diff --git a/CVE-2022/CVE-2022-302xx/CVE-2022-30228.json b/CVE-2022/CVE-2022-302xx/CVE-2022-30228.json index faafbd9900e..4ed64557003 100644 --- a/CVE-2022/CVE-2022-302xx/CVE-2022-30228.json +++ b/CVE-2022/CVE-2022-302xx/CVE-2022-30228.json @@ -2,13 +2,13 @@ "id": "CVE-2022-30228", "sourceIdentifier": "productcert@siemens.com", "published": "2022-06-14T10:15:20.267", - "lastModified": "2024-11-21T07:02:23.917", + "lastModified": "2025-11-12T08:15:37.030", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed." + "value": "A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed." }, { "lang": "es", @@ -16,10 +16,74 @@ } ], "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], "cvssMetricV31": [ { - "source": "nvd@nist.gov", + "source": "productcert@siemens.com", "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + }, + { + "source": "nvd@nist.gov", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", @@ -123,6 +187,10 @@ } ], "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-631336.html", + "source": "productcert@siemens.com" + }, { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf", "source": "productcert@siemens.com", diff --git a/CVE-2022/CVE-2022-302xx/CVE-2022-30229.json b/CVE-2022/CVE-2022-302xx/CVE-2022-30229.json index b996045b710..26ca981e2fe 100644 --- a/CVE-2022/CVE-2022-302xx/CVE-2022-30229.json +++ b/CVE-2022/CVE-2022-302xx/CVE-2022-30229.json @@ -2,13 +2,13 @@ "id": "CVE-2022-30229", "sourceIdentifier": "productcert@siemens.com", "published": "2022-06-14T10:15:20.320", - "lastModified": "2024-11-21T07:02:24.027", + "lastModified": "2025-11-12T08:15:39.427", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of an user, such as credentials, in case that user's id is known." + "value": "A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, such as credentials, in case that user's id is known." }, { "lang": "es", @@ -16,10 +16,74 @@ } ], "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], "cvssMetricV31": [ { - "source": "nvd@nist.gov", + "source": "productcert@siemens.com", "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + }, + { + "source": "nvd@nist.gov", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", @@ -123,6 +187,10 @@ } ], "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-631336.html", + "source": "productcert@siemens.com" + }, { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf", "source": "productcert@siemens.com", diff --git a/CVE-2022/CVE-2022-302xx/CVE-2022-30230.json b/CVE-2022/CVE-2022-302xx/CVE-2022-30230.json index 052c0d24a8f..9e9eb2ad7eb 100644 --- a/CVE-2022/CVE-2022-302xx/CVE-2022-30230.json +++ b/CVE-2022/CVE-2022-302xx/CVE-2022-30230.json @@ -2,13 +2,13 @@ "id": "CVE-2022-30230", "sourceIdentifier": "productcert@siemens.com", "published": "2022-06-14T10:15:20.377", - "lastModified": "2024-11-21T07:02:24.137", + "lastModified": "2025-11-12T08:15:39.703", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions." + "value": "A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions." }, { "lang": "es", @@ -16,9 +16,53 @@ } ], "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], "cvssMetricV31": [ { - "source": "nvd@nist.gov", + "source": "productcert@siemens.com", "type": "Primary", "cvssData": { "version": "3.1", @@ -36,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.9 + }, + { + "source": "nvd@nist.gov", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -123,6 +187,10 @@ } ], "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-631336.html", + "source": "productcert@siemens.com" + }, { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf", "source": "productcert@siemens.com", diff --git a/CVE-2022/CVE-2022-302xx/CVE-2022-30231.json b/CVE-2022/CVE-2022-302xx/CVE-2022-30231.json index 20367b458e0..4f6fc5952e9 100644 --- a/CVE-2022/CVE-2022-302xx/CVE-2022-30231.json +++ b/CVE-2022/CVE-2022-302xx/CVE-2022-30231.json @@ -2,13 +2,13 @@ "id": "CVE-2022-30231", "sourceIdentifier": "productcert@siemens.com", "published": "2022-06-14T10:15:20.433", - "lastModified": "2024-11-21T07:02:24.243", + "lastModified": "2025-11-12T08:15:39.943", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another users password hash." + "value": "A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user's password hash." }, { "lang": "es", @@ -16,10 +16,74 @@ } ], "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], "cvssMetricV31": [ { - "source": "nvd@nist.gov", + "source": "productcert@siemens.com", "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.6 + }, + { + "source": "nvd@nist.gov", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", @@ -123,6 +187,10 @@ } ], "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-631336.html", + "source": "productcert@siemens.com" + }, { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf", "source": "productcert@siemens.com", diff --git a/CVE-2022/CVE-2022-344xx/CVE-2022-34464.json b/CVE-2022/CVE-2022-344xx/CVE-2022-34464.json index 7026295a960..d3f493999ab 100644 --- a/CVE-2022/CVE-2022-344xx/CVE-2022-34464.json +++ b/CVE-2022/CVE-2022-344xx/CVE-2022-34464.json @@ -2,13 +2,13 @@ "id": "CVE-2022-34464", "sourceIdentifier": "productcert@siemens.com", "published": "2022-07-12T10:15:11.983", - "lastModified": "2024-11-21T07:09:37.340", + "lastModified": "2025-11-12T08:15:40.260", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions), SICAM GridEdge Essential Intel (All versions < V2.7.3), SICAM GridEdge Essential with GDS ARM (All versions), SICAM GridEdge Essential with GDS Intel (All versions < V2.7.3). Affected software uses an improperly protected file to import SSH keys. Attackers with access to the filesystem of the host on which SICAM GridEdge runs, are able to inject a custom SSH key to that file." + "value": "A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.7.3). The affected application uses an improperly protected file to import SSH keys. This could allow attackers with access to the filesystem of the host on which SICAM GridEdge runs to inject a custom SSH key to that file." }, { "lang": "es", @@ -16,10 +16,74 @@ } ], "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], "cvssMetricV31": [ { - "source": "nvd@nist.gov", + "source": "productcert@siemens.com", "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", @@ -67,17 +131,17 @@ "weaknesses": [ { "source": "productcert@siemens.com", - "type": "Secondary", + "type": "Primary", "description": [ { "lang": "en", - "value": "CWE-668" + "value": "CWE-552" } ] }, { "source": "nvd@nist.gov", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -121,6 +185,10 @@ } ], "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-225578.html", + "source": "productcert@siemens.com" + }, { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-225578.pdf", "source": "productcert@siemens.com", diff --git a/CVE-2025/CVE-2025-120xx/CVE-2025-12018.json b/CVE-2025/CVE-2025-120xx/CVE-2025-12018.json new file mode 100644 index 00000000000..53ce5601670 --- /dev/null +++ b/CVE-2025/CVE-2025-120xx/CVE-2025-12018.json @@ -0,0 +1,76 @@ +{ + "id": "CVE-2025-12018", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-11-12T08:15:40.590", + "lastModified": "2025-11-12T08:15:40.590", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The MembershipWorks \u2013 Membership, Events & Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 6.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 4.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.3, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/zast-ai/vulnerability-reports/blob/main/wordpress/plugin/memberfindme/stored-xss.md", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/memberfindme/tags/6.14/memberfindme.php#L103", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/memberfindme/tags/6.14/memberfindme.php#L437", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3393026%40memberfindme&new=3393026%40memberfindme&sfp_email=&sfph_mail=", + "source": "security@wordfence.com" + }, + { + "url": "https://wordpress.org/plugins/memberfindme/", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7cd412d8-6d14-4803-aae6-087e02f9d75f?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-121xx/CVE-2025-12113.json b/CVE-2025/CVE-2025-121xx/CVE-2025-12113.json new file mode 100644 index 00000000000..f6684d8b533 --- /dev/null +++ b/CVE-2025/CVE-2025-121xx/CVE-2025-12113.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-12113", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-11-12T08:15:40.850", + "lastModified": "2025-11-12T08:15:40.850", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Alt Text Generator AI \u2013 Auto Generate & Bulk Update Alt Texts For Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the atgai_delete_api_key() function in all versions up to, and including, 1.8.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the API key connected to the site." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3390619%40alt-text-generator&new=3390619%40alt-text-generator&sfp_email=&sfph_mail=", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5309e891-ced1-496f-8ee5-c089a91a7666?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-126xx/CVE-2025-12633.json b/CVE-2025/CVE-2025-126xx/CVE-2025-12633.json new file mode 100644 index 00000000000..198fe1ce7ed --- /dev/null +++ b/CVE-2025/CVE-2025-126xx/CVE-2025-12633.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-12633", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-11-12T08:15:41.073", + "lastModified": "2025-11-12T08:15:41.073", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bookit/v1/commerce/stripe/return' REST API Endpoint in all versions up to, and including, 2.5.0. This makes it possible for unauthenticated attackers to connect their Stripe account and receive payments." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/changeset/3393159/bookit/tags/2.5.1/src/Bookit/Gateways/StripeConnect/REST/Return_Endpoint.php?old=3121677&old_path=bookit%2Ftags%2F2.5.0%2Fsrc%2FBookit%2FGateways%2FStripeConnect%2FREST%2FReturn_Endpoint.php", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2263d356-b2ed-4e16-98ee-b01d4274d1d9?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12869.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12869.json new file mode 100644 index 00000000000..653ae6efef8 --- /dev/null +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12869.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-12869", + "sourceIdentifier": "twcert@cert.org.tw", + "published": "2025-11-12T08:15:41.290", + "lastModified": "2025-11-12T08:15:41.290", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administrator privileges to inject persistent JavaScript codes that are executed in users' browsers upon page load." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "twcert@cert.org.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.twcert.org.tw/en/cp-139-10487-12a32-2.html", + "source": "twcert@cert.org.tw" + }, + { + "url": "https://www.twcert.org.tw/tw/cp-132-10486-a3459-1.html", + "source": "twcert@cert.org.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12870.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12870.json new file mode 100644 index 00000000000..1c99b5d89ac --- /dev/null +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12870.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-12870", + "sourceIdentifier": "twcert@cert.org.tw", + "published": "2025-11-12T08:15:41.513", + "lastModified": "2025-11-12T08:15:41.513", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "twcert@cert.org.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-1390" + } + ] + } + ], + "references": [ + { + "url": "https://www.twcert.org.tw/en/cp-139-10487-12a32-2.html", + "source": "twcert@cert.org.tw" + }, + { + "url": "https://www.twcert.org.tw/tw/cp-132-10486-a3459-1.html", + "source": "twcert@cert.org.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12871.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12871.json new file mode 100644 index 00000000000..45d2e3b1993 --- /dev/null +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12871.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-12871", + "sourceIdentifier": "twcert@cert.org.tw", + "published": "2025-11-12T08:15:41.733", + "lastModified": "2025-11-12T08:15:41.733", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "twcert@cert.org.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-1390" + } + ] + } + ], + "references": [ + { + "url": "https://www.twcert.org.tw/en/cp-139-10487-12a32-2.html", + "source": "twcert@cert.org.tw" + }, + { + "url": "https://www.twcert.org.tw/tw/cp-132-10486-a3459-1.html", + "source": "twcert@cert.org.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12872.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12872.json new file mode 100644 index 00000000000..b78acf37ecf --- /dev/null +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12872.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-12872", + "sourceIdentifier": "twcert@cert.org.tw", + "published": "2025-11-12T08:15:41.970", + "lastModified": "2025-11-12T08:15:41.970", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to upload files containing malicious JavaScript code, which will execute on the client side when a user is tricked into visiting a specific URL." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "twcert@cert.org.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.twcert.org.tw/en/cp-139-10487-12a32-2.html", + "source": "twcert@cert.org.tw" + }, + { + "url": "https://www.twcert.org.tw/tw/cp-132-10486-a3459-1.html", + "source": "twcert@cert.org.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13046.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13046.json new file mode 100644 index 00000000000..dfb9160d859 --- /dev/null +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13046.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-13046", + "sourceIdentifier": "twcert@cert.org.tw", + "published": "2025-11-12T08:15:42.170", + "lastModified": "2025-11-12T08:15:42.170", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "twcert@cert.org.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://www.twcert.org.tw/en/cp-139-10499-15678-2.html", + "source": "twcert@cert.org.tw" + }, + { + "url": "https://www.twcert.org.tw/tw/cp-132-10498-61fa4-1.html", + "source": "twcert@cert.org.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13047.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13047.json new file mode 100644 index 00000000000..f2b5de906f2 --- /dev/null +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13047.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-13047", + "sourceIdentifier": "twcert@cert.org.tw", + "published": "2025-11-12T08:15:42.433", + "lastModified": "2025-11-12T08:15:42.433", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "twcert@cert.org.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://www.twcert.org.tw/en/cp-139-10499-15678-2.html", + "source": "twcert@cert.org.tw" + }, + { + "url": "https://www.twcert.org.tw/tw/cp-132-10498-61fa4-1.html", + "source": "twcert@cert.org.tw" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 778f13eb580..c3750b6773c 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-12T07:00:11.920096+00:00 +2025-11-12T09:00:11.412899+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-12T06:15:33.553000+00:00 +2025-11-12T08:15:42.433000+00:00 ``` ### Last Data Feed Release @@ -33,23 +33,33 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -317867 +317876 ``` ### CVEs added in the last Commit -Recently added CVEs: `4` +Recently added CVEs: `9` -- [CVE-2025-11560](CVE-2025/CVE-2025-115xx/CVE-2025-11560.json) (`2025-11-12T06:15:33.553`) -- [CVE-2025-12087](CVE-2025/CVE-2025-120xx/CVE-2025-12087.json) (`2025-11-12T05:15:39.020`) -- [CVE-2025-12833](CVE-2025/CVE-2025-128xx/CVE-2025-12833.json) (`2025-11-12T05:15:41.940`) -- [CVE-2025-12901](CVE-2025/CVE-2025-129xx/CVE-2025-12901.json) (`2025-11-12T05:15:43.787`) +- [CVE-2025-12018](CVE-2025/CVE-2025-120xx/CVE-2025-12018.json) (`2025-11-12T08:15:40.590`) +- [CVE-2025-12113](CVE-2025/CVE-2025-121xx/CVE-2025-12113.json) (`2025-11-12T08:15:40.850`) +- [CVE-2025-12633](CVE-2025/CVE-2025-126xx/CVE-2025-12633.json) (`2025-11-12T08:15:41.073`) +- [CVE-2025-12869](CVE-2025/CVE-2025-128xx/CVE-2025-12869.json) (`2025-11-12T08:15:41.290`) +- [CVE-2025-12870](CVE-2025/CVE-2025-128xx/CVE-2025-12870.json) (`2025-11-12T08:15:41.513`) +- [CVE-2025-12871](CVE-2025/CVE-2025-128xx/CVE-2025-12871.json) (`2025-11-12T08:15:41.733`) +- [CVE-2025-12872](CVE-2025/CVE-2025-128xx/CVE-2025-12872.json) (`2025-11-12T08:15:41.970`) +- [CVE-2025-13046](CVE-2025/CVE-2025-130xx/CVE-2025-13046.json) (`2025-11-12T08:15:42.170`) +- [CVE-2025-13047](CVE-2025/CVE-2025-130xx/CVE-2025-13047.json) (`2025-11-12T08:15:42.433`) ### CVEs modified in the last Commit -Recently modified CVEs: `0` +Recently modified CVEs: `5` +- [CVE-2022-30228](CVE-2022/CVE-2022-302xx/CVE-2022-30228.json) (`2025-11-12T08:15:37.030`) +- [CVE-2022-30229](CVE-2022/CVE-2022-302xx/CVE-2022-30229.json) (`2025-11-12T08:15:39.427`) +- [CVE-2022-30230](CVE-2022/CVE-2022-302xx/CVE-2022-30230.json) (`2025-11-12T08:15:39.703`) +- [CVE-2022-30231](CVE-2022/CVE-2022-302xx/CVE-2022-30231.json) (`2025-11-12T08:15:39.943`) +- [CVE-2022-34464](CVE-2022/CVE-2022-344xx/CVE-2022-34464.json) (`2025-11-12T08:15:40.260`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 19f1204f0f5..d9a89a496fd 100644 --- a/_state.csv +++ b/_state.csv @@ -199244,11 +199244,11 @@ CVE-2022-30223,0,0,8165847764696851c5862a8e2854184fe5f2b39d5b1fd0e93bb3cfec39079 CVE-2022-30224,0,0,1c3c71ce4764a611650b150bbd9e974dea8978a69e3c590bb5c383ed389fc572,2024-11-21T07:02:23.477000 CVE-2022-30225,0,0,4dab6514f6e2220d6a7429fafac7466e581506d3c02728b2aa071cb307a44d8e,2024-11-21T07:02:23.623000 CVE-2022-30226,0,0,752e2e1c44ea22a2071df9de4cf58794166a118175f727b9e5f09862bf099d7c,2024-11-21T07:02:23.777000 -CVE-2022-30228,0,0,b2429ca3afe5145710c48b5e9f788e7a63235af60cdd367a25780ea170cea08c,2024-11-21T07:02:23.917000 -CVE-2022-30229,0,0,609a3a498626ceb40de0f6a5a59a654fdcd3b036739830246a3e6047558107aa,2024-11-21T07:02:24.027000 +CVE-2022-30228,0,1,9ebda679bd0b060a07d28dd80d6549e4b5a36dd6c50aa33af0263f6923195f8d,2025-11-12T08:15:37.030000 +CVE-2022-30229,0,1,7313f5bf770d51bf7276d9016c63cc1dca392db75db674d32d177c510250662a,2025-11-12T08:15:39.427000 CVE-2022-3023,0,0,d9e0cb8c500f8f8e73e16d381e7c1ee73c4696b7d9d6bc863970dfebaae19010,2024-11-21T07:18:39.287000 -CVE-2022-30230,0,0,409027ca2a19a12c919661792ed229d42dafef8bdfe253d84deabb0b4ec30aab,2024-11-21T07:02:24.137000 -CVE-2022-30231,0,0,994b9cd063958f549e87daa8627ff538703e2413ee31558472748d159819e4c0,2024-11-21T07:02:24.243000 +CVE-2022-30230,0,1,d9a7da673cf2ac6bde9e809206e084b555ae193018076f1b7ed740f8cd3daacc,2025-11-12T08:15:39.703000 +CVE-2022-30231,0,1,98fa44835a43a6a3114721301fc5f19cd173c58b18be4e680a1f05c863f0bddd,2025-11-12T08:15:39.943000 CVE-2022-30232,0,0,e0b7d101fc44b8873ee4ee004f662191b79059f6954cafe4266ff825777e58b6,2024-11-21T07:02:24.360000 CVE-2022-30233,0,0,eaf206007c83760a675ce05b2b5579e4671862997772b2188be68f1a1dd76a05,2024-11-21T07:02:25.277000 CVE-2022-30234,0,0,6dde07bf33d979cf2353370cac3e732c058afd1a82657fc80c2b49cc301a4d83,2024-11-21T07:02:25.400000 @@ -202662,7 +202662,7 @@ CVE-2022-3446,0,0,dba0d711b78ef71236194d7eecfe0e61db1a675f74a18e2821ba5d4aa4e3b7 CVE-2022-34460,0,0,a80a9f35f00dba8775d46c4f4647dd79dce16322f06af64fa5b8161197f486c3,2024-11-21T07:09:36.983000 CVE-2022-34461,0,0,0299d6c0f6e05d6d3be8b92ff451c6934afa2052b0157530298098bfc946e8d2,2023-11-07T03:48:43.157000 CVE-2022-34462,0,0,1e55ebeea86ea0b3bd37c10514700dec12d3f8df47eae8f1029c857942831d37,2025-05-20T20:15:10.140000 -CVE-2022-34464,0,0,4e00c17949b4172f88be8703968c9e48828a19c565977ca71f6c66615d17acaa,2024-11-21T07:09:37.340000 +CVE-2022-34464,0,1,a315f2baf099f3f7ead0b141a9acb9eaf27f2acf832ecdb4826dc307f3cec9c6,2025-11-12T08:15:40.260000 CVE-2022-34465,0,0,5b07bee564f6ab4dba2efab52594fe12f368088d2c653e6cb77342e3391c5a53,2024-11-21T07:09:37.473000 CVE-2022-34466,0,0,2215dd1dfd86ef1f274dae91c41abf0820f178f983b82d8753f8cbc07cf64bdb,2024-11-21T07:09:37.600000 CVE-2022-34467,0,0,d6e1bea5599b3734744b717ef80fdd8ac947afc23240b02550e8c1fa86067c2e,2024-11-21T07:09:37.737000 @@ -286890,7 +286890,7 @@ CVE-2025-11556,0,0,922996b3d1c93a3d1e875a0ea35276e7b7fd3c26329b3e9f126b5cecf6c75 CVE-2025-11557,0,0,53d54ae12237f8976cfb04aeb6b71143bd4775fa6e16fecac3139570eda2276f,2025-10-20T20:27:14.907000 CVE-2025-11558,0,0,f1030d51bfec19909e57fed6c600472aacb2f4b58c8ca5c7c9c9ba63318bd4f3,2025-10-23T20:06:00.793000 CVE-2025-1156,0,0,b9d7f43a66be70b99a0c5a29d90bee603b5f0498d98b3e0e919a25713e636c40,2025-02-10T21:15:22.133000 -CVE-2025-11560,1,1,5a420c4a8d151c9ed11a99ae25e37beee549870bd2806d0af9a76a58dd99627a,2025-11-12T06:15:33.553000 +CVE-2025-11560,0,0,5a420c4a8d151c9ed11a99ae25e37beee549870bd2806d0af9a76a58dd99627a,2025-11-12T06:15:33.553000 CVE-2025-11561,0,0,aac9ed2f0049492a6cf87698a9009e76e101a7bb947637606da3e3ca3b65c6d0,2025-11-12T04:15:41.813000 CVE-2025-11564,0,0,5518bd3a217203a635aeaf04dce294a44df774e2b26e248955e3cd3847147920,2025-10-27T13:20:15.637000 CVE-2025-11568,0,0,6228fbd93a6a7aa699e15c0e25fe35ea4cbb02a5f5f1acd5f3ebeaa1fd83c676,2025-10-16T15:28:59.610000 @@ -287238,6 +287238,7 @@ CVE-2025-12010,0,0,4d47d6fdb82dae26f96cb7e98355d63086fbc44288f99e3d99cf03fcc980a CVE-2025-12014,0,0,e8cc6a0e92aeba8955b875fed929a655c336a6e5bf3eb0c264bf1ba3c48d98d5,2025-10-27T13:20:15.637000 CVE-2025-12016,0,0,3c29113f8d43ffdb46f73fa37f9b3bc3445319917f9a3b4d14238e23121ae3ac,2025-10-27T13:20:15.637000 CVE-2025-12017,0,0,0874e3e499033a3d4dfd22d251cbf33217720dc7128f29f2940c1f27adccb9d5,2025-10-27T13:20:15.637000 +CVE-2025-12018,1,1,ca75f2c2876429733dc425ab97f49bcd9a1b2bc4bb6c9058c442b6750f261b18,2025-11-12T08:15:40.590000 CVE-2025-12019,0,0,9c54cad48965c5fec2c27283f4dbf4470dae09b4737234b40bc04de334b31bfd,2025-11-11T04:15:45.797000 CVE-2025-1202,0,0,145e416d76817c96da29e1ee25f9dd444dc5ef4d95ddc6c06c93503cc4db41a1,2025-02-18T18:02:04.383000 CVE-2025-12020,0,0,c3ad30a470246201597754687ab80ab0397f7bb44d11c917dfeb10d2b724de90,2025-11-11T04:15:45.970000 @@ -287269,7 +287270,7 @@ CVE-2025-1208,0,0,7d439f27be25af068ee7a5bdbb340ddd01d136ca5376da5fb603abe97482c2 CVE-2025-12080,0,0,9366e7b79ea29849d7206d28d29bb901613515ef4e5e5395ea1245883c0060bd,2025-10-27T13:19:49.063000 CVE-2025-12082,0,0,10f3458f60d5749a6240ad61fed7b6f68d28ae84858b5c2f3eaa5f20e977ae46,2025-10-30T15:15:35.807000 CVE-2025-12083,0,0,c9a5cc788bbe6c971923f7ba3e8b513d3c97c85258a108dd6b5fa5437cb6e4f9,2025-10-30T15:15:35.960000 -CVE-2025-12087,1,1,da8602947ccd701604e03ff96f390089d1fdfcee793777e62191315c67738cdf,2025-11-12T05:15:39.020000 +CVE-2025-12087,0,0,da8602947ccd701604e03ff96f390089d1fdfcee793777e62191315c67738cdf,2025-11-12T05:15:39.020000 CVE-2025-1209,0,0,73163c928794f026d7174c939dfacce9c8a62bab67c5de9237fcf3ce185d0ff4,2025-02-19T19:04:43.770000 CVE-2025-12090,0,0,6802923a493917528d70c28f4d3dac08d3853e2027cd8f5197f9f6f1b98d09fe,2025-11-04T15:41:31.450000 CVE-2025-12092,0,0,5f7a8f59cdfa28aea1696fd7dad920f9fd727b942f5e484ef4db6647237bebc6,2025-11-08T10:15:41.143000 @@ -287288,6 +287289,7 @@ CVE-2025-12108,0,0,f5c2126824c6919c5e4a095dc59930bda7062d9a1da7be2ad896ac80f3a17 CVE-2025-1211,0,0,ed333afb6325a084c131f00ee087aa14b3435cac8d955152c6875f0fc0fc0275,2025-03-16T13:15:36.813000 CVE-2025-12110,0,0,c80afae5094ee8cca3370edf3cac3d79851566b5d60ffb1a1b115fe5546cb937,2025-10-27T13:20:33.350000 CVE-2025-12112,0,0,6342fa464b85ae5f206f936ca9a40c0ed0fc57f4e325ccb04b5de32d3c62944a,2025-11-08T04:15:44.303000 +CVE-2025-12113,1,1,b454d8c2456a0ae50a9782fc4b8634a6fc2ffdcf92bb1b1dd973cfc283cd86f2,2025-11-12T08:15:40.850000 CVE-2025-12114,0,0,5e86b06f168b3b331ccac030a6088360b8123bbceae40301ba0d207bfeb3d3eb,2025-11-10T15:08:27.637000 CVE-2025-12115,0,0,7b929290e0bbbf56e05a740612ad657f73a13306fa0173d8926620a068b34656,2025-11-04T15:41:31.450000 CVE-2025-12118,0,0,b6b99c55a4673baebdab7dba05ed42bf55535ab3cb2a1973e68ba787e4f13157,2025-11-04T15:41:31.450000 @@ -287647,6 +287649,7 @@ CVE-2025-12623,0,0,23c17e1337fdbeb99459b455e29fd2acb331dcf58649cff7cf6387651e482 CVE-2025-12626,0,0,f276b143e1401d6ba4de5aa0a3087fb7ea20c67d12627a1254026e93c517bbae,2025-11-04T15:41:31.450000 CVE-2025-12631,0,0,dc3e7576b08b6d7380ad3598af16cd68971129422524f688a544c58a27d2bd3c,2025-11-11T04:15:47.557000 CVE-2025-12632,0,0,5c34f9f7fcf2705ec66f28670e1cc6665e7bf20581ad94ecac4aca0c03736c2a,2025-11-11T04:15:47.730000 +CVE-2025-12633,1,1,9da3c1a411ca9ce2d9d8726eec77e33fb5aa01f8186c2e41b0f8873d6ed524aa,2025-11-12T08:15:41.073000 CVE-2025-12636,0,0,fcce88bf44f2af6e253a025b08cdfc6bf86825f7b385798576e12ccf2e287cbd,2025-11-06T23:15:35.693000 CVE-2025-12637,0,0,b5087d7c2bedd3f662b2e8dda7066052e6cd4acd40571061639633691b98bdf6,2025-11-11T04:15:47.893000 CVE-2025-1264,0,0,28c40552206eb9f5a0b03a9cca8beeb7d7df89ca0a5becb5749e460941f9fd5f,2025-04-07T14:17:50.220000 @@ -287707,7 +287710,7 @@ CVE-2025-12815,0,0,f2a9fecaa52901be55f696803952d09bedd901fcfdb47f693ebcf6393f6d9 CVE-2025-1282,0,0,09bbe8fbf6ad958ee527dda55af05e43520fd8fabad49e275c5ad8ac54adbc57,2025-03-11T16:08:00.790000 CVE-2025-12829,0,0,517b80faac2091bc10e42e8c12ee302dcb4e8effc5d9838dccf9cab5bcaadd56,2025-11-07T19:15:46.130000 CVE-2025-1283,0,0,a4d93a77d81ec07731b68bab3e1d00afd05dc0ae7fee050881be213abacce036,2025-04-10T18:55:23.537000 -CVE-2025-12833,1,1,d535d6e434ba3b5211a5065c72f6aa922a6a81e7b49c960f2278cea51168982d,2025-11-12T05:15:41.940000 +CVE-2025-12833,0,0,d535d6e434ba3b5211a5065c72f6aa922a6a81e7b49c960f2278cea51168982d,2025-11-12T05:15:41.940000 CVE-2025-12837,0,0,e8d9aa17d036cf2c3203741f7328747d892035ede1fa15f5a5aafdb9b60bbb14,2025-11-08T10:15:41.877000 CVE-2025-1284,0,0,393272fa917c5d80ef985d32ab805d823a71b31438834e15c90de4305d50626f,2025-04-29T13:52:47.470000 CVE-2025-12846,0,0,1a44a6f2ff1a3e4ef267e398abe6540e2d2e965a87b95a93e8f0c4b15b06ad0e,2025-11-11T11:15:35.060000 @@ -287729,7 +287732,11 @@ CVE-2025-12865,0,0,84792bbff1f5aedb68cbb8e5c49d56f4b25252448d02e7e732a322d41fd6b CVE-2025-12866,0,0,b66b23a5110dbd7e47dcb50f10c42c4d77ee82d29cb5b299db405873b45990d0,2025-11-10T03:15:42.467000 CVE-2025-12867,0,0,7169f130da35a8b987c2b692a9dba1e5292de4ad49711ef675ca31a249f4babb,2025-11-10T04:15:41.360000 CVE-2025-12868,0,0,aa197fd44b5bdfe16e34a72f2c0505dbf685b5f32a9b503676f15712811d7796,2025-11-10T04:15:41.563000 +CVE-2025-12869,1,1,31cc7f2bf4571caab2b2f9f65dc24b9b03d5aef029fa5ee71fb317eebbf8a529,2025-11-12T08:15:41.290000 CVE-2025-1287,0,0,a38b4c646fabca7e5d65d4995ba500f7cbac83852f08d2e5f8de89e20d5c98b9,2025-03-24T18:19:22.993000 +CVE-2025-12870,1,1,d38f59c7db35917ba188e90af60fe7dc926caafe6ebfada961bd091a3b5fc9da,2025-11-12T08:15:41.513000 +CVE-2025-12871,1,1,48cfd821c8543bf12c62533eb75cd73677ec17a9e4de37a2dc1fe822b8401890,2025-11-12T08:15:41.733000 +CVE-2025-12872,1,1,24eea2225f79a4d2e8e56c612ff90b14c68590b145dce24e06cd7dd183f76a03,2025-11-12T08:15:41.970000 CVE-2025-12873,0,0,af8224d80c8381d3ebba5da50069890a686fc6b964909a9a9b3323c522d37059,2025-11-07T18:15:36 CVE-2025-12875,0,0,53015f1e32e63756e487224aeaefc8cf249d3953cb386325c5a9f203e9bd76ca,2025-11-07T21:15:40.557000 CVE-2025-1288,0,0,b1965e5e56da9cca6692b046a70ea7d7201f828830785c6cba9490cb387ee949,2025-06-12T16:38:01.743000 @@ -287738,7 +287745,7 @@ CVE-2025-1289,0,0,b0793d3587db9bc904bde95560edd5ad7000e4cca6cb15269282d500aec76a CVE-2025-12890,0,0,17ab10aad42589e76029eb31d7b0852b665013a676ea3b8802e8983b82745718,2025-11-07T19:15:46.343000 CVE-2025-12896,0,0,bbbe73b22f4921b9c0d9e7a886ac3ee77c029b540a5f442550b18b65389a6ef8,2025-11-07T21:15:40.750000 CVE-2025-1290,0,0,70f64af7173fdd5eaa8c3bb12bbb9a202f3a61f363cc002adcadb414d2e25ec9,2025-07-11T13:55:52.760000 -CVE-2025-12901,1,1,e1aad4657616fb7222ef99c7ab26237605bec91abd1eb6058cd7b5cd1763eeac,2025-11-12T05:15:43.787000 +CVE-2025-12901,0,0,e1aad4657616fb7222ef99c7ab26237605bec91abd1eb6058cd7b5cd1763eeac,2025-11-12T05:15:43.787000 CVE-2025-12902,0,0,a6b3237a13c2876e723bb3050b418ae6366613eafca99c656ef553bec0bb5d41,2025-11-07T21:15:40.927000 CVE-2025-12905,0,0,86ec2d3224eaff3940e604e00fb06d5463489f5df3dbcc22547a88cad85d9ab0,2025-11-10T16:15:43.447000 CVE-2025-12906,0,0,c3f6e07e42744527b97fe81ceecdc45462fc0e0a415e9fcf8c1c4b358ff712be,2025-11-10T16:15:43.607000 @@ -287807,6 +287814,8 @@ CVE-2025-13027,0,0,d61c353eb62c4500a223dc7643173d05525cbe28c1983f3512e6853c87819 CVE-2025-1303,0,0,77f6e0e2e908dd99b19f92d02615f45188adee7d0a527ba2e05ee367340954fa,2025-08-01T01:58:31.323000 CVE-2025-13032,0,0,5204316d545cc62899bef2a338497bb17d8d5a50fcc0091867520216f6456f51,2025-11-11T17:15:39.700000 CVE-2025-1304,0,0,19e272dd5c37445f8582e9faeec74dfd955b4d0ec48e945f5531dcff91a0acdc,2025-05-06T15:38:17.380000 +CVE-2025-13046,1,1,20b34d2f1ad3ee17f149b20614efe4e327ec025e96813095f8f9a280631279a2,2025-11-12T08:15:42.170000 +CVE-2025-13047,1,1,36f5dc9ed542918062442b5066d4bd581f88a38e822bbf3a3cd4c5e91f295eb8,2025-11-12T08:15:42.433000 CVE-2025-1305,0,0,69ffedca9ae25327ab642cff1223fc450ea93b4a540021dd3ca51c4288d01232,2025-05-06T15:38:55.647000 CVE-2025-1306,0,0,de526cacf8bf273c9432977eceb9f985b41588e9255fe87d024d0d9921890929,2025-03-05T18:45:32.943000 CVE-2025-1307,0,0,f5a65a0d70e64918e5c1a7d1d02a502ae3db9a76fffe081c38f2a5d059c1eb26,2025-03-05T13:55:29.927000