diff --git a/CVE-2020/CVE-2020-250xx/CVE-2020-25078.json b/CVE-2020/CVE-2020-250xx/CVE-2020-25078.json index cb14789c6f5..85aacfb4abd 100644 --- a/CVE-2020/CVE-2020-250xx/CVE-2020-25078.json +++ b/CVE-2020/CVE-2020-250xx/CVE-2020-25078.json @@ -2,7 +2,7 @@ "id": "CVE-2020-25078", "sourceIdentifier": "cve@mitre.org", "published": "2020-09-02T16:15:12.627", - "lastModified": "2025-08-05T18:15:27.677", + "lastModified": "2025-08-06T01:00:01.553", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -84,6 +84,10 @@ } ] }, + "cisaExploitAdd": "2025-08-05", + "cisaActionDue": "2025-08-26", + "cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", + "cisaVulnerabilityName": "D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability", "weaknesses": [ { "source": "nvd@nist.gov", diff --git a/CVE-2020/CVE-2020-250xx/CVE-2020-25079.json b/CVE-2020/CVE-2020-250xx/CVE-2020-25079.json index 1c99581b915..0ebf8a41d27 100644 --- a/CVE-2020/CVE-2020-250xx/CVE-2020-25079.json +++ b/CVE-2020/CVE-2020-250xx/CVE-2020-25079.json @@ -2,7 +2,7 @@ "id": "CVE-2020-25079", "sourceIdentifier": "cve@mitre.org", "published": "2020-09-02T16:15:12.690", - "lastModified": "2025-08-05T18:15:30.503", + "lastModified": "2025-08-06T01:00:01.553", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -84,6 +84,10 @@ } ] }, + "cisaExploitAdd": "2025-08-05", + "cisaActionDue": "2025-08-26", + "cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", + "cisaVulnerabilityName": "D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability", "weaknesses": [ { "source": "nvd@nist.gov", diff --git a/CVE-2022/CVE-2022-407xx/CVE-2022-40799.json b/CVE-2022/CVE-2022-407xx/CVE-2022-40799.json index 7262a80a600..488a76b0d81 100644 --- a/CVE-2022/CVE-2022-407xx/CVE-2022-40799.json +++ b/CVE-2022/CVE-2022-407xx/CVE-2022-40799.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40799", "sourceIdentifier": "cve@mitre.org", "published": "2022-11-29T05:15:11.310", - "lastModified": "2025-08-05T18:15:30.767", + "lastModified": "2025-08-06T01:00:01.553", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -59,6 +59,10 @@ } ] }, + "cisaExploitAdd": "2025-08-05", + "cisaActionDue": "2025-08-26", + "cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", + "cisaVulnerabilityName": "D-Link DNR-322L Download of Code Without Integrity Check Vulnerability", "weaknesses": [ { "source": "nvd@nist.gov", diff --git a/CVE-2025/CVE-2025-324xx/CVE-2025-32430.json b/CVE-2025/CVE-2025-324xx/CVE-2025-32430.json new file mode 100644 index 00000000000..c930d698281 --- /dev/null +++ b/CVE-2025/CVE-2025-324xx/CVE-2025-32430.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-32430", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-06T00:15:29.193", + "lastModified": "2025-08-06T00:15:29.193", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-3 through 16.4.7, 16.5.0-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, two templates contain reflected XSS vulnerabilities, allowing an attacker to execute malicious JavaScript code in the context of the victim's session by getting the victim to visit an attacker-controlled URL. This permits the attacker to perform arbitrary actions using the permissions of the victim. This issue is fixed in versions 16.4.8, 16.10.6 and 17.3.0-rc-1. To workaround the issue, manually patch the WAR with the same changes as the original patch." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/xwiki/xwiki-platform/commit/e5926a938cbecc8b1eaa48053d8d370cff107cb0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-m9x4-w7p9-mxhx", + "source": "security-advisories@github.com" + }, + { + "url": "https://jira.xwiki.org/browse/XWIKI-23096", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54124.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54124.json new file mode 100644 index 00000000000..fdb73a91683 --- /dev/null +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54124.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-54124", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-06T00:15:30.353", + "lastModified": "2025-08-06T00:15:30.353", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Platform Old Core versions 9.8-rc-1 through 16.4.6, 16.5.0-rc-1 through 16.10.4, and 17.0.0-rc-1 through 17.1.0, any user with editing rights can create an XClass with a database list property that references a password property. When adding an object of that XClass, the content of that password property is displayed. In practice, with a standard rights setup, this means that any user with an account on the wiki can access password hashes of all users, and possibly other password properties (with hashed or plain storage) that are on pages that the user can view. This issue is fixed in versions 16.4.7, 16.10.5 and 17.2.0-rc-1." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-359" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/xwiki/xwiki-platform/commit/f2ca8649cba2ed3765061660bf5c7f801afa0b24", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-r38m-cgpg-qj69", + "source": "security-advisories@github.com" + }, + { + "url": "https://jira.xwiki.org/browse/XWIKI-22811", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54125.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54125.json new file mode 100644 index 00000000000..abce4e8f178 --- /dev/null +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54125.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-54125", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-06T00:15:30.523", + "lastModified": "2025-08-06T00:15:30.523", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Platform Old Core versions 1.1 through 16.4.6, 16.5.0-rc-1 through 16.10.4 and 17.0.0-rc-1 through 17.1.0, the XML export of a page in XWiki that can be triggered by any user with view rights on a page by appending ?xpage=xml to the URL includes password and email properties stored on a document that aren't named password or email. This is fixed in versions 16.4.7, 16.10.5 and 17.2.0-rc-1. To work around this issue, the file templates/xml.vm in the deployed WAR can be deleted if the XML isn't needed. There isn't any feature in XWiki itself that depends on the XML export." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-359" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/xwiki/xwiki-platform/commit/742ee3482ef6c2bd4ad03d0de9cdd81d0e8f3d59", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-57q2-6cp4-9mq3", + "source": "security-advisories@github.com" + }, + { + "url": "https://jira.xwiki.org/browse/XWIKI-22810", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-545xx/CVE-2025-54571.json b/CVE-2025/CVE-2025-545xx/CVE-2025-54571.json new file mode 100644 index 00000000000..19932b0128d --- /dev/null +++ b/CVE-2025/CVE-2025-545xx/CVE-2025-54571.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-54571", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-06T00:15:30.687", + "lastModified": "2025-08-06T00:15:30.687", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11\nand below, an attacker can override the HTTP response\u2019s Content-Type, which could lead to several issues depending on the HTTP scenario. For example, we have demonstrated the potential for XSS and arbitrary script source code disclosure in the latest version of mod_security2. This issue is fixed in version 2.9.12." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-252" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/owasp-modsecurity/ModSecurity/commit/6d7e8eb18f2d7d368fb8e29516fcdeaeb8d349b8", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/owasp-modsecurity/ModSecurity/issues/2514", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-cg44-9m43-3f9v", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-545xx/CVE-2025-54594.json b/CVE-2025/CVE-2025-545xx/CVE-2025-54594.json new file mode 100644 index 00000000000..793b07d97bb --- /dev/null +++ b/CVE-2025/CVE-2025-545xx/CVE-2025-54594.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2025-54594", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-06T00:15:30.857", + "lastModified": "2025-08-06T00:15:30.857", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "react-native-bottom-tabs is a library of Native Bottom Tabs for React Native. In versions 0.9.2 and below, the github/workflows/release-canary.yml GitHub Actions repository workflow improperly used the pull_request_target event trigger, which allowed for untrusted code from a forked pull request to be executed in a privileged context. An attacker could create a pull request containing a malicious preinstall script in the package.json file and then trigger the vulnerable workflow by posting a specific comment (!canary). This allowed for arbitrary code execution, leading to the exfiltration of sensitive secrets such as GITHUB_TOKEN and NPM_TOKEN, and could have allowed an attacker to push malicious code to the repository or publish compromised packages to the NPM registry. There is a remediation commit which removes github/workflows/release-canary.yml, but a version with this fix has yet to be released." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", + "baseScore": 9.1, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + }, + { + "lang": "en", + "value": "CWE-269" + } + ] + } + ], + "references": [ + { + "url": "https://callstack.notion.site/Post-Incident-Security-Measures-GitHub-Actions-Workflow-Vulnerability-2405d027c0f8804ab7f7cdfb43366a31", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/callstackincubator/react-native-bottom-tabs/commit/9e1c9c61d742c435ac5e0901b7e0c9249b9fc70c", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/callstackincubator/react-native-bottom-tabs/security/advisories/GHSA-588g-38p4-gr6x", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-546xx/CVE-2025-54652.json b/CVE-2025/CVE-2025-546xx/CVE-2025-54652.json new file mode 100644 index 00000000000..07f768d1bea --- /dev/null +++ b/CVE-2025/CVE-2025-546xx/CVE-2025-54652.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54652", + "sourceIdentifier": "psirt@huawei.com", + "published": "2025-08-06T01:15:25.747", + "lastModified": "2025-08-06T01:15:25.747", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization module." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@huawei.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H", + "baseScore": 8.4, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.0, + "impactScore": 5.8 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@huawei.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://consumer.huawei.com/cn/support/bulletinlaptops/2025/8/", + "source": "psirt@huawei.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-546xx/CVE-2025-54653.json b/CVE-2025/CVE-2025-546xx/CVE-2025-54653.json new file mode 100644 index 00000000000..a001516583a --- /dev/null +++ b/CVE-2025/CVE-2025-546xx/CVE-2025-54653.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54653", + "sourceIdentifier": "psirt@huawei.com", + "published": "2025-08-06T01:15:26.260", + "lastModified": "2025-08-06T01:15:26.260", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Path traversal vulnerability in the virtualization file module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization file module." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@huawei.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H", + "baseScore": 8.4, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.0, + "impactScore": 5.8 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@huawei.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://consumer.huawei.com/cn/support/bulletinlaptops/2025/8/", + "source": "psirt@huawei.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-546xx/CVE-2025-54655.json b/CVE-2025/CVE-2025-546xx/CVE-2025-54655.json new file mode 100644 index 00000000000..e6480b4fc62 --- /dev/null +++ b/CVE-2025/CVE-2025-546xx/CVE-2025-54655.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54655", + "sourceIdentifier": "psirt@huawei.com", + "published": "2025-08-06T01:15:26.413", + "lastModified": "2025-08-06T01:15:26.413", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality and integrity of the virtualization graphics module." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@huawei.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.4, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@huawei.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-367" + } + ] + } + ], + "references": [ + { + "url": "https://consumer.huawei.com/cn/support/bulletinlaptops/2025/8/", + "source": "psirt@huawei.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-548xx/CVE-2025-54801.json b/CVE-2025/CVE-2025-548xx/CVE-2025-54801.json new file mode 100644 index 00000000000..1abe319371e --- /dev/null +++ b/CVE-2025/CVE-2025-548xx/CVE-2025-54801.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-54801", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-06T00:15:31.033", + "lastModified": "2025-08-06T00:15:31.033", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Fiber is an Express inspired web framework written in Go. In versions 2.52.8 and below, when using Fiber's Ctx.BodyParser to parse form data containing a large numeric key that represents a slice index (e.g., test.18446744073704), the application crashes due to an out-of-bounds slice allocation in the underlying schema decoder. The root cause is that the decoder attempts to allocate a slice of length idx + 1 without validating whether the index is within a safe or reasonable range. If the idx is excessively large, this leads to an integer overflow or memory exhaustion, causing a panic or crash. This is fixed in version 2.52.9." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-789" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/gofiber/fiber/commit/e115c08b8f059a4a031b492aa9eef0712411853d", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/gofiber/fiber/security/advisories/GHSA-qx2q-88mx-vhg7", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-548xx/CVE-2025-54869.json b/CVE-2025/CVE-2025-548xx/CVE-2025-54869.json new file mode 100644 index 00000000000..7382a78dbcb --- /dev/null +++ b/CVE-2025/CVE-2025-548xx/CVE-2025-54869.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-54869", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-06T00:15:31.197", + "lastModified": "2025-08-06T00:15:31.197", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. In versions 2.6.2 and below, any application that uses FPDI to process user-supplied PDF files is at risk, causing a Denial of Service (DoS) vulnerability. An attacker can upload a small, malicious PDF file that will cause the server-side script to crash due to memory exhaustion. Repeated attacks can lead to sustained service unavailability. This issue is fixed in version 2.6.3." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.0, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Setasign/FPDI/commit/ba671ba9221cffd32c2dda87316c19f522a1c5f0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/Setasign/FPDI/security/advisories/GHSA-jxhh-4648-vpp3", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-548xx/CVE-2025-54872.json b/CVE-2025/CVE-2025-548xx/CVE-2025-54872.json new file mode 100644 index 00000000000..d2d58cc6024 --- /dev/null +++ b/CVE-2025/CVE-2025-548xx/CVE-2025-54872.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-54872", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-06T00:15:31.357", + "lastModified": "2025-08-06T00:15:31.357", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "onion-site-template is a complete, scalable tor hidden service self-hosting sample. Versions which include commit 3196bd89 contain a baked-in tor image if the secrets were copied from an existing onion domain. A website could be compromised if a user shared the baked-in image, or if someone were able to acquire access to the user's device outside of a containerized environment. This is fixed by commit bc9ba0fd." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-798" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Vessel9817/onion-site-template/commit/bc9ba0fd8cc7fbb3abc6759b351885a4501bce84", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/Vessel9817/onion-site-template/security/advisories/GHSA-mj8m-c8w9-rw55", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-548xx/CVE-2025-54873.json b/CVE-2025/CVE-2025-548xx/CVE-2025-54873.json new file mode 100644 index 00000000000..3a52533fd60 --- /dev/null +++ b/CVE-2025/CVE-2025-548xx/CVE-2025-54873.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-54873", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-06T00:15:31.523", + "lastModified": "2025-08-06T00:15:31.523", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture. RISC packages risc0-zkvm versions 2.0.0 through 2.1.0 and risc0-circuit-rv32im and risc0-circuit-rv32im-sys versions 2.0.0 through 2.0.4 contain vulnerabilities where signed integer division allows multiple outputs for certain inputs with only one being valid, and division by zero results are underconstrained. This issue is fixed in risc0-zkvm version 2.2.0 and version 3.0.0 for the risc0-circuit-rv32im and risc0-circuit-rv32im-sys packages." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.7, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-369" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/risc0/risc0/pull/3235", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/risc0/risc0/security/advisories/GHSA-f6rc-24x4-ppxp", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/risc0/zirgen/pull/249", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-548xx/CVE-2025-54876.json b/CVE-2025/CVE-2025-548xx/CVE-2025-54876.json new file mode 100644 index 00000000000..ed2b849603b --- /dev/null +++ b/CVE-2025/CVE-2025-548xx/CVE-2025-54876.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-54876", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-06T00:15:31.720", + "lastModified": "2025-08-06T00:15:31.720", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Janssen Project is an open-source identity and access management (IAM) platform. In versions 1.9.0 and below, Janssen stores passwords in plaintext in the local cli_cmd.log file. This is fixed in the nightly prerelease." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-522" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/JanssenProject/jans/discussions/11886", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/JanssenProject/jans/pull/11903/commits/5260520e8d7ce1d1b8387c71b3571f20e643f110", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/JanssenProject/jans/security/advisories/GHSA-2f4x-m695-jvp3", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-548xx/CVE-2025-54879.json b/CVE-2025/CVE-2025-548xx/CVE-2025-54879.json new file mode 100644 index 00000000000..b371b114645 --- /dev/null +++ b/CVE-2025/CVE-2025-548xx/CVE-2025-54879.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-54879", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-06T00:15:31.880", + "lastModified": "2025-08-06T00:15:31.880", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Mastodon is a free, open-source social network server based on ActivityPub Mastodon which facilitates LDAP configuration for authentication. In versions 3.1.5 through 4.2.24, 4.3.0 through 4.3.11 and 4.4.0 through 4.4.3, Mastodon's rate-limiting system has a critical configuration error where the email-based throttle for confirmation emails incorrectly checks the password reset path instead of the confirmation path, effectively disabling per-email limits for confirmation requests. This allows attackers to bypass rate limits by rotating IP addresses and send unlimited confirmation emails to any email address, as only a weak IP-based throttle (25 requests per 5 minutes) remains active. The vulnerability enables denial-of-service attacks that can overwhelm mail queues and facilitate user harassment through confirmation email spam. This is fixed in versions 4.2.24, 4.3.11 and 4.4.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/mastodon/mastodon/commit/e2592419d93fb41be03c2f3ff6a122fecb0e0952", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/mastodon/mastodon/releases/tag/v4.4.3", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/mastodon/mastodon/security/advisories/GHSA-84ch-6436-c7mg", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-548xx/CVE-2025-54883.json b/CVE-2025/CVE-2025-548xx/CVE-2025-54883.json new file mode 100644 index 00000000000..59eb5c9305a --- /dev/null +++ b/CVE-2025/CVE-2025-548xx/CVE-2025-54883.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-54883", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-06T00:15:32.050", + "lastModified": "2025-08-06T00:15:32.050", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the getSecureRandomInt function in security-kit versions prior to 3.5.0 (packaged in Vision-ui <= 1.4.0) contains a critical cryptographic weakness. Due to a silent 32-bit integer overflow in its internal masking logic, the function fails to produce a uniform distribution of random numbers when the requested range between min and max is larger than 2\u00b3\u00b2. The root cause is the use of a 32-bit bitwise left-shift operation (<<) to generate a bitmask for the rejection sampling algorithm. This causes the mask to be incorrect for any range requiring 32 or more bits of entropy. This issue is fixed in version 1.5.0." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-338" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/DavidOsipov/Vision-ui/commit/347355859f05e98047efbd96fc0e61b9191324f1", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/DavidOsipov/Vision-ui/security/advisories/GHSA-c9xg-x7h3-mq2q", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-548xx/CVE-2025-54884.json b/CVE-2025/CVE-2025-548xx/CVE-2025-54884.json new file mode 100644 index 00000000000..fc6ae70b62e --- /dev/null +++ b/CVE-2025/CVE-2025-548xx/CVE-2025-54884.json @@ -0,0 +1,90 @@ +{ + "id": "CVE-2025-54884", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-08-06T00:15:32.210", + "lastModified": "2025-08-06T00:15:32.210", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the generateSecureId and getSecureRandomInt functions in security-kit versions prior to 3.5.0 (packaged in Vision UI 1.4.0 and below) are vulnerable to Denial of Service (DoS) attacks. The generateSecureId(length) function directly used the length parameter to size a Uint8Array buffer, allowing attackers to exhaust server memory through repeated requests for large IDs since the previous 1024 limit was insufficient. The getSecureRandomInt(min, max) function calculated buffer size based on the range between min and max, where large ranges caused excessive memory allocation and CPU-intensive rejection-sampling loops that could hang the thread. This issue is fixed in version 1.5.0." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + }, + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/DavidOsipov/Vision-ui/commit/74802cd688b661a35e638fc96938d65ca7c05ff5", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/DavidOsipov/Vision-ui/releases/tag/1.5.0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/DavidOsipov/Vision-ui/security/advisories/GHSA-gg28-wc2c-jjj3", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 9c9cb4fe0ac..92748f78448 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-08-05T23:55:11.775889+00:00 +2025-08-06T02:00:10.876909+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-08-05T23:15:39.190000+00:00 +2025-08-06T01:15:26.413000+00:00 ``` ### Last Data Feed Release @@ -27,27 +27,44 @@ Repository synchronizes with the NVD every 2 hours. Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest) ```plain -2025-08-05T00:00:02.116538+00:00 +2025-08-06T00:00:02.117358+00:00 ``` ### Total Number of included CVEs ```plain -304246 +304262 ``` ### CVEs added in the last Commit -Recently added CVEs: `2` +Recently added CVEs: `16` -- [CVE-2025-8571](CVE-2025/CVE-2025-85xx/CVE-2025-8571.json) (`2025-08-05T23:15:38.493`) -- [CVE-2025-8573](CVE-2025/CVE-2025-85xx/CVE-2025-8573.json) (`2025-08-05T23:15:39.190`) +- [CVE-2025-32430](CVE-2025/CVE-2025-324xx/CVE-2025-32430.json) (`2025-08-06T00:15:29.193`) +- [CVE-2025-54124](CVE-2025/CVE-2025-541xx/CVE-2025-54124.json) (`2025-08-06T00:15:30.353`) +- [CVE-2025-54125](CVE-2025/CVE-2025-541xx/CVE-2025-54125.json) (`2025-08-06T00:15:30.523`) +- [CVE-2025-54571](CVE-2025/CVE-2025-545xx/CVE-2025-54571.json) (`2025-08-06T00:15:30.687`) +- [CVE-2025-54594](CVE-2025/CVE-2025-545xx/CVE-2025-54594.json) (`2025-08-06T00:15:30.857`) +- [CVE-2025-54652](CVE-2025/CVE-2025-546xx/CVE-2025-54652.json) (`2025-08-06T01:15:25.747`) +- [CVE-2025-54653](CVE-2025/CVE-2025-546xx/CVE-2025-54653.json) (`2025-08-06T01:15:26.260`) +- [CVE-2025-54655](CVE-2025/CVE-2025-546xx/CVE-2025-54655.json) (`2025-08-06T01:15:26.413`) +- [CVE-2025-54801](CVE-2025/CVE-2025-548xx/CVE-2025-54801.json) (`2025-08-06T00:15:31.033`) +- [CVE-2025-54869](CVE-2025/CVE-2025-548xx/CVE-2025-54869.json) (`2025-08-06T00:15:31.197`) +- [CVE-2025-54872](CVE-2025/CVE-2025-548xx/CVE-2025-54872.json) (`2025-08-06T00:15:31.357`) +- [CVE-2025-54873](CVE-2025/CVE-2025-548xx/CVE-2025-54873.json) (`2025-08-06T00:15:31.523`) +- [CVE-2025-54876](CVE-2025/CVE-2025-548xx/CVE-2025-54876.json) (`2025-08-06T00:15:31.720`) +- [CVE-2025-54879](CVE-2025/CVE-2025-548xx/CVE-2025-54879.json) (`2025-08-06T00:15:31.880`) +- [CVE-2025-54883](CVE-2025/CVE-2025-548xx/CVE-2025-54883.json) (`2025-08-06T00:15:32.050`) +- [CVE-2025-54884](CVE-2025/CVE-2025-548xx/CVE-2025-54884.json) (`2025-08-06T00:15:32.210`) ### CVEs modified in the last Commit -Recently modified CVEs: `0` +Recently modified CVEs: `3` +- [CVE-2020-25078](CVE-2020/CVE-2020-250xx/CVE-2020-25078.json) (`2025-08-06T01:00:01.553`) +- [CVE-2020-25079](CVE-2020/CVE-2020-250xx/CVE-2020-25079.json) (`2025-08-06T01:00:01.553`) +- [CVE-2022-40799](CVE-2022/CVE-2022-407xx/CVE-2022-40799.json) (`2025-08-06T01:00:01.553`) ## Download and Usage diff --git a/_state.csv b/_state.csv index ec4be5513db..e48884d6a0b 100644 --- a/_state.csv +++ b/_state.csv @@ -154810,8 +154810,8 @@ CVE-2020-25070,0,0,d7b6b7513b7fa4480806a45272e418831107a17b6545ab1c725c535c6e008 CVE-2020-25071,0,0,85480285cd2872e22f3026e4222978d8d5b422f3f0b152ca7847f136f5c0b48b,2024-11-21T05:17:12.367000 CVE-2020-25073,0,0,cff2d0eca0d2aabcc5032424edff661872a89f8520be5d9f740930fd16d608c9,2024-11-21T05:17:12.523000 CVE-2020-25074,0,0,e63a306b15e191de7e45b7b64a916089bb4377e2c45c66723877fe866fa0ee8d,2024-11-21T05:17:12.670000 -CVE-2020-25078,0,0,9b0011ef40b4a521f4fc9d143e95565ba142fc05813063e7fd6631908fd94750,2025-08-05T18:15:27.677000 -CVE-2020-25079,0,0,f4bf744816946266fbc73f3b5bc369708d859ddf1a9852d60f536e4a05d5f725,2025-08-05T18:15:30.503000 +CVE-2020-25078,0,1,6cdb5aff9df6c9eb8044864fb28f056e50183930c8e16444ced23f1bc166b55d,2025-08-06T01:00:01.553000 +CVE-2020-25079,0,1,0de28c9c74b7129eb79223be06436eeb659e2b4fc3fcea3c986398cbd04ee743,2025-08-06T01:00:01.553000 CVE-2020-2508,0,0,20e609441ecfb9058699f4a160b79c5ef420751babc3b9d085cd6b02ab6fbf17,2024-11-21T05:25:23.140000 CVE-2020-25082,0,0,49a3353a21eee1949b9e78033d0fc76d32f339d620490cfc9dcb86ae5cfe48d9,2024-11-21T05:17:13.177000 CVE-2020-25084,0,0,8f0ef3c35e1660a98014385a917f7ad99252442a9b434b6f76f759e2a04810c5,2024-11-21T05:17:13.367000 @@ -207341,7 +207341,7 @@ CVE-2022-40785,0,0,576eb2dee821f051cc9cb0ee4d426aea94e25a7011c960abe02b5a9b9a2bf CVE-2022-4079,0,0,2e195e8ce7a96c52db6e6cd391e2c7b115c697f82f9f0e227cf3888e325014f3,2023-11-07T03:56:52.547000 CVE-2022-40797,0,0,8cea0f3b9a4034248d452482a397340822c5494ffa41b0c2a6b2e29ce7621203,2025-05-01T16:15:23.130000 CVE-2022-40798,0,0,f881d62ff80694f44d79962e382a4a64779978049ae882b14029868411af3302,2025-05-08T20:15:21.207000 -CVE-2022-40799,0,0,dfaad5d339b492c936658e630b3101e7be738fd7181ebb4d24f48cb93506de54,2025-08-05T18:15:30.767000 +CVE-2022-40799,0,1,ad66f02463a8d9023beec91c84be60aa96b6222bb5abf179158a02de6f47c5c5,2025-08-06T01:00:01.553000 CVE-2022-4080,0,0,2451c9d571d733037b09750056090b671d4a0e95bf3e35212e4bb5caad0e79e2,2023-11-07T03:56:52.670000 CVE-2022-40805,0,0,4f20b037a16c5670b8159350ab27545846f70f42558e52fea1d755619dafdd45,2024-11-21T07:22:03.853000 CVE-2022-40806,0,0,ac30ad36d7e7544ea0df57eac1ad635687001be1171a09eae0ad7de26adc7a9c,2024-11-21T07:22:04.007000 @@ -293829,6 +293829,7 @@ CVE-2025-32427,0,0,57d3a7d2051dd0b51d8b12614834873286577350e593d5683068731d274c9 CVE-2025-32428,0,0,32eeebbb9eb52efc2ed96bd05d1eccbda5203d0361f63bfcafb88d13c22b345a,2025-04-15T18:39:27.967000 CVE-2025-32429,0,0,2562d5a8adb80becc3bb01ee5baa28054bc699ced2c0e31575580418b80876fd,2025-07-25T15:29:19.837000 CVE-2025-3243,0,0,4b2bb05912dfa327561457ea9db9da3d0253e77015cecee72f471cd1253e6547,2025-05-28T21:10:35.537000 +CVE-2025-32430,1,1,9a4041e925b06eab358f255291292678e8d3d782fe636a89651eddc226d263c5,2025-08-06T00:15:29.193000 CVE-2025-32431,0,0,c841c5dc407677a5965f2a37065aa8f465f93e2d2ebac9e51959dc5b7aa3e0fc,2025-04-23T14:08:13.383000 CVE-2025-32432,0,0,431fc0fbedd754e521baa62824583ff2e21564f5b0b8bca365cd2f1af03e8472,2025-04-28T20:57:06.397000 CVE-2025-32433,0,0,7ba335a214bd960b7aa4037e2bf131013c4cad5d3330b96c292db2b523ea5f72,2025-07-30T19:24:19.250000 @@ -301687,6 +301688,8 @@ CVE-2025-5412,0,0,cdedc82e39d6eb66906e9774b875480255e558374703496c9f6705513eee4b CVE-2025-54120,0,0,ff24bf1f1d14e3839cdf4c598657a8f75a7ceeea0db6ec32f59f1618dd7c2c68,2025-07-25T15:29:44.523000 CVE-2025-54121,0,0,5e03c0d09f0529f860a3cb8cd6d41d44a1e1f16445622a8ec733a83f68b99bf0,2025-07-22T13:05:40.573000 CVE-2025-54122,0,0,ec791c35edba713c636b3a9e38cc805a906e81c85e6482a35a24dc03f4774d0a,2025-07-22T13:05:40.573000 +CVE-2025-54124,1,1,c420b1b0fd2f26529b0f7c7880d30355a74109ba71245bbd871e7f2b4f599f1e,2025-08-06T00:15:30.353000 +CVE-2025-54125,1,1,7aa3da02b99b26c5b3be83443eb13a772a379113a51cf3b0e54a0cd14a0ffaa3,2025-08-06T00:15:30.523000 CVE-2025-54126,0,0,0c34b500663a6b4b048a7b34f5104d2b313a000244dda734bdc7575e122db29c,2025-07-31T18:42:56.503000 CVE-2025-54127,0,0,3b8e9124b447079e3616d18c62c76c658265ef7c030ce9e2823177c319b9e3c7,2025-07-30T17:03:34.940000 CVE-2025-54128,0,0,f5fe1d651fd26d4066fff64ca0ab3ebcc07ae62ec6e29299df5802e47a13a3a5,2025-07-30T17:04:15.720000 @@ -301835,6 +301838,7 @@ CVE-2025-54566,0,0,576b568e7d29121c40e519987f5bcb577828072f75c9a2f3f757329db8f97 CVE-2025-54567,0,0,78f7b8b3f26903bbb2a7d9e8c38c11879a04a3820116606cf42acab7fdf78247,2025-07-25T15:29:19.837000 CVE-2025-54568,0,0,eeb7e8f0de32b589dad825a3b3efbbb4ad104d4389ddbffa8a11c2da6ac05aea,2025-07-25T15:29:19.837000 CVE-2025-54569,0,0,146e16441b69cd6900c21cce4edfbc7953f22232be5c2da85da2aec0b3562370,2025-07-29T14:14:29.590000 +CVE-2025-54571,1,1,6297aec7719e3b21b19350dd7853f09978c2c418e9a7785aca82f9cde806077b,2025-08-06T00:15:30.687000 CVE-2025-54572,0,0,487b089689a08f0fe3b36331756102d23289a1f1c99152034b2b02ecdc03be8e,2025-07-31T18:42:37.870000 CVE-2025-54573,0,0,9c1a5b55858d002dbbc0cdec9ac39b8221e893f12b6517e6173ba192a4080fc1,2025-07-31T18:42:37.870000 CVE-2025-54574,0,0,e5136123185a1d1b5022b486f3f7a276c23db0fbf9e19b87b551928173ede8c0,2025-08-04T15:06:15.833000 @@ -301850,11 +301854,15 @@ CVE-2025-54589,0,0,f119e83a9e858c1168d26e31502c544999260a67dc3550033d4e291794784 CVE-2025-5459,0,0,bfef67fb6bc5a0d62d15f9ee68a0d9240ec3720f0fb55d24a02c5d3644fba822,2025-06-26T18:57:43.670000 CVE-2025-54590,0,0,cc695bafd22d52e18d3a732d9d13d50f50272cea195994bf4c9adc1f0682e760,2025-08-04T15:06:15.833000 CVE-2025-54593,0,0,d791eb85c3bc36442f0cd9e0bdf5f673813fc9c435e988f4eadbf021c599f87d,2025-08-04T15:06:15.833000 +CVE-2025-54594,1,1,dbb9b9144929bbec60db418fabf21ada93564356df8871b5c756e6e00426ac34,2025-08-06T00:15:30.857000 CVE-2025-54595,0,0,30ffcf0990aa64a08666ca9fd37ae6ad2262782e8a8656844816a6a9dbe24c54,2025-08-04T15:06:15.833000 CVE-2025-54596,0,0,2612f9ce3d1ad98384f927b661afbbba9ea5ce1b82ec32a4f91d7da49e189881,2025-07-29T14:14:55.157000 CVE-2025-54597,0,0,3a4e03017bac2a5288cc529fb9e1a5cf4e0e7c003febb3884a0db01f53838f0d,2025-07-29T14:14:29.590000 CVE-2025-5463,0,0,baeeb4f033a8a38e901991e2f45f06f0d137163c39066204eeef2cf76c5f4edd,2025-07-15T13:04:57.140000 CVE-2025-5464,0,0,65c3c01f965b7c9543e96da263bcfd546494400db3cba1698e656eefc5b7f0bf,2025-07-15T12:45:15.487000 +CVE-2025-54652,1,1,f852669f8b5f8fa0aace80893b1212eaa8d2adcc12c881ef8a9bda370ddd6d74,2025-08-06T01:15:25.747000 +CVE-2025-54653,1,1,d912c487248555df0cae4d1f70608de5b5d2bc89dccb427473c1350d9dbb2738,2025-08-06T01:15:26.260000 +CVE-2025-54655,1,1,28dc35b77415c4b75561d793e2af36ba0ec65999511835cfd2f65e62e937de7c,2025-08-06T01:15:26.413000 CVE-2025-54656,0,0,c6cbc67b264a2d02d33f980cea4d74ff9bfc54ade2f3f620ff160c7b051c46dc,2025-07-31T18:42:37.870000 CVE-2025-54657,0,0,ce5e9302df1f80ca8890a55b600508732690dc5fec9f25e06292f5311ad76efc,2025-08-01T04:16:18.450000 CVE-2025-54661,0,0,e812545bbd81261a21ad4f7bfb9bded32cc8e6329c77144c1e4482ecad428c57,2025-07-29T03:15:22.170000 @@ -301889,6 +301897,7 @@ CVE-2025-54795,0,0,3bbccca500762095f431ce511b0f30aa2dfc2c9a0fc29cdbc100123a87610 CVE-2025-54796,0,0,ce6b7a0d5461b510ba8dd2d79945f9735b9371a5b328b1f9d700c9cb17758f27,2025-08-04T16:15:34.217000 CVE-2025-54797,0,0,b40d69e40bb458f8b776248e8345cb1c0128c98cae0c4ce4d3f915bca09bfa20,2025-08-05T00:15:56.780000 CVE-2025-5480,0,0,b6157243f7fdbaf5769c8c248be5113b7a9538f2054411dc814924ab031c7b6a,2025-06-09T12:15:47.880000 +CVE-2025-54801,1,1,7c4e246525c31d66242bc6104916bf494a655ee1b95344b76357b02a2ad0b16b,2025-08-06T00:15:31.033000 CVE-2025-54802,0,0,8ea9f7716250e0016af11838572277aef8ef7b747d76d5ba09b90c4551913815,2025-08-05T15:15:31.523000 CVE-2025-54803,0,0,c0c7e82f1876acc2cbd02fdfedfcd30cf39c009da49bdbbc9da7fa9e3bd9f502,2025-08-05T15:15:31.630000 CVE-2025-54804,0,0,2ebeaa8b386f0260d8169a18bcdd447ccba2bc8520157e720da58ff9373bd2c7,2025-08-05T15:15:31.740000 @@ -301918,11 +301927,18 @@ CVE-2025-5485,0,0,2e860e2d57c553742a7a4058b06e9ead83d36be7b50569039a067969f103fe CVE-2025-5486,0,0,403a5f3fdf24114225af88123fd5df41b3fe4d4616779e15f6218229399593fb,2025-06-06T14:07:28.330000 CVE-2025-54865,0,0,284d6a037e884cf7b2435340a12604878f42b455f0176d2868e19cd1b2cdd22b,2025-08-05T14:34:17.327000 CVE-2025-54868,0,0,f90685a1af5d14c33828166fd69d4c361211ed111eb9670c7696955955859c99,2025-08-05T14:34:17.327000 +CVE-2025-54869,1,1,3953e1fd7b8c04c855cd6a8e750ba5985b1a18a5f7011799ad7fee1862c6bd8e,2025-08-06T00:15:31.197000 CVE-2025-5487,0,0,a2325d70b19f1faa0bb78067f87ae57fb5952acc710d0b21151f32c03c4f828a,2025-06-16T12:32:18.840000 CVE-2025-54870,0,0,4e2cb9e0821a411e1eb3de9a18da70a80fc60cc99a4d2a4d5e6a552786978954,2025-08-05T14:34:17.327000 CVE-2025-54871,0,0,008178d8aefe54c612d9d0d30c640847c3d319ce14b6308416a83a30ca878b9a,2025-08-05T15:15:31.897000 +CVE-2025-54872,1,1,0f69a0643116aaaa5474b2d2fef16276ea69f3fab88c9ee789bb341e25324926,2025-08-06T00:15:31.357000 +CVE-2025-54873,1,1,12d6c01e1d6163a94e8ae046123f944f1f08768c82693e52d80681aca28c2064,2025-08-06T00:15:31.523000 CVE-2025-54874,0,0,a943aee029bc3364ec92e08dcd8089bfe07b91d9c597a5f2d674146ebc56c99d,2025-08-05T21:06:25.813000 +CVE-2025-54876,1,1,49c225b82c8932964af7fdac8c562d4eabc11d50f6400b9ec5769c41834eefe6,2025-08-06T00:15:31.720000 +CVE-2025-54879,1,1,083e279422ba8e1f2f831a0c0a1da7b12e7b51004abfce9b9ed951d59b2187aa,2025-08-06T00:15:31.880000 CVE-2025-5488,0,0,021394576cf04e68c0a6a8841dea4152adc58d7e0d47222f83165d634f4670b2,2025-07-11T14:31:08.653000 +CVE-2025-54883,1,1,b48ec2758f4e6965f7f66b394b67423068b01a1caba0875af655294435831a2e,2025-08-06T00:15:32.050000 +CVE-2025-54884,1,1,57c4c98029dfdd1ef1134660dcc0e9237036434ed1b8028186993dc3df1713ea,2025-08-06T00:15:32.210000 CVE-2025-5490,0,0,2cc4223aeef23bafd9dea0166ceccd837cf8b5c5c0897c192fac8958bd109c59,2025-07-16T16:29:30.290000 CVE-2025-5491,0,0,bde4a3997792f29e78b23bdff62128712428eb2913e7a1e844f896d042cfe900,2025-06-16T12:32:18.840000 CVE-2025-5492,0,0,12ed89f524fc52f090a4824e6665f618e32105d760227daf77f6fef07206fa64,2025-07-15T17:22:55.370000 @@ -304240,8 +304256,8 @@ CVE-2025-8552,0,0,ebceae5ddb3ded4c448857bddd79ff39e2fcc21eeda34d83992adcd51c0bf6 CVE-2025-8553,0,0,0c1da1dfc49fcb430301380b72cb501f887cc6211f5b29d38305adfa48b9c13a,2025-08-05T14:34:17.327000 CVE-2025-8554,0,0,8c4e60aba822a31afa5930e6f959d2596809a3ff4db176f5716bb9427a33bc7d,2025-08-05T14:34:17.327000 CVE-2025-8555,0,0,0fe87583b21210314464d64f40b54b2db6011b7a542be41905f562898ab41f01,2025-08-05T14:34:17.327000 -CVE-2025-8571,1,1,b4af575a286982bbc761c980a24c99773efb677ecaef0575e09094c59a978531,2025-08-05T23:15:38.493000 -CVE-2025-8573,1,1,33a41b7c00ef9d0a6a2bb3d7406f27befeecbceed9a368b5a61279411cddd60d,2025-08-05T23:15:39.190000 +CVE-2025-8571,0,0,b4af575a286982bbc761c980a24c99773efb677ecaef0575e09094c59a978531,2025-08-05T23:15:38.493000 +CVE-2025-8573,0,0,33a41b7c00ef9d0a6a2bb3d7406f27befeecbceed9a368b5a61279411cddd60d,2025-08-05T23:15:39.190000 CVE-2025-8584,0,0,8cda5f0d26c14e384234412f6a6c7f277ed4b5232fb8de7a65b928e1f444a3d9,2025-08-05T21:06:25.813000 CVE-2025-8585,0,0,b958c53d4ab5303305cfcf339e6991b0fde22655ccfffc7bcd4872dc044f3ff3,2025-08-05T21:06:25.813000 CVE-2025-8586,0,0,105ac4c24a75acb8e1667bdb168b551c53a1e992ff94bd103b7bafc23a5a96f7,2025-08-05T21:06:25.813000