From 9aecf874e4f999589835006e423e4307bfce2d85 Mon Sep 17 00:00:00 2001 From: CVE Team Date: Mon, 7 Apr 2025 02:00:33 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2025/3xxx/CVE-2025-3329.json | 153 ++++++++++++++++++++++++++++++++++- 2025/3xxx/CVE-2025-3330.json | 109 ++++++++++++++++++++++++- 2025/3xxx/CVE-2025-3358.json | 18 +++++ 2025/3xxx/CVE-2025-3359.json | 18 +++++ 2025/3xxx/CVE-2025-3360.json | 18 +++++ 5 files changed, 308 insertions(+), 8 deletions(-) create mode 100644 2025/3xxx/CVE-2025-3358.json create mode 100644 2025/3xxx/CVE-2025-3359.json create mode 100644 2025/3xxx/CVE-2025-3360.json diff --git a/2025/3xxx/CVE-2025-3329.json b/2025/3xxx/CVE-2025-3329.json index 02be3653236..b7905ddcc75 100644 --- a/2025/3xxx/CVE-2025-3329.json +++ b/2025/3xxx/CVE-2025-3329.json @@ -1,17 +1,162 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2025-3329", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "cna@vuldb.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A vulnerability classified as problematic has been found in Consumer Comanda Mobile up to 14.9.3.2/15.0.0.8. This affects an unknown part of the component Restaurant Order Handler. The manipulation of the argument Login/Password leads to cleartext transmission of sensitive information. The attack can only be initiated within the local network. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "deu", + "value": "Es wurde eine Schwachstelle in Consumer Comanda Mobile bis 14.9.3.2/15.0.0.8 entdeckt. Sie wurde als problematisch eingestuft. Dabei betrifft es einen unbekannter Codeteil der Komponente Restaurant Order Handler. Durch das Beeinflussen des Arguments Login/Password mit unbekannten Daten kann eine cleartext transmission of sensitive information-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei im lokalen Netzwerk erfolgen. Die Komplexit\u00e4t eines Angriffs ist eher hoch. Sie ist schwierig auszunutzen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "Cleartext Transmission of Sensitive Information", + "cweId": "CWE-319" + } + ] + }, + { + "description": [ + { + "lang": "eng", + "value": "Cryptographic Issues", + "cweId": "CWE-310" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "Consumer", + "product": { + "product_data": [ + { + "product_name": "Comanda Mobile", + "version": { + "version_data": [ + { + "version_affected": "=", + "version_value": "14.9.3.0" + }, + { + "version_affected": "=", + "version_value": "14.9.3.1" + }, + { + "version_affected": "=", + "version_value": "14.9.3.2" + }, + { + "version_affected": "=", + "version_value": "15.0.0.0" + }, + { + "version_affected": "=", + "version_value": "15.0.0.1" + }, + { + "version_affected": "=", + "version_value": "15.0.0.2" + }, + { + "version_affected": "=", + "version_value": "15.0.0.3" + }, + { + "version_affected": "=", + "version_value": "15.0.0.4" + }, + { + "version_affected": "=", + "version_value": "15.0.0.5" + }, + { + "version_affected": "=", + "version_value": "15.0.0.6" + }, + { + "version_affected": "=", + "version_value": "15.0.0.7" + }, + { + "version_affected": "=", + "version_value": "15.0.0.8" + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://vuldb.com/?id.303543", + "refsource": "MISC", + "name": "https://vuldb.com/?id.303543" + }, + { + "url": "https://vuldb.com/?ctiid.303543", + "refsource": "MISC", + "name": "https://vuldb.com/?ctiid.303543" + }, + { + "url": "https://vuldb.com/?submit.551790", + "refsource": "MISC", + "name": "https://vuldb.com/?submit.551790" + }, + { + "url": "https://medium.com/@davimouar/from-order-to-exploit-a-deep-dive-into-restaurant-network-security-64aeaf3a6f64", + "refsource": "MISC", + "name": "https://medium.com/@davimouar/from-order-to-exploit-a-deep-dive-into-restaurant-network-security-64aeaf3a6f64" + } + ] + }, + "credits": [ + { + "lang": "en", + "value": "davimo (VulDB User)" + } + ], + "impact": { + "cvss": [ + { + "version": "3.1", + "baseScore": 3.1, + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseSeverity": "LOW" + }, + { + "version": "3.0", + "baseScore": 3.1, + "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseSeverity": "LOW" + }, + { + "version": "2.0", + "baseScore": 1.8, + "vectorString": "AV:A/AC:H/Au:N/C:P/I:N/A:N" } ] } diff --git a/2025/3xxx/CVE-2025-3330.json b/2025/3xxx/CVE-2025-3330.json index 42d46c19fb4..43f11dd7811 100644 --- a/2025/3xxx/CVE-2025-3330.json +++ b/2025/3xxx/CVE-2025-3330.json @@ -1,17 +1,118 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2025-3330", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "cna@vuldb.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. This vulnerability affects unknown code of the file /reservation_save.php. The manipulation of the argument first leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well." + }, + { + "lang": "deu", + "value": "In codeprojects Online Restaurant Management System 1.0 wurde eine Schwachstelle entdeckt. Sie wurde als kritisch eingestuft. Hierbei betrifft es unbekannten Programmcode der Datei /reservation_save.php. Durch Beeinflussen des Arguments first mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff \u00fcber das Netzwerk. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "SQL Injection", + "cweId": "CWE-89" + } + ] + }, + { + "description": [ + { + "lang": "eng", + "value": "Injection", + "cweId": "CWE-74" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "codeprojects", + "product": { + "product_data": [ + { + "product_name": "Online Restaurant Management System", + "version": { + "version_data": [ + { + "version_affected": "=", + "version_value": "1.0" + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://vuldb.com/?id.303544", + "refsource": "MISC", + "name": "https://vuldb.com/?id.303544" + }, + { + "url": "https://vuldb.com/?ctiid.303544", + "refsource": "MISC", + "name": "https://vuldb.com/?ctiid.303544" + }, + { + "url": "https://vuldb.com/?submit.551904", + "refsource": "MISC", + "name": "https://vuldb.com/?submit.551904" + }, + { + "url": "https://github.com/p1026/CVE/issues/44", + "refsource": "MISC", + "name": "https://github.com/p1026/CVE/issues/44" + } + ] + }, + "credits": [ + { + "lang": "en", + "value": "p_key (VulDB User)" + } + ], + "impact": { + "cvss": [ + { + "version": "3.1", + "baseScore": 7.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseSeverity": "HIGH" + }, + { + "version": "3.0", + "baseScore": 7.3, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseSeverity": "HIGH" + }, + { + "version": "2.0", + "baseScore": 7.5, + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P" } ] } diff --git a/2025/3xxx/CVE-2025-3358.json b/2025/3xxx/CVE-2025-3358.json new file mode 100644 index 00000000000..f49750ac466 --- /dev/null +++ b/2025/3xxx/CVE-2025-3358.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2025-3358", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2025/3xxx/CVE-2025-3359.json b/2025/3xxx/CVE-2025-3359.json new file mode 100644 index 00000000000..7a29ba97f82 --- /dev/null +++ b/2025/3xxx/CVE-2025-3359.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2025-3359", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2025/3xxx/CVE-2025-3360.json b/2025/3xxx/CVE-2025-3360.json new file mode 100644 index 00000000000..f29ba15baee --- /dev/null +++ b/2025/3xxx/CVE-2025-3360.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2025-3360", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file