and drop the VMA through
vma_end_read(), which calls vma_refcount_put().  vma_refcount_put() drops
the refcount and then calls rcuwait_wake_up() using a copy of vma->vm_mm. 
This is wrong: It implicitly assumes that the caller is keeping the VMA's
mm alive, but in this scenario the caller has no relation to the VMA's mm,
so the rcuwait_wake_up() can cause UAF.

The diagram depicting the race:
T1         T2         T3
==         ==         ==
lock_vma_under_rcu
  mas_walk
          <VMA gets removed from mm>
                      mmap
                        <the same VMA is reallocated>
  vma_start_read
    __refcount_inc_not_zero_limited_acquire
                      munmap
                        __vma_enter_locked
                          refcount_add_not_zero
  vma_end_read
    vma_refcount_put
      __refcount_dec_and_test
                          rcuwait_wait_event
                            <finish operation>
      rcuwait_wake_up [UAF]

Note that rcuwait_wait_event() in T3 does not block because refcount was
already dropped by T1.  At this point T3 can exit and free the mm causing
UAF in T1.

To avoid this we move vma->vm_mm verification into vma_start_read() and
grab vma->vm_mm to stabilize it before vma_refcount_put() operation.

[surenb@google.com: v3]
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/1bcd236a2536a451e385f8d6d2bb589689ec812f; https://git.kernel.org/stable/c/6e88fe54721dee17d3496bc998f0c7d243896348; https://git.kernel.org/stable/c/9bbffee67ffd[PII_REDACTED]b57f3b1245579ef08
CVE: CVE-2025-38555
Published: 2025-08-19
Description: In the Linux kernel, the following vulnerability has been resolved:

usb: gadget : fix use-after-free in composite_dev_cleanup()

1. In func configfs_composite_bind() -> composite_os_desc_req_prepare():
if kmalloc fails, the pointer cdev->os_desc_req will be freed but not
set to NULL. Then it will return a failure to the upper-level function.
2. in func configfs_composite_bind() -> composite_dev_cleanup():
it will checks whether cdev->os_desc_req is NULL. If it is not NULL, it
will attempt to use it.This will lead to a use-after-free issue.

BUG: KASAN: use-after-free in composite_dev_cleanup+0xf4/0x2c0
Read of size 8 at addr[PII_REDACTED]837a00 by task init/1

CPU: 10 PID: 1 Comm: init Tainted: G           O      5.10.97-oh #1
 kasan_report+0x188/0x1cc
 __asan_load8+0xb4/0xbc
 composite_dev_cleanup+0xf4/0x2c0
 configfs_composite_bind+0x210/0x7ac
 udc_bind_to_driver+0xb4/0x1ec
 usb_gadget_probe_driver+0xec/0x21c
 gadget_dev_desc_UDC_store+0x264/0x27c
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/151c0aa896c47a4459e07fee7d4843f44c1bb18e; https://git.kernel.org/stable/c/2db29235e900a084a656dea7e0939b0abb7bb897; https://git.kernel.org/stable/c/5f06ee9f9a3665d43133f125c17e5258a13f3963