admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 07:10:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-08-06T02:00:10.876909+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-08-06 02:03:51 +00:00
1 parent 34fa5c2041
commit 0803bd3d6c
21 files changed
+1295 -16
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2020/CVE-2020-250xx/CVE-2020-25078.json
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2020-25078",
"sourceIdentifier": "[email protected]",
"published": "2020-09-02T16:15:12.627",
"lastModified": "2025-08-05T18:15:27.677",
"lastModified": "2025-08-06T01:00:01.553",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -84,6 +84,10 @@
}
]
},
"cisaExploitAdd": "2025-08-05",
"cisaActionDue": "2025-08-26",
"cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
"cisaVulnerabilityName": "D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability",
"weaknesses": [
{
"source": "[email protected]",
CVE-2020/CVE-2020-250xx/CVE-2020-25079.json
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2020-25079",
"sourceIdentifier": "[email protected]",
"published": "2020-09-02T16:15:12.690",
"lastModified": "2025-08-05T18:15:30.503",
"lastModified": "2025-08-06T01:00:01.553",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -84,6 +84,10 @@
}
]
},
"cisaExploitAdd": "2025-08-05",
"cisaActionDue": "2025-08-26",
"cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
"cisaVulnerabilityName": "D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability",
"weaknesses": [
{
"source": "[email protected]",
CVE-2022/CVE-2022-407xx/CVE-2022-40799.json
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2022-40799",
"sourceIdentifier": "[email protected]",
"published": "2022-11-29T05:15:11.310",
"lastModified": "2025-08-05T18:15:30.767",
"lastModified": "2025-08-06T01:00:01.553",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -59,6 +59,10 @@
}
]
},
"cisaExploitAdd": "2025-08-05",
"cisaActionDue": "2025-08-26",
"cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
"cisaVulnerabilityName": "D-Link DNR-322L Download of Code Without Integrity Check Vulnerability",
"weaknesses": [
{
"source": "[email protected]",
CVE-2025/CVE-2025-324xx/CVE-2025-32430.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2025-32430",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T00:15:29.193",
"lastModified": "2025-08-06T00:15:29.193",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-3 through 16.4.7, 16.5.0-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, two templates contain reflected XSS vulnerabilities, allowing an attacker to execute malicious JavaScript code in the context of the victim's session by getting the victim to visit an attacker-controlled URL. This permits the attacker to perform arbitrary actions using the permissions of the victim. This issue is fixed in versions 16.4.8, 16.10.6 and 17.3.0-rc-1. To workaround the issue, manually patch the WAR with the same changes as the original patch."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/xwiki/xwiki-platform/commit/e5926a938cbecc8b1eaa48053d8d370cff107cb0",
"source": "[email protected]"
},
{
"url": "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-m9x4-w7p9-mxhx",
"source": "[email protected]"
},
{
"url": "https://jira.xwiki.org/browse/XWIKI-23096",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-541xx/CVE-2025-54124.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2025-54124",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T00:15:30.353",
"lastModified": "2025-08-06T00:15:30.353",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Platform Old Core versions 9.8-rc-1 through 16.4.6, 16.5.0-rc-1 through 16.10.4, and 17.0.0-rc-1 through 17.1.0, any user with editing rights can create an XClass with a database list property that references a password property. When adding an object of that XClass, the content of that password property is displayed. In practice, with a standard rights setup, this means that any user with an account on the wiki can access password hashes of all users, and possibly other password properties (with hashed or plain storage) that are on pages that the user can view. This issue is fixed in versions 16.4.7, 16.10.5 and 17.2.0-rc-1."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-359"
}
]
}
],
"references": [
{
"url": "https://github.com/xwiki/xwiki-platform/commit/f2ca8649cba2ed3765061660bf5c7f801afa0b24",
"source": "[email protected]"
},
{
"url": "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-r38m-cgpg-qj69",
"source": "[email protected]"
},
{
"url": "https://jira.xwiki.org/browse/XWIKI-22811",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-541xx/CVE-2025-54125.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2025-54125",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T00:15:30.523",
"lastModified": "2025-08-06T00:15:30.523",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Platform Old Core versions 1.1 through 16.4.6, 16.5.0-rc-1 through 16.10.4 and 17.0.0-rc-1 through 17.1.0, the XML export of a page in XWiki that can be triggered by any user with view rights on a page by appending ?xpage=xml to the URL includes password and email properties stored on a document that aren't named password or email. This is fixed in versions 16.4.7, 16.10.5 and 17.2.0-rc-1. To work around this issue, the file templates/xml.vm in the deployed WAR can be deleted if the XML isn't needed. There isn't any feature in XWiki itself that depends on the XML export."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-359"
}
]
}
],
"references": [
{
"url": "https://github.com/xwiki/xwiki-platform/commit/742ee3482ef6c2bd4ad03d0de9cdd81d0e8f3d59",
"source": "[email protected]"
},
{
"url": "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-57q2-6cp4-9mq3",
"source": "[email protected]"
},
{
"url": "https://jira.xwiki.org/browse/XWIKI-22810",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-545xx/CVE-2025-54571.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2025-54571",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T00:15:30.687",
"lastModified": "2025-08-06T00:15:30.687",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11\nand below, an attacker can override the HTTP response\u2019s Content-Type, which could lead to several issues depending on the HTTP scenario. For example, we have demonstrated the potential for XSS and arbitrary script source code disclosure in the latest version of mod_security2. This issue is fixed in version 2.9.12."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-252"
}
]
}
],
"references": [
{
"url": "https://github.com/owasp-modsecurity/ModSecurity/commit/6d7e8eb18f2d7d368fb8e29516fcdeaeb8d349b8",
"source": "[email protected]"
},
{
"url": "https://github.com/owasp-modsecurity/ModSecurity/issues/2514",
"source": "[email protected]"
},
{
"url": "https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-cg44-9m43-3f9v",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-545xx/CVE-2025-54594.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-54594",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T00:15:30.857",
"lastModified": "2025-08-06T00:15:30.857",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "react-native-bottom-tabs is a library of Native Bottom Tabs for React Native. In versions 0.9.2 and below, the github/workflows/release-canary.yml GitHub Actions repository workflow improperly used the pull_request_target event trigger, which allowed for untrusted code from a forked pull request to be executed in a privileged context. An attacker could create a pull request containing a malicious preinstall script in the package.json file and then trigger the vulnerable workflow by posting a specific comment (!canary). This allowed for arbitrary code execution, leading to the exfiltration of sensitive secrets such as GITHUB_TOKEN and NPM_TOKEN, and could have allowed an attacker to push malicious code to the repository or publish compromised packages to the NPM registry. There is a remediation commit which removes github/workflows/release-canary.yml, but a version with this fix has yet to be released."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-94"
},
{
"lang": "en",
"value": "CWE-269"
}
]
}
],
"references": [
{
"url": "https://callstack.notion.site/Post-Incident-Security-Measures-GitHub-Actions-Workflow-Vulnerability-2405d027c0f8804ab7f7cdfb43366a31",
"source": "[email protected]"
},
{
"url": "https://github.com/callstackincubator/react-native-bottom-tabs/commit/9e1c9c61d742c435ac5e0901b7e0c9249b9fc70c",
"source": "[email protected]"
},
{
"url": "https://github.com/callstackincubator/react-native-bottom-tabs/security/advisories/GHSA-588g-38p4-gr6x",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-546xx/CVE-2025-54652.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54652",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T01:15:25.747",
"lastModified": "2025-08-06T01:15:25.747",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization module."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.0,
"impactScore": 5.8
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/cn/support/bulletinlaptops/2025/8/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-546xx/CVE-2025-54653.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54653",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T01:15:26.260",
"lastModified": "2025-08-06T01:15:26.260",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Path traversal vulnerability in the virtualization file module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization file module."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.0,
"impactScore": 5.8
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/cn/support/bulletinlaptops/2025/8/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-546xx/CVE-2025-54655.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-54655",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T01:15:26.413",
"lastModified": "2025-08-06T01:15:26.413",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality and integrity of the virtualization graphics module."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.4,
"impactScore": 6.0
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-367"
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/cn/support/bulletinlaptops/2025/8/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-548xx/CVE-2025-54801.json
+82
View File
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-54801",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T00:15:31.033",
"lastModified": "2025-08-06T00:15:31.033",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Fiber is an Express inspired web framework written in Go. In versions 2.52.8 and below, when using Fiber's Ctx.BodyParser to parse form data containing a large numeric key that represents a slice index (e.g., test.18446744073704), the application crashes due to an out-of-bounds slice allocation in the underlying schema decoder. The root cause is that the decoder attempts to allocate a slice of length idx + 1 without validating whether the index is within a safe or reasonable range. If the idx is excessively large, this leads to an integer overflow or memory exhaustion, causing a panic or crash. This is fixed in version 2.52.9."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-789"
}
]
}
],
"references": [
{
"url": "https://github.com/gofiber/fiber/commit/e115c08b8f059a4a031b492aa9eef0712411853d",
"source": "[email protected]"
},
{
"url": "https://github.com/gofiber/fiber/security/advisories/GHSA-qx2q-88mx-vhg7",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-548xx/CVE-2025-54869.json
+82
View File
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-54869",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T00:15:31.197",
"lastModified": "2025-08-06T00:15:31.197",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. In versions 2.6.2 and below, any application that uses FPDI to process user-supplied PDF files is at risk, causing a Denial of Service (DoS) vulnerability. An attacker can upload a small, malicious PDF file that will cause the server-side script to crash due to memory exhaustion. Repeated attacks can lead to sustained service unavailability. This issue is fixed in version 2.6.3."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"references": [
{
"url": "https://github.com/Setasign/FPDI/commit/ba671ba9221cffd32c2dda87316c19f522a1c5f0",
"source": "[email protected]"
},
{
"url": "https://github.com/Setasign/FPDI/security/advisories/GHSA-jxhh-4648-vpp3",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-548xx/CVE-2025-54872.json
+82
View File
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-54872",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T00:15:31.357",
"lastModified": "2025-08-06T00:15:31.357",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "onion-site-template is a complete, scalable tor hidden service self-hosting sample. Versions which include commit 3196bd89 contain a baked-in tor image if the secrets were copied from an existing onion domain. A website could be compromised if a user shared the baked-in image, or if someone were able to acquire access to the user's device outside of a containerized environment. This is fixed by commit bc9ba0fd."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-798"
}
]
}
],
"references": [
{
"url": "https://github.com/Vessel9817/onion-site-template/commit/bc9ba0fd8cc7fbb3abc6759b351885a4501bce84",
"source": "[email protected]"
},
{
"url": "https://github.com/Vessel9817/onion-site-template/security/advisories/GHSA-mj8m-c8w9-rw55",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-548xx/CVE-2025-54873.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2025-54873",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T00:15:31.523",
"lastModified": "2025-08-06T00:15:31.523",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture. RISC packages risc0-zkvm versions 2.0.0 through 2.1.0 and risc0-circuit-rv32im and risc0-circuit-rv32im-sys versions 2.0.0 through 2.0.4 contain vulnerabilities where signed integer division allows multiple outputs for certain inputs with only one being valid, and division by zero results are underconstrained. This issue is fixed in risc0-zkvm version 2.2.0 and version 3.0.0 for the risc0-circuit-rv32im and risc0-circuit-rv32im-sys packages."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 2.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "UNREPORTED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-369"
}
]
}
],
"references": [
{
"url": "https://github.com/risc0/risc0/pull/3235",
"source": "[email protected]"
},
{
"url": "https://github.com/risc0/risc0/security/advisories/GHSA-f6rc-24x4-ppxp",
"source": "[email protected]"
},
{
"url": "https://github.com/risc0/zirgen/pull/249",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-548xx/CVE-2025-54876.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2025-54876",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T00:15:31.720",
"lastModified": "2025-08-06T00:15:31.720",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Janssen Project is an open-source identity and access management (IAM) platform. In versions 1.9.0 and below, Janssen stores passwords in plaintext in the local cli_cmd.log file. This is fixed in the nightly prerelease."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-522"
}
]
}
],
"references": [
{
"url": "https://github.com/JanssenProject/jans/discussions/11886",
"source": "[email protected]"
},
{
"url": "https://github.com/JanssenProject/jans/pull/11903/commits/5260520e8d7ce1d1b8387c71b3571f20e643f110",
"source": "[email protected]"
},
{
"url": "https://github.com/JanssenProject/jans/security/advisories/GHSA-2f4x-m695-jvp3",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-548xx/CVE-2025-54879.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-54879",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T00:15:31.880",
"lastModified": "2025-08-06T00:15:31.880",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mastodon is a free, open-source social network server based on ActivityPub Mastodon which facilitates LDAP configuration for authentication. In versions 3.1.5 through 4.2.24, 4.3.0 through 4.3.11 and 4.4.0 through 4.4.3, Mastodon's rate-limiting system has a critical configuration error where the email-based throttle for confirmation emails incorrectly checks the password reset path instead of the confirmation path, effectively disabling per-email limits for confirmation requests. This allows attackers to bypass rate limits by rotating IP addresses and send unlimited confirmation emails to any email address, as only a weak IP-based throttle (25 requests per 5 minutes) remains active. The vulnerability enables denial-of-service attacks that can overwhelm mail queues and facilitate user harassment through confirmation email spam. This is fixed in versions 4.2.24, 4.3.11 and 4.4.3."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"references": [
{
"url": "https://github.com/mastodon/mastodon/commit/e2592419d93fb41be03c2f3ff6a122fecb0e0952",
"source": "[email protected]"
},
{
"url": "https://github.com/mastodon/mastodon/releases/tag/v4.4.3",
"source": "[email protected]"
},
{
"url": "https://github.com/mastodon/mastodon/security/advisories/GHSA-84ch-6436-c7mg",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-548xx/CVE-2025-54883.json
+82
View File
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-54883",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T00:15:32.050",
"lastModified": "2025-08-06T00:15:32.050",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the getSecureRandomInt function in security-kit versions prior to 3.5.0 (packaged in Vision-ui <= 1.4.0) contains a critical cryptographic weakness. Due to a silent 32-bit integer overflow in its internal masking logic, the function fails to produce a uniform distribution of random numbers when the requested range between min and max is larger than 2\u00b3\u00b2. The root cause is the use of a 32-bit bitwise left-shift operation (<<) to generate a bitmask for the rejection sampling algorithm. This causes the mask to be incorrect for any range requiring 32 or more bits of entropy. This issue is fixed in version 1.5.0."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-338"
}
]
}
],
"references": [
{
"url": "https://github.com/DavidOsipov/Vision-ui/commit/347355859f05e98047efbd96fc0e61b9191324f1",
"source": "[email protected]"
},
{
"url": "https://github.com/DavidOsipov/Vision-ui/security/advisories/GHSA-c9xg-x7h3-mq2q",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-548xx/CVE-2025-54884.json
+90
View File
@@ -0,0 +1,90 @@
{
"id": "CVE-2025-54884",
"sourceIdentifier": "[email protected]",
"published": "2025-08-06T00:15:32.210",
"lastModified": "2025-08-06T00:15:32.210",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the generateSecureId and getSecureRandomInt functions in security-kit versions prior to 3.5.0 (packaged in Vision UI 1.4.0 and below) are vulnerable to Denial of Service (DoS) attacks. The generateSecureId(length) function directly used the length parameter to size a Uint8Array buffer, allowing attackers to exhaust server memory through repeated requests for large IDs since the previous 1024 limit was insufficient. The getSecureRandomInt(min, max) function calculated buffer size based on the range between min and max, where large ranges caused excessive memory allocation and CPU-intensive rejection-sampling loops that could hang the thread. This issue is fixed in version 1.5.0."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-400"
},
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"references": [
{
"url": "https://github.com/DavidOsipov/Vision-ui/commit/74802cd688b661a35e638fc96938d65ca7c05ff5",
"source": "[email protected]"
},
{
"url": "https://github.com/DavidOsipov/Vision-ui/releases/tag/1.5.0",
"source": "[email protected]"
},
{
"url": "https://github.com/DavidOsipov/Vision-ui/security/advisories/GHSA-gg28-wc2c-jjj3",
"source": "[email protected]"
}
]
}
README.md
+25 -8
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-08-05T23:55:11.775889+00:00
2025-08-06T02:00:10.876909+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-08-05T23:15:39.190000+00:00
2025-08-06T01:15:26.413000+00:00
```
### Last Data Feed Release
@@ -27,27 +27,44 @@ Repository synchronizes with the NVD every 2 hours.
Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest)
```plain
2025-08-05T00:00:02.116538+00:00
2025-08-06T00:00:02.117358+00:00
```
### Total Number of included CVEs
```plain
304246
304262
```
### CVEs added in the last Commit
Recently added CVEs: `2`
Recently added CVEs: `16`
- [CVE-2025-8571](CVE-2025/CVE-2025-85xx/CVE-2025-8571.json) (`2025-08-05T23:15:38.493`)
- [CVE-2025-8573](CVE-2025/CVE-2025-85xx/CVE-2025-8573.json) (`2025-08-05T23:15:39.190`)
- [CVE-2025-32430](CVE-2025/CVE-2025-324xx/CVE-2025-32430.json) (`2025-08-06T00:15:29.193`)
- [CVE-2025-54124](CVE-2025/CVE-2025-541xx/CVE-2025-54124.json) (`2025-08-06T00:15:30.353`)
- [CVE-2025-54125](CVE-2025/CVE-2025-541xx/CVE-2025-54125.json) (`2025-08-06T00:15:30.523`)
- [CVE-2025-54571](CVE-2025/CVE-2025-545xx/CVE-2025-54571.json) (`2025-08-06T00:15:30.687`)
- [CVE-2025-54594](CVE-2025/CVE-2025-545xx/CVE-2025-54594.json) (`2025-08-06T00:15:30.857`)
- [CVE-2025-54652](CVE-2025/CVE-2025-546xx/CVE-2025-54652.json) (`2025-08-06T01:15:25.747`)
- [CVE-2025-54653](CVE-2025/CVE-2025-546xx/CVE-2025-54653.json) (`2025-08-06T01:15:26.260`)
- [CVE-2025-54655](CVE-2025/CVE-2025-546xx/CVE-2025-54655.json) (`2025-08-06T01:15:26.413`)
- [CVE-2025-54801](CVE-2025/CVE-2025-548xx/CVE-2025-54801.json) (`2025-08-06T00:15:31.033`)
- [CVE-2025-54869](CVE-2025/CVE-2025-548xx/CVE-2025-54869.json) (`2025-08-06T00:15:31.197`)
- [CVE-2025-54872](CVE-2025/CVE-2025-548xx/CVE-2025-54872.json) (`2025-08-06T00:15:31.357`)
- [CVE-2025-54873](CVE-2025/CVE-2025-548xx/CVE-2025-54873.json) (`2025-08-06T00:15:31.523`)
- [CVE-2025-54876](CVE-2025/CVE-2025-548xx/CVE-2025-54876.json) (`2025-08-06T00:15:31.720`)
- [CVE-2025-54879](CVE-2025/CVE-2025-548xx/CVE-2025-54879.json) (`2025-08-06T00:15:31.880`)
- [CVE-2025-54883](CVE-2025/CVE-2025-548xx/CVE-2025-54883.json) (`2025-08-06T00:15:32.050`)
- [CVE-2025-54884](CVE-2025/CVE-2025-548xx/CVE-2025-54884.json) (`2025-08-06T00:15:32.210`)
### CVEs modified in the last Commit
Recently modified CVEs: `0`
Recently modified CVEs: `3`
- [CVE-2020-25078](CVE-2020/CVE-2020-250xx/CVE-2020-25078.json) (`2025-08-06T01:00:01.553`)
- [CVE-2020-25079](CVE-2020/CVE-2020-250xx/CVE-2020-25079.json) (`2025-08-06T01:00:01.553`)
- [CVE-2022-40799](CVE-2022/CVE-2022-407xx/CVE-2022-40799.json) (`2025-08-06T01:00:01.553`)
## Download and Usage
_state.csv
+21 -5
View File
@@ -154810,8 +154810,8 @@ CVE-2020-25070,0,0,d7b6b7513b7fa4480806a45272e418831107a17b6545ab1c725c535c6e008
CVE-2020-25071,0,0,85480285cd2872e22f3026e4222978d8d5b422f3f0b152ca7847f136f5c0b48b,2024-11-21T05:17:12.367000
CVE-2020-25073,0,0,cff2d0eca0d2aabcc5032424edff661872a89f8520be5d9f740930fd16d608c9,2024-11-21T05:17:12.523000
CVE-2020-25074,0,0,e63a306b15e191de7e45b7b64a916089bb4377e2c45c66723877fe866fa0ee8d,2024-11-21T05:17:12.670000
CVE-2020-25078,0,0,9b0011ef40b4a521f4fc9d143e95565ba142fc05813063e7fd6631908fd94750,2025-08-05T18:15:27.677000
CVE-2020-25079,0,0,f4bf744816946266fbc73f3b5bc369708d859ddf1a9852d60f536e4a05d5f725,2025-08-05T18:15:30.503000
CVE-2020-25078,0,1,6cdb5aff9df6c9eb8044864fb28f056e50183930c8e16444ced23f1bc166b55d,2025-08-06T01:00:01.553000
CVE-2020-25079,0,1,0de28c9c74b7129eb79223be06436eeb659e2b4fc3fcea3c986398cbd04ee743,2025-08-06T01:00:01.553000
CVE-2020-2508,0,0,20e609441ecfb9058699f4a160b79c5ef420751babc3b9d085cd6b02ab6fbf17,2024-11-21T05:25:23.140000
CVE-2020-25082,0,0,49a3353a21eee1949b9e78033d0fc76d32f339d620490cfc9dcb86ae5cfe48d9,2024-11-21T05:17:13.177000
CVE-2020-25084,0,0,8f0ef3c35e1660a98014385a917f7ad99252442a9b434b6f76f759e2a04810c5,2024-11-21T05:17:13.367000
@@ -207341,7 +207341,7 @@ CVE-2022-40785,0,0,576eb2dee821f051cc9cb0ee4d426aea94e25a7011c960abe02b5a9b9a2bf
CVE-2022-4079,0,0,2e195e8ce7a96c52db6e6cd391e2c7b115c697f82f9f0e227cf3888e325014f3,2023-11-07T03:56:52.547000
CVE-2022-40797,0,0,8cea0f3b9a4034248d452482a397340822c5494ffa41b0c2a6b2e29ce7621203,2025-05-01T16:15:23.130000
CVE-2022-40798,0,0,f881d62ff80694f44d79962e382a4a64779978049ae882b14029868411af3302,2025-05-08T20:15:21.207000
CVE-2022-40799,0,0,dfaad5d339b492c936658e630b3101e7be738fd7181ebb4d24f48cb93506de54,2025-08-05T18:15:30.767000
CVE-2022-40799,0,1,ad66f02463a8d9023beec91c84be60aa96b6222bb5abf179158a02de6f47c5c5,2025-08-06T01:00:01.553000
CVE-2022-4080,0,0,2451c9d571d733037b09750056090b671d4a0e95bf3e35212e4bb5caad0e79e2,2023-11-07T03:56:52.670000
CVE-2022-40805,0,0,4f20b037a16c5670b8159350ab27545846f70f42558e52fea1d755619dafdd45,2024-11-21T07:22:03.853000
CVE-2022-40806,0,0,ac30ad36d7e7544ea0df57eac1ad635687001be1171a09eae0ad7de26adc7a9c,2024-11-21T07:22:04.007000
@@ -293829,6 +293829,7 @@ CVE-2025-32427,0,0,57d3a7d2051dd0b51d8b12614834873286577350e593d5683068731d274c9
CVE-2025-32428,0,0,32eeebbb9eb52efc2ed96bd05d1eccbda5203d0361f63bfcafb88d13c22b345a,2025-04-15T18:39:27.967000
CVE-2025-32429,0,0,2562d5a8adb80becc3bb01ee5baa28054bc699ced2c0e31575580418b80876fd,2025-07-25T15:29:19.837000
CVE-2025-3243,0,0,4b2bb05912dfa327561457ea9db9da3d0253e77015cecee72f471cd1253e6547,2025-05-28T21:10:35.537000
CVE-2025-32430,1,1,9a4041e925b06eab358f255291292678e8d3d782fe636a89651eddc226d263c5,2025-08-06T00:15:29.193000
CVE-2025-32431,0,0,c841c5dc407677a5965f2a37065aa8f465f93e2d2ebac9e51959dc5b7aa3e0fc,2025-04-23T14:08:13.383000
CVE-2025-32432,0,0,431fc0fbedd754e521baa62824583ff2e21564f5b0b8bca365cd2f1af03e8472,2025-04-28T20:57:06.397000
CVE-2025-32433,0,0,7ba335a214bd960b7aa4037e2bf131013c4cad5d3330b96c292db2b523ea5f72,2025-07-30T19:24:19.250000
@@ -301687,6 +301688,8 @@ CVE-2025-5412,0,0,cdedc82e39d6eb66906e9774b875480255e558374703496c9f6705513eee4b
CVE-2025-54120,0,0,ff24bf1f1d14e3839cdf4c598657a8f75a7ceeea0db6ec32f59f1618dd7c2c68,2025-07-25T15:29:44.523000
CVE-2025-54121,0,0,5e03c0d09f0529f860a3cb8cd6d41d44a1e1f16445622a8ec733a83f68b99bf0,2025-07-22T13:05:40.573000
CVE-2025-54122,0,0,ec791c35edba713c636b3a9e38cc805a906e81c85e6482a35a24dc03f4774d0a,2025-07-22T13:05:40.573000
CVE-2025-54124,1,1,c420b1b0fd2f26529b0f7c7880d30355a74109ba71245bbd871e7f2b4f599f1e,2025-08-06T00:15:30.353000
CVE-2025-54125,1,1,7aa3da02b99b26c5b3be83443eb13a772a379113a51cf3b0e54a0cd14a0ffaa3,2025-08-06T00:15:30.523000
CVE-2025-54126,0,0,0c34b500663a6b4b048a7b34f5104d2b313a000244dda734bdc7575e122db29c,2025-07-31T18:42:56.503000
CVE-2025-54127,0,0,3b8e9124b447079e3616d18c62c76c658265ef7c030ce9e2823177c319b9e3c7,2025-07-30T17:03:34.940000
CVE-2025-54128,0,0,f5fe1d651fd26d4066fff64ca0ab3ebcc07ae62ec6e29299df5802e47a13a3a5,2025-07-30T17:04:15.720000
@@ -301835,6 +301838,7 @@ CVE-2025-54566,0,0,576b568e7d29121c40e519987f5bcb577828072f75c9a2f3f757329db8f97
CVE-2025-54567,0,0,78f7b8b3f26903bbb2a7d9e8c38c11879a04a3820116606cf42acab7fdf78247,2025-07-25T15:29:19.837000
CVE-2025-54568,0,0,eeb7e8f0de32b589dad825a3b3efbbb4ad104d4389ddbffa8a11c2da6ac05aea,2025-07-25T15:29:19.837000
CVE-2025-54569,0,0,146e16441b69cd6900c21cce4edfbc7953f22232be5c2da85da2aec0b3562370,2025-07-29T14:14:29.590000
CVE-2025-54571,1,1,6297aec7719e3b21b19350dd7853f09978c2c418e9a7785aca82f9cde806077b,2025-08-06T00:15:30.687000
CVE-2025-54572,0,0,487b089689a08f0fe3b36331756102d23289a1f1c99152034b2b02ecdc03be8e,2025-07-31T18:42:37.870000
CVE-2025-54573,0,0,9c1a5b55858d002dbbc0cdec9ac39b8221e893f12b6517e6173ba192a4080fc1,2025-07-31T18:42:37.870000
CVE-2025-54574,0,0,e5136123185a1d1b5022b486f3f7a276c23db0fbf9e19b87b551928173ede8c0,2025-08-04T15:06:15.833000
@@ -301850,11 +301854,15 @@ CVE-2025-54589,0,0,f119e83a9e858c1168d26e31502c544999260a67dc3550033d4e291794784
CVE-2025-5459,0,0,bfef67fb6bc5a0d62d15f9ee68a0d9240ec3720f0fb55d24a02c5d3644fba822,2025-06-26T18:57:43.670000
CVE-2025-54590,0,0,cc695bafd22d52e18d3a732d9d13d50f50272cea195994bf4c9adc1f0682e760,2025-08-04T15:06:15.833000
CVE-2025-54593,0,0,d791eb85c3bc36442f0cd9e0bdf5f673813fc9c435e988f4eadbf021c599f87d,2025-08-04T15:06:15.833000
CVE-2025-54594,1,1,dbb9b9144929bbec60db418fabf21ada93564356df8871b5c756e6e00426ac34,2025-08-06T00:15:30.857000
CVE-2025-54595,0,0,30ffcf0990aa64a08666ca9fd37ae6ad2262782e8a8656844816a6a9dbe24c54,2025-08-04T15:06:15.833000
CVE-2025-54596,0,0,2612f9ce3d1ad98384f927b661afbbba9ea5ce1b82ec32a4f91d7da49e189881,2025-07-29T14:14:55.157000
CVE-2025-54597,0,0,3a4e03017bac2a5288cc529fb9e1a5cf4e0e7c003febb3884a0db01f53838f0d,2025-07-29T14:14:29.590000
CVE-2025-5463,0,0,baeeb4f033a8a38e901991e2f45f06f0d137163c39066204eeef2cf76c5f4edd,2025-07-15T13:04:57.140000
CVE-2025-5464,0,0,65c3c01f965b7c9543e96da263bcfd546494400db3cba1698e656eefc5b7f0bf,2025-07-15T12:45:15.487000
CVE-2025-54652,1,1,f852669f8b5f8fa0aace80893b1212eaa8d2adcc12c881ef8a9bda370ddd6d74,2025-08-06T01:15:25.747000
CVE-2025-54653,1,1,d912c487248555df0cae4d1f70608de5b5d2bc89dccb427473c1350d9dbb2738,2025-08-06T01:15:26.260000
CVE-2025-54655,1,1,28dc35b77415c4b75561d793e2af36ba0ec65999511835cfd2f65e62e937de7c,2025-08-06T01:15:26.413000
CVE-2025-54656,0,0,c6cbc67b264a2d02d33f980cea4d74ff9bfc54ade2f3f620ff160c7b051c46dc,2025-07-31T18:42:37.870000
CVE-2025-54657,0,0,ce5e9302df1f80ca8890a55b600508732690dc5fec9f25e06292f5311ad76efc,2025-08-01T04:16:18.450000
CVE-2025-54661,0,0,e812545bbd81261a21ad4f7bfb9bded32cc8e6329c77144c1e4482ecad428c57,2025-07-29T03:15:22.170000
@@ -301889,6 +301897,7 @@ CVE-2025-54795,0,0,3bbccca500762095f431ce511b0f30aa2dfc2c9a0fc29cdbc100123a87610
CVE-2025-54796,0,0,ce6b7a0d5461b510ba8dd2d79945f9735b9371a5b328b1f9d700c9cb17758f27,2025-08-04T16:15:34.217000
CVE-2025-54797,0,0,b40d69e40bb458f8b776248e8345cb1c0128c98cae0c4ce4d3f915bca09bfa20,2025-08-05T00:15:56.780000
CVE-2025-5480,0,0,b6157243f7fdbaf5769c8c248be5113b7a9538f2054411dc814924ab031c7b6a,2025-06-09T12:15:47.880000
CVE-2025-54801,1,1,7c4e246525c31d66242bc6104916bf494a655ee1b95344b76357b02a2ad0b16b,2025-08-06T00:15:31.033000
CVE-2025-54802,0,0,8ea9f7716250e0016af11838572277aef8ef7b747d76d5ba09b90c4551913815,2025-08-05T15:15:31.523000
CVE-2025-54803,0,0,c0c7e82f1876acc2cbd02fdfedfcd30cf39c009da49bdbbc9da7fa9e3bd9f502,2025-08-05T15:15:31.630000
CVE-2025-54804,0,0,2ebeaa8b386f0260d8169a18bcdd447ccba2bc8520157e720da58ff9373bd2c7,2025-08-05T15:15:31.740000
@@ -301918,11 +301927,18 @@ CVE-2025-5485,0,0,2e860e2d57c553742a7a4058b06e9ead83d36be7b50569039a067969f103fe
CVE-2025-5486,0,0,403a5f3fdf24114225af88123fd5df41b3fe4d4616779e15f6218229399593fb,2025-06-06T14:07:28.330000
CVE-2025-54865,0,0,284d6a037e884cf7b2435340a12604878f42b455f0176d2868e19cd1b2cdd22b,2025-08-05T14:34:17.327000
CVE-2025-54868,0,0,f90685a1af5d14c33828166fd69d4c361211ed111eb9670c7696955955859c99,2025-08-05T14:34:17.327000
CVE-2025-54869,1,1,3953e1fd7b8c04c855cd6a8e750ba5985b1a18a5f7011799ad7fee1862c6bd8e,2025-08-06T00:15:31.197000
CVE-2025-5487,0,0,a2325d70b19f1faa0bb78067f87ae57fb5952acc710d0b21151f32c03c4f828a,2025-06-16T12:32:18.840000
CVE-2025-54870,0,0,4e2cb9e0821a411e1eb3de9a18da70a80fc60cc99a4d2a4d5e6a552786978954,2025-08-05T14:34:17.327000
CVE-2025-54871,0,0,008178d8aefe54c612d9d0d30c640847c3d319ce14b6308416a83a30ca878b9a,2025-08-05T15:15:31.897000
CVE-2025-54872,1,1,0f69a0643116aaaa5474b2d2fef16276ea69f3fab88c9ee789bb341e25324926,2025-08-06T00:15:31.357000
CVE-2025-54873,1,1,12d6c01e1d6163a94e8ae046123f944f1f08768c82693e52d80681aca28c2064,2025-08-06T00:15:31.523000
CVE-2025-54874,0,0,a943aee029bc3364ec92e08dcd8089bfe07b91d9c597a5f2d674146ebc56c99d,2025-08-05T21:06:25.813000
CVE-2025-54876,1,1,49c225b82c8932964af7fdac8c562d4eabc11d50f6400b9ec5769c41834eefe6,2025-08-06T00:15:31.720000
CVE-2025-54879,1,1,083e279422ba8e1f2f831a0c0a1da7b12e7b51004abfce9b9ed951d59b2187aa,2025-08-06T00:15:31.880000
CVE-2025-5488,0,0,021394576cf04e68c0a6a8841dea4152adc58d7e0d47222f83165d634f4670b2,2025-07-11T14:31:08.653000
CVE-2025-54883,1,1,b48ec2758f4e6965f7f66b394b67423068b01a1caba0875af655294435831a2e,2025-08-06T00:15:32.050000
CVE-2025-54884,1,1,57c4c98029dfdd1ef1134660dcc0e9237036434ed1b8028186993dc3df1713ea,2025-08-06T00:15:32.210000
CVE-2025-5490,0,0,2cc4223aeef23bafd9dea0166ceccd837cf8b5c5c0897c192fac8958bd109c59,2025-07-16T16:29:30.290000
CVE-2025-5491,0,0,bde4a3997792f29e78b23bdff62128712428eb2913e7a1e844f896d042cfe900,2025-06-16T12:32:18.840000
CVE-2025-5492,0,0,12ed89f524fc52f090a4824e6665f618e32105d760227daf77f6fef07206fa64,2025-07-15T17:22:55.370000
@@ -304240,8 +304256,8 @@ CVE-2025-8552,0,0,ebceae5ddb3ded4c448857bddd79ff39e2fcc21eeda34d83992adcd51c0bf6
CVE-2025-8553,0,0,0c1da1dfc49fcb430301380b72cb501f887cc6211f5b29d38305adfa48b9c13a,2025-08-05T14:34:17.327000
CVE-2025-8554,0,0,8c4e60aba822a31afa5930e6f959d2596809a3ff4db176f5716bb9427a33bc7d,2025-08-05T14:34:17.327000
CVE-2025-8555,0,0,0fe87583b21210314464d64f40b54b2db6011b7a542be41905f562898ab41f01,2025-08-05T14:34:17.327000
CVE-2025-8571,1,1,b4af575a286982bbc761c980a24c99773efb677ecaef0575e09094c59a978531,2025-08-05T23:15:38.493000
CVE-2025-8573,1,1,33a41b7c00ef9d0a6a2bb3d7406f27befeecbceed9a368b5a61279411cddd60d,2025-08-05T23:15:39.190000
CVE-2025-8571,0,0,b4af575a286982bbc761c980a24c99773efb677ecaef0575e09094c59a978531,2025-08-05T23:15:38.493000
CVE-2025-8573,0,0,33a41b7c00ef9d0a6a2bb3d7406f27befeecbceed9a368b5a61279411cddd60d,2025-08-05T23:15:39.190000
CVE-2025-8584,0,0,8cda5f0d26c14e384234412f6a6c7f277ed4b5232fb8de7a65b928e1f444a3d9,2025-08-05T21:06:25.813000
CVE-2025-8585,0,0,b958c53d4ab5303305cfcf339e6991b0fde22655ccfffc7bcd4872dc044f3ff3,2025-08-05T21:06:25.813000
CVE-2025-8586,0,0,105ac4c24a75acb8e1667bdb168b551c53a1e992ff94bd103b7bafc23a5a96f7,2025-08-05T21:06:25.813000
Can't render this file because it is too large.