diff --git a/2024/12xxx/CVE-2024-12757.json b/2024/12xxx/CVE-2024-12757.json
index b9fb0bfeba3..9616547199a 100644
--- a/2024/12xxx/CVE-2024-12757.json
+++ b/2024/12xxx/CVE-2024-12757.json
@@ -1,17 +1,107 @@
{
+ "data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
- "data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2024-12757",
- "ASSIGNER": "cve@mitre.org",
- "STATE": "RESERVED"
+ "ASSIGNER": "ics-cert@hq.dhs.gov",
+ "STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
- "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+ "value": "Nedap Librix Ecoreader \n is missing authentication for critical functions that could allow an \nunauthenticated attacker to potentially execute malicious code."
+ }
+ ]
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "CWE-306 Missing Authentication for Critical Function",
+ "cweId": "CWE-306"
+ }
+ ]
+ }
+ ]
+ },
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Nedap Librix",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Ecoreader",
+ "version": {
+ "version_data": [
+ {
+ "version_affected": "=",
+ "version_value": "all versions"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ },
+ "references": {
+ "reference_data": [
+ {
+ "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-02",
+ "refsource": "MISC",
+ "name": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-02"
+ }
+ ]
+ },
+ "generator": {
+ "engine": "Vulnogram 0.2.0"
+ },
+ "source": {
+ "advisory": "ICSA-25-007-02",
+ "discovery": "EXTERNAL"
+ },
+ "work_around": [
+ {
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "base64": false,
+ "type": "text/html",
+ "value": "Nedap Librix did not respond to CISA's attempts to coordinate with them.\n\n
"
+ }
+ ],
+ "value": "Nedap Librix did not respond to CISA's attempts to coordinate with them."
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Prajitesh Singh of Cyble reported this vulnerability to CISA."
+ }
+ ],
+ "impact": {
+ "cvss": [
+ {
+ "attackComplexity": "LOW",
+ "attackVector": "NETWORK",
+ "availabilityImpact": "LOW",
+ "baseScore": 8.6,
+ "baseSeverity": "HIGH",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "LOW",
+ "privilegesRequired": "NONE",
+ "scope": "UNCHANGED",
+ "userInteraction": "NONE",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
+ "version": "3.1"
}
]
}
diff --git a/2024/13xxx/CVE-2024-13515.json b/2024/13xxx/CVE-2024-13515.json
new file mode 100644
index 00000000000..07e7d3386ab
--- /dev/null
+++ b/2024/13xxx/CVE-2024-13515.json
@@ -0,0 +1,18 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "CVE_data_meta": {
+ "ID": "CVE-2024-13515",
+ "ASSIGNER": "cve@mitre.org",
+ "STATE": "RESERVED"
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+ }
+ ]
+ }
+}
\ No newline at end of file
diff --git a/2024/13xxx/CVE-2024-13516.json b/2024/13xxx/CVE-2024-13516.json
new file mode 100644
index 00000000000..a59bde80fea
--- /dev/null
+++ b/2024/13xxx/CVE-2024-13516.json
@@ -0,0 +1,18 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "CVE_data_meta": {
+ "ID": "CVE-2024-13516",
+ "ASSIGNER": "cve@mitre.org",
+ "STATE": "RESERVED"
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+ }
+ ]
+ }
+}
\ No newline at end of file
diff --git a/2024/23xxx/CVE-2024-23124.json b/2024/23xxx/CVE-2024-23124.json
index e99e78b8dff..1a18e57158c 100644
--- a/2024/23xxx/CVE-2024-23124.json
+++ b/2024/23xxx/CVE-2024-23124.json
@@ -11,7 +11,7 @@
"description_data": [
{
"lang": "eng",
- "value": "A maliciously crafted STP file in ASMIMPORT228A.dll when parsed through Autodesk AutoCAD can force an Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.\n"
+ "value": "A maliciously crafted STP file when parsed in ASMIMPORT228A.dll through Autodesk applications can force an Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process."
}
]
},
@@ -36,12 +36,289 @@
"product": {
"product_data": [
{
- "product_name": "AutoCAD, Advance Steel and Civil 3D",
+ "product_name": "AutoCAD",
"version": {
"version_data": [
{
- "version_affected": "=",
- "version_value": "2024, 2023, 2022, 2021"
+ "version_affected": "<",
+ "version_name": "2025",
+ "version_value": "2025.0.1"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2024",
+ "version_value": "2024.1.3"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2023",
+ "version_value": "2023.1.5"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2022",
+ "version_value": "2022.1.4"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2021",
+ "version_value": "2021.1.4"
+ }
+ ]
+ }
+ },
+ {
+ "product_name": "AutoCAD Architecture",
+ "version": {
+ "version_data": [
+ {
+ "version_affected": "<",
+ "version_name": "2025",
+ "version_value": "2025.0.1"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2024",
+ "version_value": "2024.1.3"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2023",
+ "version_value": "2023.1.5"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2022",
+ "version_value": "2022.1.4"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2021",
+ "version_value": "2021.1.4"
+ }
+ ]
+ }
+ },
+ {
+ "product_name": "AutoCAD Electrical",
+ "version": {
+ "version_data": [
+ {
+ "version_affected": "<",
+ "version_name": "2025",
+ "version_value": "2025.0.1"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2024",
+ "version_value": "2024.1.3"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2023",
+ "version_value": "2023.1.5"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2022",
+ "version_value": "2022.1.4"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2021",
+ "version_value": "2021.1.4"
+ }
+ ]
+ }
+ },
+ {
+ "product_name": "AutoCAD Mechanical",
+ "version": {
+ "version_data": [
+ {
+ "version_affected": "<",
+ "version_name": "2025",
+ "version_value": "2025.0.1"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2024",
+ "version_value": "2024.1.3"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2023",
+ "version_value": "2023.1.5"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2022",
+ "version_value": "2022.1.4"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2021",
+ "version_value": "2021.1.4"
+ }
+ ]
+ }
+ },
+ {
+ "product_name": "AutoCAD MEP",
+ "version": {
+ "version_data": [
+ {
+ "version_affected": "<",
+ "version_name": "2025",
+ "version_value": "2025.0.1"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2024",
+ "version_value": "2024.1.3"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2023",
+ "version_value": "2023.1.5"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2022",
+ "version_value": "2022.1.4"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2021",
+ "version_value": "2021.1.4"
+ }
+ ]
+ }
+ },
+ {
+ "product_name": "AutoCAD Plant 3D",
+ "version": {
+ "version_data": [
+ {
+ "version_affected": "<",
+ "version_name": "2025",
+ "version_value": "2025.0.1"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2024",
+ "version_value": "2024.1.3"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2023",
+ "version_value": "2023.1.5"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2022",
+ "version_value": "2022.1.4"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2021",
+ "version_value": "2021.1.4"
+ }
+ ]
+ }
+ },
+ {
+ "product_name": "Civil 3D",
+ "version": {
+ "version_data": [
+ {
+ "version_affected": "<",
+ "version_name": "2025",
+ "version_value": "2025.0.1"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2024",
+ "version_value": "2024.1.3"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2023",
+ "version_value": "2023.1.5"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2022",
+ "version_value": "2022.1.4"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2021",
+ "version_value": "2021.1.4"
+ }
+ ]
+ }
+ },
+ {
+ "product_name": "Advance Steel",
+ "version": {
+ "version_data": [
+ {
+ "version_affected": "<",
+ "version_name": "2025",
+ "version_value": "2025.0.1"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2024",
+ "version_value": "2024.1.3"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2023",
+ "version_value": "2023.1.5"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2022",
+ "version_value": "2022.1.4"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2021",
+ "version_value": "2021.1.4"
+ }
+ ]
+ }
+ },
+ {
+ "product_name": "AutoCAD MAP 3D",
+ "version": {
+ "version_data": [
+ {
+ "version_affected": "<",
+ "version_name": "2025",
+ "version_value": "2025.0.1"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2024",
+ "version_value": "2024.1.3"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2023",
+ "version_value": "2023.1.5"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2022",
+ "version_value": "2022.1.4"
+ },
+ {
+ "version_affected": "<",
+ "version_name": "2021",
+ "version_value": "2021.1.4"
}
]
}
@@ -67,9 +344,27 @@
]
},
"generator": {
- "engine": "Vulnogram 0.1.0-dev"
+ "engine": "Vulnogram 0.2.0"
},
"source": {
"discovery": "EXTERNAL"
+ },
+ "impact": {
+ "cvss": [
+ {
+ "attackComplexity": "LOW",
+ "attackVector": "LOCAL",
+ "availabilityImpact": "HIGH",
+ "baseScore": 7.8,
+ "baseSeverity": "HIGH",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "privilegesRequired": "NONE",
+ "scope": "UNCHANGED",
+ "userInteraction": "REQUIRED",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+ "version": "3.1"
+ }
+ ]
}
}
\ No newline at end of file
diff --git a/2025/0xxx/CVE-2025-0430.json b/2025/0xxx/CVE-2025-0430.json
index 2fb5baabf01..b18f3f2ec4c 100644
--- a/2025/0xxx/CVE-2025-0430.json
+++ b/2025/0xxx/CVE-2025-0430.json
@@ -1,17 +1,101 @@
{
+ "data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
- "data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-0430",
- "ASSIGNER": "cve@mitre.org",
- "STATE": "RESERVED"
+ "ASSIGNER": "ics-cert@hq.dhs.gov",
+ "STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
- "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+ "value": "Belledonne Communications Linphone-Desktop \n is vulnerable to a NULL Dereference vulnerability, which could allow a remote attacker to create a denial-of-service condition."
+ }
+ ]
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "CWE-476 NULL Pointer Dereference",
+ "cweId": "CWE-476"
+ }
+ ]
+ }
+ ]
+ },
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Belledonne Communications",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Linphone-Desktop",
+ "version": {
+ "version_data": [
+ {
+ "version_affected": "=",
+ "version_value": "5.2.6"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ },
+ "references": {
+ "reference_data": [
+ {
+ "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-04",
+ "refsource": "MISC",
+ "name": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-04"
+ }
+ ]
+ },
+ "generator": {
+ "engine": "Vulnogram 0.2.0"
+ },
+ "source": {
+ "advisory": "ICSA-25-014-04",
+ "discovery": "EXTERNAL"
+ },
+ "solution": [
+ {
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "base64": false,
+ "type": "text/html",
+ "value": "Belledonne Communications recommends users implement the fix in Version 5.3.99 of the linphone-sdk.\n\n
"
+ }
+ ],
+ "value": "Belledonne Communications recommends users implement the fix in Version 5.3.99 https://gitlab.linphone.org/BC/public/linphone-sdk/-/commits/release/5.3/ of the linphone-sdk."
+ }
+ ],
+ "impact": {
+ "cvss": [
+ {
+ "attackComplexity": "LOW",
+ "attackVector": "NETWORK",
+ "availabilityImpact": "HIGH",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "privilegesRequired": "NONE",
+ "scope": "UNCHANGED",
+ "userInteraction": "NONE",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+ "version": "3.1"
}
]
}
diff --git a/2025/0xxx/CVE-2025-0532.json b/2025/0xxx/CVE-2025-0532.json
index 9dccb21d71a..cd466b8248b 100644
--- a/2025/0xxx/CVE-2025-0532.json
+++ b/2025/0xxx/CVE-2025-0532.json
@@ -1,17 +1,118 @@
{
+ "data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
- "data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-0532",
- "ASSIGNER": "cve@mitre.org",
- "STATE": "RESERVED"
+ "ASSIGNER": "cna@vuldb.com",
+ "STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
- "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+ "value": "A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/new_submit.php. The manipulation of the argument m_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."
+ },
+ {
+ "lang": "deu",
+ "value": "Es wurde eine kritische Schwachstelle in Codezips Gym Management System 1.0 ausgemacht. Hiervon betroffen ist ein unbekannter Codeblock der Datei /dashboard/admin/new_submit.php. Durch die Manipulation des Arguments m_id mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk angegangen werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
+ }
+ ]
+ },
+ "problemtype": {
+ "problemtype_data": [
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "SQL Injection",
+ "cweId": "CWE-89"
+ }
+ ]
+ },
+ {
+ "description": [
+ {
+ "lang": "eng",
+ "value": "Injection",
+ "cweId": "CWE-74"
+ }
+ ]
+ }
+ ]
+ },
+ "affects": {
+ "vendor": {
+ "vendor_data": [
+ {
+ "vendor_name": "Codezips",
+ "product": {
+ "product_data": [
+ {
+ "product_name": "Gym Management System",
+ "version": {
+ "version_data": [
+ {
+ "version_affected": "=",
+ "version_value": "1.0"
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ },
+ "references": {
+ "reference_data": [
+ {
+ "url": "https://vuldb.com/?id.292416",
+ "refsource": "MISC",
+ "name": "https://vuldb.com/?id.292416"
+ },
+ {
+ "url": "https://vuldb.com/?ctiid.292416",
+ "refsource": "MISC",
+ "name": "https://vuldb.com/?ctiid.292416"
+ },
+ {
+ "url": "https://vuldb.com/?submit.479100",
+ "refsource": "MISC",
+ "name": "https://vuldb.com/?submit.479100"
+ },
+ {
+ "url": "https://github.com/TIANN0/CVE/issues/1",
+ "refsource": "MISC",
+ "name": "https://github.com/TIANN0/CVE/issues/1"
+ }
+ ]
+ },
+ "credits": [
+ {
+ "lang": "en",
+ "value": "TIANN0 (VulDB User)"
+ }
+ ],
+ "impact": {
+ "cvss": [
+ {
+ "version": "3.1",
+ "baseScore": 6.3,
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
+ "baseSeverity": "MEDIUM"
+ },
+ {
+ "version": "3.0",
+ "baseScore": 6.3,
+ "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
+ "baseSeverity": "MEDIUM"
+ },
+ {
+ "version": "2.0",
+ "baseScore": 6.5,
+ "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P"
}
]
}
diff --git a/2025/0xxx/CVE-2025-0554.json b/2025/0xxx/CVE-2025-0554.json
new file mode 100644
index 00000000000..cbb046b064b
--- /dev/null
+++ b/2025/0xxx/CVE-2025-0554.json
@@ -0,0 +1,18 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "CVE_data_meta": {
+ "ID": "CVE-2025-0554",
+ "ASSIGNER": "cve@mitre.org",
+ "STATE": "RESERVED"
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+ }
+ ]
+ }
+}
\ No newline at end of file
diff --git a/2025/0xxx/CVE-2025-0555.json b/2025/0xxx/CVE-2025-0555.json
new file mode 100644
index 00000000000..9a007e56278
--- /dev/null
+++ b/2025/0xxx/CVE-2025-0555.json
@@ -0,0 +1,18 @@
+{
+ "data_type": "CVE",
+ "data_format": "MITRE",
+ "data_version": "4.0",
+ "CVE_data_meta": {
+ "ID": "CVE-2025-0555",
+ "ASSIGNER": "cve@mitre.org",
+ "STATE": "RESERVED"
+ },
+ "description": {
+ "description_data": [
+ {
+ "lang": "eng",
+ "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+ }
+ ]
+ }
+}
\ No newline at end of file