mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2026-10-29 00:30:48 +00:00
Auto-Update: 2025-11-12T09:00:11.412899+00:00
This commit is contained in:
cad-safe-bot committed
1 parent
c785921811
commit
0ef9ffe162
16 files changed
+1215
-36
No files matched your search
@@ -2,13 +2,13 @@
|
||||
"id": "CVE-2022-30228",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2022-06-14T10:15:20.267",
|
||||
"lastModified": "2024-11-21T07:02:23.917",
|
||||
"lastModified": "2025-11-12T08:15:37.030",
|
||||
"vulnStatus": "Modified",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed."
|
||||
"value": "A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed."
|
||||
},
|
||||
{
|
||||
"lang": "es",
|
||||
@@ -16,10 +16,74 @@
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 8.6,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "ACTIVE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 5.9
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
|
||||
@@ -123,6 +187,10 @@
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://cert-portal.siemens.com/productcert/html/ssa-631336.html",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf",
|
||||
"source": "[email protected]",
|
||||
|
||||
@@ -2,13 +2,13 @@
|
||||
"id": "CVE-2022-30229",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2022-06-14T10:15:20.320",
|
||||
"lastModified": "2024-11-21T07:02:24.027",
|
||||
"lastModified": "2025-11-12T08:15:39.427",
|
||||
"vulnStatus": "Modified",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of an user, such as credentials, in case that user's id is known."
|
||||
"value": "A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, such as credentials, in case that user's id is known."
|
||||
},
|
||||
{
|
||||
"lang": "es",
|
||||
@@ -16,10 +16,74 @@
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 8.6,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.2,
|
||||
"impactScore": 5.9
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
|
||||
@@ -123,6 +187,10 @@
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://cert-portal.siemens.com/productcert/html/ssa-631336.html",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf",
|
||||
"source": "[email protected]",
|
||||
|
||||
@@ -2,13 +2,13 @@
|
||||
"id": "CVE-2022-30230",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2022-06-14T10:15:20.377",
|
||||
"lastModified": "2024-11-21T07:02:24.137",
|
||||
"lastModified": "2025-11-12T08:15:39.703",
|
||||
"vulnStatus": "Modified",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions."
|
||||
"value": "A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions."
|
||||
},
|
||||
{
|
||||
"lang": "es",
|
||||
@@ -16,9 +16,53 @@
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 9.3,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
@@ -36,6 +80,26 @@
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -123,6 +187,10 @@
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://cert-portal.siemens.com/productcert/html/ssa-631336.html",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf",
|
||||
"source": "[email protected]",
|
||||
|
||||
@@ -2,13 +2,13 @@
|
||||
"id": "CVE-2022-30231",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2022-06-14T10:15:20.433",
|
||||
"lastModified": "2024-11-21T07:02:24.243",
|
||||
"lastModified": "2025-11-12T08:15:39.943",
|
||||
"vulnStatus": "Modified",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another users password hash."
|
||||
"value": "A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user's password hash."
|
||||
},
|
||||
{
|
||||
"lang": "es",
|
||||
@@ -16,10 +16,74 @@
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 6.9,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
|
||||
"baseScore": 4.9,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 1.2,
|
||||
"impactScore": 3.6
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
|
||||
@@ -123,6 +187,10 @@
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://cert-portal.siemens.com/productcert/html/ssa-631336.html",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf",
|
||||
"source": "[email protected]",
|
||||
|
||||
@@ -2,13 +2,13 @@
|
||||
"id": "CVE-2022-34464",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2022-07-12T10:15:11.983",
|
||||
"lastModified": "2024-11-21T07:09:37.340",
|
||||
"lastModified": "2025-11-12T08:15:40.260",
|
||||
"vulnStatus": "Modified",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions), SICAM GridEdge Essential Intel (All versions < V2.7.3), SICAM GridEdge Essential with GDS ARM (All versions), SICAM GridEdge Essential with GDS Intel (All versions < V2.7.3). Affected software uses an improperly protected file to import SSH keys. Attackers with access to the filesystem of the host on which SICAM GridEdge runs, are able to inject a custom SSH key to that file."
|
||||
"value": "A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.7.3). The affected application uses an improperly protected file to import SSH keys. This could allow attackers with access to the filesystem of the host on which SICAM GridEdge runs to inject a custom SSH key to that file."
|
||||
},
|
||||
{
|
||||
"lang": "es",
|
||||
@@ -16,10 +16,74 @@
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "LOW",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
|
||||
"baseScore": 6.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
|
||||
@@ -67,17 +131,17 @@
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-668"
|
||||
"value": "CWE-552"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
@@ -121,6 +185,10 @@
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://cert-portal.siemens.com/productcert/html/ssa-225578.html",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-225578.pdf",
|
||||
"source": "[email protected]",
|
||||
|
||||
@@ -0,0 +1,76 @@
|
||||
{
|
||||
"id": "CVE-2025-12018",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T08:15:40.590",
|
||||
"lastModified": "2025-11-12T08:15:40.590",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The MembershipWorks \u2013 Membership, Events & Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 6.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
|
||||
"baseScore": 4.4,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 1.3,
|
||||
"impactScore": 2.7
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/zast-ai/vulnerability-reports/blob/main/wordpress/plugin/memberfindme/stored-xss.md",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/memberfindme/tags/6.14/memberfindme.php#L103",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/memberfindme/tags/6.14/memberfindme.php#L437",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3393026%40memberfindme&new=3393026%40memberfindme&sfp_email=&sfph_mail=",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://wordpress.org/plugins/memberfindme/",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7cd412d8-6d14-4803-aae6-087e02f9d75f?source=cve",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2025-12113",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T08:15:40.850",
|
||||
"lastModified": "2025-11-12T08:15:40.850",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Alt Text Generator AI \u2013 Auto Generate & Bulk Update Alt Texts For Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the atgai_delete_api_key() function in all versions up to, and including, 1.8.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the API key connected to the site."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
|
||||
"baseScore": 4.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-862"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3390619%40alt-text-generator&new=3390619%40alt-text-generator&sfp_email=&sfph_mail=",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5309e891-ced1-496f-8ee5-c089a91a7666?source=cve",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2025-12633",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T08:15:41.073",
|
||||
"lastModified": "2025-11-12T08:15:41.073",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bookit/v1/commerce/stripe/return' REST API Endpoint in all versions up to, and including, 2.5.0. This makes it possible for unauthenticated attackers to connect their Stripe account and receive payments."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-862"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/changeset/3393159/bookit/tags/2.5.1/src/Bookit/Gateways/StripeConnect/REST/Return_Endpoint.php?old=3121677&old_path=bookit%2Ftags%2F2.5.0%2Fsrc%2FBookit%2FGateways%2FStripeConnect%2FREST%2FReturn_Endpoint.php",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2263d356-b2ed-4e16-98ee-b01d4274d1d9?source=cve",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,104 @@
|
||||
{
|
||||
"id": "CVE-2025-12869",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T08:15:41.290",
|
||||
"lastModified": "2025-11-12T08:15:41.290",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administrator privileges to inject persistent JavaScript codes that are executed in users' browsers upon page load."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 4.8,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "LOW",
|
||||
"subIntegrityImpact": "LOW",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
|
||||
"baseScore": 4.8,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 1.7,
|
||||
"impactScore": 2.7
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/en/cp-139-10487-12a32-2.html",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/tw/cp-132-10486-a3459-1.html",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,104 @@
|
||||
{
|
||||
"id": "CVE-2025-12870",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T08:15:41.513",
|
||||
"lastModified": "2025-11-12T08:15:41.513",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 9.3,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-1390"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/en/cp-139-10487-12a32-2.html",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/tw/cp-132-10486-a3459-1.html",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,104 @@
|
||||
{
|
||||
"id": "CVE-2025-12871",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T08:15:41.733",
|
||||
"lastModified": "2025-11-12T08:15:41.733",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 9.3,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-1390"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/en/cp-139-10487-12a32-2.html",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/tw/cp-132-10486-a3459-1.html",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,104 @@
|
||||
{
|
||||
"id": "CVE-2025-12872",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T08:15:41.970",
|
||||
"lastModified": "2025-11-12T08:15:41.970",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to upload files containing malicious JavaScript code, which will execute on the client side when a user is tricked into visiting a specific URL."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 5.1,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "LOW",
|
||||
"subIntegrityImpact": "LOW",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
|
||||
"baseScore": 5.4,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 2.3,
|
||||
"impactScore": 2.7
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/en/cp-139-10487-12a32-2.html",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/tw/cp-132-10486-a3459-1.html",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,104 @@
|
||||
{
|
||||
"id": "CVE-2025-13046",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T08:15:42.170",
|
||||
"lastModified": "2025-11-12T08:15:42.170",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 8.7,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/en/cp-139-10499-15678-2.html",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/tw/cp-132-10498-61fa4-1.html",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,104 @@
|
||||
{
|
||||
"id": "CVE-2025-13047",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T08:15:42.433",
|
||||
"lastModified": "2025-11-12T08:15:42.433",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 8.7,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/en/cp-139-10499-15678-2.html",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.twcert.org.tw/tw/cp-132-10498-61fa4-1.html",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
|
||||
### Last Repository Update
|
||||
|
||||
```plain
|
||||
2025-11-12T07:00:11.920096+00:00
|
||||
2025-11-12T09:00:11.412899+00:00
|
||||
```
|
||||
|
||||
### Most recent CVE Modification Timestamp synchronized with NVD
|
||||
|
||||
```plain
|
||||
2025-11-12T06:15:33.553000+00:00
|
||||
2025-11-12T08:15:42.433000+00:00
|
||||
```
|
||||
|
||||
### Last Data Feed Release
|
||||
@@ -33,23 +33,33 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
|
||||
### Total Number of included CVEs
|
||||
|
||||
```plain
|
||||
317867
|
||||
317876
|
||||
```
|
||||
|
||||
### CVEs added in the last Commit
|
||||
|
||||
Recently added CVEs: `4`
|
||||
Recently added CVEs: `9`
|
||||
|
||||
- [CVE-2025-11560](CVE-2025/CVE-2025-115xx/CVE-2025-11560.json) (`2025-11-12T06:15:33.553`)
|
||||
- [CVE-2025-12087](CVE-2025/CVE-2025-120xx/CVE-2025-12087.json) (`2025-11-12T05:15:39.020`)
|
||||
- [CVE-2025-12833](CVE-2025/CVE-2025-128xx/CVE-2025-12833.json) (`2025-11-12T05:15:41.940`)
|
||||
- [CVE-2025-12901](CVE-2025/CVE-2025-129xx/CVE-2025-12901.json) (`2025-11-12T05:15:43.787`)
|
||||
- [CVE-2025-12018](CVE-2025/CVE-2025-120xx/CVE-2025-12018.json) (`2025-11-12T08:15:40.590`)
|
||||
- [CVE-2025-12113](CVE-2025/CVE-2025-121xx/CVE-2025-12113.json) (`2025-11-12T08:15:40.850`)
|
||||
- [CVE-2025-12633](CVE-2025/CVE-2025-126xx/CVE-2025-12633.json) (`2025-11-12T08:15:41.073`)
|
||||
- [CVE-2025-12869](CVE-2025/CVE-2025-128xx/CVE-2025-12869.json) (`2025-11-12T08:15:41.290`)
|
||||
- [CVE-2025-12870](CVE-2025/CVE-2025-128xx/CVE-2025-12870.json) (`2025-11-12T08:15:41.513`)
|
||||
- [CVE-2025-12871](CVE-2025/CVE-2025-128xx/CVE-2025-12871.json) (`2025-11-12T08:15:41.733`)
|
||||
- [CVE-2025-12872](CVE-2025/CVE-2025-128xx/CVE-2025-12872.json) (`2025-11-12T08:15:41.970`)
|
||||
- [CVE-2025-13046](CVE-2025/CVE-2025-130xx/CVE-2025-13046.json) (`2025-11-12T08:15:42.170`)
|
||||
- [CVE-2025-13047](CVE-2025/CVE-2025-130xx/CVE-2025-13047.json) (`2025-11-12T08:15:42.433`)
|
||||
|
||||
|
||||
### CVEs modified in the last Commit
|
||||
|
||||
Recently modified CVEs: `0`
|
||||
Recently modified CVEs: `5`
|
||||
|
||||
- [CVE-2022-30228](CVE-2022/CVE-2022-302xx/CVE-2022-30228.json) (`2025-11-12T08:15:37.030`)
|
||||
- [CVE-2022-30229](CVE-2022/CVE-2022-302xx/CVE-2022-30229.json) (`2025-11-12T08:15:39.427`)
|
||||
- [CVE-2022-30230](CVE-2022/CVE-2022-302xx/CVE-2022-30230.json) (`2025-11-12T08:15:39.703`)
|
||||
- [CVE-2022-30231](CVE-2022/CVE-2022-302xx/CVE-2022-30231.json) (`2025-11-12T08:15:39.943`)
|
||||
- [CVE-2022-34464](CVE-2022/CVE-2022-344xx/CVE-2022-34464.json) (`2025-11-12T08:15:40.260`)
|
||||
|
||||
|
||||
## Download and Usage
|
||||
|
||||
+18
-9
@@ -199244,11 +199244,11 @@ CVE-2022-30223,0,0,8165847764696851c5862a8e2854184fe5f2b39d5b1fd0e93bb3cfec39079
|
||||
CVE-2022-30224,0,0,1c3c71ce4764a611650b150bbd9e974dea8978a69e3c590bb5c383ed389fc572,2024-11-21T07:02:23.477000
|
||||
CVE-2022-30225,0,0,4dab6514f6e2220d6a7429fafac7466e581506d3c02728b2aa071cb307a44d8e,2024-11-21T07:02:23.623000
|
||||
CVE-2022-30226,0,0,752e2e1c44ea22a2071df9de4cf58794166a118175f727b9e5f09862bf099d7c,2024-11-21T07:02:23.777000
|
||||
CVE-2022-30228,0,0,b2429ca3afe5145710c48b5e9f788e7a63235af60cdd367a25780ea170cea08c,2024-11-21T07:02:23.917000
|
||||
CVE-2022-30229,0,0,609a3a498626ceb40de0f6a5a59a654fdcd3b036739830246a3e6047558107aa,2024-11-21T07:02:24.027000
|
||||
CVE-2022-30228,0,1,9ebda679bd0b060a07d28dd80d6549e4b5a36dd6c50aa33af0263f6923195f8d,2025-11-12T08:15:37.030000
|
||||
CVE-2022-30229,0,1,7313f5bf770d51bf7276d9016c63cc1dca392db75db674d32d177c510250662a,2025-11-12T08:15:39.427000
|
||||
CVE-2022-3023,0,0,d9e0cb8c500f8f8e73e16d381e7c1ee73c4696b7d9d6bc863970dfebaae19010,2024-11-21T07:18:39.287000
|
||||
CVE-2022-30230,0,0,409027ca2a19a12c919661792ed229d42dafef8bdfe253d84deabb0b4ec30aab,2024-11-21T07:02:24.137000
|
||||
CVE-2022-30231,0,0,994b9cd063958f549e87daa8627ff538703e2413ee31558472748d159819e4c0,2024-11-21T07:02:24.243000
|
||||
CVE-2022-30230,0,1,d9a7da673cf2ac6bde9e809206e084b555ae193018076f1b7ed740f8cd3daacc,2025-11-12T08:15:39.703000
|
||||
CVE-2022-30231,0,1,98fa44835a43a6a3114721301fc5f19cd173c58b18be4e680a1f05c863f0bddd,2025-11-12T08:15:39.943000
|
||||
CVE-2022-30232,0,0,e0b7d101fc44b8873ee4ee004f662191b79059f6954cafe4266ff825777e58b6,2024-11-21T07:02:24.360000
|
||||
CVE-2022-30233,0,0,eaf206007c83760a675ce05b2b5579e4671862997772b2188be68f1a1dd76a05,2024-11-21T07:02:25.277000
|
||||
CVE-2022-30234,0,0,6dde07bf33d979cf2353370cac3e732c058afd1a82657fc80c2b49cc301a4d83,2024-11-21T07:02:25.400000
|
||||
@@ -202662,7 +202662,7 @@ CVE-2022-3446,0,0,dba0d711b78ef71236194d7eecfe0e61db1a675f74a18e2821ba5d4aa4e3b7
|
||||
CVE-2022-34460,0,0,a80a9f35f00dba8775d46c4f4647dd79dce16322f06af64fa5b8161197f486c3,2024-11-21T07:09:36.983000
|
||||
CVE-2022-34461,0,0,0299d6c0f6e05d6d3be8b92ff451c6934afa2052b0157530298098bfc946e8d2,2023-11-07T03:48:43.157000
|
||||
CVE-2022-34462,0,0,1e55ebeea86ea0b3bd37c10514700dec12d3f8df47eae8f1029c857942831d37,2025-05-20T20:15:10.140000
|
||||
CVE-2022-34464,0,0,4e00c17949b4172f88be8703968c9e48828a19c565977ca71f6c66615d17acaa,2024-11-21T07:09:37.340000
|
||||
CVE-2022-34464,0,1,a315f2baf099f3f7ead0b141a9acb9eaf27f2acf832ecdb4826dc307f3cec9c6,2025-11-12T08:15:40.260000
|
||||
CVE-2022-34465,0,0,5b07bee564f6ab4dba2efab52594fe12f368088d2c653e6cb77342e3391c5a53,2024-11-21T07:09:37.473000
|
||||
CVE-2022-34466,0,0,2215dd1dfd86ef1f274dae91c41abf0820f178f983b82d8753f8cbc07cf64bdb,2024-11-21T07:09:37.600000
|
||||
CVE-2022-34467,0,0,d6e1bea5599b3734744b717ef80fdd8ac947afc23240b02550e8c1fa86067c2e,2024-11-21T07:09:37.737000
|
||||
@@ -286890,7 +286890,7 @@ CVE-2025-11556,0,0,922996b3d1c93a3d1e875a0ea35276e7b7fd3c26329b3e9f126b5cecf6c75
|
||||
CVE-2025-11557,0,0,53d54ae12237f8976cfb04aeb6b71143bd4775fa6e16fecac3139570eda2276f,2025-10-20T20:27:14.907000
|
||||
CVE-2025-11558,0,0,f1030d51bfec19909e57fed6c600472aacb2f4b58c8ca5c7c9c9ba63318bd4f3,2025-10-23T20:06:00.793000
|
||||
CVE-2025-1156,0,0,b9d7f43a66be70b99a0c5a29d90bee603b5f0498d98b3e0e919a25713e636c40,2025-02-10T21:15:22.133000
|
||||
CVE-2025-11560,1,1,5a420c4a8d151c9ed11a99ae25e37beee549870bd2806d0af9a76a58dd99627a,2025-11-12T06:15:33.553000
|
||||
CVE-2025-11560,0,0,5a420c4a8d151c9ed11a99ae25e37beee549870bd2806d0af9a76a58dd99627a,2025-11-12T06:15:33.553000
|
||||
CVE-2025-11561,0,0,aac9ed2f0049492a6cf87698a9009e76e101a7bb947637606da3e3ca3b65c6d0,2025-11-12T04:15:41.813000
|
||||
CVE-2025-11564,0,0,5518bd3a217203a635aeaf04dce294a44df774e2b26e248955e3cd3847147920,2025-10-27T13:20:15.637000
|
||||
CVE-2025-11568,0,0,6228fbd93a6a7aa699e15c0e25fe35ea4cbb02a5f5f1acd5f3ebeaa1fd83c676,2025-10-16T15:28:59.610000
|
||||
@@ -287238,6 +287238,7 @@ CVE-2025-12010,0,0,4d47d6fdb82dae26f96cb7e98355d63086fbc44288f99e3d99cf03fcc980a
|
||||
CVE-2025-12014,0,0,e8cc6a0e92aeba8955b875fed929a655c336a6e5bf3eb0c264bf1ba3c48d98d5,2025-10-27T13:20:15.637000
|
||||
CVE-2025-12016,0,0,3c29113f8d43ffdb46f73fa37f9b3bc3445319917f9a3b4d14238e23121ae3ac,2025-10-27T13:20:15.637000
|
||||
CVE-2025-12017,0,0,0874e3e499033a3d4dfd22d251cbf33217720dc7128f29f2940c1f27adccb9d5,2025-10-27T13:20:15.637000
|
||||
CVE-2025-12018,1,1,ca75f2c2876429733dc425ab97f49bcd9a1b2bc4bb6c9058c442b6750f261b18,2025-11-12T08:15:40.590000
|
||||
CVE-2025-12019,0,0,9c54cad48965c5fec2c27283f4dbf4470dae09b4737234b40bc04de334b31bfd,2025-11-11T04:15:45.797000
|
||||
CVE-2025-1202,0,0,145e416d76817c96da29e1ee25f9dd444dc5ef4d95ddc6c06c93503cc4db41a1,2025-02-18T18:02:04.383000
|
||||
CVE-2025-12020,0,0,c3ad30a470246201597754687ab80ab0397f7bb44d11c917dfeb10d2b724de90,2025-11-11T04:15:45.970000
|
||||
@@ -287269,7 +287270,7 @@ CVE-2025-1208,0,0,7d439f27be25af068ee7a5bdbb340ddd01d136ca5376da5fb603abe97482c2
|
||||
CVE-2025-12080,0,0,9366e7b79ea29849d7206d28d29bb901613515ef4e5e5395ea1245883c0060bd,2025-10-27T13:19:49.063000
|
||||
CVE-2025-12082,0,0,10f3458f60d5749a6240ad61fed7b6f68d28ae84858b5c2f3eaa5f20e977ae46,2025-10-30T15:15:35.807000
|
||||
CVE-2025-12083,0,0,c9a5cc788bbe6c971923f7ba3e8b513d3c97c85258a108dd6b5fa5437cb6e4f9,2025-10-30T15:15:35.960000
|
||||
CVE-2025-12087,1,1,da8602947ccd701604e03ff96f390089d1fdfcee793777e62191315c67738cdf,2025-11-12T05:15:39.020000
|
||||
CVE-2025-12087,0,0,da8602947ccd701604e03ff96f390089d1fdfcee793777e62191315c67738cdf,2025-11-12T05:15:39.020000
|
||||
CVE-2025-1209,0,0,73163c928794f026d7174c939dfacce9c8a62bab67c5de9237fcf3ce185d0ff4,2025-02-19T19:04:43.770000
|
||||
CVE-2025-12090,0,0,6802923a493917528d70c28f4d3dac08d3853e2027cd8f5197f9f6f1b98d09fe,2025-11-04T15:41:31.450000
|
||||
CVE-2025-12092,0,0,5f7a8f59cdfa28aea1696fd7dad920f9fd727b942f5e484ef4db6647237bebc6,2025-11-08T10:15:41.143000
|
||||
@@ -287288,6 +287289,7 @@ CVE-2025-12108,0,0,f5c2126824c6919c5e4a095dc59930bda7062d9a1da7be2ad896ac80f3a17
|
||||
CVE-2025-1211,0,0,ed333afb6325a084c131f00ee087aa14b3435cac8d955152c6875f0fc0fc0275,2025-03-16T13:15:36.813000
|
||||
CVE-2025-12110,0,0,c80afae5094ee8cca3370edf3cac3d79851566b5d60ffb1a1b115fe5546cb937,2025-10-27T13:20:33.350000
|
||||
CVE-2025-12112,0,0,6342fa464b85ae5f206f936ca9a40c0ed0fc57f4e325ccb04b5de32d3c62944a,2025-11-08T04:15:44.303000
|
||||
CVE-2025-12113,1,1,b454d8c2456a0ae50a9782fc4b8634a6fc2ffdcf92bb1b1dd973cfc283cd86f2,2025-11-12T08:15:40.850000
|
||||
CVE-2025-12114,0,0,5e86b06f168b3b331ccac030a6088360b8123bbceae40301ba0d207bfeb3d3eb,2025-11-10T15:08:27.637000
|
||||
CVE-2025-12115,0,0,7b929290e0bbbf56e05a740612ad657f73a13306fa0173d8926620a068b34656,2025-11-04T15:41:31.450000
|
||||
CVE-2025-12118,0,0,b6b99c55a4673baebdab7dba05ed42bf55535ab3cb2a1973e68ba787e4f13157,2025-11-04T15:41:31.450000
|
||||
@@ -287647,6 +287649,7 @@ CVE-2025-12623,0,0,23c17e1337fdbeb99459b455e29fd2acb331dcf58649cff7cf6387651e482
|
||||
CVE-2025-12626,0,0,f276b143e1401d6ba4de5aa0a3087fb7ea20c67d12627a1254026e93c517bbae,2025-11-04T15:41:31.450000
|
||||
CVE-2025-12631,0,0,dc3e7576b08b6d7380ad3598af16cd68971129422524f688a544c58a27d2bd3c,2025-11-11T04:15:47.557000
|
||||
CVE-2025-12632,0,0,5c34f9f7fcf2705ec66f28670e1cc6665e7bf20581ad94ecac4aca0c03736c2a,2025-11-11T04:15:47.730000
|
||||
CVE-2025-12633,1,1,9da3c1a411ca9ce2d9d8726eec77e33fb5aa01f8186c2e41b0f8873d6ed524aa,2025-11-12T08:15:41.073000
|
||||
CVE-2025-12636,0,0,fcce88bf44f2af6e253a025b08cdfc6bf86825f7b385798576e12ccf2e287cbd,2025-11-06T23:15:35.693000
|
||||
CVE-2025-12637,0,0,b5087d7c2bedd3f662b2e8dda7066052e6cd4acd40571061639633691b98bdf6,2025-11-11T04:15:47.893000
|
||||
CVE-2025-1264,0,0,28c40552206eb9f5a0b03a9cca8beeb7d7df89ca0a5becb5749e460941f9fd5f,2025-04-07T14:17:50.220000
|
||||
@@ -287707,7 +287710,7 @@ CVE-2025-12815,0,0,f2a9fecaa52901be55f696803952d09bedd901fcfdb47f693ebcf6393f6d9
|
||||
CVE-2025-1282,0,0,09bbe8fbf6ad958ee527dda55af05e43520fd8fabad49e275c5ad8ac54adbc57,2025-03-11T16:08:00.790000
|
||||
CVE-2025-12829,0,0,517b80faac2091bc10e42e8c12ee302dcb4e8effc5d9838dccf9cab5bcaadd56,2025-11-07T19:15:46.130000
|
||||
CVE-2025-1283,0,0,a4d93a77d81ec07731b68bab3e1d00afd05dc0ae7fee050881be213abacce036,2025-04-10T18:55:23.537000
|
||||
CVE-2025-12833,1,1,d535d6e434ba3b5211a5065c72f6aa922a6a81e7b49c960f2278cea51168982d,2025-11-12T05:15:41.940000
|
||||
CVE-2025-12833,0,0,d535d6e434ba3b5211a5065c72f6aa922a6a81e7b49c960f2278cea51168982d,2025-11-12T05:15:41.940000
|
||||
CVE-2025-12837,0,0,e8d9aa17d036cf2c3203741f7328747d892035ede1fa15f5a5aafdb9b60bbb14,2025-11-08T10:15:41.877000
|
||||
CVE-2025-1284,0,0,393272fa917c5d80ef985d32ab805d823a71b31438834e15c90de4305d50626f,2025-04-29T13:52:47.470000
|
||||
CVE-2025-12846,0,0,1a44a6f2ff1a3e4ef267e398abe6540e2d2e965a87b95a93e8f0c4b15b06ad0e,2025-11-11T11:15:35.060000
|
||||
@@ -287729,7 +287732,11 @@ CVE-2025-12865,0,0,84792bbff1f5aedb68cbb8e5c49d56f4b25252448d02e7e732a322d41fd6b
|
||||
CVE-2025-12866,0,0,b66b23a5110dbd7e47dcb50f10c42c4d77ee82d29cb5b299db405873b45990d0,2025-11-10T03:15:42.467000
|
||||
CVE-2025-12867,0,0,7169f130da35a8b987c2b692a9dba1e5292de4ad49711ef675ca31a249f4babb,2025-11-10T04:15:41.360000
|
||||
CVE-2025-12868,0,0,aa197fd44b5bdfe16e34a72f2c0505dbf685b5f32a9b503676f15712811d7796,2025-11-10T04:15:41.563000
|
||||
CVE-2025-12869,1,1,31cc7f2bf4571caab2b2f9f65dc24b9b03d5aef029fa5ee71fb317eebbf8a529,2025-11-12T08:15:41.290000
|
||||
CVE-2025-1287,0,0,a38b4c646fabca7e5d65d4995ba500f7cbac83852f08d2e5f8de89e20d5c98b9,2025-03-24T18:19:22.993000
|
||||
CVE-2025-12870,1,1,d38f59c7db35917ba188e90af60fe7dc926caafe6ebfada961bd091a3b5fc9da,2025-11-12T08:15:41.513000
|
||||
CVE-2025-12871,1,1,48cfd821c8543bf12c62533eb75cd73677ec17a9e4de37a2dc1fe822b8401890,2025-11-12T08:15:41.733000
|
||||
CVE-2025-12872,1,1,24eea2225f79a4d2e8e56c612ff90b14c68590b145dce24e06cd7dd183f76a03,2025-11-12T08:15:41.970000
|
||||
CVE-2025-12873,0,0,af8224d80c8381d3ebba5da50069890a686fc6b964909a9a9b3323c522d37059,2025-11-07T18:15:36
|
||||
CVE-2025-12875,0,0,53015f1e32e63756e487224aeaefc8cf249d3953cb386325c5a9f203e9bd76ca,2025-11-07T21:15:40.557000
|
||||
CVE-2025-1288,0,0,b1965e5e56da9cca6692b046a70ea7d7201f828830785c6cba9490cb387ee949,2025-06-12T16:38:01.743000
|
||||
@@ -287738,7 +287745,7 @@ CVE-2025-1289,0,0,b0793d3587db9bc904bde95560edd5ad7000e4cca6cb15269282d500aec76a
|
||||
CVE-2025-12890,0,0,17ab10aad42589e76029eb31d7b0852b665013a676ea3b8802e8983b82745718,2025-11-07T19:15:46.343000
|
||||
CVE-2025-12896,0,0,bbbe73b22f4921b9c0d9e7a886ac3ee77c029b540a5f442550b18b65389a6ef8,2025-11-07T21:15:40.750000
|
||||
CVE-2025-1290,0,0,70f64af7173fdd5eaa8c3bb12bbb9a202f3a61f363cc002adcadb414d2e25ec9,2025-07-11T13:55:52.760000
|
||||
CVE-2025-12901,1,1,e1aad4657616fb7222ef99c7ab26237605bec91abd1eb6058cd7b5cd1763eeac,2025-11-12T05:15:43.787000
|
||||
CVE-2025-12901,0,0,e1aad4657616fb7222ef99c7ab26237605bec91abd1eb6058cd7b5cd1763eeac,2025-11-12T05:15:43.787000
|
||||
CVE-2025-12902,0,0,a6b3237a13c2876e723bb3050b418ae6366613eafca99c656ef553bec0bb5d41,2025-11-07T21:15:40.927000
|
||||
CVE-2025-12905,0,0,86ec2d3224eaff3940e604e00fb06d5463489f5df3dbcc22547a88cad85d9ab0,2025-11-10T16:15:43.447000
|
||||
CVE-2025-12906,0,0,c3f6e07e42744527b97fe81ceecdc45462fc0e0a415e9fcf8c1c4b358ff712be,2025-11-10T16:15:43.607000
|
||||
@@ -287807,6 +287814,8 @@ CVE-2025-13027,0,0,d61c353eb62c4500a223dc7643173d05525cbe28c1983f3512e6853c87819
|
||||
CVE-2025-1303,0,0,77f6e0e2e908dd99b19f92d02615f45188adee7d0a527ba2e05ee367340954fa,2025-08-01T01:58:31.323000
|
||||
CVE-2025-13032,0,0,5204316d545cc62899bef2a338497bb17d8d5a50fcc0091867520216f6456f51,2025-11-11T17:15:39.700000
|
||||
CVE-2025-1304,0,0,19e272dd5c37445f8582e9faeec74dfd955b4d0ec48e945f5531dcff91a0acdc,2025-05-06T15:38:17.380000
|
||||
CVE-2025-13046,1,1,20b34d2f1ad3ee17f149b20614efe4e327ec025e96813095f8f9a280631279a2,2025-11-12T08:15:42.170000
|
||||
CVE-2025-13047,1,1,36f5dc9ed542918062442b5066d4bd581f88a38e822bbf3a3cd4c5e91f295eb8,2025-11-12T08:15:42.433000
|
||||
CVE-2025-1305,0,0,69ffedca9ae25327ab642cff1223fc450ea93b4a540021dd3ca51c4288d01232,2025-05-06T15:38:55.647000
|
||||
CVE-2025-1306,0,0,de526cacf8bf273c9432977eceb9f985b41588e9255fe87d024d0d9921890929,2025-03-05T18:45:32.943000
|
||||
CVE-2025-1307,0,0,f5a65a0d70e64918e5c1a7d1d02a502ae3db9a76fffe081c38f2a5d059c1eb26,2025-03-05T13:55:29.927000
|
||||
|
||||
|
Can't render this file because it is too large.
|
Reference in new issue
Block a user