"-Synchronized-Data."

This commit is contained in:
CVE Team 2025-02-19 06:00:37 +00:00
parent 70d13e0434
commit f5787d3792
No known key found for this signature in database
GPG Key ID: BC5FD8F2443B23B7
8 changed files with 629 additions and 20 deletions

View File

@ -1,17 +1,90 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2024-13799",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "security@wordfence.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "The User Private Files \u2013 File Upload & Download Manager with Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018new-fldr-name\u2019 parameter in all versions up to, and including, 2.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
"cweId": "CWE-79"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "deepakkite",
"product": {
"product_data": [
{
"product_name": "User Private Files \u2013 File Upload & Download Manager with Secure File Sharing",
"version": {
"version_data": [
{
"version_affected": "<=",
"version_name": "*",
"version_value": "2.1.3"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/419cf912-3187-43d7-90ab-1a20a46d86e4?source=cve",
"refsource": "MISC",
"name": "https://www.wordfence.com/threat-intel/vulnerabilities/id/419cf912-3187-43d7-90ab-1a20a46d86e4?source=cve"
},
{
"url": "https://plugins.trac.wordpress.org/browser/user-private-files/trunk/js/folder.js",
"refsource": "MISC",
"name": "https://plugins.trac.wordpress.org/browser/user-private-files/trunk/js/folder.js"
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3240877/",
"refsource": "MISC",
"name": "https://plugins.trac.wordpress.org/changeset/3240877/"
}
]
},
"credits": [
{
"lang": "en",
"value": "Tim Coen"
}
],
"impact": {
"cvss": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM"
}
]
}

View File

@ -1,17 +1,85 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-1065",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "security@wordfence.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Import Data From File feature in all versions up to, and including, 3.11.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
"cweId": "CWE-79"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "themeisle",
"product": {
"product_data": [
{
"product_name": "Visualizer: Tables and Charts Manager for WordPress",
"version": {
"version_data": [
{
"version_affected": "<=",
"version_name": "*",
"version_value": "3.11.8"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/17c1de7b-5178-4fbe-a515-169de4323ae7?source=cve",
"refsource": "MISC",
"name": "https://www.wordfence.com/threat-intel/vulnerabilities/id/17c1de7b-5178-4fbe-a515-169de4323ae7?source=cve"
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3240066/visualizer",
"refsource": "MISC",
"name": "https://plugins.trac.wordpress.org/changeset/3240066/visualizer"
}
]
},
"credits": [
{
"lang": "en",
"value": "Craig Smith"
}
],
"impact": {
"cvss": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM"
}
]
}

View File

@ -1,17 +1,155 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-22888",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "vultures@jpcert.or.jp",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Movable Type contains a stored cross-site scripting vulnerability in the custom block edit page of MT Block Editor. If exploited, an arbitrary script may be executed on a logged-in user's web browser."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS)",
"cweId": "CWE-79"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Six Apart Ltd.",
"product": {
"product_data": [
{
"product_name": "Movable Type (8.4.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.4.1 and earlier"
}
]
}
},
{
"product_name": "Movable Type (8.0.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.0.5 and earlier"
}
]
}
},
{
"product_name": "Movable Type Advanced (8.4.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.4.1 and earlier"
}
]
}
},
{
"product_name": "Movable Type Advanced (8.0.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.0.5 and earlier"
}
]
}
},
{
"product_name": "Movable Type Premium (2.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "2.06 and earlier"
}
]
}
},
{
"product_name": "Movable Type Premium (Advanced Edition) (2.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "2.06 and earlier"
}
]
}
},
{
"product_name": "Movable Type Cloud Edition (8.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.4.1 and earlier"
}
]
}
},
{
"product_name": "Movable Type Premium Cloud Edition (2.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "2.06 and earlier"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://www.movabletype.org/news/2025/02/mt-842-released.html",
"refsource": "MISC",
"name": "https://www.movabletype.org/news/2025/02/mt-842-released.html"
},
{
"url": "https://jvn.jp/en/jp/JVN48742353/",
"refsource": "MISC",
"name": "https://jvn.jp/en/jp/JVN48742353/"
}
]
},
"impact": {
"cvss": [
{
"version": "3.0",
"baseSeverity": "MEDIUM",
"baseScore": 5.4,
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
]
}

View File

@ -1,17 +1,155 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-24841",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "vultures@jpcert.or.jp",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Movable Type contains a stored cross-site scripting vulnerability in the HTML edit mode of MT Block Editor. It is exploitable when TinyMCE6 is used as a rich text editor and an arbitrary script may be executed on a logged-in user's web browser."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS)",
"cweId": "CWE-79"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Six Apart Ltd.",
"product": {
"product_data": [
{
"product_name": "Movable Type (8.4.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.4.1 and earlier"
}
]
}
},
{
"product_name": "Movable Type (8.0.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.0.5 and earlier"
}
]
}
},
{
"product_name": "Movable Type Advanced (8.4.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.4.1 and earlier"
}
]
}
},
{
"product_name": "Movable Type Advanced (8.0.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.0.5 and earlier"
}
]
}
},
{
"product_name": "Movable Type Premium (2.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "2.06 and earlier"
}
]
}
},
{
"product_name": "Movable Type Premium (Advanced Edition) (2.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "2.06 and earlier"
}
]
}
},
{
"product_name": "Movable Type Cloud Edition (8.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.4.1 and earlier"
}
]
}
},
{
"product_name": "Movable Type Premium Cloud Edition (2.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "2.06 and earlier"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://www.movabletype.org/news/2025/02/mt-842-released.html",
"refsource": "MISC",
"name": "https://www.movabletype.org/news/2025/02/mt-842-released.html"
},
{
"url": "https://jvn.jp/en/jp/JVN48742353/",
"refsource": "MISC",
"name": "https://jvn.jp/en/jp/JVN48742353/"
}
]
},
"impact": {
"cvss": [
{
"version": "3.0",
"baseSeverity": "MEDIUM",
"baseScore": 5.4,
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
]
}

View File

@ -1,17 +1,155 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-25054",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "vultures@jpcert.or.jp",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Factor authentication plugin is enabled and a user accesses a crafted page while logged in to the affected product, an arbitrary script may be executed on the web browser of the user."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS)",
"cweId": "CWE-79"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Six Apart Ltd.",
"product": {
"product_data": [
{
"product_name": "Movable Type (8.4.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.4.1 and earlier"
}
]
}
},
{
"product_name": "Movable Type (8.0.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.0.5 and earlier"
}
]
}
},
{
"product_name": "Movable Type Advanced (8.4.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.4.1 and earlier"
}
]
}
},
{
"product_name": "Movable Type Advanced (8.0.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.0.5 and earlier"
}
]
}
},
{
"product_name": "Movable Type Premium (2.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "2.06 and earlier"
}
]
}
},
{
"product_name": "Movable Type Premium (Advanced Edition) (2.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "2.06 and earlier"
}
]
}
},
{
"product_name": "Movable Type Cloud Edition (8.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.4.1 and earlier"
}
]
}
},
{
"product_name": "Movable Type Premium Cloud Edition (2.x series)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "2.06 and earlier"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://www.movabletype.org/news/2025/02/mt-842-released.html",
"refsource": "MISC",
"name": "https://www.movabletype.org/news/2025/02/mt-842-released.html"
},
{
"url": "https://jvn.jp/en/jp/JVN48742353/",
"refsource": "MISC",
"name": "https://jvn.jp/en/jp/JVN48742353/"
}
]
},
"impact": {
"cvss": [
{
"version": "3.0",
"baseSeverity": "MEDIUM",
"baseScore": 6.1,
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
]
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-27124",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-27125",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2025-27126",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}