admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 00:40:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-02-14T17:00:30.770662+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-02-14 17:03:58 +00:00
1 parent cdd5fda08c
commit 0f51e9fcb0
130 files changed
+8594 -1041
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2012/CVE-2012-07xx/CVE-2012-0754.json
+22 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2012-0754",
"sourceIdentifier": "[email protected]",
"published": "2012-02-16T19:55:01.130",
"lastModified": "2025-02-10T22:15:29.633",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:05:58.347",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -17,6 +17,26 @@
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
CVE-2012/CVE-2012-20xx/CVE-2012-2034.json
+22 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2012-2034",
"sourceIdentifier": "[email protected]",
"published": "2012-06-09T00:55:00.987",
"lastModified": "2025-02-10T22:15:29.833",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:05:35.613",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -17,6 +17,26 @@
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.6,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
CVE-2013/CVE-2013-33xx/CVE-2013-3346.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2013-3346",
"sourceIdentifier": "[email protected]",
"published": "2013-08-30T20:55:06.230",
"lastModified": "2025-02-04T22:15:32.343",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:00:04.780",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2014/CVE-2014-84xx/CVE-2014-8439.json
+19 -17
View File
@@ -2,8 +2,8 @@
"id": "CVE-2014-8439",
"sourceIdentifier": "[email protected]",
"published": "2014-11-25T23:59:00.053",
"lastModified": "2025-02-10T21:15:11.727",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:04:57.187",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -112,8 +112,8 @@
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37"
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
]
}
@@ -139,9 +139,9 @@
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:adobe:air_sdk_and_compiler:*:*:*:*:*:*:*:*",
"versionEndIncluding": "15.0.0.301",
"matchCriteriaId": "4E1CA307-D582-4FFC-83D6-75636AEEFF93"
"criteria": "cpe:2.3:a:adobe:air_sdk_\\&_compiler:*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.0.302",
"matchCriteriaId": "AB3ABE53-275A-4169-95B4-275BF5880491"
}
]
}
@@ -168,13 +168,13 @@
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4C56F007-5F8E-4BDD-A803-C907BCC0AF55"
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
@@ -201,13 +201,13 @@
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
@@ -284,7 +284,8 @@
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98932",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
@@ -363,7 +364,8 @@
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98932",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
CVE-2015/CVE-2015-03xx/CVE-2015-0311.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2015-0311",
"sourceIdentifier": "[email protected]",
"published": "2015-01-23T21:59:04.897",
"lastModified": "2025-02-04T22:15:32.537",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T15:59:35.193",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2015/CVE-2015-03xx/CVE-2015-0313.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2015-0313",
"sourceIdentifier": "[email protected]",
"published": "2015-02-02T19:59:00.053",
"lastModified": "2025-02-04T22:15:32.777",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T15:59:27.700",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2015/CVE-2015-11xx/CVE-2015-1130.json
+45 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2015-1130",
"sourceIdentifier": "[email protected]",
"published": "2015-04-10T14:59:43.073",
"lastModified": "2025-01-29T18:15:26.407",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:20:08.967",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -17,6 +17,26 @@
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
@@ -75,7 +95,7 @@
"description": [
{
"lang": "en",
"value": "CWE-254"
"value": "CWE-59"
}
]
},
@@ -100,8 +120,8 @@
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"versionEndIncluding": "10.10.2",
"matchCriteriaId": "045D7827-3EB8-43A1-AC80-9C94C395D364"
"versionEndExcluding": "10.10.3",
"matchCriteriaId": "8B82325D-6CA0-4348-BF15-AC8AFEE247FC"
}
]
}
@@ -113,6 +133,7 @@
"url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"source": "[email protected]",
"tags": [
"Mailing List",
"Vendor Advisory"
]
},
@@ -127,14 +148,18 @@
"url": "http://www.securityfocus.com/bid/73982",
"source": "[email protected]",
"tags": [
"Exploit"
"Exploit",
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "http://www.securitytracker.com/id/1032048",
"source": "[email protected]",
"tags": [
"Broken Link"
"Broken Link",
"Third Party Advisory",
"VDB Entry"
]
},
{
@@ -148,13 +173,16 @@
"url": "https://www.exploit-db.com/exploits/36692/",
"source": "[email protected]",
"tags": [
"Exploit"
"Exploit",
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Vendor Advisory"
]
},
@@ -169,14 +197,18 @@
"url": "http://www.securityfocus.com/bid/73982",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
"Exploit",
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "http://www.securitytracker.com/id/1032048",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
"Broken Link",
"Third Party Advisory",
"VDB Entry"
]
},
{
@@ -190,7 +222,9 @@
"url": "https://www.exploit-db.com/exploits/36692/",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
"Exploit",
"Third Party Advisory",
"VDB Entry"
]
}
]
CVE-2015/CVE-2015-30xx/CVE-2015-3043.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2015-3043",
"sourceIdentifier": "[email protected]",
"published": "2015-04-14T22:59:21.323",
"lastModified": "2025-02-04T22:15:33.023",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T15:59:21.340",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2015/CVE-2015-31xx/CVE-2015-3113.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2015-3113",
"sourceIdentifier": "[email protected]",
"published": "2015-06-23T21:59:01.960",
"lastModified": "2025-02-04T22:15:33.287",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:09:30.940",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2015/CVE-2015-51xx/CVE-2015-5119.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2015-5119",
"sourceIdentifier": "[email protected]",
"published": "2015-07-08T14:59:05.677",
"lastModified": "2025-02-04T22:15:33.530",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:09:21.013",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2015/CVE-2015-51xx/CVE-2015-5122.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2015-5122",
"sourceIdentifier": "[email protected]",
"published": "2015-07-14T10:59:00.213",
"lastModified": "2025-02-04T22:15:33.787",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:09:11.280",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2015/CVE-2015-51xx/CVE-2015-5123.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2015-5123",
"sourceIdentifier": "[email protected]",
"published": "2015-07-14T10:59:01.337",
"lastModified": "2025-02-04T22:15:34.043",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:06:58.290",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2015/CVE-2015-76xx/CVE-2015-7645.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2015-7645",
"sourceIdentifier": "[email protected]",
"published": "2015-10-15T10:59:10.530",
"lastModified": "2025-02-04T22:15:34.253",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:15:23.887",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2015/CVE-2015-86xx/CVE-2015-8651.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2015-8651",
"sourceIdentifier": "[email protected]",
"published": "2015-12-28T23:59:19.050",
"lastModified": "2025-02-04T22:15:34.470",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:15:12.217",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2016/CVE-2016-09xx/CVE-2016-0984.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2016-0984",
"sourceIdentifier": "[email protected]",
"published": "2016-02-10T20:59:32.563",
"lastModified": "2025-02-04T22:15:34.720",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:15:05.900",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2016/CVE-2016-10xx/CVE-2016-1010.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2016-1010",
"sourceIdentifier": "[email protected]",
"published": "2016-03-12T15:59:25.090",
"lastModified": "2025-02-04T22:15:34.930",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:14:21.180",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2016/CVE-2016-10xx/CVE-2016-1019.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2016-1019",
"sourceIdentifier": "[email protected]",
"published": "2016-04-07T10:59:01.447",
"lastModified": "2025-02-04T22:15:35.210",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:14:11.163",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2016/CVE-2016-41xx/CVE-2016-4117.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2016-4117",
"sourceIdentifier": "[email protected]",
"published": "2016-05-11T01:59:46.137",
"lastModified": "2025-02-04T22:15:35.597",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:13:09.407",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2016/CVE-2016-41xx/CVE-2016-4171.json
+6 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2016-4171",
"sourceIdentifier": "[email protected]",
"published": "2016-06-16T14:59:51.017",
"lastModified": "2025-02-04T22:15:35.860",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:12:44.170",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -110,9 +110,9 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:*",
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"versionEndIncluding": "11.2.202.621",
"matchCriteriaId": "38144E47-3C29-4D18-9D57-D2FE2DB57A93"
"matchCriteriaId": "363B5A6C-BEE3-4141-8CDD-C1EA06FAD441"
}
]
},
@@ -122,8 +122,8 @@
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37"
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
]
}
CVE-2016/CVE-2016-78xx/CVE-2016-7855.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2016-7855",
"sourceIdentifier": "[email protected]",
"published": "2016-11-01T22:59:00.167",
"lastModified": "2025-02-04T22:15:36.097",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:11:56.890",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2016/CVE-2016-78xx/CVE-2016-7892.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2016-7892",
"sourceIdentifier": "[email protected]",
"published": "2016-12-15T06:59:56.313",
"lastModified": "2025-02-04T22:15:36.357",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:10:29.947",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2019/CVE-2019-110xx/CVE-2019-11043.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-11043",
"sourceIdentifier": "[email protected]",
"published": "2019-10-28T15:15:13.863",
"lastModified": "2024-11-21T04:20:26.040",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:43:36.877",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2020/CVE-2020-209xx/CVE-2020-20913.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2020-20913",
"sourceIdentifier": "[email protected]",
"published": "2023-04-04T15:15:08.003",
"lastModified": "2024-11-21T05:12:18.387",
"lastModified": "2025-02-14T16:15:30.570",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-89"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
CVE-2020/CVE-2020-209xx/CVE-2020-20914.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2020-20914",
"sourceIdentifier": "[email protected]",
"published": "2023-04-04T15:15:08.037",
"lastModified": "2024-11-21T05:12:18.523",
"lastModified": "2025-02-14T16:15:31.487",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-89"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
CVE-2020/CVE-2020-25xx/CVE-2020-2551.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2020-2551",
"sourceIdentifier": "[email protected]",
"published": "2020-01-15T17:15:17.190",
"lastModified": "2024-11-21T05:25:30.877",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:47:28.167",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2020/CVE-2020-25xx/CVE-2020-2555.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2020-2555",
"sourceIdentifier": "[email protected]",
"published": "2020-01-15T17:15:17.347",
"lastModified": "2024-11-21T05:25:31.510",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:47:18.113",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2021/CVE-2021-238xx/CVE-2021-23874.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-23874",
"sourceIdentifier": "[email protected]",
"published": "2021-02-10T11:15:12.943",
"lastModified": "2024-11-21T05:51:59.000",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:44:51.907",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2021/CVE-2021-253xx/CVE-2021-25337.json
+233 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-25337",
"sourceIdentifier": "[email protected]",
"published": "2021-03-04T21:15:13.667",
"lastModified": "2024-11-21T05:54:47.077",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:41:48.767",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -119,18 +119,243 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-apr-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "858555E6-5D30-4BBF-A5CD-FD1882209ABB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D558D965-FA70-4822-A770-419E73BA9ED3"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-apr-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "18D4924F-44AB-4E63-8040-D0B96F147BC1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
"matchCriteriaId": "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-aug-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "8150E4FA-8F29-4974-BDE8-ED192879DEFA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-aug-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "D021B217-C481-43D1-A3E6-375E40BD4FB1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-dec-2018-r1:*:*:*:*:*:*",
"matchCriteriaId": "72145BA5-C781-4E36-BB39-33DD92B2F801"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-dec-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "A2E3ED73-5CF8-451F-914B-123B2312110D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-dec-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "6986831F-0AF0-4719-BA45-4485D44D6707"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-feb-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "08E7C018-1293-4E29-83EB-AF177CA6B179"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-feb-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "6AB1563D-A951-4A9C-B348-0684DA242B05"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "3B9A3B41-AAC9-4E23-A265-959A9852B94C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jan-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "D52A71AE-3D39-4F29-806B-603FE098510A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jan-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "10C1DF2B-8371-4259-9139-7260EACEE98D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "B93A5F5F-BF53-44D3-9583-811CC284DF86"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jul-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "60E1950A-282D-4065-AAA5-9BBB7F8D2C5D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jul-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "4996EB5E-1FAB-4799-AE46-8176D74C49D6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jun-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "28950DDB-004F-4E01-9BBD-F5A320556D53"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jun-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "48B55CF5-CF20-48F7-A806-1234436566E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-mar-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "BF3FE371-E773-4AF6-A8DC-0FD9EF615647"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-mar-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "45104240-9D60-47EA-8582-1F912FE7A1F2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-may-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "9F7D7092-5423-4CD1-819D-B784106D1342"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-may-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "7CA7EA43-3CD8-4529-9071-3FB14EE30F45"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-nov-2018-r1:*:*:*:*:*:*",
"matchCriteriaId": "5A9693C8-FE11-4E03-8D4A-0D6FE77627DF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-nov-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "B4561F7F-6B1F-412D-A174-5F9709ACF806"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-nov-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "A54F7006-979F-4DF5-A350-77DC3A68536E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-oct-2018-r1:*:*:*:*:*:*",
"matchCriteriaId": "9282540E-26C5-4140-9074-480DB7F5DE41"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-oct-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "BB304E43-DCCB-42E1-8B44-0825C9C437FB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-oct-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "59BF1A24-8AC5-482F-B872-38D625FC669F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-sep-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "0EC7719C-8C21-4203-9ED9-E4C048FA5CF1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-sep-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "2427A8F0-035E-4DB5-8B91-EBD8E826F6DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "49DA0B6E-5E55-4893-8225-299E20DA2DD0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "EF52B720-DC8C-4EF0-B20B-7FA8B192FAFB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "6A0B5D2C-7AED-4330-ADAD-60F78A6A08DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "7C7B9407-D5E0-49EB-A05D-C5E02060AF36"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "F10815EF-AA9D-4899-B4EF-ED7A96E46959"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "91EA248A-4D4D-4A50-AC33-7098E17B7892"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "878AAF2D-E54A-4145-A618-81341ED4B0C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "F3A43712-94EF-4670-A2FD-4363CBE850DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "FDCC210B-4083-494C-A233-FE2CA672004B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "9FA38AA3-A747-424E-B07E-F7931FA353F0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "9B48628C-6780-46B4-B717-8589658B0DCE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "CFCFFC02-EFEF-4A4C-A9A3-8BF355E36601"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "CB4658B8-9120-48E1-8A92-3430CBC6DC9B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "7685DB5C-C3C2-44E2-AB00-CEE65C68460B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "47335942-37FB-4A1D-837A-5D0B2883ED10"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "C26195A5-31BE-4116-8F31-9F25BE57AB52"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "AC082E25-1B7D-473D-A066-1463E6321CD5"
}
]
}
CVE-2021/CVE-2021-253xx/CVE-2021-25369.json
+225 -10
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-25369",
"sourceIdentifier": "[email protected]",
"published": "2021-03-26T19:15:12.040",
"lastModified": "2024-11-21T05:54:51.263",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:41:01.283",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -119,23 +119,238 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
"criteria": "cpe:2.3:o:samsung:android:8.0:-:*:*:*:*:*:*",
"matchCriteriaId": "96273BC2-D835-48C8-8EAF-0FD6EAA94F09"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
"criteria": "cpe:2.3:o:samsung:android:8.1:-:*:*:*:*:*:*",
"matchCriteriaId": "3E4F5C8C-AF0C-47F4-A3B0-A6D924FB72BB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-apr-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "858555E6-5D30-4BBF-A5CD-FD1882209ABB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D558D965-FA70-4822-A770-419E73BA9ED3"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-apr-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "18D4924F-44AB-4E63-8040-D0B96F147BC1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-aug-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "8150E4FA-8F29-4974-BDE8-ED192879DEFA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-aug-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "D021B217-C481-43D1-A3E6-375E40BD4FB1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-dec-2018-r1:*:*:*:*:*:*",
"matchCriteriaId": "72145BA5-C781-4E36-BB39-33DD92B2F801"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-dec-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "A2E3ED73-5CF8-451F-914B-123B2312110D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-dec-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "6986831F-0AF0-4719-BA45-4485D44D6707"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-feb-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "08E7C018-1293-4E29-83EB-AF177CA6B179"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-feb-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "6AB1563D-A951-4A9C-B348-0684DA242B05"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "3B9A3B41-AAC9-4E23-A265-959A9852B94C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jan-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "D52A71AE-3D39-4F29-806B-603FE098510A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jan-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "10C1DF2B-8371-4259-9139-7260EACEE98D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "B93A5F5F-BF53-44D3-9583-811CC284DF86"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jul-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "60E1950A-282D-4065-AAA5-9BBB7F8D2C5D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jul-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "4996EB5E-1FAB-4799-AE46-8176D74C49D6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jun-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "28950DDB-004F-4E01-9BBD-F5A320556D53"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jun-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "48B55CF5-CF20-48F7-A806-1234436566E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-mar-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "BF3FE371-E773-4AF6-A8DC-0FD9EF615647"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-mar-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "45104240-9D60-47EA-8582-1F912FE7A1F2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-may-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "9F7D7092-5423-4CD1-819D-B784106D1342"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-may-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "7CA7EA43-3CD8-4529-9071-3FB14EE30F45"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-nov-2018-r1:*:*:*:*:*:*",
"matchCriteriaId": "5A9693C8-FE11-4E03-8D4A-0D6FE77627DF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-nov-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "B4561F7F-6B1F-412D-A174-5F9709ACF806"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-nov-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "A54F7006-979F-4DF5-A350-77DC3A68536E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-oct-2018-r1:*:*:*:*:*:*",
"matchCriteriaId": "9282540E-26C5-4140-9074-480DB7F5DE41"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-oct-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "BB304E43-DCCB-42E1-8B44-0825C9C437FB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-oct-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "59BF1A24-8AC5-482F-B872-38D625FC669F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-sep-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "0EC7719C-8C21-4203-9ED9-E4C048FA5CF1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-sep-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "2427A8F0-035E-4DB5-8B91-EBD8E826F6DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "49DA0B6E-5E55-4893-8225-299E20DA2DD0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "EF52B720-DC8C-4EF0-B20B-7FA8B192FAFB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "6A0B5D2C-7AED-4330-ADAD-60F78A6A08DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "7C7B9407-D5E0-49EB-A05D-C5E02060AF36"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "F10815EF-AA9D-4899-B4EF-ED7A96E46959"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "91EA248A-4D4D-4A50-AC33-7098E17B7892"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "878AAF2D-E54A-4145-A618-81341ED4B0C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "F3A43712-94EF-4670-A2FD-4363CBE850DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "FDCC210B-4083-494C-A233-FE2CA672004B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "9FA38AA3-A747-424E-B07E-F7931FA353F0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "9B48628C-6780-46B4-B717-8589658B0DCE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "CFCFFC02-EFEF-4A4C-A9A3-8BF355E36601"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "CB4658B8-9120-48E1-8A92-3430CBC6DC9B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "7685DB5C-C3C2-44E2-AB00-CEE65C68460B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "47335942-37FB-4A1D-837A-5D0B2883ED10"
}
]
}
CVE-2021/CVE-2021-253xx/CVE-2021-25370.json
+237 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-25370",
"sourceIdentifier": "[email protected]",
"published": "2021-03-26T19:15:12.147",
"lastModified": "2024-11-21T05:54:51.423",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:38:52.837",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -109,28 +109,253 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
"criteria": "cpe:2.3:o:samsung:android:8.0:-:*:*:*:*:*:*",
"matchCriteriaId": "96273BC2-D835-48C8-8EAF-0FD6EAA94F09"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
"criteria": "cpe:2.3:o:samsung:android:8.1:-:*:*:*:*:*:*",
"matchCriteriaId": "3E4F5C8C-AF0C-47F4-A3B0-A6D924FB72BB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-apr-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "858555E6-5D30-4BBF-A5CD-FD1882209ABB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D558D965-FA70-4822-A770-419E73BA9ED3"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-apr-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "18D4924F-44AB-4E63-8040-D0B96F147BC1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
"matchCriteriaId": "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-aug-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "8150E4FA-8F29-4974-BDE8-ED192879DEFA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-aug-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "D021B217-C481-43D1-A3E6-375E40BD4FB1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-dec-2018-r1:*:*:*:*:*:*",
"matchCriteriaId": "72145BA5-C781-4E36-BB39-33DD92B2F801"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-dec-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "A2E3ED73-5CF8-451F-914B-123B2312110D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-dec-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "6986831F-0AF0-4719-BA45-4485D44D6707"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-feb-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "08E7C018-1293-4E29-83EB-AF177CA6B179"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-feb-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "6AB1563D-A951-4A9C-B348-0684DA242B05"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "3B9A3B41-AAC9-4E23-A265-959A9852B94C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jan-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "D52A71AE-3D39-4F29-806B-603FE098510A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jan-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "10C1DF2B-8371-4259-9139-7260EACEE98D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "B93A5F5F-BF53-44D3-9583-811CC284DF86"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jul-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "60E1950A-282D-4065-AAA5-9BBB7F8D2C5D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jul-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "4996EB5E-1FAB-4799-AE46-8176D74C49D6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jun-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "28950DDB-004F-4E01-9BBD-F5A320556D53"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jun-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "48B55CF5-CF20-48F7-A806-1234436566E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-mar-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "BF3FE371-E773-4AF6-A8DC-0FD9EF615647"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-mar-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "45104240-9D60-47EA-8582-1F912FE7A1F2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-may-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "9F7D7092-5423-4CD1-819D-B784106D1342"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-may-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "7CA7EA43-3CD8-4529-9071-3FB14EE30F45"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-nov-2018-r1:*:*:*:*:*:*",
"matchCriteriaId": "5A9693C8-FE11-4E03-8D4A-0D6FE77627DF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-nov-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "B4561F7F-6B1F-412D-A174-5F9709ACF806"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-nov-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "A54F7006-979F-4DF5-A350-77DC3A68536E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-oct-2018-r1:*:*:*:*:*:*",
"matchCriteriaId": "9282540E-26C5-4140-9074-480DB7F5DE41"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-oct-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "BB304E43-DCCB-42E1-8B44-0825C9C437FB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-oct-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "59BF1A24-8AC5-482F-B872-38D625FC669F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-sep-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "0EC7719C-8C21-4203-9ED9-E4C048FA5CF1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-sep-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "2427A8F0-035E-4DB5-8B91-EBD8E826F6DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "49DA0B6E-5E55-4893-8225-299E20DA2DD0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "EF52B720-DC8C-4EF0-B20B-7FA8B192FAFB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "6A0B5D2C-7AED-4330-ADAD-60F78A6A08DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "7C7B9407-D5E0-49EB-A05D-C5E02060AF36"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "F10815EF-AA9D-4899-B4EF-ED7A96E46959"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "91EA248A-4D4D-4A50-AC33-7098E17B7892"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "878AAF2D-E54A-4145-A618-81341ED4B0C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "F3A43712-94EF-4670-A2FD-4363CBE850DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "FDCC210B-4083-494C-A233-FE2CA672004B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "9FA38AA3-A747-424E-B07E-F7931FA353F0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "9B48628C-6780-46B4-B717-8589658B0DCE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*",
"matchCriteriaId": "CFCFFC02-EFEF-4A4C-A9A3-8BF355E36601"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "CB4658B8-9120-48E1-8A92-3430CBC6DC9B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "7685DB5C-C3C2-44E2-AB00-CEE65C68460B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "47335942-37FB-4A1D-837A-5D0B2883ED10"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
"matchCriteriaId": "C26195A5-31BE-4116-8F31-9F25BE57AB52"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "AC082E25-1B7D-473D-A066-1463E6321CD5"
}
]
}
CVE-2021/CVE-2021-253xx/CVE-2021-25371.json
+16 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-25371",
"sourceIdentifier": "[email protected]",
"published": "2021-03-26T19:15:12.227",
"lastModified": "2024-11-21T05:54:51.563",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:34:04.747",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -120,13 +120,23 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D558D965-FA70-4822-A770-419E73BA9ED3"
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
"matchCriteriaId": "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "878AAF2D-E54A-4145-A618-81341ED4B0C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "AC082E25-1B7D-473D-A066-1463E6321CD5"
}
]
},
CVE-2021/CVE-2021-253xx/CVE-2021-25372.json
+16 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-25372",
"sourceIdentifier": "[email protected]",
"published": "2021-03-26T19:15:12.303",
"lastModified": "2024-11-21T05:54:51.697",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:33:12.887",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -110,13 +110,23 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D558D965-FA70-4822-A770-419E73BA9ED3"
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
"matchCriteriaId": "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "878AAF2D-E54A-4145-A618-81341ED4B0C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "AC082E25-1B7D-473D-A066-1463E6321CD5"
}
]
},
CVE-2021/CVE-2021-253xx/CVE-2021-25394.json
+50 -10
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-25394",
"sourceIdentifier": "[email protected]",
"published": "2021-06-11T15:15:08.957",
"lastModified": "2024-11-21T05:54:54.340",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:32:02.387",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -123,23 +123,63 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
"criteria": "cpe:2.3:o:samsung:android:8.1:-:*:*:*:*:*:*",
"matchCriteriaId": "3E4F5C8C-AF0C-47F4-A3B0-A6D924FB72BB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-apr-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "C690D390-5631-4294-AEB8-9A4C5564FA44"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D558D965-FA70-4822-A770-419E73BA9ED3"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "3B9A3B41-AAC9-4E23-A265-959A9852B94C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
"matchCriteriaId": "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "B93A5F5F-BF53-44D3-9583-811CC284DF86"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-mar-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "62A933C7-9739-43DD-851E-0C2009858B77"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-apr-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "5E21936D-9A60-4987-A6BF-C8F1885FB478"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "878AAF2D-E54A-4145-A618-81341ED4B0C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "AC082E25-1B7D-473D-A066-1463E6321CD5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
}
]
}
CVE-2021/CVE-2021-253xx/CVE-2021-25395.json
+50 -10
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-25395",
"sourceIdentifier": "[email protected]",
"published": "2021-06-11T15:15:09.030",
"lastModified": "2024-11-21T05:54:54.467",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:31:44.910",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -119,23 +119,63 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
"criteria": "cpe:2.3:o:samsung:android:8.1:-:*:*:*:*:*:*",
"matchCriteriaId": "3E4F5C8C-AF0C-47F4-A3B0-A6D924FB72BB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-apr-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "C690D390-5631-4294-AEB8-9A4C5564FA44"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D558D965-FA70-4822-A770-419E73BA9ED3"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "3B9A3B41-AAC9-4E23-A265-959A9852B94C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
"matchCriteriaId": "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "B93A5F5F-BF53-44D3-9583-811CC284DF86"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-mar-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "62A933C7-9739-43DD-851E-0C2009858B77"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-apr-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "5E21936D-9A60-4987-A6BF-C8F1885FB478"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "878AAF2D-E54A-4145-A618-81341ED4B0C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "AC082E25-1B7D-473D-A066-1463E6321CD5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
}
]
}
CVE-2021/CVE-2021-254xx/CVE-2021-25487.json
+129 -21
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-25487",
"sourceIdentifier": "[email protected]",
"published": "2021-10-06T18:15:09.567",
"lastModified": "2024-11-21T05:55:05.547",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:29:53.617",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -112,7 +112,6 @@
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
@@ -120,34 +119,143 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
"criteria": "cpe:2.3:o:samsung:android:8.1:-:*:*:*:*:*:*",
"matchCriteriaId": "3E4F5C8C-AF0C-47F4-A3B0-A6D924FB72BB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-apr-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "C690D390-5631-4294-AEB8-9A4C5564FA44"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D558D965-FA70-4822-A770-419E73BA9ED3"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-aug-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "878D73CA-D317-4304-B7FB-00DE79DA7074"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
"matchCriteriaId": "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "3B9A3B41-AAC9-4E23-A265-959A9852B94C"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E04D5D21-1755-4766-8302-A0BE61EE9F43"
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "B93A5F5F-BF53-44D3-9583-811CC284DF86"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jul-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "30154AB6-C412-48D6-9123-42639B116093"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jun-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "6538D01C-1645-4C4B-8559-EA20FFCD87F2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-mar-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "62A933C7-9739-43DD-851E-0C2009858B77"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-may-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "B5A0003A-1655-4945-988E-C79CC8A41B11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-sep-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "620EF7BF-1A66-4E96-A05A-2296C9272A34"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-apr-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "5E21936D-9A60-4987-A6BF-C8F1885FB478"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-aug-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "2559EDCB-09F8-4AC0-AE53-9B0E934D2D74"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "878AAF2D-E54A-4145-A618-81341ED4B0C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jul-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "84641402-4778-418B-90F3-2AFAF90B4798"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jun-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "C72C3A92-43ED-40F4-B340-FE57FED9E762"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-mar-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "7EBA9C21-8EDA-48B2-B63C-D50B2F83C31B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-may-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "0CC8A026-B21C-47E0-B889-BD62F379737E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-sep-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "5B1DCD3C-2418-4194-97FA-901550B2ED3D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "AC082E25-1B7D-473D-A066-1463E6321CD5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "548BCC15-C6D8-4AE7-B167-4DD74382097B"
}
]
}
CVE-2021/CVE-2021-254xx/CVE-2021-25489.json
+129 -21
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-25489",
"sourceIdentifier": "[email protected]",
"published": "2021-10-06T18:15:09.667",
"lastModified": "2024-11-21T05:55:05.783",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:28:02.917",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -112,7 +112,6 @@
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
@@ -120,34 +119,143 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
"criteria": "cpe:2.3:o:samsung:android:8.1:-:*:*:*:*:*:*",
"matchCriteriaId": "3E4F5C8C-AF0C-47F4-A3B0-A6D924FB72BB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-apr-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "C690D390-5631-4294-AEB8-9A4C5564FA44"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D558D965-FA70-4822-A770-419E73BA9ED3"
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-aug-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "878D73CA-D317-4304-B7FB-00DE79DA7074"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
"matchCriteriaId": "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "3B9A3B41-AAC9-4E23-A265-959A9852B94C"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E04D5D21-1755-4766-8302-A0BE61EE9F43"
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "B93A5F5F-BF53-44D3-9583-811CC284DF86"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jul-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "30154AB6-C412-48D6-9123-42639B116093"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-jun-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "6538D01C-1645-4C4B-8559-EA20FFCD87F2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-mar-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "62A933C7-9739-43DD-851E-0C2009858B77"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-may-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "B5A0003A-1655-4945-988E-C79CC8A41B11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:9.0:smr-sep-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "620EF7BF-1A66-4E96-A05A-2296C9272A34"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-apr-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "5E21936D-9A60-4987-A6BF-C8F1885FB478"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-aug-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "2559EDCB-09F8-4AC0-AE53-9B0E934D2D74"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "878AAF2D-E54A-4145-A618-81341ED4B0C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jul-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "84641402-4778-418B-90F3-2AFAF90B4798"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-jun-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "C72C3A92-43ED-40F4-B340-FE57FED9E762"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-mar-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "7EBA9C21-8EDA-48B2-B63C-D50B2F83C31B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-may-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "0CC8A026-B21C-47E0-B889-BD62F379737E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:10.0:smr-sep-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "5B1DCD3C-2418-4194-97FA-901550B2ED3D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "8D2D0083-0A85-47F7-A42D-2040A3BEC132"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "A3658A42-BCA9-4188-8B36-3C6599BBF83C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "AC082E25-1B7D-473D-A066-1463E6321CD5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "2B088DE9-31F1-4737-8BC8-CC406F208ACB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "C2592B14-B3B7-4C85-88E8-5E12F6F50ED3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "BA51F5D5-D18D-426C-B09F-EE12CE11E9FB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "6C946853-D56D-457C-A1CB-AD1A5BD56C41"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*",
"matchCriteriaId": "548BCC15-C6D8-4AE7-B167-4DD74382097B"
}
]
}
CVE-2021/CVE-2021-306xx/CVE-2021-30663.json
+9 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-30663",
"sourceIdentifier": "[email protected]",
"published": "2021-09-08T15:15:13.413",
"lastModified": "2025-02-03T14:15:32.100",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:22:02.543",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -117,13 +117,6 @@
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0",
"versionEndExcluding": "11.3.1",
"matchCriteriaId": "38C24205-D2E5-4354-B48F-A690D94DCCC7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
@@ -150,6 +143,13 @@
"versionEndExcluding": "14.5.1",
"matchCriteriaId": "EBBD83AD-8615-422B-AE3E-39D4AB86D8FC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.0",
"versionEndExcluding": "11.3.1",
"matchCriteriaId": "14B2F397-655E-44C5-B9A3-8C4435675F42"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
CVE-2021/CVE-2021-352xx/CVE-2021-35247.json
+3 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-35247",
"sourceIdentifier": "[email protected]",
"published": "2022-01-10T14:10:17.667",
"lastModified": "2024-11-21T06:12:08.877",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:44:08.310",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -105,7 +105,7 @@
"description": [
{
"lang": "en",
"value": "CWE-20"
"value": "NVD-CWE-noinfo"
}
]
}
CVE-2021/CVE-2021-433xx/CVE-2021-43353.json
+3 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2021-43353",
"sourceIdentifier": "[email protected]",
"published": "2022-01-18T17:15:09.180",
"lastModified": "2024-11-21T06:29:07.180",
"lastModified": "2025-02-14T16:07:28.230",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -115,9 +115,9 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:crisp:live_chat:*:*:*:*:*:wordpress:*:*",
"criteria": "cpe:2.3:a:crisp:crisp:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "0.32",
"matchCriteriaId": "E6108436-90D0-41C6-989D-903FD07FC8E7"
"matchCriteriaId": "D2E61F07-7A14-4462-976E-4DFB13B65E7E"
}
]
}
CVE-2021/CVE-2021-471xx/CVE-2021-47103.json
+206 -17
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-47103",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-04T18:15:08.667",
"lastModified": "2024-11-21T06:35:24.260",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:03:01.997",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,63 +15,252 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: inet: conversi\u00f3n completa de sk->sk_rx_dst a reglas de RCU syzbot inform\u00f3 varios problemas relacionados con la demux inicial, uno de los cuales se incluye en este registro de cambios [1] sk->sk_rx_dst est\u00e1 usando protecci\u00f3n de RCU sin claridad document\u00e1ndolo. Y las siguientes secuencias en tcp_v4_do_rcv()/tcp_v6_do_rcv() no siguen las reglas est\u00e1ndar de RCU. [a] dst_release(dst); [b] sk->sk_rx_dst = NULL; Se ven incorrectos porque se supone que una operaci\u00f3n de eliminaci\u00f3n del puntero protegido de RCU borra el puntero antes de que call_rcu()/synchronize_rcu() proteja la liberaci\u00f3n de memoria real. De hecho, en algunos casos, dst podr\u00eda liberarse antes de que se realice [b]. Podr\u00edamos hacer trampa borrando sk_rx_dst antes de llamar a dst_release(), pero este parece el momento adecuado para ce\u00f1irnos a las anotaciones est\u00e1ndar de RCU y las funciones de depuraci\u00f3n. [1] BUG: KASAN: use-after-free in dst_check include/net/dst.h:470 [inline] BUG: KASAN: use-after-free in tcp_v4_early_demux+0x95b/0x960 net/ipv4/tcp_ipv4.c:1792 Read of size 2 at addr ffff88807f1cb73a by task syz-executor.5/9204 CPU: 0 PID: 9204 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 print_address_description.constprop.0.cold+0x8d/0x320 mm/kasan/report.c:247 __kasan_report mm/kasan/report.c:433 [inline] kasan_report.cold+0x83/0xdf mm/kasan/report.c:450 dst_check include/net/dst.h:470 [inline] tcp_v4_early_demux+0x95b/0x960 net/ipv4/tcp_ipv4.c:1792 ip_rcv_finish_core.constprop.0+0x15de/0x1e80 net/ipv4/ip_input.c:340 ip_list_rcv_finish.constprop.0+0x1b2/0x6e0 net/ipv4/ip_input.c:583 ip_sublist_rcv net/ipv4/ip_input.c:609 [inline] ip_list_rcv+0x34e/0x490 net/ipv4/ip_input.c:644 __netif_receive_skb_list_ptype net/core/dev.c:5508 [inline] __netif_receive_skb_list_core+0x549/0x8e0 net/core/dev.c:5556 __netif_receive_skb_list net/core/dev.c:5608 [inline] netif_receive_skb_list_internal+0x75e/0xd80 net/core/dev.c:5699 gro_normal_list net/core/dev.c:5853 [inline] gro_normal_list net/core/dev.c:5849 [inline] napi_complete_done+0x1f1/0x880 net/core/dev.c:6590 virtqueue_napi_complete drivers/net/virtio_net.c:339 [inline] virtnet_poll+0xca2/0x11b0 drivers/net/virtio_net.c:1557 __napi_poll+0xaf/0x440 net/core/dev.c:7023 napi_poll net/core/dev.c:7090 [inline] net_rx_action+0x801/0xb40 net/core/dev.c:7177 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558 invoke_softirq kernel/softirq.c:432 [inline] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 common_interrupt+0x52/0xc0 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x1e/0x40 arch/x86/include/asm/idtentry.h:629 RIP: 0033:0x7f5e972bfd57 Code: 39 d1 73 14 0f 1f 80 00 00 00 00 48 8b 50 f8 48 83 e8 08 48 39 ca 77 f3 48 39 c3 73 3e 48 89 13 48 8b 50 f8 48 89 38 49 8b 0e <48> 8b 3e 48 83 c3 08 48 83 c6 08 eb bc 48 39 d1 72 9e 48 39 d0 73 RSP: 002b:00007fff8a413210 EFLAGS: 00000283 RAX: 00007f5e97108990 RBX: 00007f5e97108338 RCX: ffffffff81d3aa45 RDX: ffffffff81d3aa45 RSI: 00007f5e97108340 RDI: ffffffff81d3aa45 RBP: 00007f5e97107eb8 R08: 00007f5e97108d88 R09: 0000000093c2e8d9 R10: 0000000000000000 R11: 0000000000000000 R12: 00007f5e97107eb0 R13: 00007f5e97108338 R14: 00007f5e97107ea8 R15: 0000000000000019 Allocated by task 13: kasan_save_stack+0x1e/0x50 mm/kasan/common.c:38 kasan_set_track mm/kasan/common.c:46 [inline] set_alloc_info mm/kasan/common.c:434 [inline] __kasan_slab_alloc+0x90/0xc0 mm/kasan/common.c:467 kasan_slab_alloc include/linux/kasan.h:259 [inline] slab_post_alloc_hook mm/slab.h:519 [inline] slab_alloc_node mm/slub.c:3234 [inline] slab_alloc mm/slub.c:3242 [inline] kmem_cache_alloc+0x202/0x3a0 mm/slub.c:3247 dst_alloc+0x146/0x1f0 net/core/dst.c:92 rt_dst_alloc+0x73/0x430 net/ipv4/route.c:1613 ip_route_input_slow+0x1817/0x3a20 net/ipv4/route.c:234"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.6",
"versionEndExcluding": "4.9.331",
"matchCriteriaId": "9ED924D8-78AE-4446-9153-4BB0847E96B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.10",
"versionEndExcluding": "4.14.296",
"matchCriteriaId": "1927ABC6-E0D2-478F-B103-B982A42D1158"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.262",
"matchCriteriaId": "D6B62970-1FAD-4ED6-930A-23E26A8D2E08"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.220",
"matchCriteriaId": "125F7133-B3B7-4175-8CF3-FF0845483254"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.150",
"matchCriteriaId": "C495821C-2A71-4F09-BED8-6A6EB4C9BA27"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.12",
"matchCriteriaId": "732BA914-7B3B-43CD-857F-8119106F6F71"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*",
"matchCriteriaId": "357AA433-37E8-4323-BFB2-3038D6E4B414"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*",
"matchCriteriaId": "A73429BA-C2D9-4D0C-A75F-06A1CA8B3983"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*",
"matchCriteriaId": "F621B5E3-E99D-49E7-90B9-EC3B77C95383"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc4:*:*:*:*:*:*",
"matchCriteriaId": "F7BFDCAA-1650-49AA-8462-407DD593F94F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc5:*:*:*:*:*:*",
"matchCriteriaId": "6EC9882F-866D-4ACB-8FBC-213D8D8436C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc6:*:*:*:*:*:*",
"matchCriteriaId": "8A0915FE-A4AA-4C94-B783-CF29D81E7E54"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0249a4b8a554f2eb6a27b62516fa50168584faa4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/68c34ce11ef23328692aa35fa6aaafdd75913100",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/75a578000ae5e511e5d0e8433c94a14d9c99c412",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8f905c0e7354ef261360fb7535ea079b1082c105",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/92e6e36ecd16808866ac6172b9491b5097cde449",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c3bb4a7e8cbc984e1cdac0fe6af60e880214ed6e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f039b43cbaea5e0700980c2f0052da05a70782e0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/0249a4b8a554f2eb6a27b62516fa50168584faa4",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/68c34ce11ef23328692aa35fa6aaafdd75913100",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/75a578000ae5e511e5d0e8433c94a14d9c99c412",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8f905c0e7354ef261360fb7535ea079b1082c105",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/92e6e36ecd16808866ac6172b9491b5097cde449",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c3bb4a7e8cbc984e1cdac0fe6af60e880214ed6e",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f039b43cbaea5e0700980c2f0052da05a70782e0",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
}
]
}
CVE-2021/CVE-2021-471xx/CVE-2021-47105.json
+111 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-47105",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-04T19:15:18.707",
"lastModified": "2024-11-21T06:35:24.523",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:16:27.180",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,127 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ice: xsk: devuelve los buffers xsk al grupo al limpiar el anillo. Actualmente solo hacemos NULL en el puntero xdp_buff en el anillo SW interno, pero nunca lo devolvemos al grupo de buffers xsk. Esto significa que los buffers se pueden filtrar fuera del grupo de buffers y no volver a usarse nunca m\u00e1s. Agregue la llamada xsk_buff_free() faltante a la rutina que se supone que limpia las entradas que quedan en el anillo para que otros sockets puedan usar estos buffers en el umem. Adem\u00e1s, pase solo por el espacio que realmente queda por limpiar en lugar de por un anillo completo."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.15.12",
"matchCriteriaId": "B083AE64-4A1D-4AD1-B078-AC730EE9450D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*",
"matchCriteriaId": "357AA433-37E8-4323-BFB2-3038D6E4B414"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*",
"matchCriteriaId": "A73429BA-C2D9-4D0C-A75F-06A1CA8B3983"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*",
"matchCriteriaId": "F621B5E3-E99D-49E7-90B9-EC3B77C95383"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc4:*:*:*:*:*:*",
"matchCriteriaId": "F7BFDCAA-1650-49AA-8462-407DD593F94F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc5:*:*:*:*:*:*",
"matchCriteriaId": "6EC9882F-866D-4ACB-8FBC-213D8D8436C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc6:*:*:*:*:*:*",
"matchCriteriaId": "8A0915FE-A4AA-4C94-B783-CF29D81E7E54"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/ad6d20da2cfbe14b7b1200d15f39e65988b0b9e8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/afe8a3ba85ec2a6b6849367e25c06a2f8e0ddd05",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ad6d20da2cfbe14b7b1200d15f39e65988b0b9e8",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/afe8a3ba85ec2a6b6849367e25c06a2f8e0ddd05",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
}
]
}
CVE-2021/CVE-2021-471xx/CVE-2021-47107.json
+123 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-47107",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-04T19:15:18.793",
"lastModified": "2024-11-21T06:35:24.743",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:22:22.510",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,145 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: NFSD: corrige el desbordamiento del b\u00fafer READDIR Si un cliente env\u00eda un argumento de recuento READDIR que es demasiado peque\u00f1o (digamos, cero), entonces el c\u00e1lculo del tama\u00f1o del b\u00fafer en las nuevas funciones auxiliares init_dirlist da como resultado un subdesbordamiento, lo que permite que las funciones de flujo XDR escriban m\u00e1s all\u00e1 del b\u00fafer real. Este c\u00e1lculo siempre ha sido sospechoso. NFSD nunca ha verificado la cordura del argumento de conteo READDIR, pero los codificadores de entrada antiguos manejaron el problema correctamente. Con las confirmaciones a continuaci\u00f3n, la codificaci\u00f3n de entrada cambi\u00f3, exponiendo el desbordamiento a la aritm\u00e9tica del puntero en xdr_reserve_space(). Los clientes NFS modernos intentan recuperar la mayor cantidad de datos posible para cada solicitud READDIR. Adem\u00e1s, no tenemos pruebas unitarias que ejerzan el comportamiento de READDIR en el l\u00edmite inferior de los valores @count. Por lo tanto, este caso se pas\u00f3 por alto durante las pruebas."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-120"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.13",
"versionEndExcluding": "5.15.12",
"matchCriteriaId": "164CFFE2-DFF5-4AA3-B0D8-BDA39E712F48"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*",
"matchCriteriaId": "357AA433-37E8-4323-BFB2-3038D6E4B414"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*",
"matchCriteriaId": "A73429BA-C2D9-4D0C-A75F-06A1CA8B3983"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*",
"matchCriteriaId": "F621B5E3-E99D-49E7-90B9-EC3B77C95383"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc4:*:*:*:*:*:*",
"matchCriteriaId": "F7BFDCAA-1650-49AA-8462-407DD593F94F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc5:*:*:*:*:*:*",
"matchCriteriaId": "6EC9882F-866D-4ACB-8FBC-213D8D8436C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc6:*:*:*:*:*:*",
"matchCriteriaId": "8A0915FE-A4AA-4C94-B783-CF29D81E7E54"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/53b1119a6e5028b125f431a0116ba73510d82a72",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9e291a6a28d32545ed2fd959a8165144d1724df1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/eabc0aab98e5218ceecd82069b0d6fdfff5ee885",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/53b1119a6e5028b125f431a0116ba73510d82a72",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9e291a6a28d32545ed2fd959a8165144d1724df1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/eabc0aab98e5218ceecd82069b0d6fdfff5ee885",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
}
]
}
CVE-2022/CVE-2022-226xx/CVE-2022-22675.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-22675",
"sourceIdentifier": "[email protected]",
"published": "2022-05-26T18:15:09.153",
"lastModified": "2025-01-28T22:15:09.390",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:20:32.273",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2022/CVE-2022-275xx/CVE-2022-27518.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-27518",
"sourceIdentifier": "[email protected]",
"published": "2022-12-13T17:15:14.350",
"lastModified": "2024-11-21T06:55:52.593",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:45:23.363",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2022/CVE-2022-428xx/CVE-2022-42827.json
+5 -21
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-42827",
"sourceIdentifier": "[email protected]",
"published": "2022-11-01T20:15:24.333",
"lastModified": "2025-01-28T22:15:11.367",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:18:40.880",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -106,26 +106,10 @@
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:iphone_os:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "721D0DB1-70EE-458E-B3DA-CA53BD37CE3E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"versionEndExcluding": "12.6.1",
"matchCriteriaId": "683AE472-CFF7-4D5A-936A-42FA43C27E75"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.0",
"versionEndExcluding": "16.1",
"matchCriteriaId": "F3B857D6-19FE-4535-9BA2-6BD54B9BB6F5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
"versionEndExcluding": "9.1",
"matchCriteriaId": "32BABE0E-193A-4A4D-96E9-84BB48649C9A"
"matchCriteriaId": "707AECD3-BB9B-4AFA-8D87-FDFB79A9EB89"
}
]
}
CVE-2022/CVE-2022-47xx/CVE-2022-4744.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2022-4744",
"sourceIdentifier": "[email protected]",
"published": "2023-03-30T21:15:06.497",
"lastModified": "2024-11-21T07:35:51.500",
"lastModified": "2025-02-14T16:15:32.120",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
CVE-2022/CVE-2022-486xx/CVE-2022-48618.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-48618",
"sourceIdentifier": "[email protected]",
"published": "2024-01-09T18:15:45.120",
"lastModified": "2024-11-21T07:33:36.717",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:20:50.207",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2022/CVE-2022-486xx/CVE-2022-48629.json
+198 -16
View File
@@ -2,68 +2,250 @@
"id": "CVE-2022-48629",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-05T12:15:45.707",
"lastModified": "2024-11-21T07:33:38.803",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:31:56.023",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qcom-rng - ensure buffer for generate is completely filled\n\nThe generate function in struct rng_alg expects that the destination\nbuffer is completely filled if the function returns 0. qcom_rng_read()\ncan run into a situation where the buffer is partially filled with\nrandomness and the remaining part of the buffer is zeroed since\nqcom_rng_generate() doesn't check the return value. This issue can\nbe reproduced by running the following from libkcapi:\n\n kcapi-rng -b 9000000 > OUTFILE\n\nThe generated OUTFILE will have three huge sections that contain all\nzeros, and this is caused by the code where the test\n'val & PRNG_STATUS_DATA_AVAIL' fails.\n\nLet's fix this issue by ensuring that qcom_rng_read() always returns\nwith a full buffer if the function returns success. Let's also have\nqcom_rng_generate() return the correct value.\n\nHere's some statistics from the ent project\n(https://www.fourmilab.ch/random/) that shows information about the\nquality of the generated numbers:\n\n $ ent -c qcom-random-before\n Value Char Occurrences Fraction\n 0 606748 0.067416\n 1 33104 0.003678\n 2 33001 0.003667\n ...\n 253 \ufffd 32883 0.003654\n 254 \ufffd 33035 0.003671\n 255 \ufffd 33239 0.003693\n\n Total: 9000000 1.000000\n\n Entropy = 7.811590 bits per byte.\n\n Optimum compression would reduce the size\n of this 9000000 byte file by 2 percent.\n\n Chi square distribution for 9000000 samples is 9329962.81, and\n randomly would exceed this value less than 0.01 percent of the\n times.\n\n Arithmetic mean value of data bytes is 119.3731 (127.5 = random).\n Monte Carlo value for Pi is 3.197293333 (error 1.77 percent).\n Serial correlation coefficient is 0.159130 (totally uncorrelated =\n 0.0).\n\nWithout this patch, the results of the chi-square test is 0.01%, and\nthe numbers are certainly not random according to ent's project page.\nThe results improve with this patch:\n\n $ ent -c qcom-random-after\n Value Char Occurrences Fraction\n 0 35432 0.003937\n 1 35127 0.003903\n 2 35424 0.003936\n ...\n 253 \ufffd 35201 0.003911\n 254 \ufffd 34835 0.003871\n 255 \ufffd 35368 0.003930\n\n Total: 9000000 1.000000\n\n Entropy = 7.999979 bits per byte.\n\n Optimum compression would reduce the size\n of this 9000000 byte file by 0 percent.\n\n Chi square distribution for 9000000 samples is 258.77, and randomly\n would exceed this value 42.24 percent of the times.\n\n Arithmetic mean value of data bytes is 127.5006 (127.5 = random).\n Monte Carlo value for Pi is 3.141277333 (error 0.01 percent).\n Serial correlation coefficient is 0.000468 (totally uncorrelated =\n 0.0).\n\nThis change was tested on a Nexus 5 phone (msm8974 SoC)."
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qcom-rng - ensure buffer for generate is completely filled\n\nThe generate function in struct rng_alg expects that the destination\nbuffer is completely filled if the function returns 0. qcom_rng_read()\ncan run into a situation where the buffer is partially filled with\nrandomness and the remaining part of the buffer is zeroed since\nqcom_rng_generate() doesn't check the return value. This issue can\nbe reproduced by running the following from libkcapi:\n\n kcapi-rng -b 9000000 > OUTFILE\n\nThe generated OUTFILE will have three huge sections that contain all\nzeros, and this is caused by the code where the test\n'val & PRNG_STATUS_DATA_AVAIL' fails.\n\nLet's fix this issue by ensuring that qcom_rng_read() always returns\nwith a full buffer if the function returns success. Let's also have\nqcom_rng_generate() return the correct value.\n\nHere's some statistics from the ent project\n(https://www.fourmilab.ch/random/) that shows information about the\nquality of the generated numbers:\n\n $ ent -c qcom-random-before\n Value Char Occurrences Fraction\n 0 606748 0.067416\n 1 33104 0.003678\n 2 33001 0.003667\n ...\n 253 ? 32883 0.003654\n 254 ? 33035 0.003671\n 255 ? 33239 0.003693\n\n Total: 9000000 1.000000\n\n Entropy = 7.811590 bits per byte.\n\n Optimum compression would reduce the size\n of this 9000000 byte file by 2 percent.\n\n Chi square distribution for 9000000 samples is 9329962.81, and\n randomly would exceed this value less than 0.01 percent of the\n times.\n\n Arithmetic mean value of data bytes is 119.3731 (127.5 = random).\n Monte Carlo value for Pi is 3.197293333 (error 1.77 percent).\n Serial correlation coefficient is 0.159130 (totally uncorrelated =\n 0.0).\n\nWithout this patch, the results of the chi-square test is 0.01%, and\nthe numbers are certainly not random according to ent's project page.\nThe results improve with this patch:\n\n $ ent -c qcom-random-after\n Value Char Occurrences Fraction\n 0 35432 0.003937\n 1 35127 0.003903\n 2 35424 0.003936\n ...\n 253 ? 35201 0.003911\n 254 ? 34835 0.003871\n 255 ? 35368 0.003930\n\n Total: 9000000 1.000000\n\n Entropy = 7.999979 bits per byte.\n\n Optimum compression would reduce the size\n of this 9000000 byte file by 0 percent.\n\n Chi square distribution for 9000000 samples is 258.77, and randomly\n would exceed this value 42.24 percent of the times.\n\n Arithmetic mean value of data bytes is 127.5006 (127.5 = random).\n Monte Carlo value for Pi is 3.141277333 (error 0.01 percent).\n Serial correlation coefficient is 0.000468 (totally uncorrelated =\n 0.0).\n\nThis change was tested on a Nexus 5 phone (msm8974 SoC)."
},
{
"lang": "es",
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: crypto: qcom-rng: aseg\u00farese de que el b\u00fafer para generar est\u00e9 completamente lleno. La funci\u00f3n de generaci\u00f3n en la estructura rng_alg espera que el b\u00fafer de destino est\u00e9 completamente lleno si la funci\u00f3n devuelve 0. qcom_rng_read() puede ejecutarse en una situaci\u00f3n en la que el b\u00fafer est\u00e1 parcialmente lleno de aleatoriedad y la parte restante del b\u00fafer se pone a cero ya que qcom_rng_generate() no verifica el valor de retorno. Este problema se puede reproducir ejecutando lo siguiente desde libkcapi: kcapi-rng -b 9000000 > OUTFILE El OUTFILE generado tendr\u00e1 tres secciones enormes que contienen todos ceros, y esto se debe al c\u00f3digo donde falla la prueba 'val & PRNG_STATUS_DATA_AVAIL'. Solucionemos este problema asegur\u00e1ndonos de que qcom_rng_read() siempre regrese con un b\u00fafer lleno si la funci\u00f3n tiene \u00e9xito. Tambi\u00e9n hagamos que qcom_rng_generate() devuelva el valor correcto. Aqu\u00ed hay algunas estad\u00edsticas del proyecto ent (https://www.fourmilab.ch/random/) que muestra informaci\u00f3n sobre la calidad de los n\u00fameros generados: $ ent -c qcom-random-before Valor Char Ocurrencias Fracci\u00f3n 0 606748 0.067416 1 33104 0,003678 2 33001 0,003667 ... 253 ? 32883 0,003654 254 ? 33035 0,003671 255 ? 33239 0,003693 Total: 9000000 1,000000 Entrop\u00eda = 7,811590 bits por byte. Una compresi\u00f3n \u00f3ptima reducir\u00eda el tama\u00f1o de este archivo de 9000000 bytes en un 2 por ciento. La distribuci\u00f3n de chi cuadrado para 9000000 muestras es 9329962,81 y aleatoriamente exceder\u00eda este valor menos del 0,01 por ciento de las veces. El valor medio aritm\u00e9tico de los bytes de datos es 119,3731 (127,5 = aleatorio). El valor de Monte Carlo para Pi es 3,197293333 (error del 1,77 por ciento). El coeficiente de correlaci\u00f3n serial es 0,159130 (totalmente no correlacionado = 0,0). Sin este parche, los resultados de la prueba de chi-cuadrado son del 0,01% y los n\u00fameros ciertamente no son aleatorios seg\u00fan la p\u00e1gina del proyecto de ent. Los resultados mejoran con este parche: $ ent -c qcom-random-after Valor Char Ocurrencias Fracci\u00f3n 0 35432 0.003937 1 35127 0.003903 2 35424 0.003936 ... 253 ? 35201 0,003911 254 ? 34835 0,003871 255 ? 35368 0,003930 Total: 9000000 1,000000 Entrop\u00eda = 7,999979 bits por byte. Una compresi\u00f3n \u00f3ptima reducir\u00eda el tama\u00f1o de este archivo de 9000000 bytes en un 0 por ciento. La distribuci\u00f3n de chi cuadrado para 9000000 muestras es 258,77 y aleatoriamente exceder\u00eda este valor el 42,24 por ciento de las veces. El valor medio aritm\u00e9tico de los bytes de datos es 127,5006 (127,5 = aleatorio). El valor de Monte Carlo para Pi es 3,141277333 (error del 0,01 por ciento). El coeficiente de correlaci\u00f3n serial es 0,000468 (totalmente no correlacionado = 0,0). Este cambio se prob\u00f3 en un tel\u00e9fono Nexus 5 (SoC msm8974)."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.19",
"versionEndExcluding": "4.19.236",
"matchCriteriaId": "D1F07A37-C787-4411-B951-D5CEC6EFBA6D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.187",
"matchCriteriaId": "D9FFB805-4ED2-4FAE-9EF4-8AB4BC9D8F5C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.108",
"matchCriteriaId": "24925527-AC4A-4594-8D6C-3B34D31862C5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.31",
"matchCriteriaId": "F25C317E-A673-47D1-844E-171C9BFDF352"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.16.17",
"matchCriteriaId": "DC9A634D-C617-4F8C-ADEF-AF94CE69D687"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*",
"matchCriteriaId": "7BD5F8D9-54FA-4CB0-B4F0-CB0471FDDB2D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E6E34B23-78B4-4516-9BD8-61B33F4AC49A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*",
"matchCriteriaId": "C030FA3D-03F4-4FB9-9DBF-D08E5CAC51AA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc4:*:*:*:*:*:*",
"matchCriteriaId": "B2D2677C-5389-4AE9-869D-0F881E80D923"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc5:*:*:*:*:*:*",
"matchCriteriaId": "EFA3917C-C322-4D92-912D-ECE45B2E7416"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc6:*:*:*:*:*:*",
"matchCriteriaId": "BED18363-5ABC-4639-8BBA-68E771E5BB3F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc7:*:*:*:*:*:*",
"matchCriteriaId": "7F635F96-FA0A-4769-ADE8-232B3AC9116D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc8:*:*:*:*:*:*",
"matchCriteriaId": "FD39FE73-2A9D-4C92-AE7A-CA22F84B228D"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0f9b7b8df17525e464294c916acc8194ce38446b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/184f7bd08ce56f003530fc19f160d54e75bf5c9d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/485995cbc98a4f77cfd4f8ed4dd7ff8ab262964d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a680b1832ced3b5fa7c93484248fd221ea0d614b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a8e32bbb96c25b7ab29b1894dcd45e0b3b08fd9d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ab9337c7cb6f875b6286440b1adfbeeef2b2b2bd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/0f9b7b8df17525e464294c916acc8194ce38446b",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/184f7bd08ce56f003530fc19f160d54e75bf5c9d",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/485995cbc98a4f77cfd4f8ed4dd7ff8ab262964d",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a680b1832ced3b5fa7c93484248fd221ea0d614b",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a8e32bbb96c25b7ab29b1894dcd45e0b3b08fd9d",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ab9337c7cb6f875b6286440b1adfbeeef2b2b2bd",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
}
]
}
CVE-2023/CVE-2023-04xx/CVE-2023-0496.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-0496",
"sourceIdentifier": "[email protected]",
"published": "2023-03-27T16:15:08.560",
"lastModified": "2024-11-21T07:37:17.537",
"lastModified": "2025-02-14T16:15:32.377",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
CVE-2023/CVE-2023-13xx/CVE-2023-1393.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-1393",
"sourceIdentifier": "[email protected]",
"published": "2023-03-30T21:15:06.557",
"lastModified": "2024-11-21T07:39:05.957",
"lastModified": "2025-02-14T16:15:32.567",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
CVE-2023/CVE-2023-16xx/CVE-2023-1670.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-1670",
"sourceIdentifier": "[email protected]",
"published": "2023-03-30T23:15:06.413",
"lastModified": "2024-11-21T07:39:39.573",
"lastModified": "2025-02-14T16:15:32.807",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
CVE-2023/CVE-2023-261xx/CVE-2023-26116.json
+11 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-26116",
"sourceIdentifier": "[email protected]",
"published": "2023-03-30T05:15:07.410",
"lastModified": "2024-11-21T07:50:48.487",
"lastModified": "2025-02-14T16:15:33.003",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -75,6 +75,16 @@
"value": "CWE-1333"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1333"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-261xx/CVE-2023-26117.json
+11 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-26117",
"sourceIdentifier": "[email protected]",
"published": "2023-03-30T05:15:07.687",
"lastModified": "2024-11-21T07:50:48.630",
"lastModified": "2025-02-14T16:15:33.197",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -75,6 +75,16 @@
"value": "CWE-1333"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1333"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-261xx/CVE-2023-26118.json
+11 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-26118",
"sourceIdentifier": "[email protected]",
"published": "2023-03-30T05:15:07.750",
"lastModified": "2024-11-21T07:50:48.763",
"lastModified": "2025-02-14T16:15:33.347",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -75,6 +75,16 @@
"value": "CWE-1333"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1333"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-275xx/CVE-2023-27536.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-27536",
"sourceIdentifier": "[email protected]",
"published": "2023-03-30T20:15:07.547",
"lastModified": "2024-11-21T07:53:07.250",
"lastModified": "2025-02-14T16:15:33.497",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 3.6
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.2,
"impactScore": 3.6
}
]
},
CVE-2023/CVE-2023-282xx/CVE-2023-28204.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-28204",
"sourceIdentifier": "[email protected]",
"published": "2023-06-23T18:15:11.333",
"lastModified": "2025-02-03T14:15:34.167",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:16:52.540",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2023/CVE-2023-282xx/CVE-2023-28205.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-28205",
"sourceIdentifier": "[email protected]",
"published": "2023-04-10T19:15:07.237",
"lastModified": "2025-01-28T22:15:14.637",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:19:28.840",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2023/CVE-2023-324xx/CVE-2023-32434.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-32434",
"sourceIdentifier": "[email protected]",
"published": "2023-06-23T18:15:13.720",
"lastModified": "2025-02-03T14:15:34.723",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:21:23.733",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2023/CVE-2023-324xx/CVE-2023-32439.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-32439",
"sourceIdentifier": "[email protected]",
"published": "2023-06-23T18:15:13.813",
"lastModified": "2025-02-03T14:15:34.930",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:21:08.937",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2023/CVE-2023-341xx/CVE-2023-34198.json
+91 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-34198",
"sourceIdentifier": "[email protected]",
"published": "2024-02-29T01:39:48.740",
"lastModified": "2024-11-21T08:06:45.600",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:51:57.213",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,101 @@
"value": "En Stormshield Network Security (SNS) 1.0.0 hasta 3.7.36 antes de 3.7.37, 3.8.0 hasta 3.11.24 antes de 3.11.25, 4.0.0 hasta 4.3.18 antes de 4.3.19, 4.4.0 hasta 4.6.5 Antes de 4.6.6 y 4.7.0 antes de 4.7.1, el uso de un objeto de red creado a partir de una interfaz DHCP inactiva en la ranura de filtrado da como resultado el uso de un objeto del tipo \"cualquiera\", que puede tener resultados inesperados para control de acceso."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.0.0",
"versionEndExcluding": "3.7.37",
"matchCriteriaId": "5846B1C5-9E1B-49F5-91E9-0AE2C7863FDE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.8.0",
"versionEndExcluding": "3.11.25",
"matchCriteriaId": "2A2DF2A4-8CA3-431A-B8BB-D493062D5018"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.0.0",
"versionEndExcluding": "4.3.19",
"matchCriteriaId": "6BA1A0D0-CA90-488A-839E-2B837A7DAF7A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.4.0",
"versionEndExcluding": "4.6.6",
"matchCriteriaId": "35AD89FF-2468-42AE-8AE0-5975F7BA7DB3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:stormshield:stormshield_network_security:4.7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "41064506-1A8B-462B-B0CC-935467EB80CA"
}
]
}
]
}
],
"references": [
{
"url": "https://advisories.stormshield.eu/2023-019",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://advisories.stormshield.eu/2023-019",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2023/CVE-2023-374xx/CVE-2023-37450.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-37450",
"sourceIdentifier": "[email protected]",
"published": "2023-07-27T00:15:15.497",
"lastModified": "2025-02-03T14:15:35.167",
"vulnStatus": "Modified",
"lastModified": "2025-02-14T16:21:00.223",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2023/CVE-2023-383xx/CVE-2023-38372.json
+65 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-38372",
"sourceIdentifier": "[email protected]",
"published": "2024-02-29T01:40:10.700",
"lastModified": "2024-11-21T08:13:26.297",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:52:09.427",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -49,24 +69,63 @@
"value": "CWE-287"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:watson_iot_platform:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B4E999CD-E280-4D27-8880-04BCBB5C3BD7"
}
]
}
]
}
],
"references": [
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/261201",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.ibm.com/support/pages/node/7020635",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/261201",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.ibm.com/support/pages/node/7020635",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2023/CVE-2023-411xx/CVE-2023-41165.json
+86 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-41165",
"sourceIdentifier": "[email protected]",
"published": "2024-02-29T01:40:58.383",
"lastModified": "2024-11-21T08:20:42.607",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:52:28.190",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,96 @@
"value": "Se descubri\u00f3 un problema en Stormshield Network Security (SNS) 3.7.0 hasta 3.7.38 antes de 3.7.39, 3.10.0 hasta 3.11.26 antes de 3.11.27, 4.0 hasta 4.3.21 antes de 4.3.22 y 4.4.0 hasta 4.6.8 antes de 4.6.9. Un administrador con acceso de escritura al firewall SNS puede configurar un descargo de responsabilidad de inicio de sesi\u00f3n con elementos JavaScript maliciosos que pueden resultar en el robo de datos."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.7,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.7.0",
"versionEndExcluding": "3.7.39",
"matchCriteriaId": "C3686BA2-0A05-47ED-AC59-D7D308B88756"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.10.0",
"versionEndExcluding": "3.11.27",
"matchCriteriaId": "153F3201-A135-4E7F-A020-F2071094D67D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.0.0",
"versionEndExcluding": "4.3.22",
"matchCriteriaId": "08FE8DAD-7467-42A3-9519-AE2D9A523497"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.4.0",
"versionEndExcluding": "4.6.9",
"matchCriteriaId": "134FC4FC-E0A0-4AD2-85D8-ED8536FD9F13"
}
]
}
]
}
],
"references": [
{
"url": "https://advisories.stormshield.eu/2023-020/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://advisories.stormshield.eu/2023-020/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2023/CVE-2023-458xx/CVE-2023-45874.json
+81 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-45874",
"sourceIdentifier": "[email protected]",
"published": "2024-02-29T01:41:20.007",
"lastModified": "2024-11-21T08:27:32.330",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:52:18.750",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,103 @@
"value": "Se descubri\u00f3 un problema en Couchbase Server hasta 7.2.2. Un lector de datos puede provocar una denegaci\u00f3n de servicio (interrupci\u00f3n de los hilos del lector)."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.5.0",
"versionEndExcluding": "7.2.4",
"matchCriteriaId": "3E120212-B2B1-4E2C-839B-697C65D60C36"
}
]
}
]
}
],
"references": [
{
"url": "https://docs.couchbase.com/server/current/release-notes/relnotes.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://forums.couchbase.com/tags/security",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Issue Tracking"
]
},
{
"url": "https://www.couchbase.com/alerts/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://docs.couchbase.com/server/current/release-notes/relnotes.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Release Notes"
]
},
{
"url": "https://forums.couchbase.com/tags/security",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking"
]
},
{
"url": "https://www.couchbase.com/alerts/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2023/CVE-2023-524xx/CVE-2023-52488.json
+136 -16
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-52488",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-11T18:15:16.603",
"lastModified": "2024-11-21T08:39:53.130",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:40:56.950",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,59 +15,179 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: serial: sc16is7xx: convierte de _raw_ a _noinc_ funciones regmap para FIFO El IC SC16IS7XX admite un modo de r\u00e1faga para acceder a los FIFO donde se env\u00eda la direcci\u00f3n de registro inicial ($00), seguida de todas los datos FIFO sin tener que reenviar la direcci\u00f3n de registro cada vez. En este modo, el IC no incrementa la direcci\u00f3n de registro para cada byte de lectura/escritura. regmap_raw_read() y regmap_raw_write() son funciones que pueden realizar IO en m\u00faltiples registros. Actualmente se utilizan para leer/escribir desde/hacia FIFO y, aunque funcionan correctamente en este modo de r\u00e1faga en el bus SPI, da\u00f1ar\u00edan el cach\u00e9 de regmap si no se desactivara manualmente. La raz\u00f3n es que cuando el tama\u00f1o de lectura y escritura es superior a 1 byte, estas funciones asumen que la direcci\u00f3n del registro se incrementa y manejan la cach\u00e9 en consecuencia. Convierta las funciones FIFO R/W para usar las versiones regmap _noinc_ para eliminar el control de cach\u00e9 manual, que era una soluci\u00f3n alternativa al usar las versiones _raw_. Los registros FIFO se declaran correctamente como vol\u00e1tiles, por lo que la cach\u00e9 no se utilizar\u00e1 ni se actualizar\u00e1 para los accesos FIFO."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.16",
"versionEndExcluding": "6.1.76",
"matchCriteriaId": "5A8E00D5-D743-4A8C-BCDA-A016EC5011B8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.6.15",
"matchCriteriaId": "87C718CB-AE3D-4B07-B4D9-BFF64183C468"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.7.3",
"matchCriteriaId": "58FD5308-148A-40D3-B36A-0CA6B434A8BF"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/084c24e788d9cf29c55564de368bf5284f2bb5db",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/416b10d2817c94db86829fb92ad43ce7d002c573",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4e37416e4ee1b1bc17364a68973e0c63be89e611",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/aa7cb4787698add9367b19f7afc667662c9bdb23",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/dbf4ab821804df071c8b566d9813083125e6d97b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e635f652696ef6f1230621cfd89c350cb5ec6169",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/084c24e788d9cf29c55564de368bf5284f2bb5db",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/416b10d2817c94db86829fb92ad43ce7d002c573",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4e37416e4ee1b1bc17364a68973e0c63be89e611",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/aa7cb4787698add9367b19f7afc667662c9bdb23",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/dbf4ab821804df071c8b566d9813083125e6d97b",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e635f652696ef6f1230621cfd89c350cb5ec6169",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
}
]
}
CVE-2023/CVE-2023-524xx/CVE-2023-52489.json
+176 -16
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-52489",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-11T18:15:16.673",
"lastModified": "2024-11-21T08:39:53.273",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:41:06.000",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,59 +15,219 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: mm/sparsemem: corrige la carrera al acceder a la secci\u00f3n_memoria->uso La siguiente carrera se observa en un PFN que cae en la regi\u00f3n de memoria del dispositivo con la configuraci\u00f3n de memoria del sistema donde los PFN son tales que [ ZONA_NORMAL ZONA_DISPOSITIVO ZONA_NORMAL]. Dado que el pfn de inicio y fin de zona normal tambi\u00e9n contiene los PFN de la memoria del dispositivo, la compactaci\u00f3n activada probar\u00e1 tambi\u00e9n los PFN de la memoria del dispositivo aunque terminen en NOP (porque pfn_to_online_page() devuelve NULL para las secciones de memoria ZONE_DEVICE). Cuando desde otro n\u00facleo, las asignaciones de secci\u00f3n se eliminan para la regi\u00f3n ZONE_DEVICE, a la que pertenece el PFN en cuesti\u00f3n, en la que se est\u00e1 operando la compactaci\u00f3n actualmente, se produce el bloqueo del kernel con CONFIG_SPASEMEM_VMEMAP habilitado. Los registros de fallos se pueden ver en [1]. compact_zone() memunmap_pages ------------- --------------- __pageblock_pfn_to_page ...... (a)pfn_valid(): valid_section()/ /return true (b)__remove_pages()-> sparse_remove_section()-> section_deactivate(): [Libere la matriz ms->usage y establezca ms->usage = NULL] pfn_section_valid() [Acceda a ms->usage que es NULL] NOTA: De lo anterior se puede decir que la carrera se reduce a entre pfn_valid()/pfn_section_valid() y la secci\u00f3n desactivada con SPASEMEM_VMEMAP habilitado. La confirmaci\u00f3n b943f045a9af(\"mm/sparse: fix kernel crash with pfn_section_valid check\") intent\u00f3 solucionar el mismo problema borrando SECTION_HAS_MEM_MAP con la expectativa de que valid_section() devuelva false, por lo que no se accede a ms->usage. Solucione este problema siguiendo los pasos a continuaci\u00f3n: a) Borre SECTION_HAS_MEM_MAP antes de liberar el ->uso. b) La secci\u00f3n cr\u00edtica del lado de lectura protegida por RCU devolver\u00e1 NULL cuando se borre SECTION_HAS_MEM_MAP o podr\u00e1 acceder con \u00e9xito a ->uso. c) Libere ->usage con kfree_rcu() y establezca ms->usage = NULL. No se intentar\u00e1 acceder a ->uso despu\u00e9s de esto, ya que SECTION_HAS_MEM_MAP se borra, por lo que valid_section() devuelve falso. Gracias a David/Pavan por sus aportes en este parche. [1] https://lore.kernel.org/linux-mm/[email protected]/ En Snapdragon SoC, con la configuraci\u00f3n de memoria mencionada de PFN como [ZONE_NORMAL ZONE_DEVICE ZONE_NORMAL], pueden ver una gran cantidad de problemas diariamente mientras realizan pruebas en una granja de dispositivos. Para este problema en particular, a continuaci\u00f3n se encuentra el registro. Aunque el siguiente registro no apunta directamente a pfn_section_valid(){ ms->usage;}, cuando cargamos este volcado en la herramienta Lauterbach T32, s\u00ed apunta. [ 540.578056] No se puede manejar la desreferencia del puntero NULL del kernel en la direcci\u00f3n virtual 0000000000000000 [ 540.578068] Informaci\u00f3n de cancelaci\u00f3n de memoria: [ 540.578070] ESR = 0x0000000096000005 [ 540.578073] EC = 0x25: DABT ( EL actual), IL = 32 bits [ 540.578077] SET = 0 , FnV = 0 [ 540.578080] EA = 0, S1PTW = 0 [ 540.578082] FSC = 0x05: error de traducci\u00f3n de nivel 1 [ 540.578085] Informaci\u00f3n de cancelaci\u00f3n de datos: [ 540.578086] ISV = 0, ISS = 0x00000005 [ 540.578088 ] CM = 0, WnR = 0 [ 540.579431] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBSBTYPE=--) [ 540.579436] pc : __pageblock_pfn_to_page+0x6c/0x14c [ 540.579454] lr : compact_zone+0x994/0x10 58 [540.579460] sp: ffffffc03579b510 [ 540.579463] x29: ffffffc03579b510 x28: 0000000000235800 x27:00000000000000000c [ 540.579470] x26: 0000000000235c00 x25: 0000000000000068 x24:ffffffc03579b640 [ 540.579477] x23: 0000000000000001 x22: ffffffc03579b660 x21:00000000000000000 [ 540.579483] x20: 0 000000000235bff x19: ffffffdebf7e3940 x18:ffffffdebf66d140 [ 540.579489] x17: 00000000739ba063 x16: 00000000739ba063 x15:00000000009f4bff [ 540.579495] x14: 0000008000000000 x13: 00000000000000 00 x12:0000000000000001 [ 540.579501]---truncado---"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.3",
"versionEndExcluding": "5.10.210",
"matchCriteriaId": "5DEE8F5B-E814-4226-B0B3-D1DCB8FA5E14"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.149",
"matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.76",
"matchCriteriaId": "32F0FEB3-5FE1-4400-A56D-886F09BE872E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.6.15",
"matchCriteriaId": "87C718CB-AE3D-4B07-B4D9-BFF64183C468"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.7.3",
"matchCriteriaId": "58FD5308-148A-40D3-B36A-0CA6B434A8BF"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/3a01daace71b521563c38bbbf874e14c3e58adb7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5ec8e8ea8b7783fab150cf86404fc38cb4db8800",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/68ed9e33324021e9d6b798e9db00ca3093d2012a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/70064241f2229f7ba7b9599a98f68d9142e81a97",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/90ad17575d26874287271127d43ef3c2af876cea",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b448de2459b6d62a53892487ab18b7d823ff0529",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3a01daace71b521563c38bbbf874e14c3e58adb7",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5ec8e8ea8b7783fab150cf86404fc38cb4db8800",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/68ed9e33324021e9d6b798e9db00ca3093d2012a",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/70064241f2229f7ba7b9599a98f68d9142e81a97",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/90ad17575d26874287271127d43ef3c2af876cea",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b448de2459b6d62a53892487ab18b7d823ff0529",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
}
]
}
CVE-2023/CVE-2023-524xx/CVE-2023-52494.json
+128 -13
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-52494",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-11T18:15:17.000",
"lastModified": "2024-11-21T08:39:53.987",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:41:13.837",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,47 +15,162 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bus: mhi: host: agregar verificaci\u00f3n de alineaci\u00f3n para el puntero de lectura del anillo de eventos. Aunque verificamos el puntero de lectura del anillo de eventos mediante \"is_valid_ring_ptr\" para asegurarnos de que est\u00e9 en el rango del b\u00fafer, pero existe otro riesgo de que el puntero no est\u00e9 alineado. Dado que esperamos que los elementos del anillo de eventos est\u00e9n alineados con 128 bits (struct mhi_ring_element), un puntero de lectura no alineado podr\u00eda provocar m\u00faltiples problemas como DoS o corrupci\u00f3n de la memoria del b\u00fafer del anillo. Por lo tanto, agregue una verificaci\u00f3n de alineaci\u00f3n para el puntero de lectura del anillo de eventos."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.13",
"versionEndExcluding": "5.15.149",
"matchCriteriaId": "35E631A3-4D05-4FC9-8CF5-E3E21448663F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.76",
"matchCriteriaId": "32F0FEB3-5FE1-4400-A56D-886F09BE872E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.6.15",
"matchCriteriaId": "87C718CB-AE3D-4B07-B4D9-BFF64183C468"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.7.3",
"matchCriteriaId": "58FD5308-148A-40D3-B36A-0CA6B434A8BF"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
}
]
}
CVE-2023/CVE-2023-524xx/CVE-2023-52495.json
+94 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-52495",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-11T18:15:17.060",
"lastModified": "2024-11-21T08:39:54.103",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:39:14.523",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,116 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: soc: qcom: pmic_glink_altmode: corregir la comprobaci\u00f3n de la integridad del puerto el controlador PMIC GLINK altmode actualmente admite como m\u00e1ximo dos puertos. Se corrige la verificaci\u00f3n incompleta de la integridad del puerto en las notificaciones para evitar acceder y da\u00f1ar la memoria m\u00e1s all\u00e1 del conjunto de puertos si alguna vez recibimos una notificaci\u00f3n de un puerto no compatible."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.3",
"versionEndExcluding": "6.6.15",
"matchCriteriaId": "FB27F895-1DBC-4989-B3A8-4327A549A9BC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.7.3",
"matchCriteriaId": "58FD5308-148A-40D3-B36A-0CA6B434A8BF"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/532a5557da6892a6b2d5793052e1bce1f4c9e177",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c4fb7d2eac9ff9bfc35a2e4d40c7169a332416e0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d26edf4ee3672cc9828f2a3ffae34086a712574d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/532a5557da6892a6b2d5793052e1bce1f4c9e177",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c4fb7d2eac9ff9bfc35a2e4d40c7169a332416e0",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d26edf4ee3672cc9828f2a3ffae34086a712574d",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
}
]
}
CVE-2023/CVE-2023-525xx/CVE-2023-52586.json
+76 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-52586",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-06T07:15:07.443",
"lastModified": "2024-11-21T08:40:07.803",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:38:51.950",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,92 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/msm/dpu: agregue un bloqueo mutex en el control vblank irq. Agregue un bloqueo mutex para controlar vblank irq para sincronizar las operaciones de activaci\u00f3n/desactivaci\u00f3n de vblank que ocurren desde diferentes subprocesos para evitar condiciones de ejecuci\u00f3n durante el registro. /anular el registro de la devoluci\u00f3n de llamada vblank irq. v4: -Se elimin\u00f3 vblank_ctl_lock de dpu_encoder_virt, por lo que es solo un par\u00e1metro de dpu_encoder_phys. -Cambiar de refcnt at\u00f3mico a un contador int simple ya que ahora se ha agregado mutex v3: por error no cambi\u00f3 la redacci\u00f3n en la \u00faltima versi\u00f3n. Ya est\u00e1 hecho. v2: redacci\u00f3n ligeramente modificada del mensaje de confirmaci\u00f3n Patchwork: https://patchwork.freedesktop.org/patch/571854/"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.7.4",
"matchCriteriaId": "700BC119-5E42-40C5-98D6-59BFBDFAB9A9"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/14f109bf74dd67e1d0469fed859c8e506b0df53f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/45284ff733e4caf6c118aae5131eb7e7cf3eea5a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/14f109bf74dd67e1d0469fed859c8e506b0df53f",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/45284ff733e4caf6c118aae5131eb7e7cf3eea5a",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
}
]
}
CVE-2023/CVE-2023-525xx/CVE-2023-52587.json
+206 -21
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-52587",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-06T07:15:07.633",
"lastModified": "2024-11-21T08:40:07.910",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:39:59.647",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,79 +15,264 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: IB/ipoib: corrige el bloqueo de la lista mcast Al liberar `priv->lock` mientras se itera `priv->multicast_list` en `ipoib_mcast_join_task()`, se abre una ventana para `ipoib_mcast_dev_flush( )` para eliminar los elementos mientras se encuentra en medio de la iteraci\u00f3n. Si se elimina mcast mientras se elimina el bloqueo, el bucle for gira para siempre, lo que resulta en un bloqueo total (como se inform\u00f3 en el kernel RHEL 4.18.0-372.75.1.el8_6): Tarea A (kworker/u72:2 a continuaci\u00f3n) | Tarea B (kworker/u72:0 a continuaci\u00f3n) -----------------------------------+---- ------------------------------- ipoib_mcast_join_task(trabajo) | ipoib_ib_dev_flush_light(trabajo) spin_lock_irq(&priv->lock) | __ipoib_ib_dev_flush(priv, ...) list_for_each_entry(mcast, | ipoib_mcast_dev_flush(dev = priv->dev) &priv->multicast_list, lista) | ipoib_mcast_join(dev, mcast) | spin_unlock_irq(&priv->bloquear) | | spin_lock_irqsave(&priv->bloqueo, banderas) | list_for_each_entry_safe(mcast, tmcast, | &priv->multicast_list, lista) | list_del(&mcast->lista); | list_add_tail(&mcast->lista, &remove_list) | spin_unlock_irqrestore(&priv->bloquear, banderas) spin_lock_irq(&priv->bloquear) | | ipoib_mcast_remove_list(&remove_list) (Aqu\u00ed, `mcast` ya no est\u00e1 en | list_for_each_entry_safe(mcast, tmcast, `priv->multicast_list` y seguimos | remove_list, list) girando en `remove_list` de | >>> wait_for_completion(&mcast ->hecho) el otro hilo que est\u00e1 bloqueado | y la lista sigue siendo v\u00e1lida | en su pila.) Solucione este problema manteniendo el bloqueo mantenido y cambiando a GFP_ATOMIC para evitar eventuales suspensiones. Desafortunadamente, no pudimos reproducir el bloqueo y confirmar esta soluci\u00f3n, pero seg\u00fan la revisi\u00f3n del c\u00f3digo, creo que esta soluci\u00f3n deber\u00eda abordar dichos bloqueos. crash> bc 31 PID: 747 TAREA: ff1c6a1a007e8000 CPU: 31 COMANDO: \"kworker/u72:2\" -- [excepci\u00f3n RIP: ipoib_mcast_join_task+0x1b1] RIP: ffffffffc0944ac1 RSP: ff646f199a8c7e00 RFLAGS: 000000 02 RAX: 0000000000000000 RBX: ff1c6a1a04dc82f8 RCX: 00000000000000000 trabajo (&priv->mcast_task{,.work}) RDX: ff1c6a192d60ac68 RSI: 0000000000000286 RDI: ff1c6a1a04dc8000 &mcast->list RBP: ff646f199a8c7e90 R8: ff1c699980019420 R9: ff 1c6a1920c9a000 R10: ff646f199a8c7e00 R11: ff1c6a191a7d9800 R12: ff1c6a192d60ac00 mcast R13: ff1c6a1d82200000 R14: ff1c6a1a04dc8000 R15: ff1c6a1a04dc82d8 dev priv (&priv->lock) &priv->multicast_list (tambi\u00e9n conocido como head) ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 --- --- #5 [ff646f199a8c7e00] ipoib_mcast_join_task+0x1b1 en ffffff ffc0944ac1 [ ib_ipoib] #6 [ff646f199a8c7e98] Process_one_work+0x1a7 en ffffffff9bf10967 crash> rx ff646f199a8c7e68 ff646f199a8c7e68: ff1c6a1a04dc82f8 <<< work = &priv->mcast_task.work crash> lista -hO ipoib_dev_priv.multicast_list ff1c6a1a04dc8000 (vac\u00edo) falla> ipoib_dev_priv.mcast_task.work. func,mcast_mutex.owner.counter ff1c6a1a04dc8000 mcast_task.work.func = 0xffffffffc0944910 , mcast_mutex.owner.counter = 0xff1c69998efec000 crash> b 8 PID: 8 TAREA: ff1c69998efec000 CPU: 33 COMANDO: \"kworker/u72:0\" -- #3 [ff646f1980153d50] wait_for_completion+0x96 en ffffffff9c7d7646 #4 [ff646f1980153d90] ipoib_mcast_remove_list+0x56 en ffffffffc0944dc6 [ib_ipoib] #5 [ff646f1980153de8] ipoib_ mcast_dev_flush+0x1a7 en ffffffffc09455a7 [ib_ipoib] #6 [ff646f1980153e58] __ipoib_ib_dev_flush+0x1a4 en ffffffffc09431a4 [ib_ipoib] # 7 [ff ---truncado---"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-667"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.19.307",
"matchCriteriaId": "4B4E1A83-9957-4265-94C0-516374C8CCFD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.269",
"matchCriteriaId": "319545F3-D56C-4751-BEBF-0505478BBAE8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.210",
"matchCriteriaId": "F5CB4CA6-A9A0-4AFD-9102-8CF94D708170"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.149",
"matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.77",
"matchCriteriaId": "0FA28946-970D-4F4D-B759-4E77B28809B5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.6.16",
"matchCriteriaId": "A5007D6A-4B58-423A-8A3A-A1A656A263C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.7.4",
"matchCriteriaId": "848BC44C-9D25-4557-A50A-4B8BF310FA78"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/342258fb46d66c1b4c7e2c3717ac01e10c03cf18",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4c8922ae8eb8dcc1e4b7d1059d97a8334288d825",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4f973e211b3b1c6d36f7c6a19239d258856749f9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5108a2dc2db5630fb6cd58b8be80a0c134bc310a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/615e3adc2042b7be4ad122a043fc9135e6342c90",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7c7bd4d561e9dc6f5b7df9e184974915f6701a89",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ac2630fd3c90ffec34a0bfc4d413668538b0e8f2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ed790bd0903ed3352ebf7f650d910f49b7319b34",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/342258fb46d66c1b4c7e2c3717ac01e10c03cf18",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4c8922ae8eb8dcc1e4b7d1059d97a8334288d825",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4f973e211b3b1c6d36f7c6a19239d258856749f9",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5108a2dc2db5630fb6cd58b8be80a0c134bc310a",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/615e3adc2042b7be4ad122a043fc9135e6342c90",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7c7bd4d561e9dc6f5b7df9e184974915f6701a89",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ac2630fd3c90ffec34a0bfc4d413668538b0e8f2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ed790bd0903ed3352ebf7f650d910f49b7319b34",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Patch"
]
}
]
}
CVE-2023/CVE-2023-525xx/CVE-2023-52588.json
+127 -13
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-52588",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-06T07:15:07.820",
"lastModified": "2024-11-21T08:40:08.047",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:40:14.407",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,47 +15,161 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: f2fs: correcci\u00f3n para etiquetar el indicador gcing en la p\u00e1gina durante la migraci\u00f3n de bloques. Es necesario agregar el indicador gcing faltante en la p\u00e1gina durante la migraci\u00f3n de bloques, para garantizar que los datos migrados persistan durante el punto de control; de lo contrario, no estar\u00e1n disponibles. La persistencia del orden entre los datos y el nodo puede provocar da\u00f1os en los datos despu\u00e9s de SPOR. Se solucion\u00f3 un problema similar mediante el commit 2d1fe8a86bf5 (\"f2fs: correcci\u00f3n para etiquetar el indicador gcing en la p\u00e1gina durante la desfragmentaci\u00f3n del archivo\")."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.149",
"matchCriteriaId": "78D569F8-1D0B-426D-84B5-EFFE28C63F33"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.77",
"matchCriteriaId": "0FA28946-970D-4F4D-B759-4E77B28809B5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.6.16",
"matchCriteriaId": "A5007D6A-4B58-423A-8A3A-A1A656A263C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.7.4",
"matchCriteriaId": "848BC44C-9D25-4557-A50A-4B8BF310FA78"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/417b8a91f4e8831cadaf85c3f15c6991c1f54dde",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4961acdd65c956e97c1a000c82d91a8c1cdbe44b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7c972c89457511007dfc933814c06786905e515c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7ea0f29d9fd84905051be020c0df7d557e286136",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b8094c0f1aae329b1c60a275a780d6c2c9ff7aa3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/417b8a91f4e8831cadaf85c3f15c6991c1f54dde",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4961acdd65c956e97c1a000c82d91a8c1cdbe44b",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7c972c89457511007dfc933814c06786905e515c",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7ea0f29d9fd84905051be020c0df7d557e286136",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b8094c0f1aae329b1c60a275a780d6c2c9ff7aa3",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
}
]
}
CVE-2023/CVE-2023-525xx/CVE-2023-52589.json
+110 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-52589",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-06T07:15:08.053",
"lastModified": "2024-11-21T08:40:08.160",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:40:27.767",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,138 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: medios: rkisp1: Solucionar el problema de ejecuci\u00f3n de desactivaci\u00f3n de IRQ En rkisp1_isp_stop() y rkisp1_csi_disable() el controlador enmascara las interrupciones y aparentemente asume que el controlador de interrupciones no se ejecutar\u00e1 y contin\u00faa en el procedimiento de parada. Este no es el caso, ya que el controlador de interrupciones puede estar ejecut\u00e1ndose, lo que llevar\u00eda a que el ISP se deshabilite mientras el controlador de interrupciones maneja una trama capturada. Esto plantea dos problemas: 1) el ISP podr\u00eda apagarse mientras el controlador de interrupciones a\u00fan est\u00e1 ejecut\u00e1ndose y accediendo a los registros, lo que provoca el bloqueo de la placa, y 2) el c\u00f3digo del controlador de interrupciones y el c\u00f3digo que deshabilita la transmisi\u00f3n pueden hacer cosas que entren en conflicto. No me queda claro si 2) causa un problema real, pero 1) se puede ver con un retraso adecuado (o printk en mi caso) en el controlador de interrupciones, lo que provoca el bloqueo de la placa."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.1.77",
"matchCriteriaId": "F749AC21-58DA-44BE-B3C5-7C53F294A67A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.6.16",
"matchCriteriaId": "A5007D6A-4B58-423A-8A3A-A1A656A263C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.7.4",
"matchCriteriaId": "848BC44C-9D25-4557-A50A-4B8BF310FA78"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/7bb1a2822aa2c2de4e09bf7c56dd93bd532f1fa7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/870565f063a58576e8a4529f122cac4325c6b395",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/bf808f58681cab64c81cd814551814fd34e540fe",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fab483438342984f2a315fe13c882a80f0f7e545",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7bb1a2822aa2c2de4e09bf7c56dd93bd532f1fa7",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/870565f063a58576e8a4529f122cac4325c6b395",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/bf808f58681cab64c81cd814551814fd34e540fe",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fab483438342984f2a315fe13c882a80f0f7e545",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
}
]
}
CVE-2023/CVE-2023-525xx/CVE-2023-52590.json
+76 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-52590",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-06T07:15:08.297",
"lastModified": "2024-11-21T08:40:08.270",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:40:22.487",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,92 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: ocfs2: evite tocar el directorio renombrado si el padre no cambia. El VFS no bloquear\u00e1 el directorio movido si su padre no cambia. Cambie el c\u00f3digo de cambio de nombre de ocfs2 para evitar tocar el directorio renombrado si su padre no cambia sin bloquearlo, lo que puede da\u00f1ar el sistema de archivos."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-667"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.7.4",
"matchCriteriaId": "700BC119-5E42-40C5-98D6-59BFBDFAB9A9"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/9d618d19b29c2943527e3a43da0a35aea91062fc",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/de940cede3c41624e2de27f805b490999f419df9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9d618d19b29c2943527e3a43da0a35aea91062fc",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/de940cede3c41624e2de27f805b490999f419df9",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
}
]
}
CVE-2023/CVE-2023-525xx/CVE-2023-52596.json
+93 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-52596",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-06T07:15:09.657",
"lastModified": "2024-11-21T08:40:08.960",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:40:33.420",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,115 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: sysctl: corrige el acceso fuera de los l\u00edmites para registros sysctl vac\u00edos. Al registrar tablas en el subsistema sysctl, se verifica si el encabezado es un directorio permanentemente vac\u00edo (usado para montajes). Esta verificaci\u00f3n eval\u00faa el primer elemento de ctl_table. Esto da como resultado una evaluaci\u00f3n fuera de los l\u00edmites al registrar directorios vac\u00edos. La funci\u00f3n Register_sysctl_mount_point ahora pasa un ctl_table de tama\u00f1o 1 en lugar de tama\u00f1o 0. Ahora se basa \u00fanicamente en el tipo para identificar un registro permanentemente vac\u00edo. Aseg\u00farese de que ctl_table tenga al menos un elemento antes de probar el vac\u00edo permanente."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.6.16",
"matchCriteriaId": "B2A20DFF-CC52-4C2A-B02B-1566023E2A93"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.7.4",
"matchCriteriaId": "848BC44C-9D25-4557-A50A-4B8BF310FA78"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/15893975e9e382f8294ea8d926f08dc2d8d39ede",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2ae7081bc10123b187e36a4f3a8e53768de31489",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/315552310c7de92baea4e570967066569937a843",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/15893975e9e382f8294ea8d926f08dc2d8d39ede",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2ae7081bc10123b187e36a4f3a8e53768de31489",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/315552310c7de92baea4e570967066569937a843",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
}
]
}
CVE-2023/CVE-2023-525xx/CVE-2023-52598.json
+183 -20
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-52598",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-06T07:15:09.990",
"lastModified": "2024-11-21T08:40:09.280",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:40:38.513",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,75 +15,238 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: s390/ptrace: maneja la configuraci\u00f3n del registro fpc correctamente Si el contenido del registro de control de punto flotante (fpc) de un proceso rastreado se modifica con la interfaz ptrace, se prueba el nuevo valor validez carg\u00e1ndolo temporalmente en el registro fpc. Esto puede conducir a la corrupci\u00f3n del registro fpc del proceso de seguimiento: si ocurre una interrupci\u00f3n mientras el valor se carga temporalmente en el registro fpc, y dentro del contexto de interrupci\u00f3n se utilizan registros de punto flotante o vectoriales, los registros fp/vx actuales se guardan con save_fpu_regs() suponiendo que pertenecen al espacio del usuario y se cargar\u00e1n en los registros fp/vx cuando regresen al espacio del usuario. test_fp_ctl() restaura el valor del registro fpc del espacio de usuario original; sin embargo, se descartar\u00e1 al regresar al espacio de usuario. Como resultado, el rastreador continuar\u00e1 ejecut\u00e1ndose incorrectamente con el valor que se supon\u00eda que deb\u00eda usarse para el proceso rastreado. Solucione este problema guardando el contenido del registro fpu con save_fpu_regs() antes de usar test_fp_ctl()."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.19.307",
"matchCriteriaId": "4B4E1A83-9957-4265-94C0-516374C8CCFD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.269",
"matchCriteriaId": "319545F3-D56C-4751-BEBF-0505478BBAE8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.210",
"matchCriteriaId": "F5CB4CA6-A9A0-4AFD-9102-8CF94D708170"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.149",
"matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.77",
"matchCriteriaId": "0FA28946-970D-4F4D-B759-4E77B28809B5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.6.16",
"matchCriteriaId": "A5007D6A-4B58-423A-8A3A-A1A656A263C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.7.4",
"matchCriteriaId": "848BC44C-9D25-4557-A50A-4B8BF310FA78"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/02c6bbfb08bad78dd014e24c7b893723c15ec7a1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/28a1f492cb527f64593457a0a0f0d809b3f36c25",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/6ccf904aac0292e1f6b1a1be6c407c414f7cf713",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/6d0822f2cc9b153bf2df49a84599195a2e0d21a8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7a4d6481fbdd661f9e40e95febb95e3dee82bad3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/856caf2730ea18cb39e95833719c02a02447dc0a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8b13601d19c541158a6e18b278c00ba69ae37829",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/bdce67df7f12fb0409fbc604ce7c4254703f56d4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/02c6bbfb08bad78dd014e24c7b893723c15ec7a1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/28a1f492cb527f64593457a0a0f0d809b3f36c25",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/6ccf904aac0292e1f6b1a1be6c407c414f7cf713",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/6d0822f2cc9b153bf2df49a84599195a2e0d21a8",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7a4d6481fbdd661f9e40e95febb95e3dee82bad3",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/856caf2730ea18cb39e95833719c02a02447dc0a",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8b13601d19c541158a6e18b278c00ba69ae37829",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/bdce67df7f12fb0409fbc604ce7c4254703f56d4",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
}
]
}
CVE-2023/CVE-2023-526xx/CVE-2023-52606.json
+183 -20
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-52606",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-06T07:15:11.750",
"lastModified": "2024-11-21T08:40:10.473",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:40:45.753",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,75 +15,238 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: powerpc/lib: validar tama\u00f1o para operaciones vectoriales Parte del c\u00f3digo fp/vmx en sstep.c asume un cierto tama\u00f1o m\u00e1ximo para las instrucciones que se emula. Sin embargo, el tama\u00f1o de esas operaciones se determina por separado en analyse_instr(). Agregue una verificaci\u00f3n para validar la suposici\u00f3n sobre el tama\u00f1o m\u00e1ximo de las operaciones, a fin de evitar da\u00f1os no deseados en la pila del kernel."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.19.307",
"matchCriteriaId": "4B4E1A83-9957-4265-94C0-516374C8CCFD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.269",
"matchCriteriaId": "319545F3-D56C-4751-BEBF-0505478BBAE8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.210",
"matchCriteriaId": "F5CB4CA6-A9A0-4AFD-9102-8CF94D708170"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.149",
"matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.77",
"matchCriteriaId": "0FA28946-970D-4F4D-B759-4E77B28809B5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.6.16",
"matchCriteriaId": "A5007D6A-4B58-423A-8A3A-A1A656A263C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.7.4",
"matchCriteriaId": "848BC44C-9D25-4557-A50A-4B8BF310FA78"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0580f4403ad33f379eef865c2a6fe94de37febdf",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/28b8ba8eebf26f66d9f2df4ba550b6b3b136082c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/42084a428a139f1a429f597d44621e3a18f3e414",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/848e1d7fd710900397e1d0e7584680c1c04e3afd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8f9abaa6d7de0a70fc68acaedce290c1f96e2e59",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/abd26515d4b767ba48241eea77b28ce0872aef3e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/beee482cc4c9a6b1dcffb2e190b4fd8782258678",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/de4f5ed63b8a199704d8cdcbf810309d7eb4b36b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/0580f4403ad33f379eef865c2a6fe94de37febdf",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/28b8ba8eebf26f66d9f2df4ba550b6b3b136082c",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/42084a428a139f1a429f597d44621e3a18f3e414",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/848e1d7fd710900397e1d0e7584680c1c04e3afd",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8f9abaa6d7de0a70fc68acaedce290c1f96e2e59",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/abd26515d4b767ba48241eea77b28ce0872aef3e",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/beee482cc4c9a6b1dcffb2e190b4fd8782258678",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/de4f5ed63b8a199704d8cdcbf810309d7eb4b36b",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Patch"
]
}
]
}
CVE-2023/CVE-2023-56xx/CVE-2023-5617.json
+65 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-5617",
"sourceIdentifier": "[email protected]",
"published": "2024-02-28T23:15:08.260",
"lastModified": "2024-11-21T08:42:07.747",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:31:44.250",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
@@ -49,16 +69,57 @@
"value": "CWE-550"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-209"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:hitachi:vantara_pentaho_data_integration_and_analytics:*:*:*:*:*:*:*:*",
"versionEndExcluding": "9.3.0.6",
"matchCriteriaId": "65B55200-AC61-43D9-A888-2ECF5EB4E599"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:hitachi:vantara_pentaho_data_integration_and_analytics:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.4.0.0",
"versionEndExcluding": "10.1.0.0",
"matchCriteriaId": "A5D3DFFA-135C-4488-BEE7-B9CC83993245"
}
]
}
]
}
],
"references": [
{
"url": "https://support.pentaho.com/hc/en-us/articles/24313358254861--Resolved-Hitachi-Vantara-Pentaho-Data-Integration-Analytics-Server-generated-Error-Message-Containing-Sensitive-Information-Versions-before-10-1-0-0-and-9-3-0-6-including-all-versions-before-10-0-x-Impacted-CVE-2023-5617",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://support.pentaho.com/hc/en-us/articles/24313358254861--Resolved-Hitachi-Vantara-Pentaho-Data-Integration-Analytics-Server-generated-Error-Message-Containing-Sensitive-Information-Versions-before-10-1-0-0-and-9-3-0-6-including-all-versions-before-10-0-x-Impacted-CVE-2023-5617",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2023/CVE-2023-71xx/CVE-2023-7115.json
+66 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-7115",
"sourceIdentifier": "[email protected]",
"published": "2024-02-27T09:15:37.197",
"lastModified": "2024-11-21T08:45:18.690",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:22:36.653",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,76 @@
"value": "El complemento Page Builder: Pagelayer de WordPress anterior a 1.8.1 no sanitiza ni escapa a algunas de sus configuraciones, lo que podr\u00eda permitir a usuarios con privilegios elevados, como el administrador, realizar ataques de Cross-Site Scripting Almacenado incluso cuando la capacidad unfiltered_html no est\u00e1 permitida (por ejemplo, en una configuraci\u00f3n multisitio)."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.7,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:pagelayer:pagelayer:*:*:*:*:*:wordpress:*:*",
"versionEndExcluding": "1.8.1",
"matchCriteriaId": "22600411-1723-47B3-8708-29D85A6CFC58"
}
]
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/6ddd1a9e-3f96-4020-9b2b-f818a4d5ba58/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://wpscan.com/vulnerability/6ddd1a9e-3f96-4020-9b2b-f818a4d5ba58/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-217xx/CVE-2024-21742.json
+72 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-21742",
"sourceIdentifier": "[email protected]",
"published": "2024-02-27T17:15:12.030",
"lastModified": "2025-02-13T18:16:44.483",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-02-14T15:27:18.527",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,7 +15,30 @@
"value": "La validaci\u00f3n de entrada incorrecta permite la inyecci\u00f3n de encabezado en la librer\u00eda MIME4J cuando se usa MIME4J DOM para redactar mensajes. Un atacante puede aprovechar esto para agregar encabezados no deseados a los mensajes MIME."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
@@ -26,24 +49,66 @@
"value": "CWE-20"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:james_mime4j:*:*:*:*:*:*:*:*",
"versionEndIncluding": "0.8.9",
"matchCriteriaId": "C01C6CB8-02C8-41E1-8434-689F27347345"
}
]
}
]
}
],
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2024/02/27/5",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Mailing List"
]
},
{
"url": "https://lists.apache.org/thread/nrqzg93219wdj056pqfszsd33dc54kfy",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Mailing List",
"Vendor Advisory"
]
},
{
"url": "http://www.openwall.com/lists/oss-security/2024/02/27/5",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
},
{
"url": "https://lists.apache.org/thread/nrqzg93219wdj056pqfszsd33dc54kfy",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-217xx/CVE-2024-21798.json
+322 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-21798",
"sourceIdentifier": "[email protected]",
"published": "2024-02-28T23:15:09.453",
"lastModified": "2024-11-26T09:15:05.723",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:32:23.757",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -16,6 +16,28 @@
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.7,
"impactScore": 2.7
}
],
"cvssMetricV30": [
{
"source": "[email protected]",
@@ -51,22 +73,316 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-1167gs2-b_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.73",
"matchCriteriaId": "562FC1F4-4B24-427E-981F-FABA8C270E24"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-1167gs2-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "30C37403-F848-4FD4-9AC3-FED5BF871163"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-1167gs2h-b_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.73",
"matchCriteriaId": "4044F887-CB21-49E5-A6F5-E8D6FF13E757"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-1167gs2h-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E9E9EB42-AFE2-44DB-83A3-A9E74BB9A010"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-1167gst2_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.34",
"matchCriteriaId": "185BD8AF-8C0C-4528-9CF3-6C6FC7869C0E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-1167gst2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F9045F74-985E-4C3C-AC10-14FD9B61A746"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-2533gs2-b_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.68",
"matchCriteriaId": "FAE30FA6-A244-4781-9397-7A56E74B7FF8"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-2533gs2-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D9FF3CB7-7F2E-472A-A2A3-ED599F4FC99C"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-2533gs2-w_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.68",
"matchCriteriaId": "5A6660BB-9A29-4C6E-8E6C-9AAD663669A7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-2533gs2-w:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ECD9F0FE-1232-4C39-AA86-2D616E4D39C6"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-2533gs2v-b_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.68",
"matchCriteriaId": "2EAD43E5-BC22-4008-BA9B-97DD6F3344D4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-2533gs2v-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "69FF2911-A946-4E48-B50A-F1F5EC95BBCC"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-2533gst2_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.31",
"matchCriteriaId": "A42CBC3B-C096-4622-8072-3CE279FBA4A0"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-2533gst2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "85BF0A23-43C9-4497-BDDF-9366642503ED"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-x3200gst3-b_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.27",
"matchCriteriaId": "82307DBF-148B-4D72-8BB2-1574068A3E4E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-x3200gst3-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7DF4AD14-A9E3-4797-A201-BBE34BBCEDD3"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-g01-w_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.26",
"matchCriteriaId": "09D59756-26E6-4FFE-8C4C-09904BE42A7E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-g01-w:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7FFAFF4E-7884-455C-AE6D-B5600C0EEA73"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wmc-x1800gst-b_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.42",
"matchCriteriaId": "864689A8-CA48-466F-B675-47F777F948AC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wmc-x1800gst-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "40476229-3AC2-4A0F-BCC4-A170879441F9"
}
]
}
]
}
],
"references": [
{
"url": "https://jvn.jp/en/jp/JVN44166658/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.elecom.co.jp/news/security/20240220-01/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://jvn.jp/en/jp/JVN44166658/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.elecom.co.jp/news/security/20240220-01/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-239xx/CVE-2024-23910.json
+348 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-23910",
"sourceIdentifier": "[email protected]",
"published": "2024-02-28T23:15:09.557",
"lastModified": "2024-11-26T09:15:05.877",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:32:35.843",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -17,6 +17,26 @@
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
@@ -73,22 +93,344 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-1167gs2-b_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.73",
"matchCriteriaId": "562FC1F4-4B24-427E-981F-FABA8C270E24"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-1167gs2-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "30C37403-F848-4FD4-9AC3-FED5BF871163"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-1167gs2h-b_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.73",
"matchCriteriaId": "4044F887-CB21-49E5-A6F5-E8D6FF13E757"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-1167gs2h-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E9E9EB42-AFE2-44DB-83A3-A9E74BB9A010"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-1167gst2_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.34",
"matchCriteriaId": "185BD8AF-8C0C-4528-9CF3-6C6FC7869C0E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-1167gst2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F9045F74-985E-4C3C-AC10-14FD9B61A746"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-2533gs2-b_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.68",
"matchCriteriaId": "FAE30FA6-A244-4781-9397-7A56E74B7FF8"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-2533gs2-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D9FF3CB7-7F2E-472A-A2A3-ED599F4FC99C"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-2533gs2-w_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.68",
"matchCriteriaId": "5A6660BB-9A29-4C6E-8E6C-9AAD663669A7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-2533gs2-w:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ECD9F0FE-1232-4C39-AA86-2D616E4D39C6"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-2533gs2v-b_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.68",
"matchCriteriaId": "2EAD43E5-BC22-4008-BA9B-97DD6F3344D4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-2533gs2v-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "69FF2911-A946-4E48-B50A-F1F5EC95BBCC"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-2533gst2_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.31",
"matchCriteriaId": "A42CBC3B-C096-4622-8072-3CE279FBA4A0"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-2533gst2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "85BF0A23-43C9-4497-BDDF-9366642503ED"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-x3200gst3-b_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.27",
"matchCriteriaId": "82307DBF-148B-4D72-8BB2-1574068A3E4E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-x3200gst3-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7DF4AD14-A9E3-4797-A201-BBE34BBCEDD3"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wrc-g01-w_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.26",
"matchCriteriaId": "09D59756-26E6-4FFE-8C4C-09904BE42A7E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wrc-g01-w:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7FFAFF4E-7884-455C-AE6D-B5600C0EEA73"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wmc-x1800gst-b_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.42",
"matchCriteriaId": "864689A8-CA48-466F-B675-47F777F948AC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wmc-x1800gst-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "40476229-3AC2-4A0F-BCC4-A170879441F9"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:elecom:wsc-x1800gs-b_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.42",
"matchCriteriaId": "69C6859E-9EE5-45C9-BE42-22D0F6DED34C"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:elecom:wsc-x1800gs-b:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F150E210-8EDC-4183-BF72-F115A82F8E5A"
}
]
}
]
}
],
"references": [
{
"url": "https://jvn.jp/en/jp/JVN44166658/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.elecom.co.jp/news/security/20240220-01/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://jvn.jp/en/jp/JVN44166658/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.elecom.co.jp/news/security/20240220-01/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-241xx/CVE-2024-24100.json
+63 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-24100",
"sourceIdentifier": "[email protected]",
"published": "2024-02-27T02:15:06.720",
"lastModified": "2024-11-21T08:58:55.273",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:22:01.353",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,73 @@
"value": "Code-projects Computer Book Store 1.0 es vulnerable a la inyecci\u00f3n SQL a trav\u00e9s de PublisherID."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:code-projects:computer_book_store:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B0ED63B2-B87D-4609-929C-B8AF30183BCA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/ASR511-OO7/CVE-2024-24100/blob/main/CVE-18",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://github.com/ASR511-OO7/CVE-2024-24100/blob/main/CVE-18",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-251xx/CVE-2024-25126.json
+135 -16
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-25126",
"sourceIdentifier": "[email protected]",
"published": "2024-02-29T00:15:51.200",
"lastModified": "2024-11-21T09:00:18.637",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:51:19.243",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -49,64 +69,163 @@
"value": "CWE-1333"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-1333"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
"versionStartIncluding": "0.4",
"versionEndExcluding": "2.2.8.1",
"matchCriteriaId": "D889CDED-E3D8-4C8C-9D3C-F6B8675A01C5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
"versionStartIncluding": "3.0.0",
"versionEndExcluding": "3.0.9.1",
"matchCriteriaId": "FF0C5646-2AB6-4887-BA17-970964A53E3C"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
}
]
}
]
}
],
"references": [
{
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Vendor Advisory"
]
},
{
"url": "https://github.com/rack/rack/commit/6efb2ceea003c4b195815a614e00438cbd543462",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/commit/d9c163a443b8cadf4711d84bd2c58cb9ef89cf49",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/security/advisories/GHSA-22f2-v57c-j9cx",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Vendor Advisory"
]
},
{
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-25126.yml",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Mailing List"
]
},
{
"url": "https://security.netapp.com/advisory/ntap-20240510-0005/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Vendor Advisory"
]
},
{
"url": "https://github.com/rack/rack/commit/6efb2ceea003c4b195815a614e00438cbd543462",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/commit/d9c163a443b8cadf4711d84bd2c58cb9ef89cf49",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/security/advisories/GHSA-22f2-v57c-j9cx",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Vendor Advisory"
]
},
{
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-25126.yml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
},
{
"url": "https://security.netapp.com/advisory/ntap-20240510-0005/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-251xx/CVE-2024-25169.json
+95 -13
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-25169",
"sourceIdentifier": "[email protected]",
"published": "2024-02-28T20:15:41.723",
"lastModified": "2024-11-21T09:00:23.600",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:28:57.580",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,47 +15,129 @@
"value": "Un problema en Mezzanine v6.0.0 permite a los atacantes eludir los mecanismos de control de acceso en el panel de administraci\u00f3n mediante una solicitud manipulada."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:jupo:mezzanine:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "FF14847F-A0CE-4930-B35E-F95C73EBECB3"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/shenhav12/CVE-2024-25169-Mezzanine-v6.0.0",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://ibb.co/JKh4hmD",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit"
]
},
{
"url": "https://ibb.co/Pt9qd8t",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit"
]
},
{
"url": "https://ibb.co/hLLPTVp",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit"
]
},
{
"url": "https://ibb.co/rfrKj3r",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit"
]
},
{
"url": "https://github.com/shenhav12/CVE-2024-25169-Mezzanine-v6.0.0",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://ibb.co/JKh4hmD",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
]
},
{
"url": "https://ibb.co/Pt9qd8t",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
]
},
{
"url": "https://ibb.co/hLLPTVp",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
]
},
{
"url": "https://ibb.co/rfrKj3r",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
]
}
]
}
CVE-2024/CVE-2024-252xx/CVE-2024-25248.json
+65 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-25248",
"sourceIdentifier": "[email protected]",
"published": "2024-02-26T22:15:07.003",
"lastModified": "2024-11-21T09:00:31.653",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:22:09.803",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,75 @@
"value": "Vulnerabilidad de inyecci\u00f3n SQL en la funci\u00f3n orderGoodsDelivery() en Niushop B2B2C V5 permite a atacantes ejecutar comandos SQL arbitrarios a trav\u00e9s del par\u00e1metro order_id."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:niushop:b2b2c_multi-business:5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "842EDEF7-88D4-426D-B280-A915B0AC48FA"
}
]
}
]
}
],
"references": [
{
"url": "https://harryha.substack.com/p/phuong-phap-phan-tich-ma-nguon-tim-lo-hong",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://harryha.substack.com/p/phuong-phap-phan-tich-ma-nguon-tim-lo-hong",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-254xx/CVE-2024-25422.json
+63 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-25422",
"sourceIdentifier": "[email protected]",
"published": "2024-02-28T23:15:09.610",
"lastModified": "2024-11-21T09:00:47.423",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:32:48.860",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,73 @@
"value": "Una vulnerabilidad de inyecci\u00f3n SQL en SEMCMS v.4.8 permite a un atacante remoto ejecutar c\u00f3digo arbitrario y obtener informaci\u00f3n confidencial a trav\u00e9s del componente SEMCMS_Menu.php."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sem-cms:semcms:4.8:*:*:*:*:*:*:*",
"matchCriteriaId": "BD382DC4-F472-49F5-AA7E-939EC76D4E8F"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/tzyyyyyyy/semcms",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit"
]
},
{
"url": "https://github.com/tzyyyyyyy/semcms",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
]
}
]
}
CVE-2024/CVE-2024-254xx/CVE-2024-25435.json
+68 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-25435",
"sourceIdentifier": "[email protected]",
"published": "2024-02-28T20:15:41.857",
"lastModified": "2024-11-21T09:00:48.427",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:30:26.980",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,78 @@
"value": "Una vulnerabilidad de cross-site scripting (XSS) en Md1health Md1patient v2.0.0 permite a los atacantes ejecutar scripts web o HTML arbitrarios a trav\u00e9s de un payload manipulado inyectado en el par\u00e1metro Msg."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:md1health:md1patient:1.16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "02D8AA79-B22B-4C73-A7E1-3EA3ED63C0AD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:md1health:md1patient:2.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "171727F5-0078-4DB8-A00E-AF95394B553D"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/machisri/CVEs-and-Vulnerabilities/blob/main/CVE-2024-25435%20-%3E%20Reflected%20XSS%20on%20md1patient%20login%20page",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://github.com/machisri/CVEs-and-Vulnerabilities/blob/main/CVE-2024-25435%20-%3E%20Reflected%20XSS%20on%20md1patient%20login%20page",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-258xx/CVE-2024-25801.json
+63 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-25801",
"sourceIdentifier": "[email protected]",
"published": "2024-02-22T05:15:09.807",
"lastModified": "2024-11-21T09:01:21.740",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:21:13.950",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,73 @@
"value": "Una vulnerabilidad de carga de archivos arbitrarios en la funci\u00f3n agregar medios de SKINsoft S-Museum v7.02.3 permite a los atacantes ejecutar c\u00f3digo arbitrario a trav\u00e9s de un archivo PDF manipulado."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:skinsoft:s-museum:7.02.3:*:*:*:*:*:*:*",
"matchCriteriaId": "9E33E9E3-D9C9-4202-97E3-68E88C0D2739"
}
]
}
]
}
],
"references": [
{
"url": "https://shrouded-trowel-50c.notion.site/S-Museum-Version-7-02-3-Stored-Cross-Site-Scripting-69ca7b8805cc448ea12cb8f7ed571fa3?pvs=4",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Broken Link"
]
},
{
"url": "https://shrouded-trowel-50c.notion.site/S-Museum-Version-7-02-3-Stored-Cross-Site-Scripting-69ca7b8805cc448ea12cb8f7ed571fa3?pvs=4",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
]
}
]
}
CVE-2024/CVE-2024-258xx/CVE-2024-25802.json
+57 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-25802",
"sourceIdentifier": "[email protected]",
"published": "2024-02-22T18:15:48.837",
"lastModified": "2024-11-21T09:01:21.880",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:21:44.727",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -17,6 +17,26 @@
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
@@ -40,6 +60,16 @@
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
@@ -51,14 +81,37 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:skinsoft:s-museum:7.02.3:*:*:*:*:*:*:*",
"matchCriteriaId": "9E33E9E3-D9C9-4202-97E3-68E88C0D2739"
}
]
}
]
}
],
"references": [
{
"url": "https://shrouded-trowel-50c.notion.site/S-Museum-Version-7-02-3-Unrestricted-File-Upload-b73d4590b024449787464ddcc175b8f7?pvs=4",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Broken Link"
]
},
{
"url": "https://shrouded-trowel-50c.notion.site/S-Museum-Version-7-02-3-Unrestricted-File-Upload-b73d4590b024449787464ddcc175b8f7?pvs=4",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
]
}
]
}
CVE-2024/CVE-2024-25xx/CVE-2024-2518.json
+63 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-2518",
"sourceIdentifier": "[email protected]",
"published": "2024-03-16T13:15:05.727",
"lastModified": "2024-11-21T09:09:55.530",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:59:49.713",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
],
"cvssMetricV2": [
@@ -76,30 +96,65 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:magesh-k21:online-college-event-hall-reservation-system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "02B406BB-6ED0-4CC0-B1A1-AE670E825BF1"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Reflected%20XSS%20-%20book_history.php.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.256955",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://vuldb.com/?id.256955",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Reflected%20XSS%20-%20book_history.php.md",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.256955",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
]
},
{
"url": "https://vuldb.com/?id.256955",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
]
}
]
}
CVE-2024/CVE-2024-25xx/CVE-2024-2519.json
+63 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-2519",
"sourceIdentifier": "[email protected]",
"published": "2024-03-16T15:15:08.580",
"lastModified": "2024-11-21T09:09:55.667",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:59:14.683",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
],
"cvssMetricV2": [
@@ -76,30 +96,65 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:magesh-k21:online-college-event-hall-reservation-system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "02B406BB-6ED0-4CC0-B1A1-AE670E825BF1"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Reflected%20XSS%20-%20navbar.php.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.256956",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://vuldb.com/?id.256956",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Reflected%20XSS%20-%20navbar.php.md",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.256956",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
]
},
{
"url": "https://vuldb.com/?id.256956",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
]
}
]
}
CVE-2024/CVE-2024-25xx/CVE-2024-2520.json
+63 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-2520",
"sourceIdentifier": "[email protected]",
"published": "2024-03-16T16:15:07.270",
"lastModified": "2024-11-21T09:09:55.803",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:58:24.160",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -76,30 +96,65 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:magesh-k21:online-college-event-hall-reservation-system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "02B406BB-6ED0-4CC0-B1A1-AE670E825BF1"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/SQL%20Injection%20-%20bookdate.php.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.256957",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://vuldb.com/?id.256957",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/SQL%20Injection%20-%20bookdate.php.md",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.256957",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
]
},
{
"url": "https://vuldb.com/?id.256957",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
]
}
]
}
CVE-2024/CVE-2024-25xx/CVE-2024-2521.json
+63 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-2521",
"sourceIdentifier": "[email protected]",
"published": "2024-03-16T16:15:07.497",
"lastModified": "2024-11-21T09:09:55.950",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:57:37.303",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
],
"cvssMetricV2": [
@@ -76,30 +96,65 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:magesh-k21:online-college-event-hall-reservation-system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "02B406BB-6ED0-4CC0-B1A1-AE670E825BF1"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Reflected%20XSS%20-%20bookdate.php.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.256958",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://vuldb.com/?id.256958",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Reflected%20XSS%20-%20bookdate.php.md",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.256958",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
]
},
{
"url": "https://vuldb.com/?id.256958",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-25xx/CVE-2024-2522.json
+63 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-2522",
"sourceIdentifier": "[email protected]",
"published": "2024-03-16T17:15:05.777",
"lastModified": "2024-11-21T09:09:56.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:56:41.570",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -76,30 +96,65 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:magesh-k21:online-college-event-hall-reservation-system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "02B406BB-6ED0-4CC0-B1A1-AE670E825BF1"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/SQL%20Injection%20-%20booktime.php.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.256959",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://vuldb.com/?id.256959",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/SQL%20Injection%20-%20booktime.php.md",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.256959",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
]
},
{
"url": "https://vuldb.com/?id.256959",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
]
}
]
}
CVE-2024/CVE-2024-25xx/CVE-2024-2523.json
+63 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-2523",
"sourceIdentifier": "[email protected]",
"published": "2024-03-16T17:15:05.997",
"lastModified": "2024-11-21T09:09:56.250",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:53:12.380",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
],
"cvssMetricV2": [
@@ -76,30 +96,65 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:magesh-k21:online-college-event-hall-reservation-system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "02B406BB-6ED0-4CC0-B1A1-AE670E825BF1"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Reflected%20XSS%20-%20booktime.php.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.256960",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://vuldb.com/?id.256960",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Reflected%20XSS%20-%20booktime.php.md",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.256960",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
]
},
{
"url": "https://vuldb.com/?id.256960",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required"
]
}
]
}
CVE-2024/CVE-2024-261xx/CVE-2024-26141.json
+134 -16
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-26141",
"sourceIdentifier": "[email protected]",
"published": "2024-02-29T00:15:51.403",
"lastModified": "2024-11-21T09:02:01.023",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:33:08.527",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -49,64 +69,162 @@
"value": "CWE-400"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
"versionStartIncluding": "1.3.0",
"versionEndExcluding": "2.2.8.1",
"matchCriteriaId": "746C9255-2FA2-4E9C-94DA-379396561EB1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
"versionStartIncluding": "3.0.0",
"versionEndExcluding": "3.0.9.1",
"matchCriteriaId": "FF0C5646-2AB6-4887-BA17-970964A53E3C"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
}
]
}
]
}
],
"references": [
{
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Vendor Advisory"
]
},
{
"url": "https://github.com/rack/rack/commit/4849132bef471adb21131980df745f4bb84de2d9",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/commit/62457686b26d33a15a254c7768c2076e8e02b48b",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/security/advisories/GHSA-xj5v-6v4g-jfw6",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Vendor Advisory"
]
},
{
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26141.yml",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Mailing List"
]
},
{
"url": "https://security.netapp.com/advisory/ntap-20240510-0007/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Vendor Advisory"
]
},
{
"url": "https://github.com/rack/rack/commit/4849132bef471adb21131980df745f4bb84de2d9",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/commit/62457686b26d33a15a254c7768c2076e8e02b48b",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/security/advisories/GHSA-xj5v-6v4g-jfw6",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26141.yml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
},
{
"url": "https://security.netapp.com/advisory/ntap-20240510-0007/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-261xx/CVE-2024-26142.json
+104 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-26142",
"sourceIdentifier": "[email protected]",
"published": "2024-02-27T16:15:46.600",
"lastModified": "2024-11-21T09:02:01.157",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:22:23.763",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -49,48 +69,120 @@
"value": "CWE-1333"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-1333"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.1.0",
"versionEndExcluding": "7.1.3.1",
"matchCriteriaId": "F37CC5DE-B363-478B-B8F2-393412E05802"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.2.0",
"matchCriteriaId": "F841AE5D-60DD-4E3A-854A-9B7B906BF7E7"
}
]
}
]
}
],
"references": [
{
"url": "https://discuss.rubyonrails.org/t/possible-redos-vulnerability-in-accept-header-parsing-in-action-dispatch/84946",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/rails/rails/commit/b4d3bfb5ed8a5b5a90aad3a3b28860c7a931e272",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rails/rails/security/advisories/GHSA-jjhx-jhvp-74wq",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26142.yml",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://security.netapp.com/advisory/ntap-20240503-0003/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://discuss.rubyonrails.org/t/possible-redos-vulnerability-in-accept-header-parsing-in-action-dispatch/84946",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/rails/rails/commit/b4d3bfb5ed8a5b5a90aad3a3b28860c7a931e272",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rails/rails/security/advisories/GHSA-jjhx-jhvp-74wq",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26142.yml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://security.netapp.com/advisory/ntap-20240503-0003/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-261xx/CVE-2024-26144.json
+106 -14
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-26144",
"sourceIdentifier": "[email protected]",
"published": "2024-02-27T16:15:46.970",
"lastModified": "2024-11-21T09:02:01.407",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T15:26:42.917",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
@@ -49,56 +69,128 @@
"value": "CWE-200"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.2.0",
"versionEndExcluding": "6.1.7.7",
"matchCriteriaId": "B002323A-D7B8-4C0C-B7C3-2329643666B4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.0.0",
"versionEndExcluding": "7.1.0",
"matchCriteriaId": "9944FE3A-3FEF-414F-B19E-6FFB12F49232"
}
]
}
]
}
],
"references": [
{
"url": "https://discuss.rubyonrails.org/t/possible-sensitive-session-information-leak-in-active-storage/84945",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/rails/rails/commit/723f54566023e91060a67b03353e7c03e7436433",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rails/rails/commit/78fe149509fac5b05e54187aaaef216fbb5fd0d3",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rails/rails/security/advisories/GHSA-8h22-8cf7-hq6g",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activestorage/CVE-2024-26144.yml",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://security.netapp.com/advisory/ntap-20240510-0013/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://discuss.rubyonrails.org/t/possible-sensitive-session-information-leak-in-active-storage/84945",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/rails/rails/commit/723f54566023e91060a67b03353e7c03e7436433",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rails/rails/commit/78fe149509fac5b05e54187aaaef216fbb5fd0d3",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rails/rails/security/advisories/GHSA-8h22-8cf7-hq6g",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activestorage/CVE-2024-26144.yml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://security.netapp.com/advisory/ntap-20240510-0013/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-261xx/CVE-2024-26146.json
+152 -20
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-26146",
"sourceIdentifier": "[email protected]",
"published": "2024-02-29T00:15:51.597",
"lastModified": "2025-02-13T18:17:18.750",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-02-14T15:51:42.200",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -49,80 +69,192 @@
"value": "CWE-1333"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-1333"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
"versionStartIncluding": "0.4",
"versionEndExcluding": "2.0.9.4",
"matchCriteriaId": "8C61CB94-A5BE-4B72-B243-F935A4652B0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
"versionStartIncluding": "2.1.0",
"versionEndExcluding": "2.1.4.4",
"matchCriteriaId": "B5402B9E-EE8A-41A3-87CB-E17C57E5F692"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
"versionStartIncluding": "2.2.0",
"versionEndExcluding": "2.2.8.1",
"matchCriteriaId": "4F7D6529-12DB-4466-A0AB-DED4653D3E0B"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
}
]
}
]
}
],
"references": [
{
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Mailing List"
]
},
{
"url": "https://security.netapp.com/advisory/ntap-20240510-0006/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
},
{
"url": "https://security.netapp.com/advisory/ntap-20240510-0006/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-264xx/CVE-2024-26489.json
+63 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-26489",
"sourceIdentifier": "[email protected]",
"published": "2024-02-22T06:15:57.870",
"lastModified": "2024-11-21T09:02:30.127",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-14T16:21:23.480",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,73 @@
"value": "Una vulnerabilidad de Cross-Site Scripting (XSS) en Addon JD Flusity 'Social block links' module of flusity-CMS v2.33 permite a los atacantes ejecutar script web o HTML arbitrario a trav\u00e9s de un payload manipulado inyectado en el campo de texto Nombre del perfil."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:flusity:flusity:2.33:*:*:*:*:*:*:*",
"matchCriteriaId": "1B6B6ED7-B93A-4853-9D83-40BCD781342C"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/2111715623/cms/blob/main/3.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit"
]
},
{
"url": "https://github.com/2111715623/cms/blob/main/3.md",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
]
}
]
}
Loaded 100 of 130 files, more files were not shown because too many files have changed in this diff. Show more