admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 03:51:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-10-27T00:55:11.613682+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-10-27 00:58:58 +00:00
1 parent 598ad7eeb4
commit 13da29322e
8 files changed
+392 -12
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2025/CVE-2025-104xx/CVE-2025-10497.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-10497",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T00:15:39.650",
"lastModified": "2025-10-27T00:15:39.650",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending specially crafted payloads."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"references": [
{
"url": "https://about.gitlab.com/releases/2025/10/22/patch-release-gitlab-18-5-1-released/",
"source": "[email protected]"
},
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/570336",
"source": "[email protected]"
},
{
"url": "https://hackerone.com/reports/3338151",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-114xx/CVE-2025-11447.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-11447",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T00:15:40.460",
"lastModified": "2025-10-27T00:15:40.460",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending GraphQL requests with crafted JSON payloads."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"references": [
{
"url": "https://about.gitlab.com/releases/2025/10/22/patch-release-gitlab-18-5-1-released/",
"source": "[email protected]"
},
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/574858",
"source": "[email protected]"
},
{
"url": "https://hackerone.com/reports/3367019",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-119xx/CVE-2025-11971.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-11971",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T00:15:40.617",
"lastModified": "2025-10-27T00:15:40.617",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "GitLab has remediated an issue in GitLab EE affecting all versions from 10.6 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to trigger unauthorized pipeline executions by manipulating commits."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.3,
"impactScore": 4.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-863"
}
]
}
],
"references": [
{
"url": "https://about.gitlab.com/releases/2025/10/22/patch-release-gitlab-18-5-1-released/",
"source": "[email protected]"
},
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/566587",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-119xx/CVE-2025-11974.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-11974",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T00:15:40.780",
"lastModified": "2025-10-27T00:15:40.780",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to create a denial of service condition by uploading large files to specific API endpoints."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"references": [
{
"url": "https://about.gitlab.com/releases/2025/10/22/patch-release-gitlab-18-5-1-released/",
"source": "[email protected]"
},
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/571761",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-119xx/CVE-2025-11989.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-11989",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T00:15:40.927",
"lastModified": "2025-10-27T00:15:40.927",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.6.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to execute unauthorized quick actions by including malicious commands in specific descriptions."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.2,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://about.gitlab.com/releases/2025/10/22/patch-release-gitlab-18-5-1-released/",
"source": "[email protected]"
},
{
"url": "https://gitlab.com/gitlab-org/security/gitlab/-/issues/1426",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-66xx/CVE-2025-6601.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-6601",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T00:15:41.100",
"lastModified": "2025-10-27T00:15:41.100",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.3, and 18.5 before 18.5.1 that under certain conditions could have allowed authenticated users to gain unauthorized project access by exploiting the access request approval workflow."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 2.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.2,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-840"
}
]
}
],
"references": [
{
"url": "https://about.gitlab.com/releases/2025/10/22/patch-release-gitlab-18-5-1-released/",
"source": "[email protected]"
},
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/551267",
"source": "[email protected]"
},
{
"url": "https://hackerone.com/reports/3209641",
"source": "[email protected]"
}
]
}
README.md
+10 -8
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-10-26T19:00:11.744272+00:00
2025-10-27T00:55:11.613682+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-10-26T17:15:52.533000+00:00
2025-10-27T00:15:41.100000+00:00
```
### Last Data Feed Release
@@ -33,17 +33,19 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
315571
315577
```
### CVEs added in the last Commit
Recently added CVEs: `4`
Recently added CVEs: `6`
- [CVE-2025-12275](CVE-2025/CVE-2025-122xx/CVE-2025-12275.json) (`2025-10-26T17:15:51.237`)
- [CVE-2025-12278](CVE-2025/CVE-2025-122xx/CVE-2025-12278.json) (`2025-10-26T17:15:52.180`)
- [CVE-2025-12284](CVE-2025/CVE-2025-122xx/CVE-2025-12284.json) (`2025-10-26T17:15:52.357`)
- [CVE-2025-12285](CVE-2025/CVE-2025-122xx/CVE-2025-12285.json) (`2025-10-26T17:15:52.533`)
- [CVE-2025-10497](CVE-2025/CVE-2025-104xx/CVE-2025-10497.json) (`2025-10-27T00:15:39.650`)
- [CVE-2025-11447](CVE-2025/CVE-2025-114xx/CVE-2025-11447.json) (`2025-10-27T00:15:40.460`)
- [CVE-2025-11971](CVE-2025/CVE-2025-119xx/CVE-2025-11971.json) (`2025-10-27T00:15:40.617`)
- [CVE-2025-11974](CVE-2025/CVE-2025-119xx/CVE-2025-11974.json) (`2025-10-27T00:15:40.780`)
- [CVE-2025-11989](CVE-2025/CVE-2025-119xx/CVE-2025-11989.json) (`2025-10-27T00:15:40.927`)
- [CVE-2025-6601](CVE-2025/CVE-2025-66xx/CVE-2025-6601.json) (`2025-10-27T00:15:41.100`)
### CVEs modified in the last Commit
_state.csv
+10 -4
View File
@@ -285814,6 +285814,7 @@ CVE-2025-10492,0,0,d0bfd51702634eeab943b38cfd1edabe141f6c6229104d0b94fb6b9b16b9b
CVE-2025-10493,0,0,932e8034dc702d0ce0eb1219ecdae380b75ef71b0f63f980cd1f992288ee8ec0,2025-09-18T13:43:34.310000
CVE-2025-10494,0,0,6285373a70e1c60cb443f15378729d0128c3197f433f0876fa7ab94860abffa0,2025-10-08T19:38:09.863000
CVE-2025-10496,0,0,aadfe3a3690011dc6e9c6af06b4b68ee61aea131de4eaeb879f4978cc5e2ab0e,2025-10-09T15:50:04.013000
CVE-2025-10497,1,1,ed3ec6abccb0ea8bf2dd3b4642a91f18568937dc5092396c422479423f672a7d,2025-10-27T00:15:39.650000
CVE-2025-10498,0,0,02a157e9c0386c3f04109a18e71ac85f19ef61bd4629473617097d678484ee7f,2025-09-29T19:34:10.030000
CVE-2025-10499,0,0,f1687c52213be782e8c80bf51b4145437b4032906ceb42562cb0bc2879b904e0,2025-09-29T19:34:10.030000
CVE-2025-1050,0,0,7d78b0a4b57c817f83eab2ed22497d07b9145c021386faab3682cb35dbe240fd,2025-08-25T14:43:50.460000
@@ -286569,6 +286570,7 @@ CVE-2025-11442,0,0,6bca56d3fe9531e2a54584e335aa58ec6d5b6600688ab645113162dd43de3
CVE-2025-11443,0,0,012f91db4edf7d06938d0624f04363579400cb3471397ab21755f09bd6f9a996,2025-10-09T16:14:51.700000
CVE-2025-11444,0,0,aa15d7e2c44fd084747448f32e12ddc3aea6348ee0b4db0d39bd0bd58a3af52a,2025-10-14T20:16:01.657000
CVE-2025-11445,0,0,ad7c52d8a8549da0b921c067a3860c92ad3aaa11c9dba89c291f212d8f833211,2025-10-08T19:38:09.863000
CVE-2025-11447,1,1,1f2c630eb7974fb80c2a0f5b9bba840716ee37e03aecd2c4e5d6a1c6874ed7cc,2025-10-27T00:15:40.460000
CVE-2025-11449,0,0,f2ac6e949fa7b3e6e375d9cc15165008b831530d61818eaaccc6f4e313119ae4,2025-10-14T19:37:28.107000
CVE-2025-1145,0,0,d6e4f6830b1d5bec32355229d5ad379784daf94076f4978b41c854d102fa122e,2025-02-18T18:15:29.940000
CVE-2025-11450,0,0,58734702fd14970670847dd7015047b0275261d09bda6f28c5bb0998737852f9,2025-10-14T19:37:28.107000
@@ -286905,9 +286907,12 @@ CVE-2025-1196,0,0,dd006c25814afd256aa97758b279860261417526a6b19678795b25893f289a
CVE-2025-11965,0,0,2eabbb4599284d2563d93c27659b79ddd6c7c73e850f48946d732e4261db33e5,2025-10-22T21:12:48.953000
CVE-2025-11966,0,0,ed45c84545d2d6f073b1bdf77bbb7f09e48496e2e455ae7bcc29cb4b801ea40e,2025-10-22T21:12:48.953000
CVE-2025-1197,0,0,1490ecac98705b37d8398fb14f505408a1f5aa5cf42798e369b1f28081806f3e,2025-10-23T20:06:00.793000
CVE-2025-11971,1,1,47c223eb5b8601df3dc8547968e988115b868eff4b9146043100a65a8369be88,2025-10-27T00:15:40.617000
CVE-2025-11974,1,1,dd3213b467d8a789e6778203a3614cbdca476b6735d633ec33a80443abeb1f24,2025-10-27T00:15:40.780000
CVE-2025-11976,0,0,77a3edc14f52c8a6506da62c1d212d52789c3d3adb8e8c2f1ed644bada9f99c8,2025-10-25T07:15:40.737000
CVE-2025-11979,0,0,9642b1a8afcffc4606674792f7aa0b7b7ce070d4ec9d99c0d148cfad9a62eabb,2025-10-21T19:31:25.450000
CVE-2025-1198,0,0,e25a71be0358dea86a15bfce077af266274efb8869baa5de76d22da5d493dc80,2025-08-06T18:50:00.933000
CVE-2025-11989,1,1,4febe3c29d91f9ac1efda332cf9e7774fbdc4000a2a094e76ca4c2b50bee98df,2025-10-27T00:15:40.927000
CVE-2025-1199,0,0,b293e1750426e162cd73c69f2470f66e74330c6db9c1208ddcbe2ec678b89d9d,2025-02-18T18:06:10.360000
CVE-2025-11992,0,0,19bb6fde21ea5722168dca2fa49051b62263aa97ce7690685c66ef9b800e0a5c,2025-10-24T09:15:43.547000
CVE-2025-1200,0,0,e8b1d0bff74166355198550aba4b5a51b0c4408b2cdc99e80194cb9ee45638f7,2025-04-29T20:24:05.563000
@@ -286966,11 +286971,11 @@ CVE-2025-1224,0,0,5e2d78c3c6e69a2decd2c402519e022a874125be5623f2a5a15d48d2dfb900
CVE-2025-1225,0,0,fc3003f74f095fbbad4efec7ddceac6b27b2f030ee7cce38d847d3058643db1a,2025-08-26T18:39:03.970000
CVE-2025-1226,0,0,8c94db01a9a809ca57715375766de552abdfc7ea35f2ab254edd399bbc0c3518,2025-08-26T18:38:12.960000
CVE-2025-1227,0,0,c9f4eabd8c5198f4877214f3a428d325e7d751d77e4fdd0eb1d818291982a667,2025-08-26T18:39:13.620000
CVE-2025-12275,1,1,ddf04688f242f40b9752a7728f1735671b792bfde89ac6ffd4c96d004fc4cc6e,2025-10-26T17:15:51.237000
CVE-2025-12278,1,1,6379f6daa09044f267e318b0b7f1d31b619179dcb5e9b1a3acb0f56f88b6eb41,2025-10-26T17:15:52.180000
CVE-2025-12275,0,0,ddf04688f242f40b9752a7728f1735671b792bfde89ac6ffd4c96d004fc4cc6e,2025-10-26T17:15:51.237000
CVE-2025-12278,0,0,6379f6daa09044f267e318b0b7f1d31b619179dcb5e9b1a3acb0f56f88b6eb41,2025-10-26T17:15:52.180000
CVE-2025-1228,0,0,12c830b22a778120983d037d36321ed8fb02836367f4bbbd9be0e19668100480,2025-02-12T22:15:41.493000
CVE-2025-12284,1,1,2a4229352c7f4f4b0630e278e3e3cf3ea428e3919e9324a33bc4b92e82779270,2025-10-26T17:15:52.357000
CVE-2025-12285,1,1,6f6385b25e039d8228b234579ba848403cbe62b481c8e1d957835d91008d6ed2,2025-10-26T17:15:52.533000
CVE-2025-12284,0,0,2a4229352c7f4f4b0630e278e3e3cf3ea428e3919e9324a33bc4b92e82779270,2025-10-26T17:15:52.357000
CVE-2025-12285,0,0,6f6385b25e039d8228b234579ba848403cbe62b481c8e1d957835d91008d6ed2,2025-10-26T17:15:52.533000
CVE-2025-1229,0,0,fa5787151bd081a7c3655f50c46799853d648eeeec0e4010ed7332955f8d9df1,2025-02-12T22:15:41.667000
CVE-2025-1230,0,0,dd0a3ca0e089c26c5259a45f938e8e64977c81ece19c03ae3b8594f4d83448d5,2025-02-12T11:15:11.230000
CVE-2025-1231,0,0,dcc7744995b7d6bb53bad0c3a17ccdace3cc9ce75803cc23b72d1ab8d116a265,2025-03-28T16:22:09.763000
@@ -312658,6 +312663,7 @@ CVE-2025-6586,0,0,a2a31cfde8036131bb5246db3ae2c6f244bcc91b479b47ff60159df89464e9
CVE-2025-6587,0,0,94e040daa08ba5c9e3932753930ce394b84353f61fda95c1801a18e9a0bd6347,2025-07-03T15:13:53.147000
CVE-2025-6588,0,0,7fc631224ca630583edbb28a4a53a4fc8fe52d2b2d0fedc02ad161b03f35330d,2025-07-25T15:29:19.837000
CVE-2025-6600,0,0,52f2838d1bed1fd512519a975ef79c7715790a6dc012c106cd06473e42be0e88,2025-09-05T14:59:47.533000
CVE-2025-6601,1,1,2281e5d9449496b545c99b1e48ae22be602661eb7eda5e8ad98e94580837b917,2025-10-27T00:15:41.100000
CVE-2025-6603,0,0,94e8918af653fece9803c6dda129968de5b58a553aefbcdcb849847b69658ab4,2025-06-26T18:57:43.670000
CVE-2025-6604,0,0,96d4dfdd3e003ea63aa1e4bba18d79cbe7cea5abcd4dc3ee0391b4f83c2246d2,2025-07-02T16:36:48.957000
CVE-2025-6605,0,0,3b1e9a90fef26eeec1cb23b63bf01d509568da803a212f4c59d24734ac4ce5b3,2025-07-02T16:34:13.343000
Can't render this file because it is too large.