From 06b772a9a8fcb051cd7f3faee60d02f53847e4da Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Tue, 11 Nov 2025 23:04:01 +0000 Subject: [PATCH] Auto-Update: 2025-11-11T23:00:11.901412+00:00 --- CVE-2022/CVE-2022-450xx/CVE-2022-45044.json | 8 +- CVE-2023/CVE-2023-287xx/CVE-2023-28766.json | 8 +- CVE-2023/CVE-2023-309xx/CVE-2023-30901.json | 16 +++- CVE-2023/CVE-2023-312xx/CVE-2023-31238.json | 16 +++- CVE-2024/CVE-2024-320xx/CVE-2024-32008.json | 100 ++++++++++++++++++++ CVE-2024/CVE-2024-320xx/CVE-2024-32009.json | 100 ++++++++++++++++++++ CVE-2024/CVE-2024-320xx/CVE-2024-32010.json | 100 ++++++++++++++++++++ CVE-2024/CVE-2024-320xx/CVE-2024-32011.json | 100 ++++++++++++++++++++ CVE-2024/CVE-2024-320xx/CVE-2024-32014.json | 100 ++++++++++++++++++++ CVE-2024/CVE-2024-388xx/CVE-2024-38867.json | 4 +- CVE-2024/CVE-2024-536xx/CVE-2024-53648.json | 4 +- CVE-2024/CVE-2024-536xx/CVE-2024-53649.json | 4 +- CVE-2024/CVE-2024-561xx/CVE-2024-56181.json | 4 +- CVE-2024/CVE-2024-561xx/CVE-2024-56182.json | 4 +- CVE-2025/CVE-2025-110xx/CVE-2025-11021.json | 10 +- CVE-2025/CVE-2025-115xx/CVE-2025-11561.json | 6 +- CVE-2025/CVE-2025-37xx/CVE-2025-3717.json | 78 +++++++++++++++ CVE-2025/CVE-2025-405xx/CVE-2025-40571.json | 4 +- CVE-2025/CVE-2025-407xx/CVE-2025-40744.json | 100 ++++++++++++++++++++ CVE-2025/CVE-2025-407xx/CVE-2025-40760.json | 100 ++++++++++++++++++++ CVE-2025/CVE-2025-407xx/CVE-2025-40763.json | 100 ++++++++++++++++++++ CVE-2025/CVE-2025-408xx/CVE-2025-40815.json | 100 ++++++++++++++++++++ CVE-2025/CVE-2025-408xx/CVE-2025-40816.json | 100 ++++++++++++++++++++ CVE-2025/CVE-2025-408xx/CVE-2025-40817.json | 100 ++++++++++++++++++++ CVE-2025/CVE-2025-408xx/CVE-2025-40827.json | 100 ++++++++++++++++++++ CVE-2025/CVE-2025-411xx/CVE-2025-41116.json | 78 +++++++++++++++ CVE-2025/CVE-2025-49xx/CVE-2025-4945.json | 10 +- CVE-2025/CVE-2025-53xx/CVE-2025-5318.json | 10 +- CVE-2025/CVE-2025-618xx/CVE-2025-61833.json | 56 +++++++++++ CVE-2025/CVE-2025-618xx/CVE-2025-61834.json | 56 +++++++++++ CVE-2025/CVE-2025-618xx/CVE-2025-61835.json | 56 +++++++++++ CVE-2025/CVE-2025-622xx/CVE-2025-62229.json | 10 +- CVE-2025/CVE-2025-622xx/CVE-2025-62230.json | 10 +- CVE-2025/CVE-2025-622xx/CVE-2025-62231.json | 10 +- CVE-2025/CVE-2025-645xx/CVE-2025-64531.json | 56 +++++++++++ CVE-2025/CVE-2025-95xx/CVE-2025-9566.json | 6 +- README.md | 66 ++++++++----- _state.csv | 86 ++++++++++------- 38 files changed, 1785 insertions(+), 91 deletions(-) create mode 100644 CVE-2024/CVE-2024-320xx/CVE-2024-32008.json create mode 100644 CVE-2024/CVE-2024-320xx/CVE-2024-32009.json create mode 100644 CVE-2024/CVE-2024-320xx/CVE-2024-32010.json create mode 100644 CVE-2024/CVE-2024-320xx/CVE-2024-32011.json create mode 100644 CVE-2024/CVE-2024-320xx/CVE-2024-32014.json create mode 100644 CVE-2025/CVE-2025-37xx/CVE-2025-3717.json create mode 100644 CVE-2025/CVE-2025-407xx/CVE-2025-40744.json create mode 100644 CVE-2025/CVE-2025-407xx/CVE-2025-40760.json create mode 100644 CVE-2025/CVE-2025-407xx/CVE-2025-40763.json create mode 100644 CVE-2025/CVE-2025-408xx/CVE-2025-40815.json create mode 100644 CVE-2025/CVE-2025-408xx/CVE-2025-40816.json create mode 100644 CVE-2025/CVE-2025-408xx/CVE-2025-40817.json create mode 100644 CVE-2025/CVE-2025-408xx/CVE-2025-40827.json create mode 100644 CVE-2025/CVE-2025-411xx/CVE-2025-41116.json create mode 100644 CVE-2025/CVE-2025-618xx/CVE-2025-61833.json create mode 100644 CVE-2025/CVE-2025-618xx/CVE-2025-61834.json create mode 100644 CVE-2025/CVE-2025-618xx/CVE-2025-61835.json create mode 100644 CVE-2025/CVE-2025-645xx/CVE-2025-64531.json diff --git a/CVE-2022/CVE-2022-450xx/CVE-2022-45044.json b/CVE-2022/CVE-2022-450xx/CVE-2022-45044.json index 5012d31be78..2555e1de52f 100644 --- a/CVE-2022/CVE-2022-450xx/CVE-2022-45044.json +++ b/CVE-2022/CVE-2022-450xx/CVE-2022-45044.json @@ -2,13 +2,13 @@ "id": "CVE-2022-45044", "sourceIdentifier": "productcert@siemens.com", "published": "2022-12-13T16:15:24.617", - "lastModified": "2024-11-21T07:28:39.987", + "lastModified": "2025-11-11T21:15:33.977", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.50), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.50), SIPROTEC 5 6MD89 (CP300) (All versions < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions < V9.50), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions < V9.64), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V9.50), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V9.50), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V9.50), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V9.50), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V9.50), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V9.50), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.50), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V9.50), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V9.50), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V9.50), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V9.50), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V9.50), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions < V9.64), SIPROTEC 5 7SX82 (CP150) (All versions < V9.50), SIPROTEC 5 7SX85 (CP300) (All versions < V9.50), SIPROTEC 5 7UM85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V9.50), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V9.50), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.50), SIPROTEC 5 7VE85 (CP300) (All versions < V9.50), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V9.50), SIPROTEC 5 7VU85 (CP300) (All versions < V9.50), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions installed on CP200 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions installed on CP200 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.50), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.50). Affected devices do not properly restrict secure client-initiated renegotiations within the SSL and TLS protocols. This could allow an attacker to create a denial of service condition on the ports 443/tcp and 4443/tcp for the duration of the attack." + "value": "A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.50), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.50), SIPROTEC 5 6MD89 (CP300) (All versions < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions < V9.50), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions < V9.64), SIPROTEC 5 7SA82 (CP100) (All versions < V8.90), SIPROTEC 5 7SA82 (CP150) (All versions < V9.50), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V9.50), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V9.50), SIPROTEC 5 7SD82 (CP100) (All versions < V8.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.50), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V9.50), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V9.50), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.50), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V9.50), SIPROTEC 5 7SL82 (CP100) (All versions < V8.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.50), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V9.50), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V9.50), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V9.50), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions < V9.64), SIPROTEC 5 7SX82 (CP150) (All versions < V9.50), SIPROTEC 5 7SX85 (CP300) (All versions < V9.50), SIPROTEC 5 7UM85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT82 (CP100) (All versions < V8.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.50), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V9.50), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.50), SIPROTEC 5 7VE85 (CP300) (All versions < V9.50), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V9.50), SIPROTEC 5 7VU85 (CP300) (All versions < V9.50), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions installed on CP200 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions installed on CP200 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.50), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.50). Affected devices do not properly restrict secure client-initiated renegotiations within the SSL and TLS protocols. This could allow an attacker to create a denial of service condition on the ports 443/tcp and 4443/tcp for the duration of the attack." }, { "lang": "es", @@ -19,7 +19,7 @@ "cvssMetricV31": [ { "source": "productcert@siemens.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", @@ -62,7 +62,7 @@ "weaknesses": [ { "source": "productcert@siemens.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2023/CVE-2023-287xx/CVE-2023-28766.json b/CVE-2023/CVE-2023-287xx/CVE-2023-28766.json index 7d8a0829b70..1771b52e20e 100644 --- a/CVE-2023/CVE-2023-287xx/CVE-2023-28766.json +++ b/CVE-2023/CVE-2023-287xx/CVE-2023-28766.json @@ -2,13 +2,13 @@ "id": "CVE-2023-28766", "sourceIdentifier": "productcert@siemens.com", "published": "2023-04-11T10:15:18.337", - "lastModified": "2024-11-21T07:55:57.867", + "lastModified": "2025-11-11T21:15:34.250", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7KE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V9.40), SIPROTEC 5 7SA86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V9.40), SIPROTEC 5 7SD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.40), SIPROTEC 5 7SK85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V9.40), SIPROTEC 5 7SL86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SS85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7ST85 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SX82 (CP150) (All versions < V9.40), SIPROTEC 5 7SX85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UM85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V9.40), SIPROTEC 5 7UT85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VK87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.40), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.40). Affected devices lack proper validation of http request parameters of the hosted web service.\r\nAn unauthenticated remote attacker could send specially crafted packets that could cause denial of service condition of the target device." + "value": "A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7KE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA82 (CP100) (All versions < V8.90), SIPROTEC 5 7SA82 (CP150) (All versions < V9.40), SIPROTEC 5 7SA86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD82 (CP100) (All versions < V8.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.40), SIPROTEC 5 7SD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.40), SIPROTEC 5 7SK85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL82 (CP100) (All versions < V8.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.40), SIPROTEC 5 7SL86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SS85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7ST85 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SX82 (CP150) (All versions < V9.40), SIPROTEC 5 7SX85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UM85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT82 (CP100) (All versions < V8.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.40), SIPROTEC 5 7UT85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VK87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.40), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.40). Affected devices lack proper validation of http request parameters of the hosted web service.\r\nAn unauthenticated remote attacker could send specially crafted packets that could cause denial of service condition of the target device." }, { "lang": "es", @@ -19,7 +19,7 @@ "cvssMetricV31": [ { "source": "productcert@siemens.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", @@ -42,7 +42,7 @@ "weaknesses": [ { "source": "productcert@siemens.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2023/CVE-2023-309xx/CVE-2023-30901.json b/CVE-2023/CVE-2023-309xx/CVE-2023-30901.json index 4442bac7c2c..066524ae4f3 100644 --- a/CVE-2023/CVE-2023-309xx/CVE-2023-30901.json +++ b/CVE-2023/CVE-2023-309xx/CVE-2023-30901.json @@ -2,13 +2,13 @@ "id": "CVE-2023-30901", "sourceIdentifier": "productcert@siemens.com", "published": "2023-06-13T09:15:17.763", - "lastModified": "2024-11-21T08:01:02.097", + "lastModified": "2025-11-11T21:15:34.770", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60). The web interface of the affected devices are vulnerable to Cross-Site Request Forgery attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform arbitrary actions on the device on behalf of the victim user." + "value": "A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA02-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA02-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA11-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA11-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA12-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA12-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA31-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA31-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA32-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA32-2AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA00-0AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA00-2AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA10-0AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA10-2AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA30-0AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA30-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA01-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA01-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA02-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA02-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA11-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA11-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA12-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA12-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA31-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA31-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA32-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA32-2AA0) (All versions < V3.11). The web interface of the affected devices are vulnerable to Cross-Site Request Forgery attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform arbitrary actions on the device on behalf of the victim user." } ], "metrics": { @@ -108,6 +108,18 @@ } ], "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-201498.html", + "source": "productcert@siemens.com" + }, + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-480095.html", + "source": "productcert@siemens.com" + }, + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-887249.html", + "source": "productcert@siemens.com" + }, { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-480095.pdf", "source": "productcert@siemens.com" diff --git a/CVE-2023/CVE-2023-312xx/CVE-2023-31238.json b/CVE-2023/CVE-2023-312xx/CVE-2023-31238.json index f610fec8c00..430476dc007 100644 --- a/CVE-2023/CVE-2023-312xx/CVE-2023-31238.json +++ b/CVE-2023/CVE-2023-312xx/CVE-2023-31238.json @@ -2,13 +2,13 @@ "id": "CVE-2023-31238", "sourceIdentifier": "productcert@siemens.com", "published": "2023-06-13T09:15:18.093", - "lastModified": "2024-11-21T08:01:41.260", + "lastModified": "2025-11-11T21:15:34.950", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60). Affected devices are missing cookie protection flags when using the default settings. An attacker who gains access to a session token can use it to impersonate a legitimate application user." + "value": "A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA02-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA02-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA11-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA11-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA12-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA12-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA31-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA31-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA32-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA32-2AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA00-0AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA00-2AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA10-0AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA10-2AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA30-0AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA30-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA01-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA01-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA02-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA02-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA11-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA11-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA12-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA12-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA31-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA31-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA32-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA32-2AA0) (All versions < V3.11). Affected devices are missing cookie protection flags when using the default settings. An attacker who gains access to a session token can use it to impersonate a legitimate application user." } ], "metrics": { @@ -108,6 +108,18 @@ } ], "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-201498.html", + "source": "productcert@siemens.com" + }, + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-480095.html", + "source": "productcert@siemens.com" + }, + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-887249.html", + "source": "productcert@siemens.com" + }, { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-480095.pdf", "source": "productcert@siemens.com" diff --git a/CVE-2024/CVE-2024-320xx/CVE-2024-32008.json b/CVE-2024/CVE-2024-320xx/CVE-2024-32008.json new file mode 100644 index 00000000000..cabce3a59e5 --- /dev/null +++ b/CVE-2024/CVE-2024-320xx/CVE-2024-32008.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2024-32008", + "sourceIdentifier": "productcert@siemens.com", + "published": "2025-11-11T21:15:35.110", + "lastModified": "2025-11-11T21:15:35.110", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to an exposed debug interface on the localhost. This allows any local user to gain code execution as administrative application user." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-648" + } + ] + } + ], + "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-339694.html", + "source": "productcert@siemens.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-320xx/CVE-2024-32009.json b/CVE-2024/CVE-2024-320xx/CVE-2024-32009.json new file mode 100644 index 00000000000..86b7c9b7caa --- /dev/null +++ b/CVE-2024/CVE-2024-320xx/CVE-2024-32009.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2024-32009", + "sourceIdentifier": "productcert@siemens.com", + "published": "2025-11-11T21:15:35.287", + "lastModified": "2025-11-11T21:15:35.287", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to wrongly set permissions to a binary which allows any local attacker to gain administrative privileges." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-339694.html", + "source": "productcert@siemens.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-320xx/CVE-2024-32010.json b/CVE-2024/CVE-2024-320xx/CVE-2024-32010.json new file mode 100644 index 00000000000..0f1d2eeab2e --- /dev/null +++ b/CVE-2024/CVE-2024-320xx/CVE-2024-32010.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2024-32010", + "sourceIdentifier": "productcert@siemens.com", + "published": "2025-11-11T21:15:35.450", + "lastModified": "2025-11-11T21:15:35.450", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run system commands via the database." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-732" + } + ] + } + ], + "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-339694.html", + "source": "productcert@siemens.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-320xx/CVE-2024-32011.json b/CVE-2024/CVE-2024-320xx/CVE-2024-32011.json new file mode 100644 index 00000000000..edf5b7fc4a6 --- /dev/null +++ b/CVE-2024/CVE-2024-320xx/CVE-2024-32011.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2024-32011", + "sourceIdentifier": "productcert@siemens.com", + "published": "2025-11-11T21:15:35.623", + "lastModified": "2025-11-11T21:15:35.623", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application user." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-829" + } + ] + } + ], + "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-339694.html", + "source": "productcert@siemens.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-320xx/CVE-2024-32014.json b/CVE-2024/CVE-2024-320xx/CVE-2024-32014.json new file mode 100644 index 00000000000..67c1954a061 --- /dev/null +++ b/CVE-2024/CVE-2024-320xx/CVE-2024-32014.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2024-32014", + "sourceIdentifier": "productcert@siemens.com", + "published": "2025-11-11T21:15:35.797", + "lastModified": "2025-11-11T21:15:35.797", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to alter the local database which contains the application credentials. This allows an attacker to gain administrative application privileges." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.6, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-732" + } + ] + } + ], + "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-339694.html", + "source": "productcert@siemens.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-388xx/CVE-2024-38867.json b/CVE-2024/CVE-2024-388xx/CVE-2024-38867.json index 3e5d70c8354..2a9bf40dbb9 100644 --- a/CVE-2024/CVE-2024-388xx/CVE-2024-38867.json +++ b/CVE-2024/CVE-2024-388xx/CVE-2024-38867.json @@ -2,13 +2,13 @@ "id": "CVE-2024-38867", "sourceIdentifier": "productcert@siemens.com", "published": "2024-07-09T12:15:15.750", - "lastModified": "2024-11-21T09:26:53.620", + "lastModified": "2025-11-11T21:15:35.977", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.64), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.64), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.64), SIPROTEC 5 6MD89 (CP300) (All versions < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions < V9.64), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions < V9.64), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V9.65), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V9.65), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V9.65), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V9.65), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V9.65), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V9.65), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.65), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.65), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V9.65), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V9.65), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.65), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V9.65), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V9.65), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V9.65), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V9.65), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V9.64), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions < V9.64), SIPROTEC 5 7SX82 (CP150) (All versions < V9.65), SIPROTEC 5 7SX85 (CP300) (All versions < V9.65), SIPROTEC 5 7UM85 (CP300) (All versions < V9.64), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V9.65), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V9.65), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V9.65), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.65), SIPROTEC 5 7VE85 (CP300) (All versions < V9.64), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V9.65), SIPROTEC 5 7VU85 (CP300) (All versions < V9.64), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V9.62 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions installed on CP200 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions installed on CP200 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V9.62 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.62), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.64). The affected devices are supporting weak ciphers on several ports (443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS). \r\nThis could allow an unauthorized attacker in a man-in-the-middle position to decrypt any data passed over to and from those ports." + "value": "A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.64), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.64), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.64), SIPROTEC 5 6MD89 (CP300) (All versions < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions < V9.64), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions < V9.64), SIPROTEC 5 7SA82 (CP100) (All versions < V8.90), SIPROTEC 5 7SA82 (CP150) (All versions < V9.65), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V9.65), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V9.65), SIPROTEC 5 7SD82 (CP100) (All versions < V8.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.65), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V9.65), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V9.65), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.65), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.65), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V9.65), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V9.65), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.65), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V9.65), SIPROTEC 5 7SL82 (CP100) (All versions < V8.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.65), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V9.65), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V9.65), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V9.64), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions < V9.64), SIPROTEC 5 7SX82 (CP150) (All versions < V9.65), SIPROTEC 5 7SX85 (CP300) (All versions < V9.65), SIPROTEC 5 7UM85 (CP300) (All versions < V9.64), SIPROTEC 5 7UT82 (CP100) (All versions < V8.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.65), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V9.65), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V9.65), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.65), SIPROTEC 5 7VE85 (CP300) (All versions < V9.64), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V9.65), SIPROTEC 5 7VU85 (CP300) (All versions < V9.64), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V9.62 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions installed on CP200 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions installed on CP200 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V9.62 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.62), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.64). The affected devices are supporting weak ciphers on several ports (443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS). \r\nThis could allow an unauthorized attacker in a man-in-the-middle position to decrypt any data passed over to and from those ports." }, { "lang": "es", diff --git a/CVE-2024/CVE-2024-536xx/CVE-2024-53648.json b/CVE-2024/CVE-2024-536xx/CVE-2024-53648.json index d019bbb61b2..91177d19f30 100644 --- a/CVE-2024/CVE-2024-536xx/CVE-2024-53648.json +++ b/CVE-2024/CVE-2024-536xx/CVE-2024-53648.json @@ -2,13 +2,13 @@ "id": "CVE-2024-53648", "sourceIdentifier": "productcert@siemens.com", "published": "2025-02-11T11:15:14.460", - "lastModified": "2025-08-12T12:15:34.013", + "lastModified": "2025-11-11T21:15:36.180", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.90), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.90), SIPROTEC 5 6MD89 (CP300) (All versions < V9.90), SIPROTEC 5 6MU85 (CP300) (All versions < V9.90), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions < V10.0), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V9.90), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V9.90), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V9.90), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V9.90), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V9.90), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V9.90), SIPROTEC 5 7SJ81 (CP100) (All versions), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.90), SIPROTEC 5 7SJ82 (CP100) (All versions), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.90), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V9.90), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V9.90), SIPROTEC 5 7SK82 (CP100) (All versions), SIPROTEC 5 7SK82 (CP150) (All versions < V9.90), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V9.90), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V9.90), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V9.90), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V9.90), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V9.90), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V10.0), SIPROTEC 5 7ST86 (CP300) (All versions < V10.0), SIPROTEC 5 7SX82 (CP150) (All versions < V9.90), SIPROTEC 5 7SX85 (CP300) (All versions < V9.90), SIPROTEC 5 7SY82 (CP150) (All versions < V9.90), SIPROTEC 5 7UM85 (CP300) (All versions < V9.90), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V9.90), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V9.90), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V9.90), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.90), SIPROTEC 5 7VE85 (CP300) (All versions < V9.90), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V9.90), SIPROTEC 5 7VU85 (CP300) (All versions < V9.90), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.90). Affected devices do not properly limit access to a development shell accessible over a physical interface. This could allow an unauthenticated attacker with physical access to the device to execute arbitrary commands on the device." + "value": "A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.90), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.90), SIPROTEC 5 6MD89 (CP300) (All versions < V9.90), SIPROTEC 5 6MU85 (CP300) (All versions < V9.90), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions < V10.0), SIPROTEC 5 7SA82 (CP100) (All versions < V8.90), SIPROTEC 5 7SA82 (CP150) (All versions < V9.90), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V9.90), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V9.90), SIPROTEC 5 7SD82 (CP100) (All versions < V8.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.90), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V9.90), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V9.90), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.90), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.90), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.90), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.90), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V9.90), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V9.90), SIPROTEC 5 7SK82 (CP100) (All versions < V8.90), SIPROTEC 5 7SK82 (CP150) (All versions < V9.90), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V9.90), SIPROTEC 5 7SL82 (CP100) (All versions < V8.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.90), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V9.90), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V9.90), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V9.90), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V10.0), SIPROTEC 5 7ST86 (CP300) (All versions < V10.0), SIPROTEC 5 7SX82 (CP150) (All versions < V9.90), SIPROTEC 5 7SX85 (CP300) (All versions < V9.90), SIPROTEC 5 7SY82 (CP150) (All versions < V9.90), SIPROTEC 5 7UM85 (CP300) (All versions < V9.90), SIPROTEC 5 7UT82 (CP100) (All versions < V8.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.90), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V9.90), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V9.90), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.90), SIPROTEC 5 7VE85 (CP300) (All versions < V9.90), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V9.90), SIPROTEC 5 7VU85 (CP300) (All versions < V9.90), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.90). Affected devices do not properly limit access to a development shell accessible over a physical interface. This could allow an unauthenticated attacker with physical access to the device to execute arbitrary commands on the device." }, { "lang": "es", diff --git a/CVE-2024/CVE-2024-536xx/CVE-2024-53649.json b/CVE-2024/CVE-2024-536xx/CVE-2024-53649.json index 85fa725606f..97d94115a35 100644 --- a/CVE-2024/CVE-2024-536xx/CVE-2024-53649.json +++ b/CVE-2024/CVE-2024-536xx/CVE-2024-53649.json @@ -2,13 +2,13 @@ "id": "CVE-2024-53649", "sourceIdentifier": "productcert@siemens.com", "published": "2025-01-14T11:15:16.820", - "lastModified": "2025-03-11T10:15:15.283", + "lastModified": "2025-11-11T21:15:36.383", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.80), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.68), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7KE85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SA82 (CP100) (All versions >= V7.80), SIPROTEC 5 7SA82 (CP150) (All versions < V9.80), SIPROTEC 5 7SA86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SA87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SD82 (CP100) (All versions >= V7.80), SIPROTEC 5 7SD82 (CP150) (All versions < V9.80), SIPROTEC 5 7SD86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SD87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SJ81 (CP100) (All versions >= V7.80), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.80), SIPROTEC 5 7SJ82 (CP100) (All versions >= V7.80), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.80), SIPROTEC 5 7SJ85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SJ86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SK82 (CP100) (All versions >= V7.80), SIPROTEC 5 7SK82 (CP150) (All versions < V9.80), SIPROTEC 5 7SK85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SL82 (CP100) (All versions >= V7.80), SIPROTEC 5 7SL82 (CP150) (All versions < V9.80), SIPROTEC 5 7SL86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SL87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SS85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7ST85 (CP300) (All versions < V9.68), SIPROTEC 5 7ST86 (CP300) (All versions < V9.80), SIPROTEC 5 7SX82 (CP150) (All versions < V9.80), SIPROTEC 5 7SX85 (CP300) (All versions < V9.80), SIPROTEC 5 7SY82 (CP150) (All versions < V9.80), SIPROTEC 5 7UM85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7UT82 (CP100) (All versions >= V7.80), SIPROTEC 5 7UT82 (CP150) (All versions < V9.80), SIPROTEC 5 7UT85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7UT86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7UT87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7VE85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7VK87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7VU85 (CP300) (All versions < V9.80), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.80). Affected devices do not properly limit the path accessible via their webserver. This could allow an authenticated remote attacker to read arbitrary files from the filesystem of affected devices." + "value": "A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.80), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.68), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7KE85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SA82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SA82 (CP150) (All versions < V9.80), SIPROTEC 5 7SA86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SA87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SD82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.80), SIPROTEC 5 7SD86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SD87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SJ81 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.80), SIPROTEC 5 7SJ82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.80), SIPROTEC 5 7SJ85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SJ86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SK82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SK82 (CP150) (All versions < V9.80), SIPROTEC 5 7SK85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SL82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.80), SIPROTEC 5 7SL86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SL87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SS85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7ST85 (CP300) (All versions < V9.68), SIPROTEC 5 7ST86 (CP300) (All versions < V9.80), SIPROTEC 5 7SX82 (CP150) (All versions < V9.80), SIPROTEC 5 7SX85 (CP300) (All versions < V9.80), SIPROTEC 5 7SY82 (CP150) (All versions < V9.80), SIPROTEC 5 7UM85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7UT82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.80), SIPROTEC 5 7UT85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7UT86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7UT87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7VE85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7VK87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7VU85 (CP300) (All versions < V9.80), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.80). Affected devices do not properly limit the path accessible via their webserver. This could allow an authenticated remote attacker to read arbitrary files from the filesystem of affected devices." }, { "lang": "es", diff --git a/CVE-2024/CVE-2024-561xx/CVE-2024-56181.json b/CVE-2024/CVE-2024-561xx/CVE-2024-56181.json index 3ab580b44a9..8927fa3f125 100644 --- a/CVE-2024/CVE-2024-561xx/CVE-2024-56181.json +++ b/CVE-2024/CVE-2024-561xx/CVE-2024-56181.json @@ -2,13 +2,13 @@ "id": "CVE-2024-56181", "sourceIdentifier": "productcert@siemens.com", "published": "2025-03-11T10:15:15.597", - "lastModified": "2025-06-10T16:15:35.567", + "lastModified": "2025-11-11T21:15:36.540", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All versions < V29.01.07), SIMATIC IPC BX-59A (All versions < V32.01.04), SIMATIC IPC PX-32A (All versions < V29.01.07), SIMATIC IPC PX-39A (All versions < V29.01.07), SIMATIC IPC PX-39A PRO (All versions < V29.01.07), SIMATIC IPC RC-543A (All versions), SIMATIC IPC RC-543B (All versions), SIMATIC IPC RW-543A (All versions), SIMATIC IPC RW-543B (All versions), SIMATIC IPC127E (All versions), SIMATIC IPC227E (All versions), SIMATIC IPC227G (All versions), SIMATIC IPC277E (All versions), SIMATIC IPC277G (All versions), SIMATIC\u00a0IPC277G PRO (All versions), SIMATIC IPC3000 SMART V3 (All versions), SIMATIC IPC327G (All versions), SIMATIC IPC347G (All versions), SIMATIC IPC377G (All versions), SIMATIC IPC427E (All versions), SIMATIC IPC477E (All versions), SIMATIC IPC477E PRO (All versions), SIMATIC IPC527G (All versions), SIMATIC IPC627E (All versions < V25.02.15), SIMATIC IPC647E (All versions < V25.02.15), SIMATIC IPC677E (All versions < V25.02.15), SIMATIC IPC847E (All versions < V25.02.15), SIMATIC ITP1000 (All versions). The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to alter the secure boot configuration without proper authorization by directly communicate with the flash controller." + "value": "A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All versions < V29.01.07), SIMATIC IPC BX-59A (All versions < V32.01.04), SIMATIC IPC PX-32A (All versions < V29.01.07), SIMATIC IPC PX-39A (All versions < V29.01.07), SIMATIC IPC PX-39A PRO (All versions < V29.01.07), SIMATIC IPC RC-543A (All versions), SIMATIC IPC RC-543B (All versions), SIMATIC IPC RW-543A (All versions), SIMATIC IPC RW-543B (All versions), SIMATIC IPC127E (All versions), SIMATIC IPC227E (All versions), SIMATIC IPC227G (All versions < V28.01.14), SIMATIC IPC277E (All versions), SIMATIC IPC277G (All versions < V28.01.14), SIMATIC\u00a0IPC277G PRO (All versions < V28.01.14), SIMATIC IPC3000 SMART V3 (All versions), SIMATIC IPC327G (All versions < V28.01.14), SIMATIC IPC347G (All versions), SIMATIC IPC377G (All versions < V28.01.14), SIMATIC IPC427E (All versions), SIMATIC IPC477E (All versions), SIMATIC IPC477E PRO (All versions), SIMATIC IPC527G (All versions), SIMATIC IPC627E (All versions < V25.02.15), SIMATIC IPC647E (All versions < V25.02.15), SIMATIC IPC677E (All versions < V25.02.15), SIMATIC IPC847E (All versions < V25.02.15), SIMATIC ITP1000 (All versions). The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to alter the secure boot configuration without proper authorization by directly communicate with the flash controller." }, { "lang": "es", diff --git a/CVE-2024/CVE-2024-561xx/CVE-2024-56182.json b/CVE-2024/CVE-2024-561xx/CVE-2024-56182.json index acc27c1e07f..59b3dbca48a 100644 --- a/CVE-2024/CVE-2024-561xx/CVE-2024-56182.json +++ b/CVE-2024/CVE-2024-561xx/CVE-2024-56182.json @@ -2,13 +2,13 @@ "id": "CVE-2024-56182", "sourceIdentifier": "productcert@siemens.com", "published": "2025-03-11T10:15:15.823", - "lastModified": "2025-06-10T16:15:35.710", + "lastModified": "2025-11-11T21:15:36.680", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions < V26.01.12), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All versions < V29.01.07), SIMATIC IPC BX-59A (All versions < V32.01.04), SIMATIC IPC PX-32A (All versions < V29.01.07), SIMATIC IPC PX-39A (All versions < V29.01.07), SIMATIC IPC PX-39A PRO (All versions < V29.01.07), SIMATIC IPC RC-543A (All versions), SIMATIC IPC RC-543B (All versions), SIMATIC IPC RW-543A (All versions), SIMATIC IPC RW-543B (All versions), SIMATIC IPC127E (All versions), SIMATIC IPC227E (All versions), SIMATIC IPC227G (All versions), SIMATIC IPC277E (All versions), SIMATIC IPC277G (All versions), SIMATIC\u00a0IPC277G PRO (All versions), SIMATIC IPC3000 SMART V3 (All versions), SIMATIC IPC327G (All versions), SIMATIC IPC347G (All versions), SIMATIC IPC377G (All versions), SIMATIC IPC427E (All versions), SIMATIC IPC477E (All versions), SIMATIC IPC477E PRO (All versions), SIMATIC IPC527G (All versions), SIMATIC IPC627E (All versions < V25.02.15), SIMATIC IPC647E (All versions < V25.02.15), SIMATIC IPC677E (All versions < V25.02.15), SIMATIC IPC847E (All versions < V25.02.15), SIMATIC ITP1000 (All versions). The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to disable the BIOS password without proper authorization by directly communicate with the flash controller." + "value": "A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions < V26.01.12), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All versions < V29.01.07), SIMATIC IPC BX-59A (All versions < V32.01.04), SIMATIC IPC PX-32A (All versions < V29.01.07), SIMATIC IPC PX-39A (All versions < V29.01.07), SIMATIC IPC PX-39A PRO (All versions < V29.01.07), SIMATIC IPC RC-543A (All versions), SIMATIC IPC RC-543B (All versions), SIMATIC IPC RW-543A (All versions), SIMATIC IPC RW-543B (All versions), SIMATIC IPC127E (All versions), SIMATIC IPC227E (All versions), SIMATIC IPC227G (All versions < V28.01.14), SIMATIC IPC277E (All versions), SIMATIC IPC277G (All versions < V28.01.14), SIMATIC\u00a0IPC277G PRO (All versions < V28.01.14), SIMATIC IPC3000 SMART V3 (All versions), SIMATIC IPC327G (All versions < V28.01.14), SIMATIC IPC347G (All versions), SIMATIC IPC377G (All versions < V28.01.14), SIMATIC IPC427E (All versions), SIMATIC IPC477E (All versions), SIMATIC IPC477E PRO (All versions), SIMATIC IPC527G (All versions), SIMATIC IPC627E (All versions < V25.02.15), SIMATIC IPC647E (All versions < V25.02.15), SIMATIC IPC677E (All versions < V25.02.15), SIMATIC IPC847E (All versions < V25.02.15), SIMATIC ITP1000 (All versions). The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to disable the BIOS password without proper authorization by directly communicate with the flash controller." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-110xx/CVE-2025-11021.json b/CVE-2025/CVE-2025-110xx/CVE-2025-11021.json index 615569baebd..2f2c26dd06a 100644 --- a/CVE-2025/CVE-2025-110xx/CVE-2025-11021.json +++ b/CVE-2025/CVE-2025-110xx/CVE-2025-11021.json @@ -2,7 +2,7 @@ "id": "CVE-2025-11021", "sourceIdentifier": "secalert@redhat.com", "published": "2025-09-26T09:15:31.370", - "lastModified": "2025-11-04T20:17:14.460", + "lastModified": "2025-11-11T21:15:36.820", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -60,6 +60,14 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19714", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:20959", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21032", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-11021", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-115xx/CVE-2025-11561.json b/CVE-2025/CVE-2025-115xx/CVE-2025-11561.json index 26ece159b02..e230b2ae366 100644 --- a/CVE-2025/CVE-2025-115xx/CVE-2025-11561.json +++ b/CVE-2025/CVE-2025-115xx/CVE-2025-11561.json @@ -2,7 +2,7 @@ "id": "CVE-2025-11561", "sourceIdentifier": "secalert@redhat.com", "published": "2025-10-09T14:15:54.447", - "lastModified": "2025-11-11T20:15:34.260", + "lastModified": "2025-11-11T21:15:36.947", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -88,6 +88,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19859", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:20954", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2025:21020", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-37xx/CVE-2025-3717.json b/CVE-2025/CVE-2025-37xx/CVE-2025-3717.json new file mode 100644 index 00000000000..2963d8dba73 --- /dev/null +++ b/CVE-2025/CVE-2025-37xx/CVE-2025-3717.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-3717", + "sourceIdentifier": "security@grafana.com", + "published": "2025-11-11T21:15:37.290", + "lastModified": "2025-11-11T21:15:37.290", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "When using the Grafana Snowflake Datasource Plugin,\nif Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it\u00a0 could result in\u00a0\n\nthe wrong user identifier being used, and information for which the viewer is not authorized being returned.\u00a0\n\nThis issue affects Grafana Snowflake Datasource Plugin: from 1.5.0 before 1.14.1." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@grafana.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.1, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@grafana.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-653" + } + ] + } + ], + "references": [ + { + "url": "https://grafana.com/security/security-advisories/cve-2025-3717/", + "source": "security@grafana.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-405xx/CVE-2025-40571.json b/CVE-2025/CVE-2025-405xx/CVE-2025-40571.json index 0876dfa2a8e..92a978579ce 100644 --- a/CVE-2025/CVE-2025-405xx/CVE-2025-40571.json +++ b/CVE-2025/CVE-2025-405xx/CVE-2025-40571.json @@ -2,13 +2,13 @@ "id": "CVE-2025-40571", "sourceIdentifier": "productcert@siemens.com", "published": "2025-05-13T10:15:26.373", - "lastModified": "2025-06-12T08:15:22.297", + "lastModified": "2025-11-11T21:15:37.433", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been identified in Mendix OIDC SSO (Mendix 10 compatible) (All versions < V4.1.0), Mendix OIDC SSO (Mendix 10.12 compatible) (All versions < V4.0.1), Mendix OIDC SSO (Mendix 9 compatible) (All versions). The Mendix OIDC SSO module grants read and write access to all tokens exclusively to the Administrator role and could result in privilege misuse by an adversary modifying the module during Mendix development." + "value": "A vulnerability has been identified in Mendix OIDC SSO (Mendix 10 compatible) (All versions < V4.1.0), Mendix OIDC SSO (Mendix 10.12 compatible) (All versions < V4.0.1), Mendix OIDC SSO (Mendix 9 compatible) (All versions < V3.3.0). The Mendix OIDC SSO module grants read and write access to all tokens exclusively to the Administrator role and could result in privilege misuse by an adversary modifying the module during Mendix development." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-407xx/CVE-2025-40744.json b/CVE-2025/CVE-2025-407xx/CVE-2025-40744.json new file mode 100644 index 00000000000..0f91be44bad --- /dev/null +++ b/CVE-2025/CVE-2025-407xx/CVE-2025-40744.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-40744", + "sourceIdentifier": "productcert@siemens.com", + "published": "2025-11-11T21:15:37.557", + "lastModified": "2025-11-11T21:15:37.557", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 11). Affected applications do not properly validate client certificates to connect to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-295" + } + ] + } + ], + "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-522291.html", + "source": "productcert@siemens.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-407xx/CVE-2025-40760.json b/CVE-2025/CVE-2025-407xx/CVE-2025-40760.json new file mode 100644 index 00000000000..d14337ccafb --- /dev/null +++ b/CVE-2025/CVE-2025-407xx/CVE-2025-40760.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-40760", + "sourceIdentifier": "productcert@siemens.com", + "published": "2025-11-11T21:15:37.733", + "lastModified": "2025-11-11T21:15:37.733", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests.\r\nThis could allow a local attacker to extract password hashes for privileged accounts, which can then be subjected to offline brute-force attacks." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-209" + } + ] + } + ], + "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-514895.html", + "source": "productcert@siemens.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-407xx/CVE-2025-40763.json b/CVE-2025/CVE-2025-407xx/CVE-2025-40763.json new file mode 100644 index 00000000000..535bb57ca0e --- /dev/null +++ b/CVE-2025/CVE-2025-407xx/CVE-2025-40763.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-40763", + "sourceIdentifier": "productcert@siemens.com", + "published": "2025-11-11T21:15:37.893", + "lastModified": "2025-11-11T21:15:37.893", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution.\r\nThis could allow a local attacker to execute arbitrary code with superuser privileges by manipulating the environment variable and placing a malicious library in the controlled path." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-427" + } + ] + } + ], + "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-514895.html", + "source": "productcert@siemens.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-408xx/CVE-2025-40815.json b/CVE-2025/CVE-2025-408xx/CVE-2025-40815.json new file mode 100644 index 00000000000..d7d8d101984 --- /dev/null +++ b/CVE-2025/CVE-2025-408xx/CVE-2025-40815.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-40815", + "sourceIdentifier": "productcert@siemens.com", + "published": "2025-11-11T21:15:38.057", + "lastModified": "2025-11-11T21:15:38.057", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA2) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA2) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA2) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA2) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA2) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2) (All versions). Affected devices do not properly validate the structure of TCP packets in several methods. This could allow an attacker to cause buffer overflows, get control over the instruction counter and run custom code." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + } + ] + } + ], + "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-267056.html", + "source": "productcert@siemens.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-408xx/CVE-2025-40816.json b/CVE-2025/CVE-2025-408xx/CVE-2025-40816.json new file mode 100644 index 00000000000..f032e4d6956 --- /dev/null +++ b/CVE-2025/CVE-2025-408xx/CVE-2025-40816.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-40816", + "sourceIdentifier": "productcert@siemens.com", + "published": "2025-11-11T21:15:38.270", + "lastModified": "2025-11-11T21:15:38.270", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA2) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA2) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA2) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA2) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA2) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2) (All versions). Affected devices do not conduct certain validations when interacting with them. This could allow an unauthenticated remote attacker to manipulate the devices IP address, which means the device would not be reachable." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", + "baseScore": 7.6, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], + "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-267056.html", + "source": "productcert@siemens.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-408xx/CVE-2025-40817.json b/CVE-2025/CVE-2025-408xx/CVE-2025-40817.json new file mode 100644 index 00000000000..5e1fca89e36 --- /dev/null +++ b/CVE-2025/CVE-2025-408xx/CVE-2025-40817.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-40817", + "sourceIdentifier": "productcert@siemens.com", + "published": "2025-11-11T21:15:38.453", + "lastModified": "2025-11-11T21:15:38.453", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA2) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA2) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA2) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA2) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA2) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2) (All versions). Affected devices do not conduct certain validations when interacting with them. This could allow an unauthenticated remote attacker to change time of the device, which means the device could behave differently." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], + "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-267056.html", + "source": "productcert@siemens.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-408xx/CVE-2025-40827.json b/CVE-2025/CVE-2025-408xx/CVE-2025-40827.json new file mode 100644 index 00000000000..f117679cbda --- /dev/null +++ b/CVE-2025/CVE-2025-408xx/CVE-2025-40827.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-40827", + "sourceIdentifier": "productcert@siemens.com", + "published": "2025-11-11T21:15:38.627", + "lastModified": "2025-11-11T21:15:38.627", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All versions < V225.0 Update 10). The affected application is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-427" + } + ] + } + ], + "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-365596.html", + "source": "productcert@siemens.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-411xx/CVE-2025-41116.json b/CVE-2025/CVE-2025-411xx/CVE-2025-41116.json new file mode 100644 index 00000000000..794f0d71700 --- /dev/null +++ b/CVE-2025/CVE-2025-411xx/CVE-2025-41116.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41116", + "sourceIdentifier": "security@grafana.com", + "published": "2025-11-11T21:15:38.800", + "lastModified": "2025-11-11T21:15:38.800", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "When using the Grafana Databricks Datasource Plugin,\nif Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it\u00a0 could result in\u00a0\n\nthe wrong user identifier being used, and information for which the viewer is not authorized being returned.\u00a0\n\nThis issue affects Grafana Databricks Datasource Plugin: from 1.12.1 before 1.12.0" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@grafana.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.1, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@grafana.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-653" + } + ] + } + ], + "references": [ + { + "url": "https://grafana.com/security/security-advisories/cve-2025-41116/", + "source": "security@grafana.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-49xx/CVE-2025-4945.json b/CVE-2025/CVE-2025-49xx/CVE-2025-4945.json index 82cddcfa5a2..64ef4dd5f9c 100644 --- a/CVE-2025/CVE-2025-49xx/CVE-2025-4945.json +++ b/CVE-2025/CVE-2025-49xx/CVE-2025-4945.json @@ -2,7 +2,7 @@ "id": "CVE-2025-4945", "sourceIdentifier": "secalert@redhat.com", "published": "2025-05-19T17:15:29.103", - "lastModified": "2025-11-04T20:17:16.103", + "lastModified": "2025-11-11T21:15:38.933", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -64,6 +64,14 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19720", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:20959", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21032", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-4945", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-53xx/CVE-2025-5318.json b/CVE-2025/CVE-2025-53xx/CVE-2025-5318.json index 6096b0e1a5a..e0d9f3a85c3 100644 --- a/CVE-2025/CVE-2025-53xx/CVE-2025-5318.json +++ b/CVE-2025/CVE-2025-53xx/CVE-2025-5318.json @@ -2,7 +2,7 @@ "id": "CVE-2025-5318", "sourceIdentifier": "secalert@redhat.com", "published": "2025-06-24T14:15:30.523", - "lastModified": "2025-11-07T00:15:54.460", + "lastModified": "2025-11-11T21:15:39.060", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -194,6 +194,14 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19807", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:20943", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:21013", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-5318", "source": "secalert@redhat.com", diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61833.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61833.json new file mode 100644 index 00000000000..dabd096a30d --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61833.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61833", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T21:15:39.243", + "lastModified": "2025-11-11T21:15:39.243", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Substance3D - Stager versions 3.1.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/substance3d_stager/apsb25-113.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61834.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61834.json new file mode 100644 index 00000000000..6646374a5d8 --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61834.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61834", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T21:15:39.403", + "lastModified": "2025-11-11T21:15:39.403", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/substance3d_stager/apsb25-113.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61835.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61835.json new file mode 100644 index 00000000000..31f5238350e --- /dev/null +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61835.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61835", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T21:15:39.563", + "lastModified": "2025-11-11T21:15:39.563", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Substance3D - Stager versions 3.1.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-191" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/substance3d_stager/apsb25-113.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62229.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62229.json index 9b8434f6206..8376b96ef99 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62229.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62229.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62229", "sourceIdentifier": "secalert@redhat.com", "published": "2025-10-30T06:15:45.300", - "lastModified": "2025-11-11T20:15:34.647", + "lastModified": "2025-11-11T21:15:39.713", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -76,10 +76,18 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19909", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:20958", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2025:20960", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:20961", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2025:21035", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62230.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62230.json index 868a0b05ed0..f4abc73aa93 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62230.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62230.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62230", "sourceIdentifier": "secalert@redhat.com", "published": "2025-10-30T06:15:45.593", - "lastModified": "2025-11-11T20:15:34.777", + "lastModified": "2025-11-11T21:15:39.843", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -76,10 +76,18 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19909", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:20958", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2025:20960", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:20961", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2025:21035", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62231.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62231.json index 0ffaf9c538e..2800989ebdd 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62231.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62231.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62231", "sourceIdentifier": "secalert@redhat.com", "published": "2025-10-30T05:15:39.120", - "lastModified": "2025-11-11T20:15:34.927", + "lastModified": "2025-11-11T21:15:39.980", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -76,10 +76,18 @@ "url": "https://access.redhat.com/errata/RHSA-2025:19909", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:20958", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2025:20960", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:20961", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2025:21035", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-645xx/CVE-2025-64531.json b/CVE-2025/CVE-2025-645xx/CVE-2025-64531.json new file mode 100644 index 00000000000..6d88dada3ae --- /dev/null +++ b/CVE-2025/CVE-2025-645xx/CVE-2025-64531.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-64531", + "sourceIdentifier": "psirt@adobe.com", + "published": "2025-11-11T21:15:40.110", + "lastModified": "2025-11-11T21:15:40.110", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@adobe.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://helpx.adobe.com/security/products/substance3d_stager/apsb25-113.html", + "source": "psirt@adobe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-95xx/CVE-2025-9566.json b/CVE-2025/CVE-2025-95xx/CVE-2025-9566.json index ade44710da6..a77d66a6bda 100644 --- a/CVE-2025/CVE-2025-95xx/CVE-2025-9566.json +++ b/CVE-2025/CVE-2025-95xx/CVE-2025-9566.json @@ -2,7 +2,7 @@ "id": "CVE-2025-9566", "sourceIdentifier": "secalert@redhat.com", "published": "2025-09-05T20:15:36.727", - "lastModified": "2025-11-11T14:15:35.813", + "lastModified": "2025-11-11T21:15:40.423", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -112,6 +112,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:20909", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:20983", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-9566", "source": "secalert@redhat.com" diff --git a/README.md b/README.md index b50b6f06bf5..17c3ccb5c63 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-11T21:00:11.466097+00:00 +2025-11-11T23:00:11.901412+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-11T20:15:35.250000+00:00 +2025-11-11T21:15:40.423000+00:00 ``` ### Last Data Feed Release @@ -33,39 +33,55 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -317841 +317859 ``` ### CVEs added in the last Commit -Recently added CVEs: `11` +Recently added CVEs: `18` -- [CVE-2025-12748](CVE-2025/CVE-2025-127xx/CVE-2025-12748.json) (`2025-11-11T20:15:34.453`) -- [CVE-2025-61830](CVE-2025/CVE-2025-618xx/CVE-2025-61830.json) (`2025-11-11T19:15:35.130`) -- [CVE-2025-61837](CVE-2025/CVE-2025-618xx/CVE-2025-61837.json) (`2025-11-11T19:15:35.297`) -- [CVE-2025-61838](CVE-2025/CVE-2025-618xx/CVE-2025-61838.json) (`2025-11-11T19:15:35.450`) -- [CVE-2025-61839](CVE-2025/CVE-2025-618xx/CVE-2025-61839.json) (`2025-11-11T19:15:35.607`) -- [CVE-2025-61840](CVE-2025/CVE-2025-618xx/CVE-2025-61840.json) (`2025-11-11T19:15:35.763`) -- [CVE-2025-61841](CVE-2025/CVE-2025-618xx/CVE-2025-61841.json) (`2025-11-11T19:15:35.923`) -- [CVE-2025-61842](CVE-2025/CVE-2025-618xx/CVE-2025-61842.json) (`2025-11-11T19:15:36.080`) -- [CVE-2025-61843](CVE-2025/CVE-2025-618xx/CVE-2025-61843.json) (`2025-11-11T19:15:36.230`) -- [CVE-2025-61844](CVE-2025/CVE-2025-618xx/CVE-2025-61844.json) (`2025-11-11T19:15:36.383`) -- [CVE-2025-61845](CVE-2025/CVE-2025-618xx/CVE-2025-61845.json) (`2025-11-11T19:15:36.543`) +- [CVE-2024-32008](CVE-2024/CVE-2024-320xx/CVE-2024-32008.json) (`2025-11-11T21:15:35.110`) +- [CVE-2024-32009](CVE-2024/CVE-2024-320xx/CVE-2024-32009.json) (`2025-11-11T21:15:35.287`) +- [CVE-2024-32010](CVE-2024/CVE-2024-320xx/CVE-2024-32010.json) (`2025-11-11T21:15:35.450`) +- [CVE-2024-32011](CVE-2024/CVE-2024-320xx/CVE-2024-32011.json) (`2025-11-11T21:15:35.623`) +- [CVE-2024-32014](CVE-2024/CVE-2024-320xx/CVE-2024-32014.json) (`2025-11-11T21:15:35.797`) +- [CVE-2025-3717](CVE-2025/CVE-2025-37xx/CVE-2025-3717.json) (`2025-11-11T21:15:37.290`) +- [CVE-2025-40744](CVE-2025/CVE-2025-407xx/CVE-2025-40744.json) (`2025-11-11T21:15:37.557`) +- [CVE-2025-40760](CVE-2025/CVE-2025-407xx/CVE-2025-40760.json) (`2025-11-11T21:15:37.733`) +- [CVE-2025-40763](CVE-2025/CVE-2025-407xx/CVE-2025-40763.json) (`2025-11-11T21:15:37.893`) +- [CVE-2025-40815](CVE-2025/CVE-2025-408xx/CVE-2025-40815.json) (`2025-11-11T21:15:38.057`) +- [CVE-2025-40816](CVE-2025/CVE-2025-408xx/CVE-2025-40816.json) (`2025-11-11T21:15:38.270`) +- [CVE-2025-40817](CVE-2025/CVE-2025-408xx/CVE-2025-40817.json) (`2025-11-11T21:15:38.453`) +- [CVE-2025-40827](CVE-2025/CVE-2025-408xx/CVE-2025-40827.json) (`2025-11-11T21:15:38.627`) +- [CVE-2025-41116](CVE-2025/CVE-2025-411xx/CVE-2025-41116.json) (`2025-11-11T21:15:38.800`) +- [CVE-2025-61833](CVE-2025/CVE-2025-618xx/CVE-2025-61833.json) (`2025-11-11T21:15:39.243`) +- [CVE-2025-61834](CVE-2025/CVE-2025-618xx/CVE-2025-61834.json) (`2025-11-11T21:15:39.403`) +- [CVE-2025-61835](CVE-2025/CVE-2025-618xx/CVE-2025-61835.json) (`2025-11-11T21:15:39.563`) +- [CVE-2025-64531](CVE-2025/CVE-2025-645xx/CVE-2025-64531.json) (`2025-11-11T21:15:40.110`) ### CVEs modified in the last Commit -Recently modified CVEs: `9` +Recently modified CVEs: `18` -- [CVE-2018-11544](CVE-2018/CVE-2018-115xx/CVE-2018-11544.json) (`2025-11-11T19:15:33.583`) -- [CVE-2020-5510](CVE-2020/CVE-2020-55xx/CVE-2020-5510.json) (`2025-11-11T19:15:34.410`) -- [CVE-2025-11561](CVE-2025/CVE-2025-115xx/CVE-2025-11561.json) (`2025-11-11T20:15:34.260`) -- [CVE-2025-3146](CVE-2025/CVE-2025-31xx/CVE-2025-3146.json) (`2025-11-11T19:15:34.623`) -- [CVE-2025-56764](CVE-2025/CVE-2025-567xx/CVE-2025-56764.json) (`2025-11-11T19:15:34.910`) -- [CVE-2025-62229](CVE-2025/CVE-2025-622xx/CVE-2025-62229.json) (`2025-11-11T20:15:34.647`) -- [CVE-2025-62230](CVE-2025/CVE-2025-622xx/CVE-2025-62230.json) (`2025-11-11T20:15:34.777`) -- [CVE-2025-62231](CVE-2025/CVE-2025-622xx/CVE-2025-62231.json) (`2025-11-11T20:15:34.927`) -- [CVE-2025-9900](CVE-2025/CVE-2025-99xx/CVE-2025-9900.json) (`2025-11-11T20:15:35.250`) +- [CVE-2022-45044](CVE-2022/CVE-2022-450xx/CVE-2022-45044.json) (`2025-11-11T21:15:33.977`) +- [CVE-2023-28766](CVE-2023/CVE-2023-287xx/CVE-2023-28766.json) (`2025-11-11T21:15:34.250`) +- [CVE-2023-30901](CVE-2023/CVE-2023-309xx/CVE-2023-30901.json) (`2025-11-11T21:15:34.770`) +- [CVE-2023-31238](CVE-2023/CVE-2023-312xx/CVE-2023-31238.json) (`2025-11-11T21:15:34.950`) +- [CVE-2024-38867](CVE-2024/CVE-2024-388xx/CVE-2024-38867.json) (`2025-11-11T21:15:35.977`) +- [CVE-2024-53648](CVE-2024/CVE-2024-536xx/CVE-2024-53648.json) (`2025-11-11T21:15:36.180`) +- [CVE-2024-53649](CVE-2024/CVE-2024-536xx/CVE-2024-53649.json) (`2025-11-11T21:15:36.383`) +- [CVE-2024-56181](CVE-2024/CVE-2024-561xx/CVE-2024-56181.json) (`2025-11-11T21:15:36.540`) +- [CVE-2024-56182](CVE-2024/CVE-2024-561xx/CVE-2024-56182.json) (`2025-11-11T21:15:36.680`) +- [CVE-2025-11021](CVE-2025/CVE-2025-110xx/CVE-2025-11021.json) (`2025-11-11T21:15:36.820`) +- [CVE-2025-11561](CVE-2025/CVE-2025-115xx/CVE-2025-11561.json) (`2025-11-11T21:15:36.947`) +- [CVE-2025-40571](CVE-2025/CVE-2025-405xx/CVE-2025-40571.json) (`2025-11-11T21:15:37.433`) +- [CVE-2025-4945](CVE-2025/CVE-2025-49xx/CVE-2025-4945.json) (`2025-11-11T21:15:38.933`) +- [CVE-2025-5318](CVE-2025/CVE-2025-53xx/CVE-2025-5318.json) (`2025-11-11T21:15:39.060`) +- [CVE-2025-62229](CVE-2025/CVE-2025-622xx/CVE-2025-62229.json) (`2025-11-11T21:15:39.713`) +- [CVE-2025-62230](CVE-2025/CVE-2025-622xx/CVE-2025-62230.json) (`2025-11-11T21:15:39.843`) +- [CVE-2025-62231](CVE-2025/CVE-2025-622xx/CVE-2025-62231.json) (`2025-11-11T21:15:39.980`) +- [CVE-2025-9566](CVE-2025/CVE-2025-95xx/CVE-2025-9566.json) (`2025-11-11T21:15:40.423`) ## Download and Usage diff --git a/_state.csv b/_state.csv index f2bfbd627b6..18290f0a002 100644 --- a/_state.csv +++ b/_state.csv @@ -112828,7 +112828,7 @@ CVE-2018-1154,0,0,8c27a5c559eaddc6c5c70adac0719025b27d4cd8f00134cb2e0685ab6d1fc7 CVE-2018-11541,0,0,e93d69dc8ad1421d6adebd7ff6390e26dabdbae070b91a7127835a7ddefdcd3a,2024-11-21T03:43:34.397000 CVE-2018-11542,0,0,6eab608f3592fa014fa60ad04262e3fe541fa2bc76252687a8dd9eaa7e3f4827,2024-11-21T03:43:34.550000 CVE-2018-11543,0,0,afddd16a0ffbc10034734c6e4c9e732c7d5e96be8db2d76e8fe881edcaff3e5f,2024-11-21T03:43:34.703000 -CVE-2018-11544,0,1,dcb359f0b8fc47681ebbb5b5bc4e9369e289c40f77a7f2c7e826e034237a3a11,2025-11-11T19:15:33.583000 +CVE-2018-11544,0,0,dcb359f0b8fc47681ebbb5b5bc4e9369e289c40f77a7f2c7e826e034237a3a11,2025-11-11T19:15:33.583000 CVE-2018-11545,0,0,37f21942f15b80c2a4b417943fc805cabea0a4328b6d9f8a615d9e588381e112,2024-11-21T03:43:34.997000 CVE-2018-11546,0,0,775a8708461c7a9bfc3e2d7f0860ed30f4261e16945625b1c95909d33a1ffc06,2024-11-21T03:43:35.143000 CVE-2018-11547,0,0,54c45f036d21061b22b11f72f9019ef7ccd2df25329209c21d86b4cb17f21cd4,2024-11-21T03:43:35.290000 @@ -161428,7 +161428,7 @@ CVE-2020-5502,0,0,0e13513078cb9830549d5985c86a3df071f408d551f67df84535b6d1f49d0c CVE-2020-5504,0,0,424e3cd503634db094b529741d0be69f431c017ac12586e4491b411b5ec4b2be,2025-04-16T15:15:46.240000 CVE-2020-5505,0,0,602ad1ab3b92237e6ddc0c5b90dff9574f157e12a476ba45a4ec540d929dcc4b,2024-11-21T05:34:10.843000 CVE-2020-5509,0,0,6f07c8b88c523fd74821169ae00d2e256c349c13647a0dc9472006c11f4820e2,2024-11-21T05:34:10.983000 -CVE-2020-5510,0,1,f7bd3835e1acd62be36de8f4e864a63bdbe19ca9c325c52e9b0b4c8accf576cd,2025-11-11T19:15:34.410000 +CVE-2020-5510,0,0,f7bd3835e1acd62be36de8f4e864a63bdbe19ca9c325c52e9b0b4c8accf576cd,2025-11-11T19:15:34.410000 CVE-2020-5511,0,0,0a9291b64756693576edfe7822dd914354b463d2cc248eaa2d2459144db23e15,2024-11-21T05:34:11.250000 CVE-2020-5512,0,0,043b553ed0733d272378022ca562810e9ce12d0ce3eddd3e66decb5d73316f0a,2024-11-21T05:34:11.380000 CVE-2020-5513,0,0,14b29d2f799e7b2c2fc3f51b8a5454df58fea3d89b2f4ebdf7af41655fbc98ef,2024-11-21T05:34:11.510000 @@ -210895,7 +210895,7 @@ CVE-2022-4504,0,0,b27eff37d4e7abb720eed93fbe05e69d563cdca4548519b6b195855e489cbd CVE-2022-45040,0,0,43b381da8c0159c4ed49134288e182104625ec0fc589ff47c43bdb5eb6132393,2025-04-25T19:15:47.103000 CVE-2022-45041,0,0,ef1949d1460233572fdfb2716287baf4a2f8389968f29ef424eb0bc8fc8e4d4c,2025-04-17T15:15:50.250000 CVE-2022-45043,0,0,ac882d269905f73b62bf35a98382b22838daf661f0a5193bea18c8462ca7fa6e,2025-04-22T20:15:25.490000 -CVE-2022-45044,0,0,d8f9472e9417b70caae34cc756800e14625bdcd45f0866e663decb76d4c1825a,2024-11-21T07:28:39.987000 +CVE-2022-45044,0,1,0774b4fc424ab1ddfc4fb3c8a4defde5fe9de63adb1c0bfd162ee9d050071835,2025-11-11T21:15:33.977000 CVE-2022-45045,0,0,2c302e52fd9b69eb97ccf628f051e4201a5b2133da4a7dbe07da2ca2f69b6b52,2025-04-24T20:15:29.603000 CVE-2022-45046,0,0,1de35eb14a19f7f6f23d1643119c63f0a7099d4349f88737629fa34915974228,2023-11-07T03:54:29.393000 CVE-2022-45047,0,0,017c3a251afb2657269ea3e7ec999454fed3fb6a9b561633602ce281ddabc55f,2024-11-21T07:28:40.453000 @@ -224803,7 +224803,7 @@ CVE-2023-28762,0,0,ace81d8f6579fbda387c2c1571b1c7abfb932918a0f788eda35c1a4e6fb2a CVE-2023-28763,0,0,a2f685232965030086c14c9800cbb0887dbd3ac771b03b3a4a98bdffd5d62077,2024-11-21T07:55:57.433000 CVE-2023-28764,0,0,c0ff18ec02310f05a48ae25a60fabad104bc3798de1b24cc4ff8437a6e9e1cb5,2024-11-21T07:55:57.583000 CVE-2023-28765,0,0,69ec076a1217be2e89384c4aae3995513ded7326178c85dce7064130c4d0e2c8,2024-11-21T07:55:57.727000 -CVE-2023-28766,0,0,027f3beb263e5cd983db1670d8230d3f8d8108c8e7cf108a6c678a5cdb2fedec,2024-11-21T07:55:57.867000 +CVE-2023-28766,0,1,e797b3ba40f3b9cbddc41c5cc3df1419bc7251bba37c419d797adfd087cbc5d3,2025-11-11T21:15:34.250000 CVE-2023-28767,0,0,d04c961eb3740fedeb3289b8420a4fbad091d073cc2383cfdc0112e2a47bca8f,2024-11-21T07:55:58.100000 CVE-2023-28768,0,0,93c5d9d289e4176bd3a3786ab317543b20cbaf7d8c43bcd1ed4dbf68f18f3541,2024-11-21T07:55:58.267000 CVE-2023-28769,0,0,93edb05cfda63a8aacbf0e2b56c46264c34a4bfa9fd13459af69aaad1f129cb4,2024-11-21T07:55:58.413000 @@ -226405,7 +226405,7 @@ CVE-2023-30898,0,0,e8adbfd81392c6d7a4f4ddec7ba77ca41f42fb4486e2b35b75343808f7fa6 CVE-2023-30899,0,0,3523d3690163f96bf5ae559094c3e3a408c801e778a2065c64a81adda954d0bb,2024-11-21T08:01:01.803000 CVE-2023-3090,0,0,4268e8722956a1a232441f654a8477a61c39f828baf0472e59544dac51b66a36,2025-02-13T17:16:55.200000 CVE-2023-30900,0,0,9ab2dbc85199db2b1e37cee21aeb0dccd6f3c99d38bb3c4f0b5ad2f4fdc51702,2024-11-21T08:01:01.937000 -CVE-2023-30901,0,0,24c3bc3b68664b13c0b519777abfd16b3c8594d5439e7e6c6c9edf2ac4a4c0e2,2024-11-21T08:01:02.097000 +CVE-2023-30901,0,1,0ae00af24267307a8101bf997cb5c2011314fab4d84edebdbea1ff6f018f0d2d,2025-11-11T21:15:34.770000 CVE-2023-30902,0,0,b5391dbbbbfdfa6ef158fa2e9aa856173ac9fb4648dd482dcefc06e39dc4d01b,2024-12-05T15:15:06.587000 CVE-2023-30903,0,0,24e17e66ff4e307c15e35351ad9f0a130c2ad8d7eda69dcba3b20de75c36376d,2024-12-17T17:15:06.900000 CVE-2023-30904,0,0,dfb3fc2ce63c69026ed7916b2176a7039c77dad56f586d65a71628e32b92aa62,2024-12-17T17:15:07.030000 @@ -226719,7 +226719,7 @@ CVE-2023-31234,0,0,2a31902e3d32ead7f4a07e5c245fc59affec76a81451ce716117a6ab12589 CVE-2023-31235,0,0,20daa2722f33192c83ab080afa28b151d9a5d2beeaccf042b17ccda79251e339,2024-11-21T08:01:40.880000 CVE-2023-31236,0,0,126c1f9f8e7f9d345b2b4ef536b49c7045d186ceacff8f015d2b69a71b74cf11,2024-11-21T08:01:41.010000 CVE-2023-31237,0,0,0a352cabe307daa8069d8329407c493d9cc84626b4cea5eda67e039a48109b21,2024-11-21T08:01:41.133000 -CVE-2023-31238,0,0,11a72567041a3076066807dbe48ebaf14ba0774bcbfb5b06972c4cd36c749ae3,2024-11-21T08:01:41.260000 +CVE-2023-31238,0,1,a0dc609201aca2ba5f1293f5415e602f91a08cd2c172cc706fc3165abe66160d,2025-11-11T21:15:34.950000 CVE-2023-31239,0,0,38367017ce12f3d3e0238994f3c8e25cc7abbdbd5fc046c31e1c836a53c24d1d,2024-12-23T22:15:06.137000 CVE-2023-3124,0,0,67cc12c86892de6b2248381c3363d0ccd4341fb7a3797b32711efc303565f768,2024-11-21T08:16:30.680000 CVE-2023-31240,0,0,353d37d85d0a9b7a55ddbf8bea51a0e809ce76463f66ea7a3065130f5a0e75f6,2024-12-09T18:15:20.887000 @@ -261036,7 +261036,12 @@ CVE-2024-32004,0,0,79901c66abd0068d35e82d75e71823bdb3ab157715da971619062e9d99941 CVE-2024-32005,0,0,1ef8777a879c1a539a6a6a90c5b508efff6c1cc1c490a65de904310235a40796,2024-11-21T09:14:19.780000 CVE-2024-32006,0,0,56738ce9a41bcbbd3a1f4ba6ca23315aec814ba1f2e20a9fe40df28b1e59d527,2025-08-20T19:24:51.233000 CVE-2024-32007,0,0,756b78db050ed0c0c6344a6e3135f0f117281a61b322cb67b82b9097b3a05caa,2024-11-21T09:14:20.010000 +CVE-2024-32008,1,1,5c97d2440834bdc55a1db40a3bbf8a934d639fc7779cdc6ed4090d08fe64b754,2025-11-11T21:15:35.110000 +CVE-2024-32009,1,1,97143ab4786889fdbb9fc230a0a5b42de8dcdda6fa36ff3f77b6eb3205168c7d,2025-11-11T21:15:35.287000 CVE-2024-3201,0,0,668efb17259a09755d1a0415a9e560e54201d184e13d68536fe89d672e5b2970,2024-11-21T09:29:08.330000 +CVE-2024-32010,1,1,68d751a178f09f03ea35943324c0573f6963d6a715e3c1f5e5a4663fc30a8256,2025-11-11T21:15:35.450000 +CVE-2024-32011,1,1,9883f5a26557289d010ebeab75736db942f31b89da39a51fcde412fa7f22ea5c,2025-11-11T21:15:35.623000 +CVE-2024-32014,1,1,26ecad3a66af543444efb6ad1c27bb31eab0036016e5fd76f404dfed5b40ad85,2025-11-11T21:15:35.797000 CVE-2024-32017,0,0,90fb8e2cc73234ab39d73e67f4744f536614242b204f7917d59ad9597b9d843f,2025-09-04T19:37:00.870000 CVE-2024-32018,0,0,34216aac4ce4024491259cf9b1a5f58c5a6477115c30584d13652faa3712d485,2025-09-05T13:17:46.793000 CVE-2024-32019,0,0,cbcd6ecaf3a8cb1acf7cfabe6f845425b90fe05bb5264a08b4dfe5bd22fbd23e,2024-11-21T09:14:20.453000 @@ -266631,7 +266636,7 @@ CVE-2024-38863,0,0,e44e43c6d9184e9226eb7aa5af7dc27a72a96de87251e4d0ae60445c15ef1 CVE-2024-38864,0,0,f2dd86c6d7324936f95453ffeea980e9940cacf56046aefefbabc856b1d4ab48,2025-08-25T14:53:51.933000 CVE-2024-38865,0,0,697d8319385e55d5b14fc4de67b96179c13a384050c768c803d344463582d4c2,2025-08-21T21:56:10 CVE-2024-38866,0,0,508c1d2abc90e7b813dd7d31291d2678d4c2ee9e4f3d81851b027331c62223a4,2025-11-03T20:16:24.187000 -CVE-2024-38867,0,0,e2cd18bba38f6779d199f5ced8b9755c06ec771e1decfe599477cfc8d2fc1557,2024-11-21T09:26:53.620000 +CVE-2024-38867,0,1,e9bf629eb42f7d7728bcd7485af93380e6b13fa2ea39620df29f36264823b438,2025-11-11T21:15:35.977000 CVE-2024-38868,0,0,f617565b943eecb1268c96959d081ed3b2d4ce7c428fb68cb30623b6faafb7c0,2024-09-04T19:13:29.983000 CVE-2024-38869,0,0,f770e86162bd7ed85445a4b54936e199dae2eea6001e0f8f44ad54b01ece9407,2024-08-30T18:15:07.150000 CVE-2024-3887,0,0,4c4b7e52c49e6a80d1cfaf43154880b2c20235a1505939f3ec10106b980953d2,2025-01-15T18:01:34.387000 @@ -277770,8 +277775,8 @@ CVE-2024-53635,0,0,7a67e9e0d9d71b612bd6cfd95f53056a7f326cdca18b0bdba544dd72fd3ce CVE-2024-53636,0,0,da115416438bde659865e0fc32668c96f1e4f76947f54ed79dd4f33a08cddf94,2025-04-29T16:15:29.717000 CVE-2024-5364,0,0,aa5f84f14464447d90ef8caf1f257dc2f279cb9cd3689bc4d8a6e5bed5923442,2025-02-10T14:41:25.130000 CVE-2024-53647,0,0,260cf9837d302c1f00976f96a877c5bd5d0e56a8152c8e4332c16411943155c3,2025-09-29T17:49:22.510000 -CVE-2024-53648,0,0,ec43a4c881dc7294c8f877b3f813e17f83746021eac196b4c9c2127ec69c1754,2025-08-12T12:15:34.013000 -CVE-2024-53649,0,0,3021a53fb0bdfe610911fe3a3f29880728a3cdf370654708b7f8599074d315f6,2025-03-11T10:15:15.283000 +CVE-2024-53648,0,1,5da94ffaa743a541bbe6d7b302462f1146d2f1ebca6ad7fc03734b684275d25e,2025-11-11T21:15:36.180000 +CVE-2024-53649,0,1,fd9dd0c54c33bd5ad1163ac46c9d101cee178b44415a130d7d34d1b2c0a3fc20,2025-11-11T21:15:36.383000 CVE-2024-5365,0,0,31e487cc8c7cf623825d9b66220325e039537a1a19c0e8b1528d28ce9486e47f,2025-02-10T14:41:59.380000 CVE-2024-53651,0,0,aadb9bb26d6b3658a0670a96a28ccbdc5b4e82309f714588b73a8d7089a05eea,2025-02-11T11:15:14.880000 CVE-2024-5366,0,0,5ef5d4271f30194c57c87b6aa097373bf15cc40b22d911e3306eab0e69375842,2025-02-10T14:42:23.697000 @@ -279271,8 +279276,8 @@ CVE-2024-56178,0,0,5e192747338bd9f0e88e598c725112a888b30130ca51c9dd4c8c023892000 CVE-2024-56179,0,0,d4c1236535141ef8268643d05594fad1682805e0bd52eafe2cb6f2049f8c8967,2025-08-22T18:08:51.663000 CVE-2024-5618,0,0,d2d97c727c060ec84f3174901af9ab7b075641151198c4f29457077453fd0cc0,2024-11-21T09:48:01.670000 CVE-2024-56180,0,0,fc64ce029575b1f0283774b9966aaa98b8891498b9a4f888968ef3ad73b17571,2025-07-14T13:07:40.770000 -CVE-2024-56181,0,0,99320f5318c3c983e160c350f6cdf26bf8ee1c17fa626cf4ea95787b0c02e6c8,2025-06-10T16:15:35.567000 -CVE-2024-56182,0,0,5ee1e5b1fdde49b3515b4dcb4f95321f9c089994e2beadf28f64a425c5cfca9a,2025-06-10T16:15:35.710000 +CVE-2024-56181,0,1,38a51873578b9919ff177fbfe053b032fd99610d9ca4c69b021384537a9a0aa1,2025-11-11T21:15:36.540000 +CVE-2024-56182,0,1,30a01e0e51503d7362341244653a1eb2f40f44c6639368bd375adf4f12729826,2025-11-11T21:15:36.680000 CVE-2024-56184,0,0,df08de2d0e77abe9a620c26cec85bcf657e65f9ff0a2b95c484a617af744c8b8,2025-06-27T16:21:56.450000 CVE-2024-56185,0,0,437fa644d2f5ed990ad50923a5c3132e5c3601e7358d070dab45254e8bcadf0d,2025-06-27T16:21:27.090000 CVE-2024-56186,0,0,1d2640fc682bcb7248ebf5f5185b09bda435fdfa7007006fc596d15b0c504ee2,2025-06-27T16:21:02.190000 @@ -286409,7 +286414,7 @@ CVE-2025-11018,0,0,3d615abfae22fd3267166f0906610a3c1e2b728b5797b0b89477946fed7ae CVE-2025-11019,0,0,27449200f275ecb1a95e5c83535fa5a59269619c1e37554c6445345c2cd61de6,2025-09-29T19:34:10.030000 CVE-2025-1102,0,0,4a68cb9f9249da7caa7d3660d94ec38d088bf93b417930cb57da5ccb645c2710,2025-10-24T14:58:28.943000 CVE-2025-11020,0,0,3ab673aeb3c468dd0bed703867cbc3aff35f3041dff84a0f7d2609a2cf91ca20,2025-10-02T19:11:46.753000 -CVE-2025-11021,0,0,517ae699814a1bb13be9efdc7447c83e35dcda1c1996501730c865edf554e90b,2025-11-04T20:17:14.460000 +CVE-2025-11021,0,1,c42e9f04308537339384fee84160bc94ad7f9eefe7902f545c39f39b741352c4,2025-11-11T21:15:36.820000 CVE-2025-11023,0,0,07d329ffc8d95134e826de681be88316432d2bfd1bf8b02a01273a7b006bb130,2025-10-27T13:20:33.350000 CVE-2025-11025,0,0,f3276fe94d07d47ffee93b64b3a9b4e2b0092ef1edcf638f6779726c2b526589,2025-09-26T14:32:19.853000 CVE-2025-11026,0,0,ea0f3fe6b26cbedffd9b9f222ef7d8819bf3df2bb4de5eddf00d118e77051069,2025-10-08T20:22:33.550000 @@ -286885,7 +286890,7 @@ CVE-2025-11556,0,0,922996b3d1c93a3d1e875a0ea35276e7b7fd3c26329b3e9f126b5cecf6c75 CVE-2025-11557,0,0,53d54ae12237f8976cfb04aeb6b71143bd4775fa6e16fecac3139570eda2276f,2025-10-20T20:27:14.907000 CVE-2025-11558,0,0,f1030d51bfec19909e57fed6c600472aacb2f4b58c8ca5c7c9c9ba63318bd4f3,2025-10-23T20:06:00.793000 CVE-2025-1156,0,0,b9d7f43a66be70b99a0c5a29d90bee603b5f0498d98b3e0e919a25713e636c40,2025-02-10T21:15:22.133000 -CVE-2025-11561,0,1,da087761cf2d41fabdcb03253e9357d91c3ac8b27071e67537956f4baff99d7f,2025-11-11T20:15:34.260000 +CVE-2025-11561,0,1,d175538e9d17c6aeda19b5d2efdf8e4134ca577dd650de47cdc7b8d4a5029daf,2025-11-11T21:15:36.947000 CVE-2025-11564,0,0,5518bd3a217203a635aeaf04dce294a44df774e2b26e248955e3cd3847147920,2025-10-27T13:20:15.637000 CVE-2025-11568,0,0,6228fbd93a6a7aa699e15c0e25fe35ea4cbb02a5f5f1acd5f3ebeaa1fd83c676,2025-10-16T15:28:59.610000 CVE-2025-11569,0,0,864c81875064aa8b82551199f603960c9e07408c00ea1ed8a6d3892dc16b994e,2025-10-30T16:15:34.297000 @@ -287681,7 +287686,7 @@ CVE-2025-1273,0,0,a53ca368fd1241998b0718bab24221bda830537b090b6087ccbff111a94c45 CVE-2025-12735,0,0,8887e78958415b7bf6c14302f06726575e91114d0daf98d9d9f9ef8ab41ee6a5,2025-11-10T14:15:42.750000 CVE-2025-1274,0,0,5e5cfd476c5408f888f5b2f1a929101dbb2bd5e4199efa0bbbf5f7b5bb7dd7ed,2025-08-19T13:15:39.467000 CVE-2025-12745,0,0,98d6e6a936cfb7cbdefe188b4d47f3ebc52d27fa109ac61e902bd54f45f48f82,2025-11-06T19:45:30.990000 -CVE-2025-12748,1,1,0c06bd0c54859a6fdf7940687c68ddd54c1e545bb073767aef1bd8d12d0f5cdd,2025-11-11T20:15:34.453000 +CVE-2025-12748,0,0,0c06bd0c54859a6fdf7940687c68ddd54c1e545bb073767aef1bd8d12d0f5cdd,2025-11-11T20:15:34.453000 CVE-2025-1275,0,0,37ac9eafc83f367a9b020f98459eacda940bbbebedd7c265613d3a0c3d38bd1c,2025-08-19T13:15:39.617000 CVE-2025-12753,0,0,f4c8e1106d8f910bb225563cd4c3d7a4d8c9784d65ddf56f5be4912d00d10062,2025-11-11T04:15:50.090000 CVE-2025-12754,0,0,896129ff78036f9477cb065c827e344908f14aa02ae9662319942bd5fe1d7f24,2025-11-11T04:15:50.250000 @@ -297521,7 +297526,7 @@ CVE-2025-31456,0,0,28920384b3063f0681bc4aba8342d6bba1d2a7c2ab3ff1a80b8efb6553704 CVE-2025-31457,0,0,a1f14dfcd8bfcea56fb270bf25d24da13815c4738b56d09fd4fecc2e306d3ed4,2025-03-28T18:11:40.180000 CVE-2025-31458,0,0,f13bd08177c7725e7fe208c107943a27aca6d0a964684d6a33ac9afef0f044b7,2025-03-28T18:11:40.180000 CVE-2025-31459,0,0,4904a04774d129da8872e4ef9cbd37d72d0de126b991707b4a23a45b387f7d09,2025-03-28T18:11:40.180000 -CVE-2025-3146,0,1,ac7e4e2abefa7f08afacc5841b75533c73b81dbd3dc929c5dfaa7973729ac7c2,2025-11-11T19:15:34.623000 +CVE-2025-3146,0,0,ac7e4e2abefa7f08afacc5841b75533c73b81dbd3dc929c5dfaa7973729ac7c2,2025-11-11T19:15:34.623000 CVE-2025-31460,0,0,5e2525d46b1b47d1e4a0b76fc500fbba42c3ceb918b6d50e9bcfde54e52e56e6,2025-03-28T18:11:40.180000 CVE-2025-31461,0,0,bdc620dd49593c387f4a803645c68b850c06521048c648b5747c9585ddbd7413,2025-04-02T14:58:07.527000 CVE-2025-31462,0,0,5f9812a3f73c9de6fa4e1f00a3593337b0bd5f2ec7e8395e765dbef36c70e055,2025-04-02T14:58:07.527000 @@ -300056,6 +300061,7 @@ CVE-2025-37147,0,0,7620019d25b7a357d4ff55dd2a81f3873a0b5690a0d7b657e4bdc821343df CVE-2025-37148,0,0,bd2e83b13acaf532f70a8520e017cec91e70130db72186c19fa6d9d26d90bc39,2025-10-14T20:15:36.250000 CVE-2025-37149,0,0,4490ad081cabaa47b7fcea3952ed13db1bd5657f5f59a4ac8924e2b7f797fc21,2025-10-28T21:15:37.660000 CVE-2025-3715,0,0,2d1d9dba7f9eff4431b265f83f4af3c259cac9ce8ddae0a96ec092e646ca8d2a,2025-05-19T13:35:20.460000 +CVE-2025-3717,1,1,9896cd50b281dbfb43d08844cf6bd333f69658ce23b7511c22692903ae94ce4e,2025-11-11T21:15:37.290000 CVE-2025-3718,0,0,2721616072d4951c9e144a96816357a1d5e95f3abb8785dbcaf6b78f385f9a7e,2025-10-09T16:39:02.673000 CVE-2025-3719,0,0,70de45a7d783013b09c5969c272192930c10cfaacca07c3db548594672f7d554,2025-10-09T16:38:45.200000 CVE-2025-3722,0,0,1afffd803d576d6a44585cca56d92eaf51d0f4c3d464d63c2ff63489dc907bef,2025-06-26T18:57:43.670000 @@ -302099,7 +302105,7 @@ CVE-2025-40568,0,0,bea488b27f57eabc5a1a8b12bfda8cbb9a32ab6c6d2516c21c261159ab2f5 CVE-2025-40569,0,0,a5f1f61caa2593cac66ffa31f4fd2a4e3c91c65148982d43f10a76f85c018b80,2025-06-12T16:06:39.330000 CVE-2025-4057,0,0,53c29a339e979ea6de9451c8a059a63beeb7987edf000e183192dcecf8cdb483,2025-07-31T20:15:43.123000 CVE-2025-40570,0,0,e1938c71bd5d474b2b70b9b3fc7606f69ee3d10b176a3593ae08b04049251573,2025-08-12T14:25:33.177000 -CVE-2025-40571,0,0,92334778ad54371de5319151f377af047fd17886086318e1331ade489105548b,2025-06-12T08:15:22.297000 +CVE-2025-40571,0,1,bddbd75ba0f043bb33409599a604f18c5dc9de748ff4f1eaacc6ec9cc529c4e7,2025-11-11T21:15:37.433000 CVE-2025-40572,0,0,bfa8c01b7de24510ff2c35c2b7f4862f50ef5d06ed5ecdb501045af20715b7d9,2025-07-08T11:15:27.650000 CVE-2025-40573,0,0,7b109a825b0e62490e3192991ce0d7d9f7f56ef29018391917f7f4dc6e0b8d3a,2025-07-08T11:15:27.797000 CVE-2025-40574,0,0,5191d8b8a68599c81d74a5184d6cfbc9465e7e987ec04ef77d0926a0036252ef,2025-07-08T11:15:27.940000 @@ -302260,6 +302266,7 @@ CVE-2025-40740,0,0,55b7509fa52e084e62e7b1d702d6f965ddd3129b2b42f368caad791b7b818 CVE-2025-40741,0,0,dc099426270e51fbc2973ea8033a1f15ab1273f47ffc55d35e9c5740a8e0f0aa,2025-08-21T14:42:19.780000 CVE-2025-40742,0,0,f32748bbecead2efd60880c69a95dcf3cf9ca99b2a15bb401ccdd947bc4f1a22,2025-07-08T16:18:14.207000 CVE-2025-40743,0,0,6b3dda7526b905fe487cba9bb473f45598bc2c90e252eefc8acf1f06d4e4e329,2025-08-12T14:25:33.177000 +CVE-2025-40744,1,1,c69969040616c8ba7fcebf5d8a2ea2596b21c5790d9803f5bc908f623ce1bca0,2025-11-11T21:15:37.557000 CVE-2025-40746,0,0,85cf97e2cecdc965ff3ee11e95ebe6b0240b2a3286f6922118cf8517191bec7e,2025-08-20T20:58:09.310000 CVE-2025-4075,0,0,980439803ac2a564a1211ca7907d1f8cd24fb9992986c85d77b9d15e9738b3a9,2025-05-02T13:53:40.163000 CVE-2025-40751,0,0,5798741b3617725006036ecd6fa643a0dfd831d2e0c5f2356b52098e26ef0f9a,2025-08-20T20:57:21.200000 @@ -302270,8 +302277,10 @@ CVE-2025-40757,0,0,fba2407a5e57b20a9a589db86135813505fdc0ab6fbdbb80d34f87928af60 CVE-2025-40758,0,0,aafd48bbc41e7563b28b68b76f1a40058ef825836ec08bdafced7ab723487f4d,2025-08-15T13:12:51.217000 CVE-2025-40759,0,0,74e41ab17b3c6d8d3f181f4126046319c13160f6ac56c361175020f9347e8fd6,2025-10-14T10:15:37.997000 CVE-2025-4076,0,0,15e359152ac3968e95f76736d18611ed85f132cae7da09b8e96a2ab1cfc7b92d,2025-05-02T13:53:40.163000 +CVE-2025-40760,1,1,d7bee8c9585d6103252694da2bc5d7cbf4d9a6de4ef47dbe754b33dff8b2d399,2025-11-11T21:15:37.733000 CVE-2025-40761,0,0,36bf1d4d5834469715d7eed6cf0716551a8aa534325f5ca59594c03be5300850,2025-08-12T14:25:33.177000 CVE-2025-40762,0,0,1521b1a0869b15c4a0bd2a528c97ab20938c411a4f059504ef26aa69276645d7,2025-08-20T16:20:50.253000 +CVE-2025-40763,1,1,94783a07fed5b9aa41117d7d90efea7bc1d4bbadc7e4be088812c3985bd5829a,2025-11-11T21:15:37.893000 CVE-2025-40764,0,0,621101b2efb0456721e1aad3fecdfdf2c5296fb4ad33f88017219eda28412db1,2025-08-20T16:20:52.210000 CVE-2025-40765,0,0,4b45051d600b7b3e613ccff2b2fc3c4da50707f54af886d8e221923711ea79c0,2025-10-21T14:40:15.117000 CVE-2025-40766,0,0,28da87b983a9fa7bdf25888bf7c2c298e394904f84c6fef6e5a50a8f014ba83e,2025-08-15T17:58:06.507000 @@ -302305,7 +302314,11 @@ CVE-2025-4081,0,0,f16673fb48c24de93e5c053aca80fb5176268314afb8a43b122ba2153bcbfb CVE-2025-40810,0,0,101f832f9fb727453ebcb29db107a70e4694d6a71c5e76455bf87956256f4a5b,2025-10-16T13:56:28.707000 CVE-2025-40811,0,0,ac874c5ebdd918f8be4a911012ef423a8dfdf05dddd5ee6d56da6f225fb5d67c,2025-10-16T13:52:24.733000 CVE-2025-40812,0,0,f543c0507aec49a850597be7e39e61c4507b1b69c8e2e3623c45736e36ea6962,2025-10-16T13:50:53.083000 +CVE-2025-40815,1,1,6b42671bf05e0b00914aea65236041116ed4dacd400f045407a201fed0134937,2025-11-11T21:15:38.057000 +CVE-2025-40816,1,1,6477d6a357bd90c0d2e436bd74abecfb7ef0e8db657ab1047a763f75ae8c03d0,2025-11-11T21:15:38.270000 +CVE-2025-40817,1,1,35f52ba61f4c7bb1e9ed88ea9d82be5137cd4cd94efea7e6f9856264e6db8241,2025-11-11T21:15:38.453000 CVE-2025-4082,0,0,2331de0f0f3c2df94cb95fb87100a3873118a459b576d7f13c381d8a639987d0,2025-11-03T20:19:09.950000 +CVE-2025-40827,1,1,18c1afb4c8b416208ddb8ea7f11b63d3d88ec9a4bbb608efbb6ec8d7efc71a2e,2025-11-11T21:15:38.627000 CVE-2025-4083,0,0,3eb9a45c98944b4c06ae68e5242a918f7d431d19edcd8ea88db77a81ab0ce119,2025-11-03T20:19:10.103000 CVE-2025-40836,0,0,a5e24286b651f5e773047ff9e95004dcb08947be5243554e8878db1e4b92b65b,2025-10-02T17:59:39.937000 CVE-2025-40837,0,0,094b103832eb8429dc12ede27c4bcbc27a9b16dcb04a4f30ad83c9a3bdbe1d34,2025-10-02T17:59:04.630000 @@ -302447,6 +302460,7 @@ CVE-2025-41111,0,0,7db2fe9a17dafa58ea0bc4bac943e5d1f3ce7d71c075386dea0c2b3d8d7d2 CVE-2025-41112,0,0,bcf5731b7092b33d34d5e7b2ddb6584c6a54d52d8f51788d4852d5a3b1cedd22,2025-11-05T17:06:49.350000 CVE-2025-41113,0,0,57464a537bfd197423f074d4fd2c665dcb99c9827d1ffca698b670d31c334af7,2025-11-05T17:06:37.963000 CVE-2025-41114,0,0,9f423adb2d5c41c50a562bede0994e784cf75cdb523162ca9ec5ed0e2404aeac,2025-11-05T17:06:21.950000 +CVE-2025-41116,1,1,3f1a56a9884be8fd430fda7afbd0de3ac6b54cc46095838d5bbea74eea51934b,2025-11-11T21:15:38.800000 CVE-2025-4112,0,0,cfad5f7022ddb2b0897355e7fe5c1cecccf0d8463a12472d977b7a4cef177bf0,2025-05-13T20:25:29.057000 CVE-2025-4113,0,0,ea8d5a83209fbddd6dddb9b7746c4e3191f15b59005a378b12c3b38b9a2c806b,2025-05-13T20:25:18.237000 CVE-2025-4114,0,0,3ce219c0002008050994b81488e12baeccfce541113e6713086089ac33c53eb2,2025-05-28T15:48:36.163000 @@ -306791,7 +306805,7 @@ CVE-2025-49446,0,0,4a60c84d6d9edfc5bac793b7fa075e27f2b5d546a1d935927e4891fdf1b2b CVE-2025-49447,0,0,c4d34b5024edfeb35936de01e9132a8016e1f002b3610908711f8bd2ca156a59,2025-06-17T20:50:23.507000 CVE-2025-49448,0,0,80c0573ee62c45ef63b05229501359f13c14679846bcdf462fd90ed93d8d24bf,2025-06-30T18:38:48.477000 CVE-2025-49449,0,0,0d697cd8e2657fa1de80516a3f9d24c8d0aece4b7b6ce292b70d5d242971d137,2025-06-06T14:06:58.193000 -CVE-2025-4945,0,0,c377e40f2042854d02316f04b28e49057edfbfe85f638c6bf0ba7cb8416a6c06,2025-11-04T20:17:16.103000 +CVE-2025-4945,0,1,3d7cdb52e9d3dc2ca469da15b7385ac4ce613f8f67b2377e19bf9ce5ca5b43ec,2025-11-11T21:15:38.933000 CVE-2025-49450,0,0,90130af9185941b6c9463f758e97094467c86e05a17a9bfaaa1b7426680ecb37,2025-06-06T14:06:58.193000 CVE-2025-49451,0,0,d24010e8c37a1c438e61417e062ebe0d9ca251be12d10b0cd1fa2e68906751e8,2025-06-17T20:50:23.507000 CVE-2025-49452,0,0,d6aa57355417f52e4d3316ff2eec237aa2d7e210d5ddc0d1e38acb1a2a460758,2025-06-17T20:50:23.507000 @@ -308609,7 +308623,7 @@ CVE-2025-53176,0,0,d0007733595b5945fa414a854e602440e82442e74645c7488b9632b608831 CVE-2025-53177,0,0,b0be5d3bb33d219362f1f2fbeaa231f93668aaa0777efb34716d487d74e895a2,2025-08-12T14:39:19.227000 CVE-2025-53178,0,0,a0d7e67b0d2b525aa757acae538d17c5621a24c604f3024638a6a69c53ff5cf9,2025-08-12T14:39:35.227000 CVE-2025-53179,0,0,687550ad8868a1d17476346a82b7d07d767503d8b07be2e2e798efa81dc28f70,2025-07-09T19:14:21.773000 -CVE-2025-5318,0,0,7f6e7db02e6c6460c0abf87363932423092316dcef910ac097969c1d49d0eaeb,2025-11-07T00:15:54.460000 +CVE-2025-5318,0,1,37a56f33da18cb9b6a151902b055810d5cd31b297d1b12eb83c3f0e0b0381441,2025-11-11T21:15:39.060000 CVE-2025-53180,0,0,c9f05a94231e52dc6d3774f4bdc50538c22337601fe5b488c5b0a8c351c6fd84,2025-07-09T19:14:10.030000 CVE-2025-53181,0,0,2419fc3291eb2772102bc14c08da3d83c4e96505d343985f7f9ecf527f541e8f,2025-07-09T19:14:42.683000 CVE-2025-53182,0,0,da92e9428b462ef529e392e5f35d7f75e9329521d5a7c414dac29903a8aa72a7,2025-07-09T19:15:01.380000 @@ -310920,7 +310934,7 @@ CVE-2025-5676,0,0,1ca2c49bb4d510b5740938a869bb2d11a6220d1957dff2d9f9653e2673322f CVE-2025-56760,0,0,3ace5d6162365021ac24ec2b4471ab4999c3cfddbedcd302fa8082bdcfa03fe5,2025-09-09T18:30:48.923000 CVE-2025-56761,0,0,69be5e51551c9ee09979ee0dd7f3fb4c675dbfc0e9c5fd57c992b1a1ac3a8591,2025-09-09T18:27:28.537000 CVE-2025-56762,0,0,05cd8d783ad8768f19f686031ae3876a2509ea768aec2162c7bcb4cb3d259206,2025-10-03T17:04:28.030000 -CVE-2025-56764,0,1,3ae62233be8c5e883b7d7fd219287796d1b8157b2e0c888734461d95bd33d8cb,2025-11-11T19:15:34.910000 +CVE-2025-56764,0,0,3ae62233be8c5e883b7d7fd219287796d1b8157b2e0c888734461d95bd33d8cb,2025-11-11T19:15:34.910000 CVE-2025-56769,0,0,46f791cebe0d51feea9145362f1b2eb7cd7edd394b68df56c0d0d985b8f08546,2025-10-03T18:37:41.687000 CVE-2025-5677,0,0,364b4a61489a27818eacb60d1e1f6c17d4c2d09e9d81b672d48b3e04da11ebb6,2025-06-10T19:31:37.290000 CVE-2025-5678,0,0,38a46c28ab47d4075d68a853baf022d7d7f4fbcb5807bb3d7524af93d22f1b7c,2025-07-17T13:31:56.730000 @@ -313590,20 +313604,23 @@ CVE-2025-61827,0,0,5456e75dc0cb7cc74253d870723e18b16a40ba96ce7704a37c266354bad8a CVE-2025-61828,0,0,9bdf505c0b11d0d76d65eaa50bcd81b1badb655bebd34e986979393e49be0244,2025-11-11T18:15:42.377000 CVE-2025-61829,0,0,ff037e3b33dd4b5cb2bbf22c3e3eba0f07a4ba0022e6073a5cf4a18baab7d1a3,2025-11-11T18:15:42.537000 CVE-2025-6183,0,0,e0af9b65795437de1a12bf44f10c6d1303c71db15aff07a8e3f3e1dbf7c43bd7,2025-08-22T18:09:17.710000 -CVE-2025-61830,1,1,c3f8a349a24e2412177f3d38df85a3fc063bccd2bbee0ac7ee3971a20e44d128,2025-11-11T19:15:35.130000 +CVE-2025-61830,0,0,c3f8a349a24e2412177f3d38df85a3fc063bccd2bbee0ac7ee3971a20e44d128,2025-11-11T19:15:35.130000 CVE-2025-61831,0,0,8a86750cb9f6139700d4acea2a4f84c9eaedd183048b82a10da123b7e1c0741a,2025-11-11T18:15:42.697000 CVE-2025-61832,0,0,d91130e81f2e07a79ffe8a84dc275393d5a208133ee0a6c643c9405414f9da62,2025-11-11T17:15:52.913000 +CVE-2025-61833,1,1,7ee8f773713996f736ad4a732c5d16ba7b92ef7dac0d3132dba8d244091fee54,2025-11-11T21:15:39.243000 +CVE-2025-61834,1,1,387728a77cbfcf95194cd474940839c4ee66f4d9c819f2e49fa10a4009a9b7fc,2025-11-11T21:15:39.403000 +CVE-2025-61835,1,1,9d0429f11cc2eafa5ebca5258b09a61dbb52e2b09f77f4373e4b836db22a1353,2025-11-11T21:15:39.563000 CVE-2025-61836,0,0,d0b09cd206557d662ee5b326b081a3bf844247c6d6835aafc65bbf77afb3b64a,2025-11-11T18:15:42.850000 -CVE-2025-61837,1,1,8769950dc4635b27c0f3a572677b572121f7b78f46c17e68328a690a5fe21786,2025-11-11T19:15:35.297000 -CVE-2025-61838,1,1,f91584475ac926dfcc9a45d70b2f5694acea97dd019973a1b65d148313441bf8,2025-11-11T19:15:35.450000 -CVE-2025-61839,1,1,d82a9f2de95b9744f205e8bc84f59c522c89e3a493fb3154583e92a6142a0b04,2025-11-11T19:15:35.607000 +CVE-2025-61837,0,0,8769950dc4635b27c0f3a572677b572121f7b78f46c17e68328a690a5fe21786,2025-11-11T19:15:35.297000 +CVE-2025-61838,0,0,f91584475ac926dfcc9a45d70b2f5694acea97dd019973a1b65d148313441bf8,2025-11-11T19:15:35.450000 +CVE-2025-61839,0,0,d82a9f2de95b9744f205e8bc84f59c522c89e3a493fb3154583e92a6142a0b04,2025-11-11T19:15:35.607000 CVE-2025-6184,0,0,e9b1d597c7bb9ebb4d38497b8d943428ee81bb339788845222d5bff800fc776a,2025-08-13T17:33:46.673000 -CVE-2025-61840,1,1,46a4cbf5f5daa621bd0d318142ef46e6c17c69fa83d5da09c18e2169a0c276f4,2025-11-11T19:15:35.763000 -CVE-2025-61841,1,1,da87492a2883f231644f24f4860e5fd4b2d9602d2bdf892e920c660dfcfe5c65,2025-11-11T19:15:35.923000 -CVE-2025-61842,1,1,042255281da0edb96a3bc352739ed30f8f775479b77e92f718e9d44370d49612,2025-11-11T19:15:36.080000 -CVE-2025-61843,1,1,4fddbf2ac32e53f9ac6f39c3007d73690dc258b3db6e69ce4a5bfd98744a9e99,2025-11-11T19:15:36.230000 -CVE-2025-61844,1,1,52d8b178923cda04c5610e23b962529173ae10d9de03b81dc6e9426b0e262afc,2025-11-11T19:15:36.383000 -CVE-2025-61845,1,1,8e74883ee0a40175d93a929ddbd73ab47aa93808d47ef9ab691c7b0d36b6609a,2025-11-11T19:15:36.543000 +CVE-2025-61840,0,0,46a4cbf5f5daa621bd0d318142ef46e6c17c69fa83d5da09c18e2169a0c276f4,2025-11-11T19:15:35.763000 +CVE-2025-61841,0,0,da87492a2883f231644f24f4860e5fd4b2d9602d2bdf892e920c660dfcfe5c65,2025-11-11T19:15:35.923000 +CVE-2025-61842,0,0,042255281da0edb96a3bc352739ed30f8f775479b77e92f718e9d44370d49612,2025-11-11T19:15:36.080000 +CVE-2025-61843,0,0,4fddbf2ac32e53f9ac6f39c3007d73690dc258b3db6e69ce4a5bfd98744a9e99,2025-11-11T19:15:36.230000 +CVE-2025-61844,0,0,52d8b178923cda04c5610e23b962529173ae10d9de03b81dc6e9426b0e262afc,2025-11-11T19:15:36.383000 +CVE-2025-61845,0,0,8e74883ee0a40175d93a929ddbd73ab47aa93808d47ef9ab691c7b0d36b6609a,2025-11-11T19:15:36.543000 CVE-2025-61847,0,0,b227ce8767bd575092eb5235c14515e1f72c0a0a99b3da9dd8f6d5f1bb432904,2025-10-03T03:15:36.030000 CVE-2025-61849,0,0,0069d4c0920bd820f16ed214515f20fbaf6b9b86479898301ed334bf7fea348f,2025-10-02T03:15:28.740000 CVE-2025-6185,0,0,93420679597ee9b6122b57535d8fd4967222a986aa26ad73f74df7ffea602aa4,2025-07-22T13:06:27.983000 @@ -313828,9 +313845,9 @@ CVE-2025-62220,0,0,1cc73b4afd86285a3e77d10933ddf717bfdc56a37b4a2c18fe09d5d3e0407 CVE-2025-62222,0,0,032c391864443d121c8facd67b45cd214a8972c5568f1e07e935aadfe51236f6,2025-11-11T18:15:49.887000 CVE-2025-62225,0,0,5e5e30dce2450e8af243865130c21e5e1681c40fd91622536f84becd571ed600,2025-11-06T19:45:30.990000 CVE-2025-62228,0,0,1a490ac65040f8d755fd150fc0c76449bb433560cae986c3b003ae901c9f36fc,2025-11-04T22:16:37.680000 -CVE-2025-62229,0,1,32387f70d68f45379794e714863c08b6bb88305036e255a9c1bc0b08df47d894,2025-11-11T20:15:34.647000 -CVE-2025-62230,0,1,f19fd59205adae5133594a278c525645263ceaa2a83c68e87260d300130af3a2,2025-11-11T20:15:34.777000 -CVE-2025-62231,0,1,c1b298e22fa65481022d27c841f8fcf75237af5eb4801cfe8191ce501718df62,2025-11-11T20:15:34.927000 +CVE-2025-62229,0,1,1dd7d2a43f20a3254d2e3e911f47a747a5e643b89ed706b2ad9d8148eeb5d8e1,2025-11-11T21:15:39.713000 +CVE-2025-62230,0,1,22d0d9a4b72aaec29fdd27fd38710c69898b1e1405d440009b6b2060d06dbaff,2025-11-11T21:15:39.843000 +CVE-2025-62231,0,1,f71ae4042e1abe2daa20e3feea001d01461055defcf7fa9113d722938f303768,2025-11-11T21:15:39.980000 CVE-2025-62232,0,0,7bbe8ad5bb9f8c5afbfe7cd16ff850ade62800436ec5824e91f788252db0e3dd,2025-11-05T14:44:13.057000 CVE-2025-62236,0,0,15a5caffd14cf9ee2af6ac6cf3031f9d0466adcdd94376f42fd22604d4f0e595,2025-10-27T13:20:15.637000 CVE-2025-62237,0,0,50afe9cde633923a8104d90291ee98bd713fe21b8178eff2dd59e01bb75e841c,2025-10-14T19:36:59.730000 @@ -314750,6 +314767,7 @@ CVE-2025-6452,0,0,083940287f0c582bcbbebe584d67638d9b0c0f407a2a8fc444d58915e8359f CVE-2025-64522,0,0,045f643e1d4e0ce1be87462ac97fc89efe7ac80813df15871d261723dd147d61,2025-11-10T23:15:41.987000 CVE-2025-64529,0,0,dee8b1c9e1a8ed66b3807ae43dfb9c5198f96e7f4aa7cc4f658a7f041e8711e7,2025-11-10T23:15:42.170000 CVE-2025-6453,0,0,16c9c319d685cd7dc97f325776dd293b3af99f0eec1e18e5100177f7ae0bf3a4,2025-09-04T15:47:46.967000 +CVE-2025-64531,1,1,c2bd41735c39652c12610c24692f77d3e08e8ab956a256d914d9f74b86b82bdb,2025-11-11T21:15:40.110000 CVE-2025-6454,0,0,37b49b8354ca8d75970481c6a786c2a7dbcc7f419ffabe40aafac58cac84747d,2025-09-20T02:56:00.287000 CVE-2025-6455,0,0,b91e5b48b53a991b0fb0e1a3ec71b1894c2e59e8dcce78c304e9ed5feb6b4320,2025-06-27T17:02:14.733000 CVE-2025-6456,0,0,4c3565c1f248e9d11a31e468720aa2a06f53466f01e8223a173304a057657d87,2025-06-27T17:02:28.953000 @@ -317453,7 +317471,7 @@ CVE-2025-9560,0,0,8175fb8568b672528e555b0aa0a0d39d36f59edca3c14047df5ce7494bd0a1 CVE-2025-9561,0,0,994aba680cbf26e298c9fe3eac3e4fb64c3b62303a78ae6682298ede37d972a0,2025-10-06T14:56:47.823000 CVE-2025-9562,0,0,73f39fc0c3b943066340c4a2ace068b0076397400a51fda774efad18f3b8dfdc,2025-10-21T19:31:25.450000 CVE-2025-9565,0,0,e10691a66350f68294477bfad80a513e72bddae645c967f5140be3f2006c6a15,2025-09-17T14:18:55.093000 -CVE-2025-9566,0,0,f3ba8e3a2116d1417d20f51bb3ff52ea87f90c00b7326767f37b037f88634ea6,2025-11-11T14:15:35.813000 +CVE-2025-9566,0,1,52bb9e34680285cbfbe8a6069f2515aa95003c32dbf576c3730759f528c6aec8,2025-11-11T21:15:40.423000 CVE-2025-9567,0,0,8e645ebf39eb681428b67456f32d5bfbf9f1818546c9697ac8767386e40b2f08,2025-09-25T14:18:08.317000 CVE-2025-9568,0,0,9ed41f8cd2d5be7c18f0db441311b59c18d886bd1931ade0989484532a33bddc,2025-09-25T14:18:31.453000 CVE-2025-9569,0,0,61b0300024f5eb874d14b911391ad1034be29f5dd4dce90a91c275c8b6546222,2025-09-25T14:18:03.243000 @@ -317760,7 +317778,7 @@ CVE-2025-9896,0,0,0249250949165450fb7f11be27cda9243e0aca717f3d55e45d2ee881c07bbd CVE-2025-9897,0,0,e455bc225902369cbb26aa72df0ce50b0947ec3851cd77698c9116942fcd8ab1,2025-10-06T14:56:47.823000 CVE-2025-9898,0,0,bd175dfe9d788d4b08fd90edd3e8663eb3028b58fa0d2cb989fd25ec9e5e64e6,2025-09-29T19:34:10.030000 CVE-2025-9899,0,0,65441220c1f57e23340c3c1286b3d86a2ce6bf24ff61081e081033961d8b22b0,2025-09-29T19:34:10.030000 -CVE-2025-9900,0,1,51b2eccccf35073a137d075fd9a87fb2158d5daa6ad3fce5156930015e2b24be,2025-11-11T20:15:35.250000 +CVE-2025-9900,0,0,51b2eccccf35073a137d075fd9a87fb2158d5daa6ad3fce5156930015e2b24be,2025-11-11T20:15:35.250000 CVE-2025-9901,0,0,22e7f0a83d0baac40bcc0ae0231d2fb71e24c48be0f144a9e0dec0e142626d5c,2025-09-04T15:36:56.447000 CVE-2025-9902,0,0,caa893937265182b24e5352cc55f43a0d9dd30dd5065770295a2bdd706329bd0,2025-10-14T19:36:29.240000 CVE-2025-9903,0,0,7d81669435749aab98a97e380f771ebb4aa662d68d3143ed0fefb1cb52772635,2025-09-29T19:34:10.030000