"-Synchronized-Data."

This commit is contained in:
CVE Team 2025-06-02 13:00:33 +00:00
parent ea93be2064
commit d7d56c9303
No known key found for this signature in database
GPG Key ID: BC5FD8F2443B23B7
11 changed files with 752 additions and 20 deletions

View File

@ -1,18 +1,77 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2024-12168",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "browser-security@yandex-team.ru",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Yandex Telemost for Desktop before 2.7.0\u00a0has a DLL Hijacking Vulnerability because an untrusted search path is used."
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-426 Untrusted Search Path",
"cweId": "CWE-426"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Yandex",
"product": {
"product_data": [
{
"product_name": "Telemost",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "2.7.0"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://yandex.com/bugbounty/i/hall-of-fame-products",
"refsource": "MISC",
"name": "https://yandex.com/bugbounty/i/hall-of-fame-products"
}
]
},
"generator": {
"engine": "Vulnogram 0.2.0"
},
"source": {
"discovery": "UNKNOWN"
},
"credits": [
{
"lang": "en",
"value": "PT SWARM experts, Positive Technologies"
}
]
}

View File

@ -1,18 +1,82 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-46806",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "security@suse.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4."
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-823: Use of Out-of-range Pointer Offset",
"cweId": "CWE-823"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "https://github.com/yrutschle/sslh/releases/tag/v2.2.4",
"product": {
"product_data": [
{
"product_name": "sslh",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "?",
"version_value": "2.2.4"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://github.com/yrutschle/sslh/releases/tag/v2.2.4",
"refsource": "MISC",
"name": "https://github.com/yrutschle/sslh/releases/tag/v2.2.4"
},
{
"url": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46806",
"refsource": "MISC",
"name": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46806"
}
]
},
"generator": {
"engine": "Vulnogram 0.2.0"
},
"source": {
"discovery": "UNKNOWN"
},
"credits": [
{
"lang": "en",
"value": "Matthias Gerstner, SUSE"
}
]
}

View File

@ -5,13 +5,13 @@
"CVE_data_meta": {
"ID": "CVE-2025-48745",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"STATE": "REJECT"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-49113. Reason: This candidate is a reservation duplicate of CVE-2025-49113. Notes: All CVE users should reference CVE-2025-49113 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
}
]
}

View File

@ -86,6 +86,11 @@
"url": "https://github.com/roundcube/roundcubemail/commit/c50a07d88ca38f018a0f4a0b008e9a1deb32637e",
"refsource": "MISC",
"name": "https://github.com/roundcube/roundcubemail/commit/c50a07d88ca38f018a0f4a0b008e9a1deb32637e"
},
{
"refsource": "MISC",
"name": "https://fearsoff.org/research/roundcube",
"url": "https://fearsoff.org/research/roundcube"
}
]
}

View File

@ -1,17 +1,274 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-5444",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "cna@vuldb.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "A vulnerability has been found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001 and classified as critical. Affected by this vulnerability is the function RP_UpgradeFWByBBS of the file /goform/RP_UpgradeFWByBBS. The manipulation of the argument type/ch/ssidhex/security/extch/pwd/mode/ip/nm/gw leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
},
{
"lang": "deu",
"value": "In Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001 wurde eine Schwachstelle gefunden. Sie wurde als kritisch eingestuft. Dabei geht es um die Funktion RP_UpgradeFWByBBS der Datei /goform/RP_UpgradeFWByBBS. Dank der Manipulation des Arguments type/ch/ssidhex/security/extch/pwd/mode/ip/nm/gw mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "OS Command Injection",
"cweId": "CWE-78"
}
]
},
{
"description": [
{
"lang": "eng",
"value": "Command Injection",
"cweId": "CWE-77"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Linksys",
"product": {
"product_data": [
{
"product_name": "RE6500",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.0.013.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.002"
},
{
"version_affected": "=",
"version_value": "1.1.05.003"
},
{
"version_affected": "=",
"version_value": "1.2.07.001"
}
]
}
},
{
"product_name": "RE6250",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.0.013.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.002"
},
{
"version_affected": "=",
"version_value": "1.1.05.003"
},
{
"version_affected": "=",
"version_value": "1.2.07.001"
}
]
}
},
{
"product_name": "RE6300",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.0.013.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.002"
},
{
"version_affected": "=",
"version_value": "1.1.05.003"
},
{
"version_affected": "=",
"version_value": "1.2.07.001"
}
]
}
},
{
"product_name": "RE6350",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.0.013.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.002"
},
{
"version_affected": "=",
"version_value": "1.1.05.003"
},
{
"version_affected": "=",
"version_value": "1.2.07.001"
}
]
}
},
{
"product_name": "RE7000",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.0.013.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.002"
},
{
"version_affected": "=",
"version_value": "1.1.05.003"
},
{
"version_affected": "=",
"version_value": "1.2.07.001"
}
]
}
},
{
"product_name": "RE9000",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.0.013.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.002"
},
{
"version_affected": "=",
"version_value": "1.1.05.003"
},
{
"version_affected": "=",
"version_value": "1.2.07.001"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://vuldb.com/?id.310783",
"refsource": "MISC",
"name": "https://vuldb.com/?id.310783"
},
{
"url": "https://vuldb.com/?ctiid.310783",
"refsource": "MISC",
"name": "https://vuldb.com/?ctiid.310783"
},
{
"url": "https://vuldb.com/?submit.584366",
"refsource": "MISC",
"name": "https://vuldb.com/?submit.584366"
},
{
"url": "https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_7/7.md",
"refsource": "MISC",
"name": "https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_7/7.md"
},
{
"url": "https://www.linksys.com/",
"refsource": "MISC",
"name": "https://www.linksys.com/"
}
]
},
"credits": [
{
"lang": "en",
"value": "pjqwudi (VulDB User)"
}
],
"impact": {
"cvss": [
{
"version": "3.1",
"baseScore": 6.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseSeverity": "MEDIUM"
},
{
"version": "3.0",
"baseScore": 6.3,
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseSeverity": "MEDIUM"
},
{
"version": "2.0",
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P"
}
]
}

View File

@ -1,17 +1,274 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-5445",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "cna@vuldb.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001 and classified as critical. Affected by this issue is the function RP_checkFWByBBS of the file /goform/RP_checkFWByBBS. The manipulation of the argument type/ch/ssidhex/security/extch/pwd/mode/ip/nm/gw leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
},
{
"lang": "deu",
"value": "Eine Schwachstelle wurde in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001 gefunden. Sie wurde als kritisch eingestuft. Hierbei geht es um die Funktion RP_checkFWByBBS der Datei /goform/RP_checkFWByBBS. Dank Manipulation des Arguments type/ch/ssidhex/security/extch/pwd/mode/ip/nm/gw mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff \u00fcber das Netzwerk. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "OS Command Injection",
"cweId": "CWE-78"
}
]
},
{
"description": [
{
"lang": "eng",
"value": "Command Injection",
"cweId": "CWE-77"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Linksys",
"product": {
"product_data": [
{
"product_name": "RE6500",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.0.013.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.002"
},
{
"version_affected": "=",
"version_value": "1.1.05.003"
},
{
"version_affected": "=",
"version_value": "1.2.07.001"
}
]
}
},
{
"product_name": "RE6250",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.0.013.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.002"
},
{
"version_affected": "=",
"version_value": "1.1.05.003"
},
{
"version_affected": "=",
"version_value": "1.2.07.001"
}
]
}
},
{
"product_name": "RE6300",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.0.013.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.002"
},
{
"version_affected": "=",
"version_value": "1.1.05.003"
},
{
"version_affected": "=",
"version_value": "1.2.07.001"
}
]
}
},
{
"product_name": "RE6350",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.0.013.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.002"
},
{
"version_affected": "=",
"version_value": "1.1.05.003"
},
{
"version_affected": "=",
"version_value": "1.2.07.001"
}
]
}
},
{
"product_name": "RE7000",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.0.013.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.002"
},
{
"version_affected": "=",
"version_value": "1.1.05.003"
},
{
"version_affected": "=",
"version_value": "1.2.07.001"
}
]
}
},
{
"product_name": "RE9000",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.0.013.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.001"
},
{
"version_affected": "=",
"version_value": "1.0.04.002"
},
{
"version_affected": "=",
"version_value": "1.1.05.003"
},
{
"version_affected": "=",
"version_value": "1.2.07.001"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://vuldb.com/?id.310784",
"refsource": "MISC",
"name": "https://vuldb.com/?id.310784"
},
{
"url": "https://vuldb.com/?ctiid.310784",
"refsource": "MISC",
"name": "https://vuldb.com/?ctiid.310784"
},
{
"url": "https://vuldb.com/?submit.584367",
"refsource": "MISC",
"name": "https://vuldb.com/?submit.584367"
},
{
"url": "https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_8/8.md",
"refsource": "MISC",
"name": "https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_8/8.md"
},
{
"url": "https://www.linksys.com/",
"refsource": "MISC",
"name": "https://www.linksys.com/"
}
]
},
"credits": [
{
"lang": "en",
"value": "pjqwudi (VulDB User)"
}
],
"impact": {
"cvss": [
{
"version": "3.1",
"baseScore": 6.3,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseSeverity": "MEDIUM"
},
{
"version": "3.0",
"baseScore": 6.3,
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseSeverity": "MEDIUM"
},
{
"version": "2.0",
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P"
}
]
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-5467",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-5468",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-5469",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-5470",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-5471",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}