diff --git a/CVE-2021/CVE-2021-44xx/CVE-2021-4454.json b/CVE-2021/CVE-2021-44xx/CVE-2021-4454.json index 63531ec5860..523a46128cc 100644 --- a/CVE-2021/CVE-2021-44xx/CVE-2021-4454.json +++ b/CVE-2021/CVE-2021-44xx/CVE-2021-4454.json @@ -2,8 +2,8 @@ "id": "CVE-2021-4454", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-03-27T17:15:35.820", - "lastModified": "2025-03-28T18:11:49.747", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:10:52.573", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,179 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: can: j1939: correcci\u00f3n del error WARN_ON_ONCE en j1939_session_deactivate. La conclusi\u00f3n \"j1939_session_deactivate() debe llamarse con un recuento de referencias de sesi\u00f3n de al menos 2\" es incorrecta. En algunos escenarios concurrentes, se puede llamar a j1939_session_deactivate con un recuento de referencias de sesi\u00f3n inferior a 2. Sin embargo, no hay problema, ya que comprueba el estado activo de la sesi\u00f3n antes de que se active j1939_session_deactivate_locked(). A continuaci\u00f3n, se muestra el escenario concurrente del problema reportado por syzbot y mi registro de reproducci\u00f3n. cpu0 cpu1 j1939_xtp_rx_eoma j1939_xtp_rx_abort_one j1939_session_get_by_addr [kref == 2] j1939_session_get_by_addr [kref == 3] j1939_session_deactivate [kref == 2] j1939_session_put [kref == 1] j1939_session_completed j1939_session_deactivate WARN_ON_ONCE(kref < 2) ======================================================= ADVERTENCIA: CPU: 1 PID: 21 at net/can/j1939/transport.c:1088 j1939_session_deactivate+0x5f/0x70 CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 5.14.0-rc7+ #32 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1 04/01/2014 RIP: 0010:j1939_session_deactivate+0x5f/0x70 Call Trace: j1939_session_deactivate_activate_next+0x11/0x28 j1939_xtp_rx_eoma+0x12a/0x180 j1939_tp_recv+0x4a2/0x510 j1939_can_recv+0x226/0x380 can_rcv_filter+0xf8/0x220 can_receive+0x102/0x220 ? process_backlog+0xf0/0x2c0 can_rcv+0x53/0xf0 __netif_receive_skb_one_core+0x67/0x90 ? process_backlog+0x97/0x2c0 __netif_receive_skb+0x22/0x80 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.138", + "versionEndExcluding": "5.4.232", + "matchCriteriaId": "13158387-374E-4D12-8884-50DEBF66EF29" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.56", + "versionEndExcluding": "5.10.168", + "matchCriteriaId": "2DC5F90C-A016-45D7-AD67-70DB2104452B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.13.8", + "versionEndExcluding": "5.14", + "matchCriteriaId": "36EE71C6-4B88-4A86-A5C2-2ED3CE3D73C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.14.1", + "versionEndExcluding": "5.15.93", + "matchCriteriaId": "9076B4DA-3809-4702-8D7A-4B621B7AC27D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.11", + "matchCriteriaId": "535D03F4-DA02-49FE-934E-668827E6407B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.14:-:*:*:*:*:*:*", + "matchCriteriaId": "6A05198E-F8FA-4517-8D0E-8C95066AED38" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.14:rc4:*:*:*:*:*:*", + "matchCriteriaId": "D1DA0AF6-02F4-47C7-A318-8C006ED0C665" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.14:rc5:*:*:*:*:*:*", + "matchCriteriaId": "49DD30B1-8C99-4C38-A66B-CAB3827BEE8A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.14:rc6:*:*:*:*:*:*", + "matchCriteriaId": "15013998-4AF0-4CDC-AB13-829ECD8A8E66" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.14:rc7:*:*:*:*:*:*", + "matchCriteriaId": "376A25CF-C05B-48F1-99B1-8FB0314A8E06" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*", + "matchCriteriaId": "FF501633-2F44-4913-A8EE-B021929F49F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*", + "matchCriteriaId": "2BDA597B-CAC1-4DF0-86F0-42E142C654E9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*", + "matchCriteriaId": "725C78C9-12CE-406F-ABE8-0813A01D66E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A127C155-689C-4F67-B146-44A57F4BFD85" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*", + "matchCriteriaId": "D34127CC-68F5-4703-A5F6-5006F803E4AE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*", + "matchCriteriaId": "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1740a1e45eee65099a92fb502e1e67e63aad277d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6950df42a03c9ac9290503ced3f371199cb68fa9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9ab896775f98ff54b68512f345eed178bf961084", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b6d44072117bba057d50f7a2f96e5d070c65926d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d0553680f94c49bbe0e39eb50d033ba563b4212d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-529xx/CVE-2023-52929.json b/CVE-2023/CVE-2023-529xx/CVE-2023-52929.json index 63e8a77a57a..f83d5df55f3 100644 --- a/CVE-2023/CVE-2023-529xx/CVE-2023-52929.json +++ b/CVE-2023/CVE-2023-529xx/CVE-2023-52929.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52929", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-03-27T17:15:42.353", - "lastModified": "2025-03-28T18:11:49.747", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:30:58.967", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,119 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nvmem: core: fix cleanup after dev_set_name(). Si dev_set_name() falla, se filtra nvmem->wp_gpio, ya que la limpieza no lo incluye. Si bien una soluci\u00f3n m\u00ednima ser\u00eda a\u00f1adir la llamada gpiod_put(), podemos mejorar si dividimos device_register() y usamos el c\u00f3digo de limpieza nvmem_release() probado, inicializando el dispositivo antes y coloc\u00e1ndolo. Esto resulta en una correcci\u00f3n ligeramente mayor, pero con c\u00f3digo limpio. Nota: Este parche depende de \"nvmem: core: initialise nvmem->id early\" y \"nvmem: core: remove nvmem_config wp_gpio\". [Srini: Se corrigi\u00f3 la l\u00ednea de asunto y la gesti\u00f3n del c\u00f3digo de error con wp_gpio durante la aplicaci\u00f3n]." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-459" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.11", + "matchCriteriaId": "567003CA-0B0D-452C-9282-3818AD2C9704" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*", + "matchCriteriaId": "FF501633-2F44-4913-A8EE-B021929F49F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*", + "matchCriteriaId": "2BDA597B-CAC1-4DF0-86F0-42E142C654E9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*", + "matchCriteriaId": "725C78C9-12CE-406F-ABE8-0813A01D66E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A127C155-689C-4F67-B146-44A57F4BFD85" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*", + "matchCriteriaId": "D34127CC-68F5-4703-A5F6-5006F803E4AE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*", + "matchCriteriaId": "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/23676ecd2eb377f7c24a6ff578b0f4c7135658b6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/39708bc8da7858de0bed9b3a88b3beb1d1e0b443", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/560181d3ace61825f4ca9dd3481d6c0ee6709fa8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8f9c4b2a3b132bf6698e477aba6ee194b40c75f4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-529xx/CVE-2023-52933.json b/CVE-2023/CVE-2023-529xx/CVE-2023-52933.json index 98af8d67ddf..67bcca6de60 100644 --- a/CVE-2023/CVE-2023-529xx/CVE-2023-52933.json +++ b/CVE-2023/CVE-2023-529xx/CVE-2023-52933.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52933", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-03-27T17:15:43.063", - "lastModified": "2025-03-28T18:11:49.747", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:29:22.007", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,194 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Squashfs: correcci\u00f3n de la gesti\u00f3n y la comprobaci\u00f3n de la validez del recuento de xattr_ids. Un sistema de archivos da\u00f1ado por un bot de sistema [1] expone dos fallos en el manejo y la comprobaci\u00f3n de la validez del recuento de xattr_ids. Ambos fallos provocan un desbordamiento de c\u00e1lculo debido a una escritura incorrecta. En el sistema de archivos da\u00f1ado, el valor de xattr_ids es 4294967071, que, almacenado en una variable con signo, se convierte en el n\u00famero negativo -225. Fallo 1 (solo sistemas de 64 bits): La variable xattr_ids, un entero con signo, provoca la extensi\u00f3n del signo. Esto provoca un desbordamiento de variable en las macros SQUASHFS_XATTR_*(A). La variable se multiplica primero por sizeof(struct squashfs_xattr_id), donde el tipo del operador sizeof es \"unsigned long\". En un sistema de 64 bits, este valor tiene un tama\u00f1o de 64 bits y provoca que el n\u00famero negativo se ampl\u00ede con signo y se ensanche a 64 bits, quedando as\u00ed sin signo. Esto produce el gran n\u00famero 18446744073709548016 o 2^64 - 3600. Este n\u00famero, al redondearse por SQUASHFS_METADATA_SIZE - 1 (8191 bytes) y dividirse por SQUASHFS_METADATA_SIZE, se desborda y produce una longitud de 0 (almacenada en len). Fallo 2 (solo en sistemas de 32 bits): En un sistema de 32 bits, la variable entera no se ampl\u00eda con el tipo \"long sin signo\" del operador sizeof (32 bits), y el signo de la variable no tiene efecto, ya que siempre se trata como sin signo. El valor xattr_ids da\u00f1ado anterior de 4294967071, cuando se multiplica se desborda y produce el n\u00famero 4294963696 o 2^32 - 3400. Este n\u00famero cuando se redondea por SQUASHFS_METADATA_SIZE - 1 (8191 bytes) y se divide por SQUASHFS_METADATA_SIZE se desborda nuevamente y produce una longitud de 0. El efecto del c\u00e1lculo de la longitud 0: junto con el campo xattr_ids da\u00f1ado, el sistema de archivos tambi\u00e9n tiene un valor xattr_table_start da\u00f1ado, donde coincide con el valor de fin del sistema de archivos de 850. Esto hace que el siguiente c\u00f3digo de verificaci\u00f3n de cordura falle porque el len incorrectamente calculado de 0 coincide con el tama\u00f1o incorrecto de la tabla informada por el superbloque (0 bytes). len = SQUASHFS_XATTR_BLOCK_BYTES(*xattr_ids); \u00edndices = SQUASHFS_XATTR_BLOCKS(*xattr_ids); /* * El tama\u00f1o calculado de la tabla de \u00edndices (len bytes) debe coincidir exactamente con los puntos de inicio y fin de la tabla. */ inicio = tabla_inicio + tama\u00f1o_de(*id_tabla); fin = msblk->bytes_usados; si (len != (fin - inicio)) devolver ERR_PTR(-EINVAL); Cambiar la variable xattr_ids a \"usigned int\" corrige el fallo en sistemas de 64 bits. Esto se debe a que el c\u00e1lculo se ampl\u00eda con el tipo \"unsigned long\" del operador \"sizeof\". Convertir la variable a \"u64\" en la macro anterior corrige este fallo en sistemas de 32 bits. Esto tambi\u00e9n significa que los sistemas de 64 bits no dependen impl\u00edcitamente del tipo del operador \"sizeof\" para ampliar el c\u00e1lculo. [1] https://lore.kernel.org/lkml/000000000000cd44f005f1a0f17f@google.com/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-190" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.4.258", + "versionEndExcluding": "4.5", + "matchCriteriaId": "B79FCC64-B2F0-49FD-B8C2-E483F4A4D46F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.9.258", + "versionEndExcluding": "4.10", + "matchCriteriaId": "50052936-5C7B-4DBA-8984-C9108A4373F3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.14.222", + "versionEndExcluding": "4.14.306", + "matchCriteriaId": "E835CB0E-8029-413F-AC2A-84BD1A15C497" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19.176", + "versionEndExcluding": "4.19.273", + "matchCriteriaId": "399BCB54-8363-40D9-8A2F-D2E6B5CF45B9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.98", + "versionEndExcluding": "5.4.232", + "matchCriteriaId": "6225CEF7-91CA-4EB3-87E5-CCC28386A789" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.16", + "versionEndExcluding": "5.10.168", + "matchCriteriaId": "ADFCA1AB-6AC2-4C1F-B632-7D319BF681D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11.1", + "versionEndExcluding": "5.15.93", + "matchCriteriaId": "34D34C01-A4F8-40E7-98CC-366AE77653FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.11", + "matchCriteriaId": "535D03F4-DA02-49FE-934E-668827E6407B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.11:-:*:*:*:*:*:*", + "matchCriteriaId": "7AD3510E-E8FA-47F3-9AD5-D8EA4A2719D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*", + "matchCriteriaId": "FF501633-2F44-4913-A8EE-B021929F49F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*", + "matchCriteriaId": "2BDA597B-CAC1-4DF0-86F0-42E142C654E9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*", + "matchCriteriaId": "725C78C9-12CE-406F-ABE8-0813A01D66E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A127C155-689C-4F67-B146-44A57F4BFD85" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*", + "matchCriteriaId": "D34127CC-68F5-4703-A5F6-5006F803E4AE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*", + "matchCriteriaId": "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1369322c1de52c7b9b988b95c9903110a4566778", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5c4d4a83bf1a862d80c1efff1c6e3ce33b501e2e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7fe583c9bec10cd4b76231c51b37f3e4ca646e01", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/997bed0f3cde78a3e639d624985bf4a95cf767e6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a7da7d01ac5ce9b369a1ac70e1197999cc6c9686", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b38c3e9e0adc01956cc3e5a52e4d3f92f79d88e2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f65c4bbbd682b0877b669828b4e033b8d5d0a2dc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-529xx/CVE-2023-52934.json b/CVE-2023/CVE-2023-529xx/CVE-2023-52934.json index aa7dba51f95..048aa9847aa 100644 --- a/CVE-2023/CVE-2023-529xx/CVE-2023-52934.json +++ b/CVE-2023/CVE-2023-529xx/CVE-2023-52934.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52934", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-03-27T17:15:43.207", - "lastModified": "2025-03-28T18:11:49.747", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:27:03.340", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,105 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups En el commit 34488399fa08 (\"mm/madvise: agregar soporte de archivo y shmem a MADV_COLLAPSE\") realizamos el siguiente cambio en find_pmd_or_thp_or_none(): - if (!pmd_present(pmde)) - return SCAN_PMD_NULL; + if (pmd_none(pmde)) + return SCAN_PMD_NONE; Esto era para uso de las rutas de c\u00f3digo de archivo/shmem MADV_COLLAPSE, donde MADV_COLLAPSE podr\u00eda identificar una hugepage asignada a pte, solo para que khugepaged entrara en carrera, liberara la tabla pte y borrara el pmd. Tales rutas de c\u00f3digo incluyen: A) Si encontramos una p\u00e1gina compuesta adecuadamente alineada de orden HPAGE_PMD_ORDER ya en el pagecache. B) En retract_page_tables(), si no logramos obtener mmap_lock para el mm/direcci\u00f3n objetivo. En estos casos, collapse_pte_mapped_thp() realmente espera un pmd none (no solo !present), y queremos identificar adecuadamente ese caso separado del caso donde no se encuentra ning\u00fan pmd, o es un bad-pmd (por supuesto, muchas cosas podr\u00edan suceder una vez que eliminamos mmap_lock, y el pmd podr\u00eda plausiblemente sufrir m\u00faltiples transiciones debido a la intervenci\u00f3n de un fallo, divisi\u00f3n, etc.). En cualquier caso, el c\u00f3digo est\u00e1 preparado para instalar un huge-pmd solo cuando la entrada pmd existente es un pte-table-mapping-pmd genuino, o el none-pmd. Sin embargo, la confirmaci\u00f3n introduce un agujero l\u00f3gico; Es decir, hemos permitido que los !none- && !huge- && !bad-pmds se clasifiquen como pte-table-mapping-pmds genuinos. Un ejemplo de fugas de informaci\u00f3n son las entradas de intercambio. Los valores de pmd no se comprueban de nuevo antes de su uso en pte_offset_map_lock(), que espera nada menos que un pte-table-mapping-pmd genuino. Queremos restablecer la comprobaci\u00f3n de !pmd_present() (debajo de la comprobaci\u00f3n de pmd_none()), pero debemos tener cuidado con las sutilezas en las transiciones y los tratamientos de pmd por parte de varias arquitecturas. El problema es que __split_huge_pmd_locked() borra temporalmente el bit presente (o marca la entrada como inv\u00e1lida), pero pmd_present() y pmd_trans_huge() a\u00fan deben devolver verdadero mientras el pmd est\u00e9 en este estado transitorio. Por ejemplo, pmd_present() de x86 tambi\u00e9n verifica _PAGE_PSE, la versi\u00f3n de riscv tambi\u00e9n verifica el bit _PAGE_LEAF y arm64 tambi\u00e9n verifica el bit PMD_PRESENT_INVALID. Cubriendo los 4 casos para x86 (todas las verificaciones realizadas en el mismo valor pmd): 1) pmd_present() y pmd_trans_huge(). Lo \u00fanico que sabemos es que el bit PSE est\u00e1 establecido. O bien: a) No estamos compitiendo con __split_huge_page(), y PRESENT o PROTNONE est\u00e1n establecidos. => huge-pmd. b) Actualmente estamos compitiendo con __split_huge_page(). El peligro aqu\u00ed es que procedamos como si tuvi\u00e9ramos un huge-pmd, pero en realidad estamos viendo un pte-mapping-pmd. Entonces, \u00bfcu\u00e1l es el riesgo de este peligro? La \u00fanica ruta relevante es: madvise_collapse() -> colapso_pte_mapped_thp(). Donde podr\u00edamos informar incorrectamente de \"\u00e9xito\", cuando en realidad la memoria no est\u00e1 respaldada por pmd. Esto no tiene problema, ya que la divisi\u00f3n podr\u00eda ocurrir inmediatamente despu\u00e9s de una ejecuci\u00f3n (realmente) exitosa de madvise_collapse(). Por lo tanto, se puede asumir con seguridad que es huge-pmd. 2) pmd_present() && !pmd_trans_huge(): a) PSE no definido y PRESENT o PROTNONE s\u00ed lo est\u00e1n. => pte-table-mapping pmd (o PROT_NONE). b) devmap. Esta rutina puede llamarse inmediatamente despu\u00e9s de desbloquear/bloquear mmap_lock, o sin bloqueos (v\u00e9ase khugepaged_scan_mm_slot()), por lo que las comprobaciones VMA anteriores han sido invalidadas. 3) !pmd_present() && pmd_trans_huge(): No es posible. 4) !pmd_present() && !pmd_trans_huge() Ni PRESENT ni PROTNONE se establecen => no presente. He revisado todas las arquitecturas que implementan pmd_trans_huge() (arm64, riscv, powerpc, longarch, x86, mips, s390) y esta l\u00f3gica se traduce aproximadamente ---truncated---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.11", + "matchCriteriaId": "567003CA-0B0D-452C-9282-3818AD2C9704" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*", + "matchCriteriaId": "FF501633-2F44-4913-A8EE-B021929F49F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*", + "matchCriteriaId": "2BDA597B-CAC1-4DF0-86F0-42E142C654E9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*", + "matchCriteriaId": "725C78C9-12CE-406F-ABE8-0813A01D66E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A127C155-689C-4F67-B146-44A57F4BFD85" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*", + "matchCriteriaId": "D34127CC-68F5-4703-A5F6-5006F803E4AE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*", + "matchCriteriaId": "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/96aaaf8666010a39430cecf8a65c7ce2908a030f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/edb5d0cf5525357652aff6eacd9850b8ced07143", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-529xx/CVE-2023-52940.json b/CVE-2023/CVE-2023-529xx/CVE-2023-52940.json index d8e796355fd..a4a292698fe 100644 --- a/CVE-2023/CVE-2023-529xx/CVE-2023-52940.json +++ b/CVE-2023/CVE-2023-529xx/CVE-2023-52940.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52940", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-03-27T17:15:43.920", - "lastModified": "2025-03-28T18:11:49.747", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:25:41.900", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,105 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm: LRU multigeneraci\u00f3n: se corrige un fallo durante la migraci\u00f3n de cgroup. lru_gen_migrate_mm() asume que lru_gen_add_mm() se ejecuta antes que \u00e9l mismo. Esto no se cumple en el siguiente escenario: CPU 1 CPU 2 clone() cgroup_can_fork() cgroup_procs_write() cgroup_post_fork() task_lock() lru_gen_migrate_mm() task_unlock() task_lock() lru_gen_add_mm() task_unlock(). Cuando esto ocurre, el kernel se bloquea debido a la corrupci\u00f3n de la lista enlazada (mm_struct->lru_gen.list)." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.11", + "matchCriteriaId": "567003CA-0B0D-452C-9282-3818AD2C9704" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*", + "matchCriteriaId": "FF501633-2F44-4913-A8EE-B021929F49F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*", + "matchCriteriaId": "2BDA597B-CAC1-4DF0-86F0-42E142C654E9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*", + "matchCriteriaId": "725C78C9-12CE-406F-ABE8-0813A01D66E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A127C155-689C-4F67-B146-44A57F4BFD85" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*", + "matchCriteriaId": "D34127CC-68F5-4703-A5F6-5006F803E4AE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*", + "matchCriteriaId": "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/04448022311cebd30969d3aebdde765f1258b360", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/de08eaa6156405f2e9369f06ba5afae0e4ab3b62", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-529xx/CVE-2023-52941.json b/CVE-2023/CVE-2023-529xx/CVE-2023-52941.json index 7f442354ce4..714fe03cf5b 100644 --- a/CVE-2023/CVE-2023-529xx/CVE-2023-52941.json +++ b/CVE-2023/CVE-2023-529xx/CVE-2023-52941.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52941", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-03-27T17:15:44.043", - "lastModified": "2025-03-28T18:11:49.747", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:24:54.397", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,137 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: can: isotp: dividir el temporizador de transmisi\u00f3n en transmisi\u00f3n y tiempo de espera El temporizador para la transmisi\u00f3n de PDU isotp anteriormente ten\u00eda dos funciones: 1. enviar dos tramas consecutivas con un intervalo de tiempo determinado 2. supervisar los tiempos de espera para las tramas de control de flujo y las tramas de eco Esto llev\u00f3 a comprobaciones de txstate m\u00e1s grandes y potencialmente a un problema descubierto por syzbot que habilit\u00f3 la caracter\u00edstica panic_on_warn durante las pruebas. La antigua funci\u00f3n 'txtimer' se divide en 'txfrtimer' y 'txtimer' para manejar las dos funcionalidades anteriores con devoluciones de llamadas de temporizador independientes. Los dos temporizadores simplificados ahora se ejecutan en modo de una sola vez y hacen que las transiciones de estado (especialmente con isotp_rcv_echo) sean mejor comprensibles." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0.9", + "versionEndExcluding": "6.1", + "matchCriteriaId": "28CC5A62-2D03-429C-A726-BF09788C85CA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.1", + "versionEndExcluding": "6.1.11", + "matchCriteriaId": "7C5214A4-3205-4DBA-8381-6D8319C38AE5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*", + "matchCriteriaId": "DE093B34-F4CD-4052-8122-730D6537A91A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*", + "matchCriteriaId": "35B26BE4-43A6-4A36-A7F6-5B3F572D9186" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*", + "matchCriteriaId": "3FFFB0B3-930D-408A-91E2-BAE0C2715D80" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*", + "matchCriteriaId": "8535320E-A0DB-4277-800E-D0CE5BBA59E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc8:*:*:*:*:*:*", + "matchCriteriaId": "21718AA4-4056-40F2-968E-BDAA465A7872" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*", + "matchCriteriaId": "FF501633-2F44-4913-A8EE-B021929F49F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*", + "matchCriteriaId": "2BDA597B-CAC1-4DF0-86F0-42E142C654E9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*", + "matchCriteriaId": "725C78C9-12CE-406F-ABE8-0813A01D66E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A127C155-689C-4F67-B146-44A57F4BFD85" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*", + "matchCriteriaId": "D34127CC-68F5-4703-A5F6-5006F803E4AE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*", + "matchCriteriaId": "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/4f027cba8216f42a18b544842efab134f8b1f9f4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cae4c9bc35f72af5d4a079bb9d9fd62c4088a411", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-529xx/CVE-2023-52942.json b/CVE-2023/CVE-2023-529xx/CVE-2023-52942.json index 0870fb18451..093b69fe568 100644 --- a/CVE-2023/CVE-2023-529xx/CVE-2023-52942.json +++ b/CVE-2023/CVE-2023-529xx/CVE-2023-52942.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52942", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-03-27T17:15:44.163", - "lastModified": "2025-03-28T18:11:49.747", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:24:17.700", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,105 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: cgroup/cpuset: Correcci\u00f3n de una comprobaci\u00f3n incorrecta en update_parent_subparts_cpumask(). Se detect\u00f3 que la comprobaci\u00f3n para ver si una partici\u00f3n pod\u00eda usar todas las CPU del conjunto de CPU principal en update_parent_subparts_cpumask() era incorrecta. Como resultado, es posible dejar la partici\u00f3n principal sin CPU efectiva, incluso si hay tareas en el conjunto de CPU principal. Esto puede provocar un p\u00e1nico del sistema, como se informa en [1]. Corrija este problema actualizando la comprobaci\u00f3n para que falle al habilitar la partici\u00f3n si el valor de CPU efectivas de la partici\u00f3n principal es un subconjunto del valor de CPU permitidas de la partici\u00f3n secundaria. Tambi\u00e9n registre el c\u00f3digo de error cuando se produce un error en update_prstate() y agregue un caso de prueba donde la partici\u00f3n principal y la secundaria tengan la misma lista de CPU y la partici\u00f3n principal tenga una tarea. En este caso, la habilitaci\u00f3n de la partici\u00f3n en la secundaria fallar\u00e1. [1] https://www.spinics.net/lists/cgroups/msg36254.html" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.11", + "matchCriteriaId": "567003CA-0B0D-452C-9282-3818AD2C9704" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*", + "matchCriteriaId": "FF501633-2F44-4913-A8EE-B021929F49F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*", + "matchCriteriaId": "2BDA597B-CAC1-4DF0-86F0-42E142C654E9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*", + "matchCriteriaId": "725C78C9-12CE-406F-ABE8-0813A01D66E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A127C155-689C-4F67-B146-44A57F4BFD85" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*", + "matchCriteriaId": "D34127CC-68F5-4703-A5F6-5006F803E4AE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*", + "matchCriteriaId": "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/a2ab7f2cf5ef8f0c6212a246e681d1fe358cec1f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e5ae8803847b80fe9d744a3174abe2b7bfed222a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-529xx/CVE-2023-52980.json b/CVE-2023/CVE-2023-529xx/CVE-2023-52980.json index 80a6e4089d8..abb578e0149 100644 --- a/CVE-2023/CVE-2023-529xx/CVE-2023-52980.json +++ b/CVE-2023/CVE-2023-529xx/CVE-2023-52980.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52980", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-03-27T17:15:45.183", - "lastModified": "2025-03-28T18:11:49.747", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:23:45.827", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,105 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bloque: ublk: extensi\u00f3n de queue_size para corregir el desbordamiento Al validar el borrador del objetivo ublk de SPDK, en un caso en el que se asigna una gran profundidad de cola al dispositivo ublk de m\u00faltiples colas, el objetivo ublk se ejecutar\u00eda en un estado incorrecto extra\u00f1o. Durante las rondas de revisi\u00f3n y depuraci\u00f3n, se encontr\u00f3 un error de desbordamiento en el controlador ublk. En ublk_cmd.h, UBLK_MAX_QUEUE_DEPTH es 4096, lo que significa que cada profundidad de cola ublk se puede configurar tan grande como 4096. Pero al configurar qd para un dispositivo ublk, sizeof(struct ublk_queue) + profundidad * sizeof(struct ublk_io) ser\u00e1 mayor que 65535 si qd es mayor que 2728. Entonces queue_size se desborda y ublk_get_queue() hace referencia a una posici\u00f3n de puntero incorrecta. El contenido incorrecto de los elementos ublk_queue provocar\u00e1 un acceso a memoria fuera de los l\u00edmites. Extienda queue_size en ublk_device como \"unsigned int\"." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.1.11", + "matchCriteriaId": "45B4BA06-A459-4473-8903-3AE63DA4B625" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*", + "matchCriteriaId": "FF501633-2F44-4913-A8EE-B021929F49F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*", + "matchCriteriaId": "2BDA597B-CAC1-4DF0-86F0-42E142C654E9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*", + "matchCriteriaId": "725C78C9-12CE-406F-ABE8-0813A01D66E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A127C155-689C-4F67-B146-44A57F4BFD85" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*", + "matchCriteriaId": "D34127CC-68F5-4703-A5F6-5006F803E4AE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*", + "matchCriteriaId": "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/29baef789c838bd5c02f50c88adbbc6b955aaf61", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ee1e3fe4b4579f856997190a00ea4db0307b4332", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-529xx/CVE-2023-52981.json b/CVE-2023/CVE-2023-529xx/CVE-2023-52981.json index 3d5a30db7a2..ea603e8e2fe 100644 --- a/CVE-2023/CVE-2023-529xx/CVE-2023-52981.json +++ b/CVE-2023/CVE-2023-529xx/CVE-2023-52981.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52981", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-03-27T17:15:45.313", - "lastModified": "2025-03-28T18:11:49.747", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:22:48.960", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,105 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/i915: Arreglar el conteo de referencias de solicitud durante la captura de errores y el volcado de debugfs Cuando se agreg\u00f3 soporte para GuC a la captura de errores, el conteo de referencias alrededor del objeto de solicitud se rompi\u00f3. Arr\u00e9glenlo. La b\u00fasqueda basada en contexto administra el bloqueo de giro alrededor de la b\u00fasqueda internamente. Por lo tanto, tambi\u00e9n necesita obtener el conteo de referencias internamente. La b\u00fasqueda basada en solicitud solo de execlist se basa en el bloqueo externo, por lo que necesita un conteo de referencias externo pero dentro del bloqueo de giro, no fuera de \u00e9l. El \u00fanico otro llamador de la b\u00fasqueda basada en contexto es el c\u00f3digo para volcar el estado del motor a debugfs. Ese c\u00f3digo anteriormente no obten\u00eda una referencia expl\u00edcita en absoluto, ya que hace todo mientras mantiene el bloqueo de giro espec\u00edfico de execlist. Por lo tanto, eso necesita actualizarse, ya que el bloqueo de giro no ayuda cuando se usa el env\u00edo de GuC. En lugar de intentar obtener/poner condicionalmente dependiendo del modelo de env\u00edo, simplemente c\u00e1mbielo para que siempre haga obtener/poner. v2: Documentar expl\u00edcitamente agregar una l\u00ednea en blanco adicional en alg\u00fan c\u00f3digo denso (Andy Shevchenko). Se corrigen varias posibles desreferencias de puntero nulo en caso de no encontrarse ninguna solicitud (algunas detectadas por Tvrtko, \u00a1pero hab\u00eda m\u00e1s!). Tambi\u00e9n se corrigen una solicitud filtrada en caso de !started y otra en __guc_reset_context, ahora que intel_context_find_active_request cuenta las referencias de la solicitud devuelta. v3: Se a\u00f1ade el sufijo _get a intel_context_find_active_request ahora que obtiene una referencia (Daniele). v4: Se divide el cambio de intel_guc_find_hung_context en un parche independiente y se cambia el nombre de intel_context_find_active_request_get a intel_context_get_active_request (Tvrtko). v5: s/locking/reference counting/ en el mensaje de confirmaci\u00f3n (Tvrtko) (seleccionado del commit 3700e353781e27f1bc7222f51f2cc36cbeb9b4ec)." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "6.1.11", + "matchCriteriaId": "276C2247-2301-46F7-B5F7-9604642F876D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*", + "matchCriteriaId": "FF501633-2F44-4913-A8EE-B021929F49F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*", + "matchCriteriaId": "2BDA597B-CAC1-4DF0-86F0-42E142C654E9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*", + "matchCriteriaId": "725C78C9-12CE-406F-ABE8-0813A01D66E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A127C155-689C-4F67-B146-44A57F4BFD85" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*", + "matchCriteriaId": "D34127CC-68F5-4703-A5F6-5006F803E4AE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*", + "matchCriteriaId": "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/86d8ddc74124c3fdfc139f246ba6da15e45e86e3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9467397f417dd7b5d0db91452f0474e79716a527", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-529xx/CVE-2023-52982.json b/CVE-2023/CVE-2023-529xx/CVE-2023-52982.json index 61f975e004e..97394f5e21e 100644 --- a/CVE-2023/CVE-2023-529xx/CVE-2023-52982.json +++ b/CVE-2023/CVE-2023-529xx/CVE-2023-52982.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52982", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-03-27T17:15:45.437", - "lastModified": "2025-03-28T18:11:49.747", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:22:24.060", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,105 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: fscache: utilice wait_on_bit() para esperar la liberaci\u00f3n del volumen cedido. La liberaci\u00f3n del volumen cedido activar\u00e1 la adquisici\u00f3n de volumen pendiente mediante wake_up_bit(), sin embargo no coincide con wait_var_event() utilizado en fscache_wait_on_volume_collision() y nunca activar\u00e1 al que espera en la cola de espera porque estas dos funciones operan en colas de espera diferentes. Seg\u00fan la implementaci\u00f3n en fscache_wait_on_volume_collision(), si la activaci\u00f3n de una adquisici\u00f3n pendiente se demora m\u00e1s de 20 segundos (por ejemplo, debido a la demora en el cierre del fd a pedido), el primer wait_var_event_timeout() expirar\u00e1 y el siguiente wait_var_event() se colgar\u00e1 para siempre como se muestra a continuaci\u00f3n: FS-Cache: Potencial colisi\u00f3n de volumen nuevo=00000024 antiguo=00000022 ...... INFORMACI\u00d3N: montaje de tarea: 1148 bloqueado durante m\u00e1s de 122 segundos. No contaminado 6.1.0-rc6+ #1 task:mount state:D stack:0 pid:1148 ppid:1 Call Trace: __schedule+0x2f6/0xb80 schedule+0x67/0xe0 fscache_wait_on_volume_collision.cold+0x80/0x82 __fscache_acquire_volume+0x40d/0x4e0 erofs_fscache_register_volume+0x51/0xe0 [erofs] erofs_fscache_register_fs+0x19c/0x240 [erofs] erofs_fc_fill_super+0x746/0xaf0 [erofs] vfs_get_super+0x7d/0x100 get_tree_nodev+0x16/0x20 erofs_fc_get_tree+0x20/0x30 [erofs] vfs_get_tree+0x24/0xb0 path_mount+0x2fa/0xa90 do_mount+0x7c/0xa0 __x64_sys_mount+0x8b/0xe0 do_syscall_64+0x30/0x60 entry_SYSCALL_64_after_hwframe+0x46/0xb0 Considering that wake_up_bit() es m\u00e1s selectivo, corr\u00edjalo utilizando wait_on_bit() en lugar de wait_var_event() para esperar la liberaci\u00f3n del volumen cedido. Adem\u00e1s, debido a que waitqueue_active() se usa en wake_up_bit() y clear_bit() no implica ninguna barrera de memoria, use clear_and_wake_up_bit() para agregar la barrera de memoria faltante entre cursor->flags y waitqueue_active()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.17", + "versionEndExcluding": "6.1.11", + "matchCriteriaId": "15D484CF-DA6C-44F0-9BCE-F29F5D48ABE2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*", + "matchCriteriaId": "FF501633-2F44-4913-A8EE-B021929F49F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*", + "matchCriteriaId": "2BDA597B-CAC1-4DF0-86F0-42E142C654E9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*", + "matchCriteriaId": "725C78C9-12CE-406F-ABE8-0813A01D66E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*", + "matchCriteriaId": "A127C155-689C-4F67-B146-44A57F4BFD85" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*", + "matchCriteriaId": "D34127CC-68F5-4703-A5F6-5006F803E4AE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*", + "matchCriteriaId": "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3be069f42a7b79d3149194f21cdf24bf23864cac", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8226e37d82f43657da34dd770e2b38f20242ada7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-530xx/CVE-2023-53034.json b/CVE-2023/CVE-2023-530xx/CVE-2023-53034.json index 594c1aa5b13..4ea7b96f5ff 100644 --- a/CVE-2023/CVE-2023-530xx/CVE-2023-53034.json +++ b/CVE-2023/CVE-2023-530xx/CVE-2023-53034.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53034", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-16T15:15:52.717", - "lastModified": "2025-04-17T20:22:16.240", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:53:15.930", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,173 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ntb_hw_switchtec: Se corrige el desplazamiento fuera de los l\u00edmites en switchtec_ntb_mw_set_trans. Existe una API del kernel ntb_mw_clear_trans() que pasar\u00eda 0 tanto a addr como a size. Esto har\u00eda que xlate_pos fuera negativo. [ 23.734156] switchtec switchtec0: MW 0: parte 0 addr 0x0000000000000000 tama\u00f1o 0x0000000000000000 [ 23.734158] ======================================================================================== [ 23.734172] UBSAN: desplazamiento fuera de los l\u00edmites en drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7 [ 23.734418] el exponente de desplazamiento -1 es negativo. Se garantiza que xlate_pos sea positivo o cero antes de BIT." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.16", + "versionEndExcluding": "5.4.292", + "matchCriteriaId": "B1CC66AB-6E27-47C2-8131-3AACD9A7FB72" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.236", + "matchCriteriaId": "1DF46FB0-9163-4ABE-8CCA-32A497D4715B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.180", + "matchCriteriaId": "D19801C8-3D18-405D-9989-E6C9B30255FA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.134", + "matchCriteriaId": "3985DEC3-0437-4177-BC42-314AB575285A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.87", + "matchCriteriaId": "EFF24260-49B1-4251-9477-C564CFDAD25B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.23", + "matchCriteriaId": "26CAB76D-F00F-43CE-BEAD-7097F8FB1D6C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.11", + "matchCriteriaId": "E7E864B0-8C00-4679-BA55-659B4C9C3AD3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.2", + "matchCriteriaId": "FADAE5D8-4808-442C-B218-77B2CE8780A0" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0df2e03e4620548b41891b4e0d1bd9d2e0d8a39a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2429bdf26a0f3950fdd996861e9c1a3873af1dbe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/36d32cfb00d42e865396424bb5d340fc0a28870d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5b6857bb3bfb0dae17fab1e42c1e82c204a508b1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7ed22f8d8be26225a78cf5e85b2036421a6bf2d5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c61a3f2df162ba424be0141649a9ef5f28eaccc1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cb153bdc1812a3375639ed6ca5f147eaefb65349", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/de203da734fae00e75be50220ba5391e7beecdf9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f56951f211f181410a383d305e8d370993e45294", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-06xx/CVE-2024-0640.json b/CVE-2024/CVE-2024-06xx/CVE-2024-0640.json index 8cf445700c8..0239a110fa4 100644 --- a/CVE-2024/CVE-2024-06xx/CVE-2024-0640.json +++ b/CVE-2024/CVE-2024-06xx/CVE-2024-0640.json @@ -2,8 +2,8 @@ "id": "CVE-2024-0640", "sourceIdentifier": "security@huntr.dev", "published": "2025-03-20T10:15:14.093", - "lastModified": "2025-03-20T10:15:14.093", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:15:12.067", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 + } + ], "cvssMetricV30": [ { "source": "security@huntr.dev", @@ -51,14 +73,41 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:chatwoot:chatwoot:*:*:*:*:*:*:*:*", + "versionEndExcluding": "3.5.2", + "matchCriteriaId": "DD07E0E6-9255-4337-83E1-A430F61D68DB" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/chatwoot/chatwoot/commit/e39c14460b860d5e3d23d989dd6af48404ad1bb4", - "source": "security@huntr.dev" + "source": "security@huntr.dev", + "tags": [ + "Patch" + ] }, { "url": "https://huntr.com/bounties/08b3bebf-ce3c-4416-b75e-1927ba61de85", - "source": "security@huntr.dev" + "source": "security@huntr.dev", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking", + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-100xx/CVE-2024-10088.json b/CVE-2024/CVE-2024-100xx/CVE-2024-10088.json index 1c062f0ef71..35b6da5acee 100644 --- a/CVE-2024/CVE-2024-100xx/CVE-2024-10088.json +++ b/CVE-2024/CVE-2024-100xx/CVE-2024-10088.json @@ -2,8 +2,8 @@ "id": "CVE-2024-10088", "sourceIdentifier": "cvd@cert.pl", "published": "2025-04-14T12:15:14.263", - "lastModified": "2025-04-15T18:39:27.967", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T17:12:28.720", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -73,14 +95,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:softcom.wroc:iksoris:*:*:*:*:*:*:*:*", + "versionEndExcluding": "79.0", + "matchCriteriaId": "FBEAE944-6510-4EC5-9B56-3A279DCD02D3" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert.pl/en/posts/2025/04/CVE-2024-10087", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-100xx/CVE-2024-10089.json b/CVE-2024/CVE-2024-100xx/CVE-2024-10089.json index f854260264f..03a2368a890 100644 --- a/CVE-2024/CVE-2024-100xx/CVE-2024-10089.json +++ b/CVE-2024/CVE-2024-100xx/CVE-2024-10089.json @@ -2,8 +2,8 @@ "id": "CVE-2024-10089", "sourceIdentifier": "cvd@cert.pl", "published": "2025-04-14T12:15:14.403", - "lastModified": "2025-04-15T18:39:27.967", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T17:12:14.637", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -73,14 +95,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:softcom.wroc:iksoris:*:*:*:*:*:*:*:*", + "versionEndExcluding": "79.0", + "matchCriteriaId": "FBEAE944-6510-4EC5-9B56-3A279DCD02D3" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert.pl/en/posts/2025/04/CVE-2024-10087", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-100xx/CVE-2024-10090.json b/CVE-2024/CVE-2024-100xx/CVE-2024-10090.json index ca0c71e288d..dfa668c4d64 100644 --- a/CVE-2024/CVE-2024-100xx/CVE-2024-10090.json +++ b/CVE-2024/CVE-2024-100xx/CVE-2024-10090.json @@ -2,8 +2,8 @@ "id": "CVE-2024-10090", "sourceIdentifier": "cvd@cert.pl", "published": "2025-04-14T12:15:14.533", - "lastModified": "2025-04-15T18:39:27.967", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T17:11:58.043", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -73,14 +95,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:softcom.wroc:iksoris:*:*:*:*:*:*:*:*", + "versionEndExcluding": "79.0", + "matchCriteriaId": "FBEAE944-6510-4EC5-9B56-3A279DCD02D3" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert.pl/en/posts/2025/04/CVE-2024-10087", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-114xx/CVE-2024-11481.json b/CVE-2024/CVE-2024-114xx/CVE-2024-11481.json index 574de3ed6f1..47d312b70e7 100644 --- a/CVE-2024/CVE-2024-114xx/CVE-2024-11481.json +++ b/CVE-2024/CVE-2024-114xx/CVE-2024-11481.json @@ -2,8 +2,8 @@ "id": "CVE-2024-11481", "sourceIdentifier": "trellixpsirt@trellix.com", "published": "2024-11-29T08:15:04.270", - "lastModified": "2024-11-29T08:15:04.270", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:37:08.327", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 4.2 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N", + "baseScore": 8.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.2 } ] }, @@ -51,10 +71,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trellix:enterprise_security_manager:11.6.10:*:*:*:*:*:*:*", + "matchCriteriaId": "E938A5F5-8505-4AFD-BBC4-51B422551FAC" + } + ] + } + ] + } + ], "references": [ { "url": "https://thrive.trellix.com/s/article/000014058", - "source": "trellixpsirt@trellix.com" + "source": "trellixpsirt@trellix.com", + "tags": [ + "Permissions Required" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-114xx/CVE-2024-11482.json b/CVE-2024/CVE-2024-114xx/CVE-2024-11482.json index 6061bdc2621..b42d8bc9d8b 100644 --- a/CVE-2024/CVE-2024-114xx/CVE-2024-11482.json +++ b/CVE-2024/CVE-2024-114xx/CVE-2024-11482.json @@ -2,8 +2,8 @@ "id": "CVE-2024-11482", "sourceIdentifier": "trellixpsirt@trellix.com", "published": "2024-11-29T08:15:04.437", - "lastModified": "2025-03-18T15:15:46.897", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:34:25.197", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:trellix:enterprise_security_manager:11.6.10:*:*:*:*:*:*:*", + "matchCriteriaId": "E938A5F5-8505-4AFD-BBC4-51B422551FAC" + } + ] + } + ] + } + ], "references": [ { "url": "https://thrive.trellix.com/s/article/000014058#h2_0", - "source": "trellixpsirt@trellix.com" + "source": "trellixpsirt@trellix.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://hackerone.com/reports/2817658", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-135xx/CVE-2024-13598.json b/CVE-2024/CVE-2024-135xx/CVE-2024-13598.json index 3a1415dbf12..5704d4983df 100644 --- a/CVE-2024/CVE-2024-135xx/CVE-2024-13598.json +++ b/CVE-2024/CVE-2024-135xx/CVE-2024-13598.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13598", "sourceIdentifier": "cvd@cert.pl", "published": "2025-04-14T12:15:14.820", - "lastModified": "2025-04-15T18:39:27.967", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T17:11:46.363", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -73,14 +95,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:softcom.wroc:iksoris:*:*:*:*:*:*:*:*", + "versionEndExcluding": "79.0", + "matchCriteriaId": "FBEAE944-6510-4EC5-9B56-3A279DCD02D3" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert.pl/en/posts/2025/04/CVE-2024-10087", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-301xx/CVE-2024-30112.json b/CVE-2024/CVE-2024-301xx/CVE-2024-30112.json index d8f503acb3a..4a388ab9930 100644 --- a/CVE-2024/CVE-2024-301xx/CVE-2024-30112.json +++ b/CVE-2024/CVE-2024-301xx/CVE-2024-30112.json @@ -2,8 +2,8 @@ "id": "CVE-2024-30112", "sourceIdentifier": "psirt@hcl.com", "published": "2024-06-25T22:15:30.117", - "lastModified": "2024-11-21T09:11:17.520", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:53:09.860", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,72 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:7.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FD4BF4C3-3D45-41A8-886F-521E095CBBF2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:8.0:-:*:*:*:*:*:*", + "matchCriteriaId": "65CA8438-B6A6-4B36-826D-8625AACBC8FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:8.0:cumulative_release1:*:*:*:*:*:*", + "matchCriteriaId": "BF707A30-B342-43F2-A390-60E8FA8384D5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:8.0:cumulative_release2:*:*:*:*:*:*", + "matchCriteriaId": "294AE19B-3678-49C3-8613-A9331C5C1481" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:8.0:cumulative_release3:*:*:*:*:*:*", + "matchCriteriaId": "773D1288-DF28-43F3-9517-B176DD840A8C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:8.0:cumulative_release4:*:*:*:*:*:*", + "matchCriteriaId": "7FCB8E35-3FFA-42FA-8AEB-A2DD22D809C9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:8.0:cumulative_release5:*:*:*:*:*:*", + "matchCriteriaId": "8948C358-B168-45E3-BC9F-E5DA4DD56203" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:8.0:cumulative_release6:*:*:*:*:*:*", + "matchCriteriaId": "C6879F00-1C87-44A6-83DF-A1DC80A85A88" + } + ] + } + ] + } + ], "references": [ { "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114148", - "source": "psirt@hcl.com" + "source": "psirt@hcl.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114148", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-327xx/CVE-2024-32732.json b/CVE-2024/CVE-2024-327xx/CVE-2024-32732.json index 8277d5910ce..949c462ae79 100644 --- a/CVE-2024/CVE-2024-327xx/CVE-2024-32732.json +++ b/CVE-2024/CVE-2024-327xx/CVE-2024-32732.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32732", "sourceIdentifier": "cna@sap.com", "published": "2024-12-10T01:15:05.130", - "lastModified": "2024-12-10T01:15:05.130", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T18:29:49.757", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,42 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:enterprise:*:*:*", + "matchCriteriaId": "8354981E-4A5F-4E5E-AF3A-283D5922DF90" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2025:*:*:*:-:*:*:*", + "matchCriteriaId": "12840D95-CE8E-40FB-9B73-DEBF78384B30" + } + ] + } + ] + } + ], "references": [ { "url": "https://me.sap.com/notes/3524933", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://url.sap/sapsecuritypatchday", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-338xx/CVE-2024-33891.json b/CVE-2024/CVE-2024-338xx/CVE-2024-33891.json index 66b7429414b..59f25ad6b2b 100644 --- a/CVE-2024/CVE-2024-338xx/CVE-2024-33891.json +++ b/CVE-2024/CVE-2024-338xx/CVE-2024-33891.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33891", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-28T23:15:07.200", - "lastModified": "2025-02-12T15:15:14.827", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T18:50:31.543", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,42 +51,89 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:delinea:secret_server:*:*:*:*:on-premises:*:*:*", + "versionEndExcluding": "11.7.000001", + "matchCriteriaId": "127DC711-EC68-4D34-B86A-9E6EA0AA5FCB" + } + ] + } + ] + } + ], "references": [ { "url": "https://delinea.com/products/secret-server", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000001.htm", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Release Notes" + ] }, { "url": "https://straightblast.medium.com/all-your-secrets-are-belong-to-us-a-delinea-secret-server-authn-authz-bypass-adc26c800ad3", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://trust.delinea.com/?tcuUid=17aaf4ef-ada9-46d5-bf97-abd3b07daae3", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://delinea.com/products/secret-server", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Product" + ] }, { "url": "https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000001.htm", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Release Notes" + ] }, { "url": "https://straightblast.medium.com/all-your-secrets-are-belong-to-us-a-delinea-secret-server-authn-authz-bypass-adc26c800ad3", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://trust.delinea.com/?tcuUid=17aaf4ef-ada9-46d5-bf97-abd3b07daae3", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://github.com/straightblast/My-PoC-Exploits/blob/master/CVE-2024-33891.py", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-395xx/CVE-2024-39595.json b/CVE-2024/CVE-2024-395xx/CVE-2024-39595.json index 1a6d4fb6666..bf3d89a6215 100644 --- a/CVE-2024/CVE-2024-395xx/CVE-2024-39595.json +++ b/CVE-2024/CVE-2024-395xx/CVE-2024-39595.json @@ -2,8 +2,8 @@ "id": "CVE-2024-39595", "sourceIdentifier": "cna@sap.com", "published": "2024-07-09T05:15:12.507", - "lastModified": "2024-11-21T09:28:05.007", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T18:41:39.603", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,22 +51,126 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse:700:*:*:*:*:*:*:*", + "matchCriteriaId": "D495F997-45A9-4C80-841E-781E1EAC3074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse:701:*:*:*:*:*:*:*", + "matchCriteriaId": "2FCA6F5A-25B8-46E1-B407-38F61222C057" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse:702:*:*:*:*:*:*:*", + "matchCriteriaId": "3FE999EE-9B6B-4D2C-9347-5558B878AE7B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse:730:*:*:*:*:*:*:*", + "matchCriteriaId": "EF8F2CE3-BA4B-4A9C-A284-87F0AB797B92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse:731:*:*:*:*:*:*:*", + "matchCriteriaId": "00732AD2-BEED-4C1F-AC39-46E6F33CBB5E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse:740:*:*:*:*:*:*:*", + "matchCriteriaId": "EC7DABAD-36FA-49D7-8C3C-3AA49604BE37" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse:750:*:*:*:*:*:*:*", + "matchCriteriaId": "526C11C6-B67D-49F1-94E6-A324AA581EDD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse:751:*:*:*:*:*:*:*", + "matchCriteriaId": "4A4E38AC-5888-4ABD-AAB1-BC5312701195" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse:752:*:*:*:*:*:*:*", + "matchCriteriaId": "8D7A93A1-3D65-4C79-92B1-E433EE443478" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse:753:*:*:*:*:*:*:*", + "matchCriteriaId": "80E03381-893C-4646-9150-303AB4F6144B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse:754:*:*:*:*:*:*:*", + "matchCriteriaId": "1400B8E5-8400-420A-8581-9F3B07EF6BF4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse:755:*:*:*:*:*:*:*", + "matchCriteriaId": "2ABE173B-C66E-4A69-9735-E325C0DAC062" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse:756:*:*:*:*:*:*:*", + "matchCriteriaId": "CEF64C99-2AEF-4942-90AC-053CE56293F3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse:757:*:*:*:*:*:*:*", + "matchCriteriaId": "C8E527DF-7066-4869-A914-DD29979EE90D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse:758:*:*:*:*:*:*:*", + "matchCriteriaId": "093021E9-112A-4828-AE86-8B32BCC9B8B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:business_warehouse_virtual_comp:701:*:*:*:*:*:*:*", + "matchCriteriaId": "F10F39E6-41C6-46E7-855A-8D05055A8142" + } + ] + } + ] + } + ], "references": [ { "url": "https://me.sap.com/notes/3482217", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://url.sap/sapsecuritypatchday", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Patch" + ] }, { "url": "https://me.sap.com/notes/3482217", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Permissions Required" + ] }, { "url": "https://url.sap/sapsecuritypatchday", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-395xx/CVE-2024-39599.json b/CVE-2024/CVE-2024-395xx/CVE-2024-39599.json index cb67e664b3f..407580b10ae 100644 --- a/CVE-2024/CVE-2024-395xx/CVE-2024-39599.json +++ b/CVE-2024/CVE-2024-395xx/CVE-2024-39599.json @@ -2,8 +2,8 @@ "id": "CVE-2024-39599", "sourceIdentifier": "cna@sap.com", "published": "2024-07-09T05:15:12.933", - "lastModified": "2024-11-21T09:28:05.570", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T18:40:44.357", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,22 +51,126 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:700:*:*:*:*:*:*:*", + "matchCriteriaId": "85616273-040E-49CB-8EB6-D2D4D7B603E5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:701:*:*:*:*:*:*:*", + "matchCriteriaId": "C5F2C3A9-DCC0-4FF1-8E68-9EA150E209F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:702:*:*:*:*:*:*:*", + "matchCriteriaId": "6F774A45-2A9F-4873-A5DC-766D030C8CCD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:731:*:*:*:*:*:*:*", + "matchCriteriaId": "D3A0A2D6-9259-4A35-A236-F4BEE986C1FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:740:*:*:*:*:*:*:*", + "matchCriteriaId": "49C3A8E5-FA6A-4EF3-BF50-FD4E1576024F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:750:*:*:*:*:*:*:*", + "matchCriteriaId": "ABA8AB4E-3FE6-46A8-847E-660C5DF6CE71" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:751:*:*:*:*:*:*:*", + "matchCriteriaId": "6DA4A6F0-C0F1-42CB-8BBD-7198064733EA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:752:*:*:*:*:*:*:*", + "matchCriteriaId": "8C121CC9-26F6-4103-8EB0-BAFF6B5B5FE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:753:*:*:*:*:*:*:*", + "matchCriteriaId": "86086D00-10BF-4C55-8D87-82CCBE468153" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:754:*:*:*:*:*:*:*", + "matchCriteriaId": "2F25246A-D9E5-4F0D-B91A-478D4E5570DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:755:*:*:*:*:*:*:*", + "matchCriteriaId": "0218695F-C4AD-46BF-B176-F10C644A9C2D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:756:*:*:*:*:*:*:*", + "matchCriteriaId": "FC9E7C3E-1005-450A-9198-E014C1BAADBC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:757:*:*:*:*:*:*:*", + "matchCriteriaId": "3A177AB1-CC85-46EF-91DF-462096608C9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:758:*:*:*:*:*:*:*", + "matchCriteriaId": "F7591F81-708C-4285-9BB2-F2B4BDB9759B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:795:*:*:*:*:*:*:*", + "matchCriteriaId": "DD27E9BD-7102-4B8B-A75A-8A94678F8633" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:sap_basis:796:*:*:*:*:*:*:*", + "matchCriteriaId": "C70D7AC0-0389-4F7A-8ECC-B1BADB02418D" + } + ] + } + ] + } + ], "references": [ { "url": "https://me.sap.com/notes/3456952", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://url.sap/sapsecuritypatchday", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Patch" + ] }, { "url": "https://me.sap.com/notes/3456952", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Permissions Required" + ] }, { "url": "https://url.sap/sapsecuritypatchday", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-421xx/CVE-2024-42188.json b/CVE-2024/CVE-2024-421xx/CVE-2024-42188.json index c79fbdd4089..cea8d57993e 100644 --- a/CVE-2024/CVE-2024-421xx/CVE-2024-42188.json +++ b/CVE-2024/CVE-2024-421xx/CVE-2024-42188.json @@ -2,8 +2,8 @@ "id": "CVE-2024-42188", "sourceIdentifier": "psirt@hcl.com", "published": "2024-11-14T16:15:19.283", - "lastModified": "2024-11-15T13:58:08.913", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:45:14.013", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 2.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", + "baseScore": 4.6, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 2.5 } ] }, @@ -51,10 +71,70 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:7.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FD4BF4C3-3D45-41A8-886F-521E095CBBF2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:8.0:-:*:*:*:*:*:*", + "matchCriteriaId": "65CA8438-B6A6-4B36-826D-8625AACBC8FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:8.0:cumulative_release1:*:*:*:*:*:*", + "matchCriteriaId": "BF707A30-B342-43F2-A390-60E8FA8384D5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:8.0:cumulative_release2:*:*:*:*:*:*", + "matchCriteriaId": "294AE19B-3678-49C3-8613-A9331C5C1481" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:8.0:cumulative_release3:*:*:*:*:*:*", + "matchCriteriaId": "773D1288-DF28-43F3-9517-B176DD840A8C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:8.0:cumulative_release4:*:*:*:*:*:*", + "matchCriteriaId": "7FCB8E35-3FFA-42FA-8AEB-A2DD22D809C9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:8.0:cumulative_release5:*:*:*:*:*:*", + "matchCriteriaId": "8948C358-B168-45E3-BC9F-E5DA4DD56203" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:8.0:cumulative_release6:*:*:*:*:*:*", + "matchCriteriaId": "C6879F00-1C87-44A6-83DF-A1DC80A85A88" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hcltech:connections:8.0:cumulative_release7:*:*:*:*:*:*", + "matchCriteriaId": "28450E88-8377-4B0D-9383-B34C9EF28CC9" + } + ] + } + ] + } + ], "references": [ { "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117387", - "source": "psirt@hcl.com" + "source": "psirt@hcl.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-452xx/CVE-2024-45281.json b/CVE-2024/CVE-2024-452xx/CVE-2024-45281.json index 7a214202fcf..e6eb14c038b 100644 --- a/CVE-2024/CVE-2024-452xx/CVE-2024-45281.json +++ b/CVE-2024/CVE-2024-452xx/CVE-2024-45281.json @@ -2,8 +2,8 @@ "id": "CVE-2024-45281", "sourceIdentifier": "cna@sap.com", "published": "2024-09-10T05:15:12.007", - "lastModified": "2024-09-10T12:09:50.377", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T18:40:23.553", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:-:*:*:*", + "matchCriteriaId": "4AA1BB94-FF0C-4D4D-A8EC-F0D8505B966C" + } + ] + } + ] + } + ], "references": [ { "url": "https://me.sap.com/notes/3425287", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://url.sap/sapsecuritypatchday", - "source": "cna@sap.com" + "source": "cna@sap.com", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-497xx/CVE-2024-49705.json b/CVE-2024/CVE-2024-497xx/CVE-2024-49705.json index 106c639c5dc..c14565682b2 100644 --- a/CVE-2024/CVE-2024-497xx/CVE-2024-49705.json +++ b/CVE-2024/CVE-2024-497xx/CVE-2024-49705.json @@ -2,8 +2,8 @@ "id": "CVE-2024-49705", "sourceIdentifier": "cvd@cert.pl", "published": "2025-04-14T12:15:15.120", - "lastModified": "2025-04-15T18:39:27.967", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T17:11:06.027", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -73,14 +95,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:softcom.wroc:iksoris:*:*:*:*:*:*:*:*", + "versionEndExcluding": "79.0", + "matchCriteriaId": "FBEAE944-6510-4EC5-9B56-3A279DCD02D3" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert.pl/en/posts/2025/04/CVE-2024-10087", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-497xx/CVE-2024-49706.json b/CVE-2024/CVE-2024-497xx/CVE-2024-49706.json index 9af29f53c12..81f71dfda3f 100644 --- a/CVE-2024/CVE-2024-497xx/CVE-2024-49706.json +++ b/CVE-2024/CVE-2024-497xx/CVE-2024-49706.json @@ -2,8 +2,8 @@ "id": "CVE-2024-49706", "sourceIdentifier": "cvd@cert.pl", "published": "2025-04-14T12:15:15.280", - "lastModified": "2025-04-15T18:39:27.967", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T17:10:03.333", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -73,14 +95,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:softcom.wroc:iksoris:*:*:*:*:*:*:*:*", + "versionEndExcluding": "79.0", + "matchCriteriaId": "FBEAE944-6510-4EC5-9B56-3A279DCD02D3" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert.pl/en/posts/2025/04/CVE-2024-10087", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-497xx/CVE-2024-49707.json b/CVE-2024/CVE-2024-497xx/CVE-2024-49707.json index f67dbab2d19..c98b35f418f 100644 --- a/CVE-2024/CVE-2024-497xx/CVE-2024-49707.json +++ b/CVE-2024/CVE-2024-497xx/CVE-2024-49707.json @@ -2,8 +2,8 @@ "id": "CVE-2024-49707", "sourceIdentifier": "cvd@cert.pl", "published": "2025-04-14T12:15:15.423", - "lastModified": "2025-04-15T18:39:27.967", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T17:09:12.577", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -73,14 +95,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:softcom.wroc:iksoris:*:*:*:*:*:*:*:*", + "versionEndExcluding": "79.0", + "matchCriteriaId": "FBEAE944-6510-4EC5-9B56-3A279DCD02D3" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert.pl/en/posts/2025/04/CVE-2024-10087", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-497xx/CVE-2024-49708.json b/CVE-2024/CVE-2024-497xx/CVE-2024-49708.json index 4dd7b3eaa28..94a4ba78e87 100644 --- a/CVE-2024/CVE-2024-497xx/CVE-2024-49708.json +++ b/CVE-2024/CVE-2024-497xx/CVE-2024-49708.json @@ -2,8 +2,8 @@ "id": "CVE-2024-49708", "sourceIdentifier": "cvd@cert.pl", "published": "2025-04-14T12:15:15.567", - "lastModified": "2025-04-15T18:39:27.967", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T17:08:15.010", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -73,14 +95,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:softcom.wroc:iksoris:*:*:*:*:*:*:*:*", + "versionEndExcluding": "79.0", + "matchCriteriaId": "FBEAE944-6510-4EC5-9B56-3A279DCD02D3" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert.pl/en/posts/2025/04/CVE-2024-10087", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-497xx/CVE-2024-49709.json b/CVE-2024/CVE-2024-497xx/CVE-2024-49709.json index 096f418119a..4229fc99fdb 100644 --- a/CVE-2024/CVE-2024-497xx/CVE-2024-49709.json +++ b/CVE-2024/CVE-2024-497xx/CVE-2024-49709.json @@ -2,8 +2,8 @@ "id": "CVE-2024-49709", "sourceIdentifier": "cvd@cert.pl", "published": "2025-04-14T12:15:15.707", - "lastModified": "2025-04-15T18:39:27.967", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T17:07:50.510", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", + "baseScore": 4.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 2.5 + } ] }, "weaknesses": [ @@ -73,14 +95,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:softcom.wroc:iksoris:*:*:*:*:*:*:*:*", + "versionEndExcluding": "79.0", + "matchCriteriaId": "FBEAE944-6510-4EC5-9B56-3A279DCD02D3" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert.pl/en/posts/2025/04/CVE-2024-10087", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-580xx/CVE-2024-58093.json b/CVE-2024/CVE-2024-580xx/CVE-2024-58093.json index a320120e4af..174f41ad8ed 100644 --- a/CVE-2024/CVE-2024-580xx/CVE-2024-58093.json +++ b/CVE-2024/CVE-2024-580xx/CVE-2024-58093.json @@ -2,8 +2,8 @@ "id": "CVE-2024-58093", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-16T15:15:53.220", - "lastModified": "2025-04-17T20:22:16.240", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:53:45.890", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,11 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: PCI/ASPM: Correcci\u00f3n de la salida del estado del enlace durante la eliminaci\u00f3n de la funci\u00f3n ascendente del conmutador. Antes de la versi\u00f3n 456d8aa37d0f (\"PCI/ASPM: Deshabilitar ASPM al eliminar la funci\u00f3n MFD para evitar el use-after-free\"), liber\u00e1bamos el enlace ASPM solo despu\u00e9s de eliminar la \u00faltima funci\u00f3n del bus correspondiente al enlace en cuesti\u00f3n. Era demasiado tarde. Si la funci\u00f3n 0 se elimina antes que la funci\u00f3n hermana, enlace->descendente apuntar\u00eda a la memoria liberada despu\u00e9s. Tras el cambio mencionado, liber\u00e1bamos el estado del enlace principal ASPM al eliminar cualquier funci\u00f3n del bus correspondiente a un enlace determinado. Era demasiado pronto. Si el enlace es a un conmutador PCIe con MFD en el puerto ascendente, eliminar primero las funciones distintas de la 0 liberar\u00eda un enlace que a\u00fan permanece como parent_link para los puertos descendentes restantes. Los GPF resultantes son especialmente frecuentes durante la desconexi\u00f3n en caliente, ya que pciehp elimina los dispositivos del bus de enlace en orden inverso. En ese conmutador, la funci\u00f3n 0 es el puente P2P virtual al bus interno. Se libera exactamente cuando se elimina la funci\u00f3n 0: antes de que el enlace principal quede obsoleto, pero despu\u00e9s de que todos los enlaces subordinados desaparezcan. [kwilczynski: registro de confirmaciones]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.251", + "versionEndExcluding": "5.5", + "matchCriteriaId": "44DA80F9-E53B-4731-AC41-BD9BAFB7661D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.188", + "versionEndExcluding": "5.11", + "matchCriteriaId": "6D42E8C7-CD33-432A-AC09-DC524C88ECE4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.121", + "versionEndExcluding": "5.16", + "matchCriteriaId": "F3AFFFEE-0707-48FE-B692-4AB92FDAA922" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.39", + "versionEndExcluding": "6.2", + "matchCriteriaId": "43B56BBD-C68E-4AF0-AEFF-3863C4B70AC2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.3.13", + "versionEndExcluding": "6.4", + "matchCriteriaId": "9058C05B-5440-4D83-834D-2E94FC46621C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.4.4", + "versionEndExcluding": "6.15", + "matchCriteriaId": "2C10C69F-6357-4624-ADB7-90D4E8729AD5" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/cbf937dcadfd571a434f8074d057b32cd14fbea5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-580xx/CVE-2024-58094.json b/CVE-2024/CVE-2024-580xx/CVE-2024-58094.json index 5264cbe5994..541859d469a 100644 --- a/CVE-2024/CVE-2024-580xx/CVE-2024-58094.json +++ b/CVE-2024/CVE-2024-580xx/CVE-2024-58094.json @@ -2,8 +2,8 @@ "id": "CVE-2024-58094", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-16T15:15:53.330", - "lastModified": "2025-04-17T20:22:16.240", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:54:50.797", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,100 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: jfs: a\u00f1adir comprobaci\u00f3n de solo lectura antes del truncamiento en jfs_truncate_nolock(). Se a\u00f1adi\u00f3 una comprobaci\u00f3n para el modo de \"solo lectura\" en la funci\u00f3n `jfs_truncate_nolock` para evitar errores relacionados con la escritura en un sistema de archivos de solo lectura. Pila de llamadas: block_write_begin() { jfs_write_failed() { jfs_truncate() { jfs_truncate_nolock() { txEnd() { ... log = JFS_SBI(tblk->sb)->log; // (log == NULL) Si se activa la condici\u00f3n `isReadOnly(ip)` en `jfs_truncate_nolock`, la ejecuci\u00f3n de la funci\u00f3n se detendr\u00e1 y no se realizar\u00e1n m\u00e1s modificaciones de datos. En su lugar, se llamar\u00e1 a la funci\u00f3n `xtTruncate` con el indicador \"COMMIT_WMAP\", lo que impide las modificaciones en modo de \"solo lectura\"." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.13", + "versionEndExcluding": "6.14.2", + "matchCriteriaId": "52F2BE8D-57F3-4A09-90F4-3B7CE68D9CD9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:*", + "matchCriteriaId": "6F62EECE-8FB1-4D57-85D8-CB9E23CF313C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4F76C298-81DC-43E4-8FC9-DC005A2116EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*", + "matchCriteriaId": "0AB349B2-3F78-4197-882B-90ADB3BF645A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*", + "matchCriteriaId": "6AC88830-A9BC-4607-B572-A4B502FC9FD0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*", + "matchCriteriaId": "476CB3A5-D022-4F13-AAEF-CB6A5785516A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/b5799dd77054c1ec49b0088b006c9908e256843b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f605bc3e162f5c6faa9bd3602ce496053d06a4bb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-580xx/CVE-2024-58095.json b/CVE-2024/CVE-2024-580xx/CVE-2024-58095.json index 1c00e7e617b..d3f27f283ae 100644 --- a/CVE-2024/CVE-2024-580xx/CVE-2024-58095.json +++ b/CVE-2024/CVE-2024-580xx/CVE-2024-58095.json @@ -2,8 +2,8 @@ "id": "CVE-2024-58095", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-16T15:15:53.467", - "lastModified": "2025-04-17T20:22:16.240", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:55:30.840", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,100 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: jfs: a\u00f1adir comprobaci\u00f3n de solo lectura antes de llamar a txBeginAnon(). Se a\u00f1adi\u00f3 una comprobaci\u00f3n de solo lectura antes de llamar a `txBeginAnon` en `extAlloc` y `extRecord`. Esto impide intentos de modificaci\u00f3n en un sistema de archivos montado de solo lectura, lo que evita posibles errores o bloqueos. Rastreo de llamadas: txBeginAnon+0xac/0x154 extAlloc+0xe8/0xdec fs/jfs/jfs_extent.c:78 jfs_get_block+0x340/0xb98 fs/jfs/inode.c:248 __block_write_begin_int+0x580/0x166c fs/buffer.c:2128 __block_write_begin fs/buffer.c:2177 [en l\u00ednea] block_write_begin+0x98/0x11c fs/buffer.c:2236 jfs_write_begin+0x44/0x88 fs/jfs/inode.c:299" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.13", + "versionEndExcluding": "6.14.2", + "matchCriteriaId": "52F2BE8D-57F3-4A09-90F4-3B7CE68D9CD9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:*", + "matchCriteriaId": "6F62EECE-8FB1-4D57-85D8-CB9E23CF313C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4F76C298-81DC-43E4-8FC9-DC005A2116EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*", + "matchCriteriaId": "0AB349B2-3F78-4197-882B-90ADB3BF645A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*", + "matchCriteriaId": "6AC88830-A9BC-4607-B572-A4B502FC9FD0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*", + "matchCriteriaId": "476CB3A5-D022-4F13-AAEF-CB6A5785516A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0176e69743ecc02961f2ae1ea42439cd2bf9ed58", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/15469c408af2d7a52fb186a92f2f091b0f13b1fb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-580xx/CVE-2024-58096.json b/CVE-2024/CVE-2024-580xx/CVE-2024-58096.json index c7247b331a7..2f815ce1e88 100644 --- a/CVE-2024/CVE-2024-580xx/CVE-2024-58096.json +++ b/CVE-2024/CVE-2024-580xx/CVE-2024-58096.json @@ -2,8 +2,8 @@ "id": "CVE-2024-58096", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-16T15:15:53.587", - "lastModified": "2025-04-17T20:22:16.240", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:55:59.950", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: ath11k: a\u00f1adir srng->lock para ath11k_hal_srng_* en modo monitor. ath11k_hal_srng_* debe usarse con srng->lock para proteger los datos de srng. Para ath11k_dp_rx_mon_dest_process() y ath11k_dp_full_mon_process_rx(), usan ath11k_hal_srng_* repetidamente, pero nunca llaman a srng->lock. Por lo tanto, al ejecutar el modo monitor (completo), se mostrar\u00e1 la advertencia: RIP: 0010:ath11k_hal_srng_dst_peek+0x18/0x30 [ath11k] Seguimiento de llamadas: ? ath11k_hal_srng_dst_peek+0x18/0x30 [ath11k] ath11k_dp_rx_process_mon_status+0xc45/0x1190 [ath11k] ? idr_alloc_u32+0x97/0xd0 ath11k_dp_rx_process_mon_rings+0x32a/0x550 [ath11k] ath11k_dp_service_srng+0x289/0x5a0 [ath11k] ath11k_pcic_ext_grp_napi_poll+0x30/0xd0 [ath11k] __napi_poll+0x30/0x1f0 net_rx_action+0x198/0x320 __do_softirq+0xdd/0x319 Por lo tanto, agregue srng->lock para evitar estas advertencias. Para obtener srng->lock, debe cambiar la definici\u00f3n de srng de 'void' a 'struct hal_srng'. Inicial\u00edcelos en otro lugar para evitar que una l\u00ednea de c\u00f3digo sea demasiado larga. Esto es coherente con otras funciones de proceso de anillo, como ath11k_dp_process_rx(). Probado en: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.30 Probado en: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.6", + "versionEndExcluding": "6.14.2", + "matchCriteriaId": "D5E066C2-5A3F-4110-9102-BD6F43146E21" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/63b7af49496d0e32f7a748b6af3361ec138b1bd3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b85758e76b6452740fc2a08ced6759af64c0d59a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12422.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12422.json new file mode 100644 index 00000000000..7d9e8bd5860 --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12422.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-12422", + "sourceIdentifier": "a0340c66-c385-4f8b-991b-3d05f6fd5220", + "published": "2025-10-28T18:15:36.697", + "lastModified": "2025-10-28T18:15:36.697", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "a0340c66-c385-4f8b-991b-3d05f6fd5220", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "a0340c66-c385-4f8b-991b-3d05f6fd5220", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://azure-access.com/security-advisories", + "source": "a0340c66-c385-4f8b-991b-3d05f6fd5220" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-209xx/CVE-2025-20996.json b/CVE-2025/CVE-2025-209xx/CVE-2025-20996.json index a203d371ac3..df4249abf38 100644 --- a/CVE-2025/CVE-2025-209xx/CVE-2025-20996.json +++ b/CVE-2025/CVE-2025-209xx/CVE-2025-20996.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20996", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-06-04T05:15:24.607", - "lastModified": "2025-06-04T14:54:33.783", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:54:52.860", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -39,10 +39,43 @@ } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:samsung:smart_switch:*:*:*:*:*:*:*:*", + "versionEndExcluding": "3.7.64.10", + "matchCriteriaId": "BF030D80-5033-4558-9B97-B75F4AC5C3B6" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=06", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-219xx/CVE-2025-21992.json b/CVE-2025/CVE-2025-219xx/CVE-2025-21992.json index ac2ffb46f06..016661fc0a8 100644 --- a/CVE-2025/CVE-2025-219xx/CVE-2025-21992.json +++ b/CVE-2025/CVE-2025-219xx/CVE-2025-21992.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21992", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-02T13:15:43.800", - "lastModified": "2025-04-10T13:15:49.053", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:02:07.080", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,168 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: HID: ignorar sensor no funcional en c\u00e1mara HP de 5 MP La c\u00e1mara HP de 5 MP (ID USB 0408:5473) informa sobre una interfaz de sensor HID que no est\u00e1 implementada. Intentar acceder a este sensor no funcional a trav\u00e9s de iio_info provoca que el sistema se cuelgue mientras el PM en tiempo de ejecuci\u00f3n intenta despertar un sensor que no responde. [453] hid-sensor-hub 0003:0408:5473.0003: Informar atributos de latencia: ffffffff:ffffffff [453] hid-sensor-hub 0003:0408:5473.0003: atributos comunes: 5:1, 2:1, 3:1 ffffffff:ffffffff Agregue este dispositivo a la lista de ignorados de HID ya que la interfaz del sensor no es funcional por dise\u00f1o y no debe exponerse al espacio de usuario." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.4.292", + "matchCriteriaId": "1457A2FB-DEAE-4A0A-8052-10B714496431" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.236", + "matchCriteriaId": "1DF46FB0-9163-4ABE-8CCA-32A497D4715B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.180", + "matchCriteriaId": "D19801C8-3D18-405D-9989-E6C9B30255FA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.132", + "matchCriteriaId": "91D1C2F6-55A1-4CF4-AC66-ADF758259C59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.84", + "matchCriteriaId": "994E0F00-FAC4-40E4-9068-C7D4D8242EC8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.20", + "matchCriteriaId": "60E9C5DF-D778-4572-848A-5D6CFFE022CA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.8", + "matchCriteriaId": "0A20D4D7-B329-4C68-B662-76062EA7DCF0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*", + "matchCriteriaId": "186716B6-2B66-4BD0-852E-D48E71C0C85F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*", + "matchCriteriaId": "0D3E781C-403A-498F-9DA9-ECEE50F41E75" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/007a849126ef7907761af6a1379400558a72e703", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/363236d709e75610b628c2a4337ccbe42e454b6d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6ca3d4d87af406a390a34ea924ab65c517e6e132", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7a7ada33879a631b05b536e66d1c5b1219d3bade", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/920ea73215dbf948b661b88a79cb47b7f96adfbd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9acdb0059fb6b82158e15adae91e629cb5974564", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9af297aea8f76a0ad21f2de5f2cd6401a748b9c3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b6c6c2d8ab4932e5d6d439f514276cb3d257b8fe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-219xx/CVE-2025-21994.json b/CVE-2025/CVE-2025-219xx/CVE-2025-21994.json index da4466096f1..c603e273a1a 100644 --- a/CVE-2025/CVE-2025-219xx/CVE-2025-21994.json +++ b/CVE-2025/CVE-2025-219xx/CVE-2025-21994.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21994", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-02T14:16:01.440", - "lastModified": "2025-04-10T13:15:49.333", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T17:19:48.387", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,156 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: Se corrige la validaci\u00f3n incorrecta del campo num_aces de smb_acl. La funci\u00f3n parse_dcal() valida num_aces para asignar posix_ace_state_array. Si (num_aces > ULONG_MAX / sizeof(struct smb_ace *)), se considera una validaci\u00f3n incorrecta que permita crear una matriz de tama\u00f1o ULONG_MAX. smb_acl tiene el campo ->size para calcular el n\u00famero real de ases en el tama\u00f1o del b\u00fafer de solicitud. \u00daselo para comprobar num_aces no v\u00e1lidos." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "5.15.180", + "matchCriteriaId": "BEB9E1BE-C9E4-43F8-873F-48C1E5453116" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.132", + "matchCriteriaId": "91D1C2F6-55A1-4CF4-AC66-ADF758259C59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.85", + "matchCriteriaId": "BCB56F36-C998-496A-A2E4-D9E0BB3A5BFC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.21", + "matchCriteriaId": "3B63C450-D73B-4A53-9861-98E25C16E842" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.9", + "matchCriteriaId": "FAECBE4D-58CF-4836-BBAB-5E28B800A778" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*", + "matchCriteriaId": "186716B6-2B66-4BD0-852E-D48E71C0C85F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*", + "matchCriteriaId": "0D3E781C-403A-498F-9DA9-ECEE50F41E75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*", + "matchCriteriaId": "66619FB8-0AAF-4166-B2CF-67B24143261D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*", + "matchCriteriaId": "D3D6550E-6679-4560-902D-AF52DCFE905B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*", + "matchCriteriaId": "45B90F6B-BEC7-4D4E-883A-9DBADE021750" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1b8b67f3c5e5169535e26efedd3e422172e2db64", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9c4e202abff45f8eac17989e549fc7a75095f675", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a4cb17797a5d241f1e509cb5b46ed95a80c2f5fd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c3a3484d9d31b27a3db0fab91fcf191132d65236", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d0f87370622a853b57e851f7d5a5452b72300f19", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f6a6721802ac2f12f4c1bbe839a4c229b61866f2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-220xx/CVE-2025-22008.json b/CVE-2025/CVE-2025-220xx/CVE-2025-22008.json index 537a082a67e..c5d9b8b3684 100644 --- a/CVE-2025/CVE-2025-220xx/CVE-2025-22008.json +++ b/CVE-2025/CVE-2025-220xx/CVE-2025-22008.json @@ -2,8 +2,8 @@ "id": "CVE-2025-22008", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-08T09:15:24.157", - "lastModified": "2025-04-10T13:15:50.570", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T17:17:34.653", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,179 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: regulador: comprobar que el regulador ficticio haya sido probado antes de usarlo Debido al sondeo asincr\u00f3nico del controlador existe la posibilidad de que el regulador ficticio no haya sido probado ya cuando se accede a \u00e9l por primera vez." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.10.236", + "matchCriteriaId": "FA4D157D-0342-41B3-B1D5-87FB20A998BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.180", + "matchCriteriaId": "D19801C8-3D18-405D-9989-E6C9B30255FA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.132", + "matchCriteriaId": "91D1C2F6-55A1-4CF4-AC66-ADF758259C59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.85", + "matchCriteriaId": "BCB56F36-C998-496A-A2E4-D9E0BB3A5BFC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.21", + "matchCriteriaId": "3B63C450-D73B-4A53-9861-98E25C16E842" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.9", + "matchCriteriaId": "FAECBE4D-58CF-4836-BBAB-5E28B800A778" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*", + "matchCriteriaId": "186716B6-2B66-4BD0-852E-D48E71C0C85F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*", + "matchCriteriaId": "0D3E781C-403A-498F-9DA9-ECEE50F41E75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*", + "matchCriteriaId": "66619FB8-0AAF-4166-B2CF-67B24143261D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*", + "matchCriteriaId": "D3D6550E-6679-4560-902D-AF52DCFE905B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*", + "matchCriteriaId": "45B90F6B-BEC7-4D4E-883A-9DBADE021750" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*", + "matchCriteriaId": "1759FFB7-531C-41B1-9AE1-FD3D80E0D920" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc7:*:*:*:*:*:*", + "matchCriteriaId": "AD948719-8628-4421-A340-1066314BBD4A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/21e3fdf3146f9c63888d6bfabbd553434a5fb93f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/270fe5c090f62dfce1cad0f5053e4827a6f50df4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2c7a50bec4958f1d1c84d19cde518d0e96a676fd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3a9c46af5654783f99015727ac65bc2a23e2735a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8e500180904aae63afdce95cb378aeabe119ecda", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/998b1aae22dca87da392ea35f089406cbef6032d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a99f1254b11eaadd0794b74a8178bad92ab01cae", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-220xx/CVE-2025-22013.json b/CVE-2025/CVE-2025-220xx/CVE-2025-22013.json index 1a6ad8fd562..fa2b49385c1 100644 --- a/CVE-2025/CVE-2025-220xx/CVE-2025-22013.json +++ b/CVE-2025/CVE-2025-220xx/CVE-2025-22013.json @@ -2,8 +2,8 @@ "id": "CVE-2025-22013", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-08T09:15:25.643", - "lastModified": "2025-05-02T07:15:59.113", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T17:16:03.533", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,127 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: KVM: arm64: Guardar y vaciar incondicionalmente el estado FPSIMD/SVE/SME del host Hay varios problemas con la forma en que el c\u00f3digo hyp guarda de forma diferida el estado FPSIMD/SVE del host, incluidos: * El SVE del host se descarta inesperadamente debido a una configuraci\u00f3n inconsistente de TIF_SVE y CPACR_ELx.ZEN. Se ha visto que esto da como resultado fallos de QEMU donde memmove() usa SVE, como lo inform\u00f3 Eric Auger: https://issues.redhat.com/browse/RHEL-68997 * El estado SVE del host se descarta *despu\u00e9s* de la modificaci\u00f3n por ptrace, que fue un cambio de ABI de ptrace no intencionado introducido con el descarte diferido del estado SVE. * El valor FPMR del host se puede descartar cuando se ejecuta una VM no protegida, donde la compatibilidad con FPMR no est\u00e1 expuesta a una VM y esa VM usa FPSIMD/SVE. En estos casos, el c\u00f3digo hyp no guarda el FPMR del host antes de desvincular su estado FPSIMD/SVE/SME, lo que deja un valor obsoleto en memoria. Para evitar esto, guarde y vac\u00ede el estado FPSIMD/SVE/SME del host al cargar una vCPU, de modo que KVM no tenga que guardar ninguno de sus estados. Para mayor claridad, se ha eliminado fpsimd_kvm_prepare() y la llamada necesaria a fpsimd_save_and_flush_cpu_state() se ha ubicado en kvm_arch_vcpu_load_fp(). Dado que 'fpsimd_state' y 'fpmr_ptr' no deben usarse, se establecen en NULL; todos sus usos se eliminar\u00e1n en parches posteriores. Los problemas hist\u00f3ricos se remontan al menos a la versi\u00f3n v5.17, por ejemplo, suposiciones err\u00f3neas acerca de que TIF_SVE est\u00e1 claro en el commit: 8383741ab2e773a9 (\"KVM: arm64: deshacerse del seguimiento/guardado de SVE del host\")... y por eso, este ansioso guardado y vaciado probablemente deba ser retrotra\u00eddo a TODOS los \u00e1rboles estables." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.85", + "matchCriteriaId": "BCB56F36-C998-496A-A2E4-D9E0BB3A5BFC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.21", + "matchCriteriaId": "3B63C450-D73B-4A53-9861-98E25C16E842" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.9", + "matchCriteriaId": "FAECBE4D-58CF-4836-BBAB-5E28B800A778" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*", + "matchCriteriaId": "186716B6-2B66-4BD0-852E-D48E71C0C85F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*", + "matchCriteriaId": "0D3E781C-403A-498F-9DA9-ECEE50F41E75" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/04c50cc23a492c4d43fdaefc7c1ecc0ff6f7b82e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5289ac43b69c61a49c75720921f2008005a31c43", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/79e140bba70bcacc5fe15bf8c0b958793fd7d56f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/806d5c1e1d2e5502175a24bf70f251648d99c36a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/900b444be493b7f404898c785d6605b177a093d0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fbc7e61195e23f744814e78524b73b59faa54ab4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-220xx/CVE-2025-22015.json b/CVE-2025/CVE-2025-220xx/CVE-2025-22015.json index e434e608758..93cf34787a2 100644 --- a/CVE-2025/CVE-2025-220xx/CVE-2025-22015.json +++ b/CVE-2025/CVE-2025-220xx/CVE-2025-22015.json @@ -2,8 +2,8 @@ "id": "CVE-2025-22015", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-08T09:15:26.150", - "lastModified": "2025-04-08T18:13:53.347", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T17:12:34.880", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,162 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm/migrate: arregla la actualizaci\u00f3n de xarray de shmem durante la migraci\u00f3n un folio de shmem puede estar en la cach\u00e9 de p\u00e1gina o en la cach\u00e9 de intercambio, pero no al mismo tiempo. Es decir, una vez que est\u00e1 en la cach\u00e9 de intercambio, folio->mapping debe ser NULL y el folio ya no est\u00e1 en una asignaci\u00f3n de shmem. En __folio_migrate_mapping(), para determinar el n\u00famero de entradas de xarray a actualizar, se usa folio_test_swapbacked(), pero eso combina shmem en el caso de la cach\u00e9 de p\u00e1gina y shmem en el caso de la cach\u00e9 de intercambio. Lleva a la corrupci\u00f3n de entradas de m\u00faltiples \u00edndices de xarray, ya que convierte una entrada hermana en una entrada normal durante xas_store() (vea [1] para una reproducci\u00f3n del espacio de usuario). Arr\u00e9glelo usando solo folio_test_swapcache() para determinar si xarray est\u00e1 almacenando entradas de cach\u00e9 de intercambio o no para elegir el n\u00famero correcto de entradas de xarray para actualizar. [1] https://lore.kernel.org/linux-mm/Z8idPCkaJW1IChjT@casper.infradead.org/ Nota: En __split_huge_page(), se usan folio_test_anon() y folio_test_swapcache() para obtener el espacio de direcciones de la cach\u00e9 de intercambio, pero esto ignora el folio shmem en el caso de la cach\u00e9 de intercambio. Esto podr\u00eda provocar la desreferenciaci\u00f3n de punteros nulos cuando un folio shmem en la cach\u00e9 de intercambio se divide en __xa_store(), ya que !folio_test_anon() es verdadero y folio->mapping es nulo. Afortunadamente, su llamador, split_huge_page_to_list_to_order(), se detiene antes de tiempo con EBUSY cuando folio->mapping es nulo. Por lo tanto, no es necesario ocuparse de ello aqu\u00ed." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.71", + "versionEndExcluding": "6.1.132", + "matchCriteriaId": "09D2ED0E-4347-4AD2-BC78-131C01673754" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6.10", + "versionEndExcluding": "6.6.85", + "matchCriteriaId": "F11E45AA-D180-40C1-9E70-1EA58E1BCE2C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7.1", + "versionEndExcluding": "6.12.21", + "matchCriteriaId": "459DDDAB-5E15-4775-A177-012FF0D2DCC3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.9", + "matchCriteriaId": "FAECBE4D-58CF-4836-BBAB-5E28B800A778" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.7:-:*:*:*:*:*:*", + "matchCriteriaId": "62B55B1B-7D3E-499B-9C42-E9F1EF05A54A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.7:rc8:*:*:*:*:*:*", + "matchCriteriaId": "B01471D6-2DB4-4AF2-8BE0-B5082B4B9253" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*", + "matchCriteriaId": "186716B6-2B66-4BD0-852E-D48E71C0C85F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*", + "matchCriteriaId": "0D3E781C-403A-498F-9DA9-ECEE50F41E75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*", + "matchCriteriaId": "66619FB8-0AAF-4166-B2CF-67B24143261D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*", + "matchCriteriaId": "D3D6550E-6679-4560-902D-AF52DCFE905B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*", + "matchCriteriaId": "45B90F6B-BEC7-4D4E-883A-9DBADE021750" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*", + "matchCriteriaId": "1759FFB7-531C-41B1-9AE1-FD3D80E0D920" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc7:*:*:*:*:*:*", + "matchCriteriaId": "AD948719-8628-4421-A340-1066314BBD4A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/29124ae980e2860f0eec7355949d3d3292ee81da", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/49100c0b070e900f87c8fac3be9b9ef8a30fa673", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/60cf233b585cdf1f3c5e52d1225606b86acd08b0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/75cfb92eb63298d717b6b0118f91ba12c4fcfeb5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c057ee03f751d6cecf7ee64f52f6545d94082aaa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-220xx/CVE-2025-22016.json b/CVE-2025/CVE-2025-220xx/CVE-2025-22016.json index 5829242aaa7..ff2cc41b60d 100644 --- a/CVE-2025/CVE-2025-220xx/CVE-2025-22016.json +++ b/CVE-2025/CVE-2025-220xx/CVE-2025-22016.json @@ -2,8 +2,8 @@ "id": "CVE-2025-22016", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-08T09:15:26.413", - "lastModified": "2025-04-08T18:13:53.347", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T17:09:38.110", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,124 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dpll: correcci\u00f3n de la gesti\u00f3n de errores de xa_alloc_cyclic(). Si se devuelve 1 desde xa_alloc_cyclic() (encapsulamiento), se devolver\u00e1 ERR_PTR(1), lo que har\u00e1 que IS_ERR() sea falso. Esto puede provocar la desreferencia de un puntero no asignado (pin). Se corrige comprobando si err es menor que cero. Esto no se detect\u00f3 en un caso pr\u00e1ctico real, solo se detect\u00f3. Gracias a Pierre." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.8", + "versionEndExcluding": "6.12.21", + "matchCriteriaId": "BF90340F-6FF6-4A1E-BAA7-7C640D39CCDD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.9", + "matchCriteriaId": "FAECBE4D-58CF-4836-BBAB-5E28B800A778" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*", + "matchCriteriaId": "186716B6-2B66-4BD0-852E-D48E71C0C85F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*", + "matchCriteriaId": "0D3E781C-403A-498F-9DA9-ECEE50F41E75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*", + "matchCriteriaId": "66619FB8-0AAF-4166-B2CF-67B24143261D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*", + "matchCriteriaId": "D3D6550E-6679-4560-902D-AF52DCFE905B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*", + "matchCriteriaId": "45B90F6B-BEC7-4D4E-883A-9DBADE021750" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*", + "matchCriteriaId": "1759FFB7-531C-41B1-9AE1-FD3D80E0D920" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc7:*:*:*:*:*:*", + "matchCriteriaId": "AD948719-8628-4421-A340-1066314BBD4A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3614bf90130d60f191a5fe218d04f6251c678e13", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4d350043be684762e581d9bdd32d543621d01a9c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cb2f8a5c1fd9e7a1fefa23afe20570e16da1ada4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-220xx/CVE-2025-22017.json b/CVE-2025/CVE-2025-220xx/CVE-2025-22017.json index 57bf1001967..1b61ea130ad 100644 --- a/CVE-2025/CVE-2025-220xx/CVE-2025-22017.json +++ b/CVE-2025/CVE-2025-220xx/CVE-2025-22017.json @@ -2,8 +2,8 @@ "id": "CVE-2025-22017", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-08T09:15:26.557", - "lastModified": "2025-04-08T18:13:53.347", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T17:08:48.157", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,124 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: devlink: correcci\u00f3n de la gesti\u00f3n de errores de xa_alloc_cyclic(). Si se devuelve 1 desde xa_alloc_cyclic() (wrapping), se devolver\u00e1 ERR_PTR(1), lo que har\u00e1 que IS_ERR() sea falso. Esto puede provocar la desreferenciaci\u00f3n de un puntero no asignado (rel). Se corrige comprobando si err es menor que cero. Esto no se detect\u00f3 en un caso pr\u00e1ctico real, solo se detect\u00f3. Gracias a Pierre." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.21", + "matchCriteriaId": "3B63C450-D73B-4A53-9861-98E25C16E842" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.9", + "matchCriteriaId": "FAECBE4D-58CF-4836-BBAB-5E28B800A778" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*", + "matchCriteriaId": "186716B6-2B66-4BD0-852E-D48E71C0C85F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*", + "matchCriteriaId": "0D3E781C-403A-498F-9DA9-ECEE50F41E75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*", + "matchCriteriaId": "66619FB8-0AAF-4166-B2CF-67B24143261D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*", + "matchCriteriaId": "D3D6550E-6679-4560-902D-AF52DCFE905B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*", + "matchCriteriaId": "45B90F6B-BEC7-4D4E-883A-9DBADE021750" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*", + "matchCriteriaId": "1759FFB7-531C-41B1-9AE1-FD3D80E0D920" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc7:*:*:*:*:*:*", + "matchCriteriaId": "AD948719-8628-4421-A340-1066314BBD4A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/466132f6d28a7e47a82501fe1c46b8f90487412e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f3b97b7d4bf316c3991e5634c9f4847c2df35478", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f8aaa38cfaf6f20afa4db36b6529032fb69165dc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-220xx/CVE-2025-22023.json b/CVE-2025/CVE-2025-220xx/CVE-2025-22023.json index 13a5e3c22e0..1e48bb44195 100644 --- a/CVE-2025/CVE-2025-220xx/CVE-2025-22023.json +++ b/CVE-2025/CVE-2025-220xx/CVE-2025-22023.json @@ -2,8 +2,8 @@ "id": "CVE-2025-22023", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-16T11:15:42.987", - "lastModified": "2025-04-16T13:25:37.340", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:53:05.190", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,101 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: xhci: Don't skip on Stopped - Length Invalid Hasta el commit d56b0b2ab142 (\"usb: xhci: ensure skipped isoc TDs are returns when is stopped ring\") en v6.11, el controlador no omit\u00eda los TD is\u00f3cronos omitidos al gestionar los eventos Stoppend y Stopped - Length Invalid. En su lugar, borraba err\u00f3neamente el indicador de omisi\u00f3n, lo que provocar\u00eda que el anillo se atascara, ya que los eventos futuros no coincidir\u00e1n con el TD omitido, que nunca se elimina de la cola hasta que se cancela. Esta l\u00f3gica defectuosa parece haber estado en su lugar sustancialmente sin cambios desde la serie 3.x hace m\u00e1s de 10 a\u00f1os, lo que probablemente habla en primer lugar sobre la relativa rareza de este caso en el uso normal, pero por la especificaci\u00f3n no veo raz\u00f3n por la que no deber\u00eda ser posible. Despu\u00e9s de d56b0b2ab142, los TD se omiten inmediatamente al gestionar los eventos \"Detenidos\". Esto plantea un problema potencial en caso de \"Detenido - Longitud Inv\u00e1lida\", que ocurre en TD completados (probablemente ya devueltos) o en TRB de Enlace y No-Op. Este evento no se reconocer\u00e1 como coincidente con ning\u00fan TD (a menos que se trate del inusual TRB de Enlace dentro de un TD) y provocar\u00e1 la omisi\u00f3n de todos los TD pendientes, devolvi\u00e9ndolos posiblemente antes de que finalicen, con el riesgo de p\u00e9rdida de datos de isoc y posiblemente un fallo de hardware no operativo (UAF). Como soluci\u00f3n intermedia, no omita ni borre el indicador de omisi\u00f3n en este tipo de evento. De este modo, el siguiente evento omitir\u00e1 los TD omitidos. Una desventaja de no gestionar \"Detenido - Longitud Inv\u00e1lida\" en un Enlace dentro de un TD es que, si el TD se cancela, su longitud real no se actualizar\u00e1 para tener en cuenta los TRB completados (silenciosamente) antes de que se detuviera el TD. No tuve \u00e9xito en generar esta secuencia de eventos de finalizaci\u00f3n, por lo que no hay una demostraci\u00f3n convincente de ning\u00fan desastre resultante. Puede ser una condici\u00f3n muy rara y desconocida. La \u00fanica motivaci\u00f3n para este parche es que, si ocurre un evento tan improbable, prefiero arriesgarme a reportar un marco isoc cancelado parcialmente completado como vac\u00edo que arriesgarme con UAF. Esto se solucionar\u00e1 mejor analizando el puntero TRB del evento detenido al tomar decisiones de omisi\u00f3n, pero es poco probable que esta modificaci\u00f3n se incorpore a la versi\u00f3n 6.12, que se mantendr\u00e1 vigente durante algunos a\u00f1os." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11", + "versionEndExcluding": "6.12.22", + "matchCriteriaId": "953630F8-9980-4613-A819-89F00EDB3E8E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.10", + "matchCriteriaId": "E9410CA0-CED8-49BE-9DB4-856654736C32" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:*:*:*:*:*:*:*", + "matchCriteriaId": "82E37853-46C8-4BB6-9FA4-9838FD34D6A2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/49cf6f5293aeb706dd672608478336a003f37df6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/58d0a3fab5f4fdc112c16a4c6d382f62097afd1c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6af20ac254cbd0e1178a3542767c9308e209eee5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/de9e78167f760a699806793d7c987239e4f6c8c3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-220xx/CVE-2025-22025.json b/CVE-2025/CVE-2025-220xx/CVE-2025-22025.json index e3aa6971254..424250c599a 100644 --- a/CVE-2025/CVE-2025-220xx/CVE-2025-22025.json +++ b/CVE-2025/CVE-2025-220xx/CVE-2025-22025.json @@ -2,8 +2,8 @@ "id": "CVE-2025-22025", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-16T15:15:55.127", - "lastModified": "2025-04-17T20:22:16.240", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:56:17.393", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,158 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nfsd: poner dl_stid si no se puede poner en cola dl_recall. Antes de llamar a nfsd4_run_cb para poner en cola dl_recall en callback_wq, incrementamos el recuento de referencia de dl_stid. Esperamos que, tras procesar el work_struct correspondiente, el recuento de referencia de dl_stid se reduzca mediante la funci\u00f3n de devoluci\u00f3n de llamada nfsd4_cb_recall_release. Sin embargo, si falla la llamada a nfsd4_run_cb, el recuento de referencia incrementado de dl_stid no se reducir\u00e1 correspondientemente, lo que provocar\u00e1 la siguiente p\u00e9rdida de nfs4_stid: objeto sin referencia 0xffff88812067b578 (tama\u00f1o 344): comm \"nfsd\", pid 2761, jiffies 4295044002 (edad 5541.241s) volcado hexadecimal (primeros 32 bytes): 01 00 00 00 6b 6b 6b 6b b8 02 c0 e2 81 88 ff ff ....kkkk........ 00 6b 6b 6b 6b 6b 6b 6b 6b 00 00 00 00 ad 4e ad de .kkkkkkk.....N.. seguimiento inverso: kmem_cache_alloc+0x4b9/0x700 nfsd4_process_open1+0x34/0x300 nfsd4_open+0x2d1/0x9d0 nfsd4_proc_compound+0x7a2/0xe30 nfsd_dispatch+0x241/0x3e0 svc_process_common+0x5d3/0xcc0 svc_process+0x2a3/0x320 nfsd+0x180/0x2e0 kthread+0x199/0x1d0 ret_from_fork+0x30/0x50 ret_from_fork_asm+0x1b/0x30 objeto sin referencia 0xffff8881499f4d28 (tama\u00f1o 368): comm \"nfsd\", pid 2761, jiffies 4295044005 (edad 5541.239s) volcado hexadecimal (primeros 32 bytes): 01 00 00 00 00 00 00 00 30 4d 9f 49 81 88 ff ff ........0M.I.... 30 4d 9f 49 81 88 ff ff 20 00 00 00 01 00 00 00 0M.I.... ....... seguimiento inverso: kmem_cache_alloc+0x4b9/0x700 nfs4_alloc_stid+0x29/0x210 alloc_init_deleg+0x92/0x2e0 nfs4_set_delegation+0x284/0xc00 nfs4_open_delegation+0x216/0x3f0 nfsd4_process_open2+0x2b3/0xee0 nfsd4_open+0x770/0x9d0 nfsd4_proc_compound+0x7a2/0xe30 nfsd_dispatch+0x241/0x3e0 svc_process_common+0x5d3/0xcc0 svc_process+0x2a3/0x320 nfsd+0x180/0x2e0 kthread+0x199/0x1d0 ret_from_fork+0x30/0x50 ret_from_fork_asm+0x1b/0x30 Solucione el problema comprobando el resultado de nfsd4_run_cb y llama a nfs4_put_stid si no se puede poner en cola dl_recall." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.10.236", + "matchCriteriaId": "FA4D157D-0342-41B3-B1D5-87FB20A998BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.180", + "matchCriteriaId": "D19801C8-3D18-405D-9989-E6C9B30255FA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.134", + "matchCriteriaId": "3985DEC3-0437-4177-BC42-314AB575285A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.87", + "matchCriteriaId": "EFF24260-49B1-4251-9477-C564CFDAD25B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.23", + "matchCriteriaId": "26CAB76D-F00F-43CE-BEAD-7097F8FB1D6C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.11", + "matchCriteriaId": "E7E864B0-8C00-4679-BA55-659B4C9C3AD3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.2", + "matchCriteriaId": "FADAE5D8-4808-442C-B218-77B2CE8780A0" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/133f5e2a37ce08c82d24e8fba65e0a81deae4609", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/230ca758453c63bd38e4d9f4a21db698f7abada8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/63b91c8ff4589f5263873b24c052447a28e10ef7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9a81cde8c7ce65dd90fb47ceea93a45fc1a2fbd1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b874cdef4e67e5150e07eff0eae1cbb21fb92da1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cad3479b63661a399c9df1d0b759e1806e2df3c8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cdb796137c57e68ca34518d53be53b679351eb86", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d96587cc93ec369031bcd7658c6adc719873c9fd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-220xx/CVE-2025-22026.json b/CVE-2025/CVE-2025-220xx/CVE-2025-22026.json index 4a4761a87c6..f0de2d2398b 100644 --- a/CVE-2025/CVE-2025-220xx/CVE-2025-22026.json +++ b/CVE-2025/CVE-2025-220xx/CVE-2025-22026.json @@ -2,8 +2,8 @@ "id": "CVE-2025-22026", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-04-16T15:15:55.237", - "lastModified": "2025-04-20T09:15:13.753", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:57:06.603", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,102 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nfsd: no ignore el c\u00f3digo de retorno de svc_proc_register() Actualmente, nfsd_proc_stat_init() ignora el valor de retorno de svc_proc_register(). Si la creaci\u00f3n de procfile falla, el kernel emitir\u00e1 una ADVERTENCIA cuando intente eliminar la entrada posteriormente. Corrija nfsd_proc_stat_init() para que devuelva el mismo tipo de puntero que svc_proc_register() y corrija nfsd_net_init() para que lo compruebe y falle la construcci\u00f3n de nfsd_net si ocurre. svc_proc_register() puede fallar si no se puede asignar la dentry o si ya existe una dentry id\u00e9ntica. El segundo caso es bastante improbable en la ruta de c\u00f3digo de construcci\u00f3n de nfsd_net, por lo que si esto sucede, devuelva -ENOMEM." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-252" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "C87CF81F-5426-4E15-8A61-B8F0E6046484" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.2", + "matchCriteriaId": "FADAE5D8-4808-442C-B218-77B2CE8780A0" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/6a59b70fe71ec66c0dd19e2c279c71846a3fb2f0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/930b64ca0c511521f0abdd1d57ce52b2a6e3476b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9d9456185fd5f1891c74354ee297f19538141ead", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e31957a819e60cf0bc9a49408765e6095fd3d046", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-274xx/CVE-2025-27441.json b/CVE-2025/CVE-2025-274xx/CVE-2025-27441.json index 2c498542684..9e812b70196 100644 --- a/CVE-2025/CVE-2025-274xx/CVE-2025-27441.json +++ b/CVE-2025/CVE-2025-274xx/CVE-2025-27441.json @@ -2,8 +2,8 @@ "id": "CVE-2025-27441", "sourceIdentifier": "security@zoom.us", "published": "2025-04-08T17:15:37.080", - "lastModified": "2025-04-08T18:13:53.347", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T17:07:44.403", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.1, "impactScore": 2.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.2, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 2.7 } ] }, @@ -49,12 +69,158 @@ "value": "CWE-352" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.3.0", + "matchCriteriaId": "9191AC13-CDC6-48BF-8B62-9CA5F72A2706" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:linux:*:*", + "versionEndExcluding": "6.3.0", + "matchCriteriaId": "7378AF1D-B12A-476A-9527-4D262D80BA7D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.3.0", + "matchCriteriaId": "2488A629-30E3-4CE9-B1F3-48F5203D9102" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:iphone_os:*:*", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "0A42092A-82FA-47E3-A6CA-ADA8E9866D35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "B33EFD2F-1F24-402A-891E-4C11D40B150E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "F654DF44-2DB2-4E97-AEEC-CCC8E92AFE70" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "126DBD94-CB68-4D41-8A85-AF3C9BE8C9DA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "F41F961A-2FC2-47B6-BC6C-706DE37F2B95" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "390D202B-A60A-411E-8A57-0AF1C2BB0497" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "D3E40A28-D25D-4C71-B3A9-0FCAA094BC35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:linux:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "3D4B9352-3583-4B7E-972F-F3C617AE6166" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "412247BC-50D3-41B1-B85E-58E14824F5E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "A117F0E2-8079-41C5-B619-D9059A3120E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "D4CDC6A9-B012-4B41-86A5-CF1E21C9E7BB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:*", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "F637252E-4090-4CB6-B2DE-70164267B24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:*", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "2D0DDAEF-261E-4102-9FE3-B9C87A79DEC5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "B94C3499-1C6E-4319-9407-98329296DE84" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "51A72376-A363-49F2-A68B-D03BD975BFF5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.1.16", + "matchCriteriaId": "EBFBB899-04A6-4089-9BCD-A2DE4B748916" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*", + "versionStartIncluding": "6.1.17", + "versionEndExcluding": "6.2.12", + "matchCriteriaId": "BD8A3DE0-D5D5-4B66-B7B2-8567EAA834BB" + } + ] + } + ] } ], "references": [ { "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-25013", - "source": "security@zoom.us" + "source": "security@zoom.us", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-274xx/CVE-2025-27442.json b/CVE-2025/CVE-2025-274xx/CVE-2025-27442.json index c5a8678dfb6..ed4e040e3c4 100644 --- a/CVE-2025/CVE-2025-274xx/CVE-2025-27442.json +++ b/CVE-2025/CVE-2025-274xx/CVE-2025-27442.json @@ -2,8 +2,8 @@ "id": "CVE-2025-27442", "sourceIdentifier": "security@zoom.us", "published": "2025-04-08T17:15:37.487", - "lastModified": "2025-04-08T18:13:53.347", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-28T17:04:11.833", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.1, "impactScore": 2.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.2, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 2.7 } ] }, @@ -49,12 +69,158 @@ "value": "CWE-352" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.3.0", + "matchCriteriaId": "9191AC13-CDC6-48BF-8B62-9CA5F72A2706" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:linux:*:*", + "versionEndExcluding": "6.3.0", + "matchCriteriaId": "7378AF1D-B12A-476A-9527-4D262D80BA7D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.3.0", + "matchCriteriaId": "2488A629-30E3-4CE9-B1F3-48F5203D9102" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:iphone_os:*:*", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "0A42092A-82FA-47E3-A6CA-ADA8E9866D35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "B33EFD2F-1F24-402A-891E-4C11D40B150E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "F654DF44-2DB2-4E97-AEEC-CCC8E92AFE70" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "126DBD94-CB68-4D41-8A85-AF3C9BE8C9DA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "F41F961A-2FC2-47B6-BC6C-706DE37F2B95" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "390D202B-A60A-411E-8A57-0AF1C2BB0497" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "D3E40A28-D25D-4C71-B3A9-0FCAA094BC35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:linux:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "3D4B9352-3583-4B7E-972F-F3C617AE6166" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "412247BC-50D3-41B1-B85E-58E14824F5E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.4.0", + "matchCriteriaId": "A117F0E2-8079-41C5-B619-D9059A3120E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:*", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "D4CDC6A9-B012-4B41-86A5-CF1E21C9E7BB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:*", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "F637252E-4090-4CB6-B2DE-70164267B24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:*", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "2D0DDAEF-261E-4102-9FE3-B9C87A79DEC5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:*", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "B94C3499-1C6E-4319-9407-98329296DE84" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.3.10", + "matchCriteriaId": "51A72376-A363-49F2-A68B-D03BD975BFF5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "6.1.16", + "matchCriteriaId": "EBFBB899-04A6-4089-9BCD-A2DE4B748916" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*", + "versionStartIncluding": "6.1.17", + "versionEndExcluding": "6.2.12", + "matchCriteriaId": "BD8A3DE0-D5D5-4B66-B7B2-8567EAA834BB" + } + ] + } + ] } ], "references": [ { "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-25013", - "source": "security@zoom.us" + "source": "security@zoom.us", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-307xx/CVE-2025-30712.json b/CVE-2025/CVE-2025-307xx/CVE-2025-30712.json index 9f3eb2f1747..c6c075cc407 100644 --- a/CVE-2025/CVE-2025-307xx/CVE-2025-30712.json +++ b/CVE-2025/CVE-2025-307xx/CVE-2025-30712.json @@ -2,8 +2,8 @@ "id": "CVE-2025-30712", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-04-15T21:16:00.750", - "lastModified": "2025-05-16T15:15:47.477", - "vulnStatus": "Modified", + "lastModified": "2025-10-28T18:38:13.350", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -60,8 +60,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:oracle:vm_virtualbox:71.6:*:*:*:*:*:*:*", - "matchCriteriaId": "BED8FAD7-7930-47DA-8F9C-0206924A33F6" + "criteria": "cpe:2.3:a:oracle:vm_virtualbox:7.1.6:*:*:*:*:*:*:*", + "matchCriteriaId": "52DB515F-F899-4637-BB15-A01765D3E9B1" } ] } @@ -79,7 +79,11 @@ }, { "url": "https://github.com/google/security-research/security/advisories/GHSA-qx2m-rcpc-v43v", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-545xx/CVE-2025-54539.json b/CVE-2025/CVE-2025-545xx/CVE-2025-54539.json index cd0bacda65c..750c2b44854 100644 --- a/CVE-2025/CVE-2025-545xx/CVE-2025-54539.json +++ b/CVE-2025/CVE-2025-545xx/CVE-2025-54539.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54539", "sourceIdentifier": "security@apache.org", "published": "2025-10-16T09:15:34.680", - "lastModified": "2025-10-16T15:28:59.610", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T17:00:49.247", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:apache:activemq_nms_amqp:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.4.0", + "matchCriteriaId": "933FFB4D-689A-4834-8733-EE9896BFCBD5" + } + ] + } + ] + } + ], "references": [ { "url": "https://lists.apache.org/thread/9k684j07ljrshy3hxwhj5m0xjmkz1g2n", - "source": "security@apache.org" + "source": "security@apache.org", + "tags": [ + "Mailing List", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-546xx/CVE-2025-54604.json b/CVE-2025/CVE-2025-546xx/CVE-2025-54604.json new file mode 100644 index 00000000000..fc35fa8d532 --- /dev/null +++ b/CVE-2025/CVE-2025-546xx/CVE-2025-54604.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-54604", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-28T17:15:37.337", + "lastModified": "2025-10-28T17:15:37.337", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 1 of 2)." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://bitcoincore.org/en/2025/10/24/disclose-cve-2025-54604/", + "source": "cve@mitre.org" + }, + { + "url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/bitcoin/bitcoin/releases", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-546xx/CVE-2025-54605.json b/CVE-2025/CVE-2025-546xx/CVE-2025-54605.json new file mode 100644 index 00000000000..dc7e304ed8e --- /dev/null +++ b/CVE-2025/CVE-2025-546xx/CVE-2025-54605.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-54605", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-28T17:15:37.903", + "lastModified": "2025-10-28T17:15:37.903", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 2 of 2)." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://bitcoincore.org/en/2025/10/24/disclose-cve-2025-54605/", + "source": "cve@mitre.org" + }, + { + "url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/bitcoin/bitcoin/releases", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-603xx/CVE-2025-60354.json b/CVE-2025/CVE-2025-603xx/CVE-2025-60354.json new file mode 100644 index 00000000000..078bd97747a --- /dev/null +++ b/CVE-2025/CVE-2025-603xx/CVE-2025-60354.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-60354", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-28T18:15:38.853", + "lastModified": "2025-10-28T18:15:38.853", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/line2222/vuln/issues/3", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-603xx/CVE-2025-60355.json b/CVE-2025/CVE-2025-603xx/CVE-2025-60355.json new file mode 100644 index 00000000000..fad0177f030 --- /dev/null +++ b/CVE-2025/CVE-2025-603xx/CVE-2025-60355.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-60355", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-28T18:15:38.983", + "lastModified": "2025-10-28T18:15:38.983", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "zhangyd-c OneBlog before 2.3.9 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/line2222/vuln/issues/4", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-608xx/CVE-2025-60800.json b/CVE-2025/CVE-2025-608xx/CVE-2025-60800.json new file mode 100644 index 00000000000..47167f6617d --- /dev/null +++ b/CVE-2025/CVE-2025-608xx/CVE-2025-60800.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-60800", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-28T18:15:39.113", + "lastModified": "2025-10-28T18:15:39.113", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/jishenghua/jshERP/issues/130", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-608xx/CVE-2025-60805.json b/CVE-2025/CVE-2025-608xx/CVE-2025-60805.json new file mode 100644 index 00000000000..45b0ac507e0 --- /dev/null +++ b/CVE-2025/CVE-2025-608xx/CVE-2025-60805.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60805", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-28T18:15:39.270", + "lastModified": "2025-10-28T18:15:39.270", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue was discovered in BESSystem BES Application Server thru 9.5.x allowing unauthorized attackers to gain sensitive information via the \"pre-resource\" option in bes-web.xml." + } + ], + "metrics": {}, + "references": [ + { + "url": "http://bes.com", + "source": "cve@mitre.org" + }, + { + "url": "http://www.bessystem.com/appserver/dtds/bes-web-app_2_5-0.dtd", + "source": "cve@mitre.org" + }, + { + "url": "https://gist.github.com/Liu2000622/7a6294f7421ef50c378a456ca9494714", + "source": "cve@mitre.org" + }, + { + "url": "https://www.bessystem.com/product/0ad9b8c4d6af462b8d15723a5f25a87d/info?p=101", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-610xx/CVE-2025-61080.json b/CVE-2025/CVE-2025-610xx/CVE-2025-61080.json new file mode 100644 index 00000000000..e2199574e6b --- /dev/null +++ b/CVE-2025/CVE-2025-610xx/CVE-2025-61080.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-61080", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-28T18:15:39.413", + "lastModified": "2025-10-28T18:15:39.413", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/willyc0de/f05b44696d66b4bc3276234171952bf2", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-610xx/CVE-2025-61099.json b/CVE-2025/CVE-2025-610xx/CVE-2025-61099.json index 3f1222f5187..ecb80c3bb75 100644 --- a/CVE-2025/CVE-2025-610xx/CVE-2025-61099.json +++ b/CVE-2025/CVE-2025-610xx/CVE-2025-61099.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61099", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-27T19:16:04.880", - "lastModified": "2025-10-27T19:16:04.880", + "lastModified": "2025-10-28T18:15:39.540", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LS Update packet." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], "references": [ { "url": "https://github.com/FRRouting/frr/issues/19471", diff --git a/CVE-2025/CVE-2025-611xx/CVE-2025-61100.json b/CVE-2025/CVE-2025-611xx/CVE-2025-61100.json index 42fd75b0a40..34159164075 100644 --- a/CVE-2025/CVE-2025-611xx/CVE-2025-61100.json +++ b/CVE-2025/CVE-2025-611xx/CVE-2025-61100.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61100", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-27T19:16:05.060", - "lastModified": "2025-10-27T19:16:05.060", + "lastModified": "2025-10-28T18:15:39.717", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) under specific malformed LSA conditions." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], "references": [ { "url": "https://github.com/FRRouting/frr/issues/19471", diff --git a/CVE-2025/CVE-2025-611xx/CVE-2025-61101.json b/CVE-2025/CVE-2025-611xx/CVE-2025-61101.json index 4f937410725..5cb1d9698df 100644 --- a/CVE-2025/CVE-2025-611xx/CVE-2025-61101.json +++ b/CVE-2025/CVE-2025-611xx/CVE-2025-61101.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61101", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-27T20:15:54.050", - "lastModified": "2025-10-27T20:15:54.050", + "lastModified": "2025-10-28T18:15:39.910", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_rmt_itf_addr function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], "references": [ { "url": "https://github.com/FRRouting/frr/issues/19471", diff --git a/CVE-2025/CVE-2025-611xx/CVE-2025-61102.json b/CVE-2025/CVE-2025-611xx/CVE-2025-61102.json index 0637b2f3007..315c590eb96 100644 --- a/CVE-2025/CVE-2025-611xx/CVE-2025-61102.json +++ b/CVE-2025/CVE-2025-611xx/CVE-2025-61102.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61102", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-27T20:15:54.150", - "lastModified": "2025-10-27T20:15:54.150", + "lastModified": "2025-10-28T17:15:38.040", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], "references": [ { "url": "https://github.com/FRRouting/frr/issues/19471", diff --git a/CVE-2025/CVE-2025-611xx/CVE-2025-61103.json b/CVE-2025/CVE-2025-611xx/CVE-2025-61103.json index 357b62b3cf2..50443760d38 100644 --- a/CVE-2025/CVE-2025-611xx/CVE-2025-61103.json +++ b/CVE-2025/CVE-2025-611xx/CVE-2025-61103.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61103", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-28T15:16:12.910", - "lastModified": "2025-10-28T15:16:12.910", + "lastModified": "2025-10-28T18:15:40.117", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_lan_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], "references": [ { "url": "https://github.com/FRRouting/frr/issues/19471", diff --git a/CVE-2025/CVE-2025-611xx/CVE-2025-61104.json b/CVE-2025/CVE-2025-611xx/CVE-2025-61104.json index 46468a3c819..473e92728af 100644 --- a/CVE-2025/CVE-2025-611xx/CVE-2025-61104.json +++ b/CVE-2025/CVE-2025-611xx/CVE-2025-61104.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61104", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-28T15:16:13.023", - "lastModified": "2025-10-28T15:16:13.023", + "lastModified": "2025-10-28T18:15:40.310", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_tlv function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], "references": [ { "url": "https://github.com/FRRouting/frr/issues/19471", diff --git a/CVE-2025/CVE-2025-611xx/CVE-2025-61105.json b/CVE-2025/CVE-2025-611xx/CVE-2025-61105.json index 5c0ee4a1401..2e9cd90b62d 100644 --- a/CVE-2025/CVE-2025-611xx/CVE-2025-61105.json +++ b/CVE-2025/CVE-2025-611xx/CVE-2025-61105.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61105", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-27T20:15:54.240", - "lastModified": "2025-10-27T20:15:54.240", + "lastModified": "2025-10-28T18:15:40.483", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], "references": [ { "url": "https://github.com/FRRouting/frr/issues/19471", diff --git a/CVE-2025/CVE-2025-611xx/CVE-2025-61106.json b/CVE-2025/CVE-2025-611xx/CVE-2025-61106.json index f9af7a8efd8..fc15449b615 100644 --- a/CVE-2025/CVE-2025-611xx/CVE-2025-61106.json +++ b/CVE-2025/CVE-2025-611xx/CVE-2025-61106.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61106", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-28T15:16:13.133", - "lastModified": "2025-10-28T15:16:13.133", + "lastModified": "2025-10-28T18:15:40.677", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], "references": [ { "url": "https://github.com/FRRouting/frr/issues/19471", diff --git a/CVE-2025/CVE-2025-611xx/CVE-2025-61107.json b/CVE-2025/CVE-2025-611xx/CVE-2025-61107.json index bbfa6b20a5b..86f6f3a543b 100644 --- a/CVE-2025/CVE-2025-611xx/CVE-2025-61107.json +++ b/CVE-2025/CVE-2025-611xx/CVE-2025-61107.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61107", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-28T15:16:13.243", - "lastModified": "2025-10-28T15:16:13.243", + "lastModified": "2025-10-28T18:15:40.860", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LSA Update packet." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], "references": [ { "url": "https://github.com/FRRouting/frr/issues/19471", diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62496.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62496.json index 4e283f8ffd5..1aefe82df99 100644 --- a/CVE-2025/CVE-2025-624xx/CVE-2025-62496.json +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62496.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62496", "sourceIdentifier": "cve-coordination@google.com", "published": "2025-10-16T16:15:40.260", - "lastModified": "2025-10-21T19:31:50.020", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-28T18:17:32.570", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,14 +91,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:quickjs_project:quickjs:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2025-09-13", + "matchCriteriaId": "AB84E2DC-74EA-4956-9521-C2B652B8E8C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://bellard.org/quickjs/Changelog", - "source": "cve-coordination@google.com" + "source": "cve-coordination@google.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://issuetracker.google.com/434193016", - "source": "cve-coordination@google.com" + "source": "cve-coordination@google.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/README.md b/README.md index 74093239992..680a05f259c 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-10-28T17:00:11.539550+00:00 +2025-10-28T19:00:11.735515+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-10-28T16:53:08.540000+00:00 +2025-10-28T18:57:06.603000+00:00 ``` ### Last Data Feed Release @@ -33,69 +33,52 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -316012 +316020 ``` ### CVEs added in the last Commit -Recently added CVEs: `33` +Recently added CVEs: `8` -- [CVE-2025-34308](CVE-2025/CVE-2025-343xx/CVE-2025-34308.json) (`2025-10-28T15:16:11.080`) -- [CVE-2025-34309](CVE-2025/CVE-2025-343xx/CVE-2025-34309.json) (`2025-10-28T15:16:11.190`) -- [CVE-2025-34310](CVE-2025/CVE-2025-343xx/CVE-2025-34310.json) (`2025-10-28T15:16:11.293`) -- [CVE-2025-34311](CVE-2025/CVE-2025-343xx/CVE-2025-34311.json) (`2025-10-28T15:16:11.400`) -- [CVE-2025-34312](CVE-2025/CVE-2025-343xx/CVE-2025-34312.json) (`2025-10-28T15:16:11.510`) -- [CVE-2025-34313](CVE-2025/CVE-2025-343xx/CVE-2025-34313.json) (`2025-10-28T15:16:11.613`) -- [CVE-2025-34314](CVE-2025/CVE-2025-343xx/CVE-2025-34314.json) (`2025-10-28T15:16:11.720`) -- [CVE-2025-34315](CVE-2025/CVE-2025-343xx/CVE-2025-34315.json) (`2025-10-28T15:16:11.823`) -- [CVE-2025-34316](CVE-2025/CVE-2025-343xx/CVE-2025-34316.json) (`2025-10-28T15:16:11.930`) -- [CVE-2025-34317](CVE-2025/CVE-2025-343xx/CVE-2025-34317.json) (`2025-10-28T15:16:12.037`) -- [CVE-2025-34318](CVE-2025/CVE-2025-343xx/CVE-2025-34318.json) (`2025-10-28T15:16:12.147`) -- [CVE-2025-36081](CVE-2025/CVE-2025-360xx/CVE-2025-36081.json) (`2025-10-28T15:16:12.270`) -- [CVE-2025-36083](CVE-2025/CVE-2025-360xx/CVE-2025-36083.json) (`2025-10-28T15:16:12.427`) -- [CVE-2025-36085](CVE-2025/CVE-2025-360xx/CVE-2025-36085.json) (`2025-10-28T15:16:12.577`) -- [CVE-2025-36386](CVE-2025/CVE-2025-363xx/CVE-2025-36386.json) (`2025-10-28T16:15:38.107`) -- [CVE-2025-56399](CVE-2025/CVE-2025-563xx/CVE-2025-56399.json) (`2025-10-28T16:15:38.543`) -- [CVE-2025-60349](CVE-2025/CVE-2025-603xx/CVE-2025-60349.json) (`2025-10-28T16:15:39.157`) -- [CVE-2025-60858](CVE-2025/CVE-2025-608xx/CVE-2025-60858.json) (`2025-10-28T16:15:39.277`) -- [CVE-2025-61043](CVE-2025/CVE-2025-610xx/CVE-2025-61043.json) (`2025-10-28T15:16:12.790`) -- [CVE-2025-61103](CVE-2025/CVE-2025-611xx/CVE-2025-61103.json) (`2025-10-28T15:16:12.910`) -- [CVE-2025-61104](CVE-2025/CVE-2025-611xx/CVE-2025-61104.json) (`2025-10-28T15:16:13.023`) -- [CVE-2025-61106](CVE-2025/CVE-2025-611xx/CVE-2025-61106.json) (`2025-10-28T15:16:13.133`) -- [CVE-2025-61107](CVE-2025/CVE-2025-611xx/CVE-2025-61107.json) (`2025-10-28T15:16:13.243`) -- [CVE-2025-61128](CVE-2025/CVE-2025-611xx/CVE-2025-61128.json) (`2025-10-28T15:16:13.350`) -- [CVE-2025-61155](CVE-2025/CVE-2025-611xx/CVE-2025-61155.json) (`2025-10-28T16:15:39.397`) +- [CVE-2025-12422](CVE-2025/CVE-2025-124xx/CVE-2025-12422.json) (`2025-10-28T18:15:36.697`) +- [CVE-2025-54604](CVE-2025/CVE-2025-546xx/CVE-2025-54604.json) (`2025-10-28T17:15:37.337`) +- [CVE-2025-54605](CVE-2025/CVE-2025-546xx/CVE-2025-54605.json) (`2025-10-28T17:15:37.903`) +- [CVE-2025-60354](CVE-2025/CVE-2025-603xx/CVE-2025-60354.json) (`2025-10-28T18:15:38.853`) +- [CVE-2025-60355](CVE-2025/CVE-2025-603xx/CVE-2025-60355.json) (`2025-10-28T18:15:38.983`) +- [CVE-2025-60800](CVE-2025/CVE-2025-608xx/CVE-2025-60800.json) (`2025-10-28T18:15:39.113`) +- [CVE-2025-60805](CVE-2025/CVE-2025-608xx/CVE-2025-60805.json) (`2025-10-28T18:15:39.270`) +- [CVE-2025-61080](CVE-2025/CVE-2025-610xx/CVE-2025-61080.json) (`2025-10-28T18:15:39.413`) ### CVEs modified in the last Commit -Recently modified CVEs: `73` +Recently modified CVEs: `59` -- [CVE-2025-53062](CVE-2025/CVE-2025-530xx/CVE-2025-53062.json) (`2025-10-28T16:17:03.840`) -- [CVE-2025-53064](CVE-2025/CVE-2025-530xx/CVE-2025-53064.json) (`2025-10-28T16:17:26.297`) -- [CVE-2025-5496](CVE-2025/CVE-2025-54xx/CVE-2025-5496.json) (`2025-10-28T15:36:52.253`) -- [CVE-2025-54963](CVE-2025/CVE-2025-549xx/CVE-2025-54963.json) (`2025-10-28T16:22:07.663`) -- [CVE-2025-54964](CVE-2025/CVE-2025-549xx/CVE-2025-54964.json) (`2025-10-28T16:19:45.597`) -- [CVE-2025-54966](CVE-2025/CVE-2025-549xx/CVE-2025-54966.json) (`2025-10-28T16:19:20.397`) -- [CVE-2025-56316](CVE-2025/CVE-2025-563xx/CVE-2025-56316.json) (`2025-10-28T16:44:48.133`) -- [CVE-2025-59838](CVE-2025/CVE-2025-598xx/CVE-2025-59838.json) (`2025-10-28T16:15:38.673`) -- [CVE-2025-60340](CVE-2025/CVE-2025-603xx/CVE-2025-60340.json) (`2025-10-28T16:15:38.817`) -- [CVE-2025-60341](CVE-2025/CVE-2025-603xx/CVE-2025-60341.json) (`2025-10-28T16:15:38.987`) -- [CVE-2025-60838](CVE-2025/CVE-2025-608xx/CVE-2025-60838.json) (`2025-10-28T15:32:01.233`) -- [CVE-2025-61385](CVE-2025/CVE-2025-613xx/CVE-2025-61385.json) (`2025-10-28T16:15:39.513`) -- [CVE-2025-62579](CVE-2025/CVE-2025-625xx/CVE-2025-62579.json) (`2025-10-28T15:24:15.930`) -- [CVE-2025-62580](CVE-2025/CVE-2025-625xx/CVE-2025-62580.json) (`2025-10-28T15:23:20.707`) -- [CVE-2025-62604](CVE-2025/CVE-2025-626xx/CVE-2025-62604.json) (`2025-10-28T16:26:07.087`) -- [CVE-2025-62642](CVE-2025/CVE-2025-626xx/CVE-2025-62642.json) (`2025-10-28T16:39:50.600`) -- [CVE-2025-8048](CVE-2025/CVE-2025-80xx/CVE-2025-8048.json) (`2025-10-28T16:12:50.687`) -- [CVE-2025-8049](CVE-2025/CVE-2025-80xx/CVE-2025-8049.json) (`2025-10-28T16:11:07.157`) -- [CVE-2025-8050](CVE-2025/CVE-2025-80xx/CVE-2025-8050.json) (`2025-10-28T16:16:46.493`) -- [CVE-2025-8051](CVE-2025/CVE-2025-80xx/CVE-2025-8051.json) (`2025-10-28T16:14:35.167`) -- [CVE-2025-8052](CVE-2025/CVE-2025-80xx/CVE-2025-8052.json) (`2025-10-28T16:10:43.003`) -- [CVE-2025-8053](CVE-2025/CVE-2025-80xx/CVE-2025-8053.json) (`2025-10-28T16:08:51.997`) -- [CVE-2025-8709](CVE-2025/CVE-2025-87xx/CVE-2025-8709.json) (`2025-10-28T15:16:13.970`) -- [CVE-2025-9063](CVE-2025/CVE-2025-90xx/CVE-2025-9063.json) (`2025-10-28T15:30:39.437`) -- [CVE-2025-9064](CVE-2025/CVE-2025-90xx/CVE-2025-9064.json) (`2025-10-28T15:20:33.767`) +- [CVE-2025-20996](CVE-2025/CVE-2025-209xx/CVE-2025-20996.json) (`2025-10-28T18:54:52.860`) +- [CVE-2025-21992](CVE-2025/CVE-2025-219xx/CVE-2025-21992.json) (`2025-10-28T18:02:07.080`) +- [CVE-2025-21994](CVE-2025/CVE-2025-219xx/CVE-2025-21994.json) (`2025-10-28T17:19:48.387`) +- [CVE-2025-22008](CVE-2025/CVE-2025-220xx/CVE-2025-22008.json) (`2025-10-28T17:17:34.653`) +- [CVE-2025-22013](CVE-2025/CVE-2025-220xx/CVE-2025-22013.json) (`2025-10-28T17:16:03.533`) +- [CVE-2025-22015](CVE-2025/CVE-2025-220xx/CVE-2025-22015.json) (`2025-10-28T17:12:34.880`) +- [CVE-2025-22016](CVE-2025/CVE-2025-220xx/CVE-2025-22016.json) (`2025-10-28T17:09:38.110`) +- [CVE-2025-22017](CVE-2025/CVE-2025-220xx/CVE-2025-22017.json) (`2025-10-28T17:08:48.157`) +- [CVE-2025-22023](CVE-2025/CVE-2025-220xx/CVE-2025-22023.json) (`2025-10-28T18:53:05.190`) +- [CVE-2025-22025](CVE-2025/CVE-2025-220xx/CVE-2025-22025.json) (`2025-10-28T18:56:17.393`) +- [CVE-2025-22026](CVE-2025/CVE-2025-220xx/CVE-2025-22026.json) (`2025-10-28T18:57:06.603`) +- [CVE-2025-27441](CVE-2025/CVE-2025-274xx/CVE-2025-27441.json) (`2025-10-28T17:07:44.403`) +- [CVE-2025-27442](CVE-2025/CVE-2025-274xx/CVE-2025-27442.json) (`2025-10-28T17:04:11.833`) +- [CVE-2025-30712](CVE-2025/CVE-2025-307xx/CVE-2025-30712.json) (`2025-10-28T18:38:13.350`) +- [CVE-2025-54539](CVE-2025/CVE-2025-545xx/CVE-2025-54539.json) (`2025-10-28T17:00:49.247`) +- [CVE-2025-61099](CVE-2025/CVE-2025-610xx/CVE-2025-61099.json) (`2025-10-28T18:15:39.540`) +- [CVE-2025-61100](CVE-2025/CVE-2025-611xx/CVE-2025-61100.json) (`2025-10-28T18:15:39.717`) +- [CVE-2025-61101](CVE-2025/CVE-2025-611xx/CVE-2025-61101.json) (`2025-10-28T18:15:39.910`) +- [CVE-2025-61102](CVE-2025/CVE-2025-611xx/CVE-2025-61102.json) (`2025-10-28T17:15:38.040`) +- [CVE-2025-61103](CVE-2025/CVE-2025-611xx/CVE-2025-61103.json) (`2025-10-28T18:15:40.117`) +- [CVE-2025-61104](CVE-2025/CVE-2025-611xx/CVE-2025-61104.json) (`2025-10-28T18:15:40.310`) +- [CVE-2025-61105](CVE-2025/CVE-2025-611xx/CVE-2025-61105.json) (`2025-10-28T18:15:40.483`) +- [CVE-2025-61106](CVE-2025/CVE-2025-611xx/CVE-2025-61106.json) (`2025-10-28T18:15:40.677`) +- [CVE-2025-61107](CVE-2025/CVE-2025-611xx/CVE-2025-61107.json) (`2025-10-28T18:15:40.860`) +- [CVE-2025-62496](CVE-2025/CVE-2025-624xx/CVE-2025-62496.json) (`2025-10-28T18:17:32.570`) ## Download and Usage diff --git a/_state.csv b/_state.csv index f6c2ac4cf00..5fbd9caa9d5 100644 --- a/_state.csv +++ b/_state.csv @@ -186060,7 +186060,7 @@ CVE-2021-44533,0,0,b688b4c33da58fab50730478d5cfc4bdee1fe898192eed5b51ad909b74a7d CVE-2021-44534,0,0,bcb71acf2581505560789487e5637ff718f5e174e5ccc630938db1b565a5e233,2024-11-21T06:31:11.113000 CVE-2021-44537,0,0,628edce87b58071fd11d993afdd95c319258d66494dc354669653fce1e9f768c,2024-11-21T06:31:11.330000 CVE-2021-44538,0,0,af774d616b2ad65cd6694202293e5cb98645f726b4865866d3144d514a8e9116,2024-11-21T06:31:11.483000 -CVE-2021-4454,0,0,eeb2ec5598b7215630d92b4ec09605d71fe64cdbf3522471da3a7660e8d31785,2025-03-28T18:11:49.747000 +CVE-2021-4454,0,1,1b77cf0199f1df11dffe4df10d6f1866e22102a7be57e0f55d6e0c244c6f0e85,2025-10-28T18:10:52.573000 CVE-2021-44540,0,0,9468c5de620a1e6db049fcf5af7fe2e1460c891adf7fed75c685a9b0a3acce8f,2024-11-21T06:31:11.640000 CVE-2021-44541,0,0,c0857f7ca2ebd587cda4bd153090809b08739ae1160633d2ebc20b83d9a68664,2024-11-21T06:31:11.753000 CVE-2021-44542,0,0,cc19f057e044c038fdcf741a6ef991904c443c33803df8db670ade1fe042131c,2024-11-21T06:31:11.863000 @@ -193496,9 +193496,9 @@ CVE-2022-23455,0,0,279a176939a3e54307c00d7dab81e05eed4a9aed1a24e9bbd38cb63ec7ddd CVE-2022-23456,0,0,3c3ae7870712718c071efc1ed74aeeffff6504f8aed9bd8cb32517d631266ba0,2024-11-21T06:48:35.643000 CVE-2022-23457,0,0,6923186de06ff55aba9c9cc4cf061e0903b3154387ccf3662749823a0f175507,2024-11-21T06:48:35.780000 CVE-2022-23458,0,0,fc1f1a597178d5392a7a517489c76dbefc8092b98248bc6a71bd00bab1957be7,2024-11-21T06:48:35.950000 -CVE-2022-23459,0,1,66a1533045a056181274efc90bc897c133adeb43529325d5e915a0b49514e3a0,2025-10-28T16:00:13.997000 +CVE-2022-23459,0,0,66a1533045a056181274efc90bc897c133adeb43529325d5e915a0b49514e3a0,2025-10-28T16:00:13.997000 CVE-2022-2346,0,0,82e9d123e2c05e5eaf9fc310d3e81ffa68efa9d4a3345bd6e13abc3207121cab,2024-11-21T07:00:48.937000 -CVE-2022-23460,0,1,5279a5e46d59450b6c6639d8e24bf1d90d48d9a589ad96201c16095c4f3080dd,2025-10-28T16:00:13.997000 +CVE-2022-23460,0,0,5279a5e46d59450b6c6639d8e24bf1d90d48d9a589ad96201c16095c4f3080dd,2025-10-28T16:00:13.997000 CVE-2022-23461,0,0,9d25c913f3ac94d7f07571d09dec4288941041750beaee07ba57e932b1d624de,2024-11-21T06:48:36.370000 CVE-2022-23462,0,0,a317d30ca067a4a9ab9f3a1afed8562d5a5bc2baac0d9ea95d77148dcfbf462d,2024-11-21T06:48:36.507000 CVE-2022-23463,0,0,33450a23ef6be35b21bf14b41330c8e3264bf0f8176b6143b5dff6726c3b9958,2024-11-21T06:48:36.643000 @@ -243211,22 +243211,22 @@ CVE-2023-52925,0,0,906c3d03542c8443cb5cf2f93a8d938f52be6c6e1f6fc23a6ca392404d58b CVE-2023-52926,0,0,be726e8d867db0398655760a18498bca2c5b3b4ead0174d43085d3d2d828a6b1,2025-03-24T17:34:43.630000 CVE-2023-52927,0,0,471812e7e49244f3584a8cee0adb865986704608ec7d9c64aea6abcdba58e05c,2025-08-19T17:15:31.303000 CVE-2023-52928,0,0,ab41d1474724aac9d8eabbecee59fe151fc9acd4b3d838e1cf4fdbab0e5d75ff,2025-03-28T18:11:49.747000 -CVE-2023-52929,0,0,7ccc3e81150553c31bfb0f821a37879eef8bcfb2d942d3b02254680021b3ca3c,2025-03-28T18:11:49.747000 +CVE-2023-52929,0,1,6fec62de04f286db83795a8fb64dde037af9255d0801ffc68bd0c607ddfdd43d,2025-10-28T18:30:58.967000 CVE-2023-5293,0,0,9b2cea486d7a7f42acc94669701d574bcf5844db44201d8d4650d958cfdded9f,2024-11-21T08:41:28.027000 CVE-2023-52930,0,0,45e019a2bbcefba8c9dbdf35ceb84d89c10406d0516f2f7d395e78e64b98b93e,2025-10-01T20:17:11.503000 CVE-2023-52931,0,0,ca733bd12b5408ca8f62c7f49ef90e771226676884c3e4f6f6ee0fa23ad6d5ee,2025-04-01T15:40:49.540000 CVE-2023-52932,0,0,b8e5b4315177494bf4bd5ac273b913b7b4d290f77b0cd1c6a5f621db075aa678,2025-10-01T20:17:11.703000 -CVE-2023-52933,0,0,ad5cd297e29b7f18a95c513aa72648170a5c47efd5fbeb941f109799beb02dcc,2025-03-28T18:11:49.747000 -CVE-2023-52934,0,0,97cf60f329c8e96b86d997666cdee894d18ef39393a0cabc2d705e915ee27dde,2025-03-28T18:11:49.747000 +CVE-2023-52933,0,1,1bab5b91e32eba7a19461b9b559704d20f0c4c6458061d76e474e6170955e516,2025-10-28T18:29:22.007000 +CVE-2023-52934,0,1,d7ab7daa2f243f3e2a0120369c5ae3b631f7d532e1decc62202879a109283c16,2025-10-28T18:27:03.340000 CVE-2023-52935,0,0,f76ffdc02d5022de761b682117bf74bc616b9321e97468b74786971693139c82,2025-09-09T17:15:40.403000 CVE-2023-52936,0,0,c6e7ac61c97b2737881438eb0ea593e995884d484f7b55a185cb3275bc3302f4,2025-10-01T20:17:11.890000 CVE-2023-52937,0,0,2d435f8206c5638e6a48352b865b50723ad77228d9b2ad7e8945fd09644d01d5,2025-10-01T20:17:12.103000 CVE-2023-52938,0,0,526c89162821ab5aedd74beb552bffddbb18be74141918ec278bab30fd8e4b32,2025-10-01T20:17:12.443000 CVE-2023-52939,0,0,d6bbc4c4c04bc618f6018705a4811982d4a1e99ec867a86ef50b9d40a4f025b8,2025-10-01T18:15:33.910000 CVE-2023-5294,0,0,3f7d530e6cf9dcdc204d5438393ed0130f08c33ee485c7c9370aa028c9815d14,2024-11-21T08:41:28.180000 -CVE-2023-52940,0,0,c131d3a4619c764c9496cec9d021aef44739c6482b83bf4ae3061c0fa0babfbb,2025-03-28T18:11:49.747000 -CVE-2023-52941,0,0,439d0afd2ed070915fe56232ad14113726ff36eaf0915e4987a90869844af791,2025-03-28T18:11:49.747000 -CVE-2023-52942,0,0,9e761188624e494c36cf8f95252d52a092a6c47d36b20c237e04348c5b3dc7e3,2025-03-28T18:11:49.747000 +CVE-2023-52940,0,1,ac714bf11b5f3fb628bb7202865fa2843808be349d5312cee8e5d6690b1a30db,2025-10-28T18:25:41.900000 +CVE-2023-52941,0,1,30fdce75299e9c8db4f747cd52d87ae9b50a764226cfb079ee6ef636dbe6768d,2025-10-28T18:24:54.397000 +CVE-2023-52942,0,1,218e105ebef6abd12bfe2235ad3c46eb737a7c94dcbe4ead8eb3b3a02d1f23d8,2025-10-28T18:24:17.700000 CVE-2023-52943,0,0,6423f6a2f8aa2ee58556be17eceeabb16a6f60da2cbe4a29762953967a650132,2025-03-06T14:29:59.667000 CVE-2023-52944,0,0,7b3d195a5668ccb86b9de6bf2d56cf53d760b3892fffb5d541e08049bc5ec546,2025-03-06T14:30:43.413000 CVE-2023-52946,0,0,3d7aae165a174e48796900810af5199f23129c11121058d52b8cf76c8e8211b0,2024-10-08T15:55:07.543000 @@ -243254,9 +243254,9 @@ CVE-2023-52977,0,0,71db963e579e95dc1ab1661eacd1730ba895c535d98f46ee874e7b1ee5f03 CVE-2023-52978,0,0,2c4b8a0eb33a1b8dbb90039cae0a1cee60095e678fb1b09daf8c8fc649948637,2025-10-01T18:15:34.537000 CVE-2023-52979,0,0,0d787ae0e360785cc7bd679096c3ff6e5a49acb29f4900ade6a09b8b8e03435d,2025-10-07T07:15:37.377000 CVE-2023-5298,0,0,f53cf1dcb6f115d92d16e5c66372cdfa06b4033bbcfb51673e0e9ae138cbc0c7,2024-11-21T08:41:28.727000 -CVE-2023-52980,0,0,4641100b19aa28664d8b14bbb512164aafcca33a6f1cdb080c45653f95d87360,2025-03-28T18:11:49.747000 -CVE-2023-52981,0,0,f164a1046931069724d8fe6fa7ada00d7f4d44532953117d1bb939b180055dbd,2025-03-28T18:11:49.747000 -CVE-2023-52982,0,0,30c98da5b0d3cba53b29617cc14d1f3d3c24d3b6ba8bed093e2ac4772c7f7f5a,2025-03-28T18:11:49.747000 +CVE-2023-52980,0,1,8925c6b468a378bb716a619d8e7bd3ef718c57d2abbca8a6ec2c6d5c4fe38b35,2025-10-28T18:23:45.827000 +CVE-2023-52981,0,1,3135e9044377163f6dab7082ccd55aca01975b3c84934d4fd89d4de8981c7a8b,2025-10-28T18:22:48.960000 +CVE-2023-52982,0,1,f60450b9f8234d1648684295f06114a79c3d36807d67a23aa0c61bc287ec60de,2025-10-28T18:22:24.060000 CVE-2023-52983,0,0,589747902ff20f77b06b594451f17383b3ae83a76bf4635803941881fca95b56,2025-04-01T15:39:39.127000 CVE-2023-52984,0,0,4e1942c3a6df1e102575a4eb2e51968188edae08353f45cdb41fe9aff50cb929,2025-10-01T18:15:34.887000 CVE-2023-52985,0,0,226cdefb815da7db873f74254b5de46e04e0673ae055d0d4aac4ce9242239d24,2025-03-28T18:11:49.747000 @@ -243313,7 +243313,7 @@ CVE-2023-53030,0,0,7320bc84c92d9cd5305cb9754d3855bbc3a7e674b5b3eb1dc52e95195833c CVE-2023-53031,0,0,451f86f2688662f26c32d2314d26df257466645907dd1d2b936cba64435fc9c3,2025-03-28T18:11:40.180000 CVE-2023-53032,0,0,93ff98cea1dccacd110dbd1baf1362d079a1c6c42ed51d528b776f30ae2b7a78,2025-03-28T18:11:40.180000 CVE-2023-53033,0,0,8d057d9c44ce98261c228cb81506be1f3f8f50bb5bf9b573d71aa33383f2883c,2025-03-28T18:11:40.180000 -CVE-2023-53034,0,0,874b21dc5d8893263c686e1d99ac0a563054392f5a4c1376cb4d7e9316ea3a18,2025-04-17T20:22:16.240000 +CVE-2023-53034,0,1,ae3113534e3b0e2dba035a716f1c50f94f1446877c44d46e798d6cee2b152037,2025-10-28T18:53:15.930000 CVE-2023-53035,0,0,00f49639ce175bf576d6bb458b6127655f6d76446f9527a966141404dba1da3c,2025-05-05T20:54:45.973000 CVE-2023-53036,0,0,ad228d0bad48e27c0a646dcfb0077b69d121a77f1180a619f9907d7cd88deefb,2025-05-05T20:54:45.973000 CVE-2023-53037,0,0,2f2e0f1fbedd9185bfa974530c6ae23052fd5e5a1db178400463f5171b30948a,2025-05-05T20:54:45.973000 @@ -246454,7 +246454,7 @@ CVE-2024-0632,0,0,a9463c7e82c342018b0e57deb2f88caaa857e9b0fbf047358018422247db90 CVE-2024-0637,0,0,7c9a697ff84ce3f829a37c5afe7a707be5532d12bd98067cf2174fb6007f34d1,2025-08-07T17:21:34.983000 CVE-2024-0638,0,0,07ac9ef695277f9a476f19b4f2c1e2a29c25bffffc157de815a3953f8b74a260,2024-12-04T17:00:07.247000 CVE-2024-0639,0,0,2de0de9119701e6aba4aa7f216a84b692308d0786b1c2528b89185704faf8885,2024-11-21T08:47:02.987000 -CVE-2024-0640,0,0,29ca17d3e9c43a42a4e107383f0386ed9f88b423380a20492c8f7820e26af546,2025-03-20T10:15:14.093000 +CVE-2024-0640,0,1,313e155b00f6f4f3d7b28f3997ef8f65908b25a60ef394526d2275c040c62666,2025-10-28T18:15:12.067000 CVE-2024-0641,0,0,e948c13b3ce3e6d2248ac938fce19e0e83fa3bff7799a82b78a00ff8f2e242b4,2024-11-21T08:47:03.137000 CVE-2024-0642,0,0,117c83a1ebc941a151789b5f0e815893106aa44bffc8d25c20fcc2f003876ea2,2024-11-21T08:47:03.273000 CVE-2024-0643,0,0,a4aae036d8f55fbc3a8e0b9d7d6c873a842de1dfc0b7081b611144fda316c2ef,2024-11-21T08:47:03.413000 @@ -246874,11 +246874,11 @@ CVE-2024-10082,0,0,06415cdb965ac64636892c496f9de214d59f82f169c648183613af8a98253 CVE-2024-10083,0,0,38e5dd874f867621565e43b60ceb8e1f354d946ee13dde203b48c3daa671568c,2025-02-13T06:15:19.210000 CVE-2024-10084,0,0,2ff415344e4637d9bc95b91c06a7893616e3e4b8e9a75229a17aefb610d59ae2,2025-07-11T13:57:29.007000 CVE-2024-10086,0,0,c34575f938553fa7d7ae7ba88022934e50d186981e616c6c9f4320956c07bcc0,2025-01-10T13:15:08.623000 -CVE-2024-10087,0,1,0a22e5f71c722d68936b182db730b5fc5e33c25e91a836c9eb5dc9fe41ea1633,2025-10-28T16:52:58.500000 -CVE-2024-10088,0,0,72fd6e510e118aad9132dfbe8537a0be9392c40f9556675adca0273d767508bf,2025-04-15T18:39:27.967000 -CVE-2024-10089,0,0,b5a2b6428d90a15a1ba7d3396eb60f87d68f483724e84469df047be19018d8aa,2025-04-15T18:39:27.967000 +CVE-2024-10087,0,0,0a22e5f71c722d68936b182db730b5fc5e33c25e91a836c9eb5dc9fe41ea1633,2025-10-28T16:52:58.500000 +CVE-2024-10088,0,1,c28d97f16f838fc84d99f6e5f6d16f5223047742bf220cedb0f99710ec498066,2025-10-28T17:12:28.720000 +CVE-2024-10089,0,1,5eaaeafd7943e244d81d16ac0a8cd3cfe17a713d45609c75076d3477b221cd2c,2025-10-28T17:12:14.637000 CVE-2024-1009,0,0,7f10991a2aedcbb0eeb168a4df9621d13325fa39adae509b0e5c1de61defa9f2,2024-11-21T08:49:35.077000 -CVE-2024-10090,0,0,57cf8aaee252bf4d073059599523efe60eb4ad2613c71d11b501bebc21c6fcd1,2025-04-15T18:39:27.967000 +CVE-2024-10090,0,1,0c5c66ecb4946f77709a7481a766db6f07b996d50e88a2e46c97ca629f06372a,2025-10-28T17:11:58.043000 CVE-2024-10091,0,0,6e7587c6e48a4895e0398f4ef5a128ee8ab9d12529d1ec8cebe459ac4ee7d408,2025-01-16T21:48:55.983000 CVE-2024-10092,0,0,3187158205da52d65b1fd5fde676bfb3bfd6fed14de72d76a8aab9b275f77138,2024-10-28T13:58:09.230000 CVE-2024-10093,0,0,0b4f7b1e1ef181948292cdf0451d434c8b0b600a4a601aafca87364e5f264510,2024-11-01T18:07:07.003000 @@ -248316,8 +248316,8 @@ CVE-2024-11477,0,0,533debd656df310c5dfa8a5e7d8f64843fe10985ed5fd297c0209bb42a62d CVE-2024-11478,0,0,59ff8c037d327d83acb615118a26c2765dac4cee8161ea9baa85bc423063ea44,2025-07-30T23:15:25.500000 CVE-2024-11479,0,0,64cd37c11d69fb554cc4a2f6927969c2e71d06afe5cee0b82bc8d31b56a78bb5,2024-12-04T01:15:04.650000 CVE-2024-1148,0,0,42f8b4a331499e416da7e39ecb917cc148de70355c01e7459a0ecc809b95c273,2024-11-21T08:49:54.507000 -CVE-2024-11481,0,0,43aefde0b60b7bb2c03e6e9073efa36888743c80ea5c30a176dc892fe3500a31,2024-11-29T08:15:04.270000 -CVE-2024-11482,0,0,5e7a4736fb5a2549e2b814b0458c14399e7834537ea698f0508e85a3f4e817fa,2025-03-18T15:15:46.897000 +CVE-2024-11481,0,1,ac58101cef49a7271bab73e87be96ddd197b7fb4ffb1cfaf762aeb2f4750f9bd,2025-10-28T18:37:08.327000 +CVE-2024-11482,0,1,539526bed88a79a1f05acb9f635b1d2ac1dcb52f9788cfcfb7ec6b4c87d3c4de,2025-10-28T18:34:25.197000 CVE-2024-11483,0,0,32b38db9518e8939d03a454ab14c476cd7f841536222995cb659679bfca30e6e,2024-12-18T04:15:07.210000 CVE-2024-11484,0,0,6d511a2f14fa9305d0bed2d13714e44bc5ef166aa5f282cff940fc24297d1bb9,2024-11-23T01:07:09.537000 CVE-2024-11485,0,0,706658d9aa6d2788ae1cff8275e450660f7556b8da3e80cf0e36a3a63248966b,2024-11-23T01:12:38.790000 @@ -250562,7 +250562,7 @@ CVE-2024-13594,0,0,e40694f60357c551d50cfd64c32b62fc5a068d57b870210e0ac9e99e736df CVE-2024-13595,0,0,0af37cc42779bfca530d3961d770211d9305aca9c7ecdc98a5bd6399b4365465,2025-02-21T18:11:08.257000 CVE-2024-13596,0,0,2b347cb4a79836e676774e7c831f562b3de9868f3b716c19ca500dd58b6901ef,2025-01-31T18:16:35.347000 CVE-2024-13597,0,0,f2f3052ed9b48e5adbd1969b386ed5b49b37ab884c9b35b3746cb48d340c5c37,2025-04-15T18:39:27.967000 -CVE-2024-13598,0,0,9b3b7c1f2a6207d2a4672bf1b57c193be0312f4b85cd749c212ff6dfbb7cc07a,2025-04-15T18:39:27.967000 +CVE-2024-13598,0,1,ea5c9198fb978b36fde1d54fea6a8ec25649d32cdcd3ebbdf8a86e5e347842f7,2025-10-28T17:11:46.363000 CVE-2024-13599,0,0,03405f2c3d79b505fbb84b1ff3dea79fdc81e050ef9a41f4a5537eddbfaf081d,2025-02-04T18:13:20.930000 CVE-2024-1360,0,0,d34fec545a10bf09bb924f3a0696da0f2401b54143d8aefeb9f97ea01bb8486a,2025-02-05T21:46:19.363000 CVE-2024-13600,0,0,484c9129acb282fae32ab7c653ddfde69cea1c6dd837845606bbf7ace7ea91d5,2025-02-24T15:56:30.290000 @@ -259448,7 +259448,7 @@ CVE-2024-30109,0,0,f398dc39ea91a891160e41c94a8d91191de5c1778858064f5f7eec4d35313 CVE-2024-3011,0,0,6f262e8ea06e81b422fbf2ef182a5abfcf04cc4d3f29ec3ae8393d79ddb147f7,2025-01-15T18:24:46.023000 CVE-2024-30110,0,0,4357e0a8267fa69179c309a48185413a1f7ac7b3a98d64633dcaeb17d6f4880d,2024-11-21T09:11:17.260000 CVE-2024-30111,0,0,7fa6ee436147c9a5f2b622eaef8c3c37388168c8b1c68c49c86620590d16329c,2024-11-21T09:11:17.383000 -CVE-2024-30112,0,0,892f3cc5c9438fc10859c8ea3733520f6ed6a9407e8d9b2619f0bd8183567309,2024-11-21T09:11:17.520000 +CVE-2024-30112,0,1,7ce9648c75b6ea7995e318ac875b575a83bc391a60b7798c90a66e511fd5019e,2025-10-28T18:53:09.860000 CVE-2024-30113,0,0,a9ba3634da31ee0084597d327f1a34bedddbc32f1b9876d8320baa457d90dbf6,2025-04-29T13:52:28.490000 CVE-2024-30114,0,0,cf2563c04b21d2fb86e894c6087290dc9dc81b16798b1feef73584c3db4bf57e,2025-04-29T13:52:28.490000 CVE-2024-30115,0,0,c24ccd75e4dba3df4324850ec2cf1536f618919392114c18efc7573776b89973,2025-05-02T13:53:40.163000 @@ -261488,7 +261488,7 @@ CVE-2024-32728,0,0,81caa7a89bf8532b35bdcaed4aab1a08873f5292d326962ea6bfb888dbfd7 CVE-2024-3273,0,0,892036ed52c9cd9d795ba6a5942129c5f038abfd56b5cbc1237e3a6584c77c97,2025-10-21T23:16:32.770000 CVE-2024-32730,0,0,695fe6159fd605a6845d16b78c3f6855eef5716afa3f795f725476c7daf05e8f,2024-11-21T09:15:35.087000 CVE-2024-32731,0,0,69cb7dd2c9b2dd11f893852362754456797fadd3be950b10a4aa67de88f5cb27,2024-11-21T09:15:35.287000 -CVE-2024-32732,0,0,94da7b6f1e682b447047764544979e0382d7cc9f18730135907a96c7b4f1f04c,2024-12-10T01:15:05.130000 +CVE-2024-32732,0,1,ab3d3bf13b01fa8d0749f4503fe1e7898ef248f48e82393fa2b8d4e1b6f59d2e,2025-10-28T18:29:49.757000 CVE-2024-32733,0,0,5597a6e2c7884a2a3a07513fd6db9896548f5937bc0cc925de3838f3927d04fb,2024-11-21T09:15:35.440000 CVE-2024-32735,0,0,942223c0abf1a5f70fadc40144dcf7c0cd6a00b2b31d0b09af42d049c2df083b,2025-10-23T12:13:36.923000 CVE-2024-32736,0,0,467e08433601f293d2244b2e84694ce479d861acbe189dc819a16f81e5ad51fb,2025-10-23T12:14:01.773000 @@ -262340,7 +262340,7 @@ CVE-2024-3388,0,0,e9b6f72b0b1c0b7f2c418e35fbf58cf2690eb64e09bf5e3388b48417000ae3 CVE-2024-33880,0,0,825b5ab6fbac29f3c9af4fbcb088a861697801ad34dbc244a2ec5b7e38730179,2025-03-19T18:15:20.963000 CVE-2024-33881,0,0,c1b886fc16abf7aae010d3cd0b6df126ac4a7dacff52bac3f012a72388bd5eb6,2024-11-21T09:17:40.110000 CVE-2024-33883,0,0,a60b6dbe01d0df4525fad217549abc289e2dc3142ec07f81c8d9b45c0506b159,2024-11-21T09:17:40.303000 -CVE-2024-33891,0,0,d3a0fa3c961607751d7f2cbc49584300eb26598b5f722cdfbd84446077ac6950,2025-02-12T15:15:14.827000 +CVE-2024-33891,0,1,fa681fc0efc22e3805e5f7e7645751fa597b4722eba9a2403ce6fb30ad08484c,2025-10-28T18:50:31.543000 CVE-2024-33892,0,0,f21b90c720809376ffb3c9eecbc31f204d7c233378324abc8dff77b0ef47f349,2024-09-03T19:18:42.870000 CVE-2024-33893,0,0,a9035f1be92e93d5c09f50566b3aa661370e6c7e813861ada45e03598f96018f,2024-11-21T09:17:40.830000 CVE-2024-33894,0,0,0843b1e9a7fad862e1cf65eecc22aecf6a783f4ac948c0c0573dec06aa6cca71,2025-06-20T18:10:12.833000 @@ -265893,7 +265893,7 @@ CVE-2024-38221,0,0,bb83ad0be93030fce8f54b42129a35f39a5287db7c91494a631b23f71a68e CVE-2024-38222,0,0,2b1c259725362c47f600f6184e2f70c2f75d54118db7a40d322bb59707a5f017,2024-09-18T19:01:22.527000 CVE-2024-38223,0,0,d6637ad23ce1d694b9bd21c0cc008c32451d5652ea80748307c4cc57fc5ddb42,2024-08-15T20:18:28.240000 CVE-2024-38225,0,0,c1a01d4b464a6535df5902e771d809b6b8879f0806a0253e3e886357b523c0c4,2024-09-17T16:58:39.197000 -CVE-2024-38226,0,1,88b66e622f6f6923d373b3131b6d7b15d1ee5959e6ab2cc7741853c5db71a3d7,2025-10-28T15:51:26.033000 +CVE-2024-38226,0,0,88b66e622f6f6923d373b3131b6d7b15d1ee5959e6ab2cc7741853c5db71a3d7,2025-10-28T15:51:26.033000 CVE-2024-38227,0,0,ed444d1f838f77562d732188fe9b348de21aaf3ad19e321e63fddaeac3f01dcf,2024-09-17T16:57:39.267000 CVE-2024-38228,0,0,feb9b32b0d8d9738fc74baeae4c5aec6462e15dea6f13d42f8eb897a16369095,2024-09-17T16:57:54.950000 CVE-2024-38229,0,0,13848dfea5a4d7a23fa920aed6ed95a8e545b603c7f1ea515fe913e3d40780ae,2025-05-06T15:16:00.563000 @@ -267043,11 +267043,11 @@ CVE-2024-39591,0,0,0dbae6655f7d6ea0751359413949924baa4989deafaee85e09b5d6fd92418 CVE-2024-39592,0,0,84980910fe04f7eb1e57f9c91ef14d04395c0fa68421d8a5cc24670e988e7ec0,2024-11-21T09:28:04.573000 CVE-2024-39593,0,0,ef400b1e6103802a5e581ac335b2821288ef1760447b1ce4df2a347d267fd50b,2024-11-21T09:28:04.730000 CVE-2024-39594,0,0,493483ad05696b25a001b35b52c19f8eca837fe49806ff5231210a9e981abd45,2024-11-21T09:28:04.880000 -CVE-2024-39595,0,0,3384370c9203338f6e94a4baa00b5e1dea0c754480e7c0c1502c67808a5839a5,2024-11-21T09:28:05.007000 +CVE-2024-39595,0,1,a269743c181e42fa8c36dec09599a4fc8df1585d1588fcb19af049057a8481b1,2025-10-28T18:41:39.603000 CVE-2024-39596,0,0,893e1c9fce39419ef3b13056c373b857a964f4b4252465634523bae4ccab670e,2024-11-21T09:28:05.147000 CVE-2024-39597,0,0,aaae11edbe6c14ce3b088d5cad1fed5dfbc4f7414258f0217398431b4338a6e0,2024-11-21T09:28:05.280000 CVE-2024-39598,0,0,0c2f73f732e09887cba0af0194e5f3c77ef9d94c00b244fcde4b41869555362e,2024-11-21T09:28:05.417000 -CVE-2024-39599,0,0,a7e50a363c93f95cbc26ba0c1cd1a86ed31d1653cff5acb4f80d4cbd426ab652,2024-11-21T09:28:05.570000 +CVE-2024-39599,0,1,41fc3c4f733b26c1822ec13da079946a7b7908b92bf550251942bdbf7652d7e4,2025-10-28T18:40:44.357000 CVE-2024-3960,0,0,f78b350330ef2aa8e184aa42dc3e2b8fecd44be0287b3b28de5f42fa6c8b0468,2025-07-05T23:15:23.657000 CVE-2024-39600,0,0,bab37b1cfc6f04e50d665176f6ef9cb8b15433725cdd4ec6b18fa3cf42b0a5a5,2025-01-22T18:33:47.870000 CVE-2024-39601,0,0,786dbb2e54a3e5322742fbd60d4e4ccc8386349d1e804557c642ec92e28b4a72,2024-11-21T09:28:05.847000 @@ -268950,7 +268950,7 @@ CVE-2024-42184,0,0,5f8d6031ff6e1d2b9cf501cfa7bc31cc24f36cb6249d483eb16882ece8b27 CVE-2024-42185,0,0,4fcca28bd46f144c3c51b1a10d7ee9632532ab1dfa9a2d83e50eecb696162fed,2025-01-23T03:15:08.860000 CVE-2024-42186,0,0,184581ed60eb1e6c21e00c7e72f572fc755aec6b14811d01de5d14632d8094ce,2025-01-23T03:15:08.983000 CVE-2024-42187,0,0,1a7e90ec8fd6111568607e7fe4efa4740b10d0987e11092bcc048a6df4194471,2025-01-23T03:15:09.103000 -CVE-2024-42188,0,0,a8278cfe50e3ca68bde755bed653483d11589c1acd3e94c1e7362476b4ce136e,2024-11-15T13:58:08.913000 +CVE-2024-42188,0,1,3c349f5efa199f01b099174ed8654fa0c6606298790032fd711eb300317ad29e,2025-10-28T18:45:14.013000 CVE-2024-42189,0,0,684cdde8778f3442eb0f7a694fbe56f647b471254da71c3c48da3565fb4322d4,2025-10-09T19:21:57.117000 CVE-2024-4219,0,0,cd28361343cc861bde40c0bbbee1aabb101ed013946c5589d3ba0dabbead402f,2024-11-21T09:42:24.783000 CVE-2024-42190,0,0,69bf56bf943618d9e5acf97972b92eed4af49432b9def375a44ed1764e72d3ff,2025-05-30T16:31:03.107000 @@ -271378,7 +271378,7 @@ CVE-2024-45278,0,0,806f10f7c91a8d829227f4ae7cff97fcfb08c132d7f8de70a7c88c5c57d64 CVE-2024-45279,0,0,03d470f5225a3376d2a8d81ee375ba02b76c658c5da8664ce98a2cd2e84e2841,2024-09-10T12:09:50.377000 CVE-2024-4528,0,0,c6a3d931710a0440ade6d973aa8fbc43088894a315c3fa9a05ff0e3e4796a0cd,2025-02-10T16:09:57.873000 CVE-2024-45280,0,0,8e648f9bb259752545b019f808bbd85e547f5f51a17a98825f53432660d5552d,2024-09-10T12:09:50.377000 -CVE-2024-45281,0,0,a2ee21e90149a8713e6dfe66c3996b5a1dada605aac21ebbed6f994abb69bf5c,2024-09-10T12:09:50.377000 +CVE-2024-45281,0,1,4a574606c7ab0c1bc496fe6c8d9e23c4b3dd7609b87e3b5787512d9ba723fd1c,2025-10-28T18:40:23.553000 CVE-2024-45282,0,0,9c11fbf69580054e2287480861efa4b91389bff4c91b0d76b53802fd410c0e7e,2024-11-14T17:56:17.007000 CVE-2024-45283,0,0,017bc8c260e052282051e86d8bae7c6ae19b41f30f731bcf9a6bd8113b9b6e44,2024-09-10T12:09:50.377000 CVE-2024-45284,0,0,4b2c28e0bf255a7dccd6ba8549e34bf9aa0f560258138b31e76fe5271c9d5857,2024-09-10T12:09:50.377000 @@ -274617,11 +274617,11 @@ CVE-2024-49701,0,0,faa8cd67d7f87e8b700116e3ea01c26a0bace35a674e83df64e802c479757 CVE-2024-49702,0,0,95504b65313eac7b0c032b66b56870b8b510aa5556c8e61dadfd6a9c41944713,2024-11-08T14:32:56.010000 CVE-2024-49703,0,0,773f468dd20b89d6b077ffb05058547737a4c510a41e2a52930200811683b9b8,2024-10-25T12:56:07.750000 CVE-2024-49704,0,0,53e0ddf4c3ec57125f7e163acf7959921e5634e4438faab081bcfc397dd19436,2024-12-10T14:30:44.573000 -CVE-2024-49705,0,0,92b36862f954bc1fb3926f0c83dd32f659e32996809d232f51c6bd8a5324927d,2025-04-15T18:39:27.967000 -CVE-2024-49706,0,0,17a12f45af4406edb01b1b164656fa44a91de4f37d99cc637a3de2729e1289de,2025-04-15T18:39:27.967000 -CVE-2024-49707,0,0,afbcf7aa7206f742d6cabf6fe0088d6f9030506216827341489b8d88c50a8a41,2025-04-15T18:39:27.967000 -CVE-2024-49708,0,0,e3610b0af295a39fe1bc87ed97a16f38bf87f70731690caeaf83bd06d2221c3b,2025-04-15T18:39:27.967000 -CVE-2024-49709,0,0,3a2680a0da00d306b145da502df1f19edfd5cbb232fd6373c49e52a235ab1be7,2025-04-15T18:39:27.967000 +CVE-2024-49705,0,1,77d0f149f4ef4e0293ee9f0344f4334a76613d821cfb9dd12bb42437a08fc868,2025-10-28T17:11:06.027000 +CVE-2024-49706,0,1,c915e3c09035aeec05b94f93dc121b6a36c1a9049d648362095b5c2d1b6a140b,2025-10-28T17:10:03.333000 +CVE-2024-49707,0,1,6735b03fd833d8290a09d700267fdab22e2be3c7e831896a6490be7785776bf3,2025-10-28T17:09:12.577000 +CVE-2024-49708,0,1,41647ffe8f39aa375f0c4fadfc22e6957bab42baa3a081145fc18917ff3a3803,2025-10-28T17:08:15.010000 +CVE-2024-49709,0,1,aba06bfc41090d7886ce8c2ee8f255214bea7d4cdcfa4be958c8c14b4ef343dd,2025-10-28T17:07:50.510000 CVE-2024-4971,0,0,17f65e33f654be41e85b2c190603b91b92e7c1a1f8fa7f8e99556cdd76507595,2025-01-08T19:28:26.847000 CVE-2024-49714,0,0,251c213efb574d4cd065558251a4524793dc9e4d10d11962f0ea6664c1da61b6,2025-09-05T19:14:50.013000 CVE-2024-4972,0,0,43bdd225cdcbd9a9a4620ce805328bc918966049d5b1be691ed85664aa743f88,2025-02-18T18:38:56.967000 @@ -277951,7 +277951,7 @@ CVE-2024-53969,0,0,3c3c822000aec988f3935dbf7797b14b50fb9236b3a75502b30bfcc3923c1 CVE-2024-5397,0,0,e240e353d0c3a2a1734a4b7c92d19485fc4c6abad443fc8646294b9e529895fe,2025-02-10T16:20:41.830000 CVE-2024-53970,0,0,20958d58eb9515921590df62ce8e737c32b8958b1107c3bfc1e974aee7c7d34a,2025-04-14T14:55:33.210000 CVE-2024-53974,0,0,52052a572e52b9dbc089a516bde1b3fe92dc22cc036b47b932527a527df79bc8,2025-03-04T14:04:30.393000 -CVE-2024-53975,0,1,afa4442e8e01f8be20ea54b561576cfbc9e0118e1ecf53d82cae53bf57e438a0,2025-10-28T15:16:07.283000 +CVE-2024-53975,0,0,afa4442e8e01f8be20ea54b561576cfbc9e0118e1ecf53d82cae53bf57e438a0,2025-10-28T15:16:07.283000 CVE-2024-53976,0,0,3c4e290755b1122ca5eef12abc826a22f34cb5f7c1451690e25b02ebe35b73d5,2025-04-04T16:15:43.123000 CVE-2024-53977,0,0,2f7d14d786d37c0be3b1e52e51312637e5d5d5ce74028f4b7be6d93a3dc7aa73,2025-09-25T13:39:30.720000 CVE-2024-53979,0,0,172b408869a05417a1da8cf6907f79662a75490e703fbb88a760f582875697a1,2024-11-29T19:15:09.847000 @@ -280499,10 +280499,10 @@ CVE-2024-5809,0,0,c4b8b59104f068ec24124c9d818f6d627fb564dbf53494b008a39765c54f94 CVE-2024-58090,0,0,5d5a772ef85a7d7cf1764ffd3f4d817a84bbc6475cefed9abaaa898b75cace7a,2025-03-27T16:45:12.210000 CVE-2024-58091,0,0,4a24270fb8e7402824e05058a50824e98e1ba76b55577166e787330aef5b3765,2025-07-06T10:15:23.140000 CVE-2024-58092,0,0,53f31227bd07354c6c789ed76152b430dbc15e4ab3c96f0045d950ec318a2250,2025-04-16T13:25:37.340000 -CVE-2024-58093,0,0,1dce1cbb1b987bfeceb3bcde86f4b14a6277cdddfd4833b89050cb09c1123b72,2025-04-17T20:22:16.240000 -CVE-2024-58094,0,0,8782554bc1cb811541a04fd5d44adc0e07d4f24c9b0379c52881ede96a6e3c4d,2025-04-17T20:22:16.240000 -CVE-2024-58095,0,0,5a11b1a1572d7f73207595e48df39b1cbc4887f1b9dadbb6561746f204688aae,2025-04-17T20:22:16.240000 -CVE-2024-58096,0,0,e3cf19ba0049ded05d28f9f4eee1d254b368b8d7f24ce5837d77302ac8b64350,2025-04-17T20:22:16.240000 +CVE-2024-58093,0,1,6f4b5aa399a522f32e03865095447b095c48e9d4104ebe512fed41479b79f353,2025-10-28T18:53:45.890000 +CVE-2024-58094,0,1,35fd3a9fb7c87a2c86d2c3450e065bfb99ea761096bbe6bf300be8fa572a4ee0,2025-10-28T18:54:50.797000 +CVE-2024-58095,0,1,1fa03956d0abebc930ab5fcff7118ed9d43c4fd262a5cdc892851d94e546f5b3,2025-10-28T18:55:30.840000 +CVE-2024-58096,0,1,b43905e9773fcf33444cd1b89a234ef877c5fab7488339cbcd214430217ebd16,2025-10-28T18:55:59.950000 CVE-2024-58097,0,0,35e53f119c904718301af12a5c1a075c592ab441c23dac2bd60c2964a675b239,2025-10-01T17:15:38.047000 CVE-2024-58098,0,0,c372a96cb26edf396e943b33ee70ac0e0cb1d6e35fed8dc8526f192829a873f0,2025-05-09T08:15:18.823000 CVE-2024-58099,0,0,ba3190772c1692c1a8315545370dc8e0abb34c1fc08b6036313bcdcbbc8417a9,2025-10-01T17:15:38.293000 @@ -286718,7 +286718,7 @@ CVE-2025-11615,0,0,8d8d1d4f2f815d982a1f2f0cbcc77e1dbb63fd0c0b6dcd742fe854c4a266d CVE-2025-11616,0,0,5528f9ce8e0b67dfa809071b3c1e8c5401f1a2d296913bcdb3b288f340e496e9,2025-10-14T19:36:59.730000 CVE-2025-11617,0,0,ac5f0047ac750ce0fe7049f6250a0135e683e5bdd0d6a5dfc5b6aacf9e92b105,2025-10-14T19:36:59.730000 CVE-2025-11618,0,0,562991e842b44e5c9cf7d0d6ddc920ebceee86af658cfd0019edf3e5d37d7c3a,2025-10-14T19:36:59.730000 -CVE-2025-11619,0,1,3535ffe6a567a68e4826cad825401ccded11e64aee2e9061023dfca5229a864c,2025-10-28T15:21:56.833000 +CVE-2025-11619,0,0,3535ffe6a567a68e4826cad825401ccded11e64aee2e9061023dfca5229a864c,2025-10-28T15:21:56.833000 CVE-2025-1162,0,0,878369ed5b81b79fe348922d75159a1b4747b45bc7f97da2088e438208da00bd,2025-05-28T17:22:59.643000 CVE-2025-11621,0,0,4865d66a7d0f9cc1997dce8379d5790d0d2e7d13e13d672a5ca516b4c4a1295f,2025-10-27T13:20:15.637000 CVE-2025-11622,0,0,bd2a60fb82efb04aaa6b43ad95db5d2c4c79f2016fdaf810c7ab1ffbd43e4b84,2025-10-15T18:56:04.120000 @@ -286976,16 +286976,16 @@ CVE-2025-1217,0,0,775b5b40e99ed6cb30df08cb80664125bba20f68dd952ce028f26b376f222b CVE-2025-12176,0,0,1b85eb8c299767559202335f1db9f652666c6dbf97e1bb63d7a0b92c37e70e7b,2025-10-27T13:20:15.637000 CVE-2025-1219,0,0,e17024aa809e518546045f8224c0a9988066d9d47c6a0948c6a958a7960baa9b,2025-05-23T14:15:25.950000 CVE-2025-12194,0,0,503ab32aacc6da9a69fd5ee71259c1a210a74dff053210934096081adeb4809c,2025-10-27T13:20:15.637000 -CVE-2025-12198,0,1,952bd93a6fa88a9aa4c6bfa108a85d15798fad19a45767d1ad523882e8f905be,2025-10-28T16:15:36.050000 +CVE-2025-12198,0,0,952bd93a6fa88a9aa4c6bfa108a85d15798fad19a45767d1ad523882e8f905be,2025-10-28T16:15:36.050000 CVE-2025-12199,0,0,0cbcf1e0f4c2e59e578e0a8b5da78605aa953b8f51d5d33f19ef3fdd63593016,2025-10-28T02:15:35.347000 CVE-2025-1220,0,0,9e4265af59220536bb5ee97f74958daa82931e91fc139da08f825358ebff114a,2025-07-22T17:01:01.840000 CVE-2025-12200,0,0,9f4dd590e38fd6d60f720983d3164f776db8edef88dc836dd510cdfc3507e705,2025-10-28T02:15:35.483000 CVE-2025-12201,0,0,5e727d2ed361c301adf85f4b2ac4eb6ec7128fcf22243bef84fc054b2676636d,2025-10-27T13:19:49.063000 CVE-2025-12202,0,0,57b46d767118140cd3ff33bb929ee7e3201cf41137b2f013b65707bd24f7aeeb,2025-10-27T13:19:49.063000 CVE-2025-12203,0,0,f500ba8ad30c0d4e57911cf82e4cce4b4c5dfadfd2d9f200aff4cad76e770064,2025-10-27T13:19:49.063000 -CVE-2025-12204,0,1,243536fc88878da57a6e1eb06ccff9993cad1a0d8f3967199d901d76889af4c3,2025-10-28T15:14:28.460000 -CVE-2025-12205,0,1,6bb938356cdc3688afc9f4f0bced8fd0032863666347534f365d7378644573a6,2025-10-28T15:13:01.077000 -CVE-2025-12206,0,1,3f4bc2377e212eba97e332665fd3c24f3cdcd3fe108ce65ed46d907ee79c82c0,2025-10-28T15:05:20.100000 +CVE-2025-12204,0,0,243536fc88878da57a6e1eb06ccff9993cad1a0d8f3967199d901d76889af4c3,2025-10-28T15:14:28.460000 +CVE-2025-12205,0,0,6bb938356cdc3688afc9f4f0bced8fd0032863666347534f365d7378644573a6,2025-10-28T15:13:01.077000 +CVE-2025-12206,0,0,3f4bc2377e212eba97e332665fd3c24f3cdcd3fe108ce65ed46d907ee79c82c0,2025-10-28T15:05:20.100000 CVE-2025-12207,0,0,68bba5466cc35c8766170bc9706ed4166e78ac9f58adbb41b60d916ff51c236b,2025-10-28T14:55:52.173000 CVE-2025-12208,0,0,0cf34a13409dc5e9c350db0631af6ec95af3568b854ba42ab94bf89995a74928,2025-10-28T14:42:53.383000 CVE-2025-12209,0,0,2aa863b4f220303556ad6b504b208560c3d09f8e0f8fdfae3ef239d353dbf190,2025-10-28T14:34:42.157000 @@ -287106,10 +287106,10 @@ CVE-2025-12312,0,0,465cb1fa7f8b31a1aeeda8aca37d77774fb19163779de05c8d26619aee5d6 CVE-2025-12313,0,0,34ccf876447b415da59458d69f5a8af9e8f1433c67e1c03f8779c6daee46e3f3,2025-10-27T20:15:52.553000 CVE-2025-12314,0,0,04793a2eedbe1f8ace0bb06e55806ff0ca5d2b4ab350fbde52fb75a05df5e941,2025-10-27T20:15:52.723000 CVE-2025-12315,0,0,5b03ca1b4fdfc1a4c66887f6d181d2243afec8bc9d6555a010cc7a92e858b2c7,2025-10-27T20:15:52.897000 -CVE-2025-12316,0,1,ad45b8da9cde5502f6a9d45a42c252606523983e3746063f5346c87521986b04,2025-10-28T15:16:09.017000 +CVE-2025-12316,0,0,ad45b8da9cde5502f6a9d45a42c252606523983e3746063f5346c87521986b04,2025-10-28T15:16:09.017000 CVE-2025-1232,0,0,fcd0ac59c3c7caf2407e342073ec1e90203a50961ca0b407b3ff0599be277293,2025-05-09T12:00:30.697000 -CVE-2025-12322,0,1,8f96abac16df108fd1ec6060fb1205a018f06a77e67146a24999edb42feac382,2025-10-28T15:16:09.443000 -CVE-2025-12325,0,1,d97945ab1e9226167fa7ca9a87e36952b0f4365e0d7e414a27f0ab4c940d0b75,2025-10-28T15:16:09.573000 +CVE-2025-12322,0,0,8f96abac16df108fd1ec6060fb1205a018f06a77e67146a24999edb42feac382,2025-10-28T15:16:09.443000 +CVE-2025-12325,0,0,d97945ab1e9226167fa7ca9a87e36952b0f4365e0d7e414a27f0ab4c940d0b75,2025-10-28T15:16:09.573000 CVE-2025-12326,0,0,cad4cbd85eba97dac6d69bcf38dee01bf467ff8496544e05fe07a2b5a97feac2,2025-10-27T21:15:36.520000 CVE-2025-12327,0,0,0b10ea96b17266c7a309b41a078c78bb58de3e2409eadd62148facb4ed69547c,2025-10-27T21:15:36.713000 CVE-2025-12328,0,0,fe4170905ebdee715e79246a02485cffe3d00f27a656ee968919133eaa62ed42,2025-10-27T22:15:39.947000 @@ -287141,6 +287141,7 @@ CVE-2025-12380,0,0,d347874ae8812451482f65d25df0354cc2521c8c96576ed9f1f27485dd1ee CVE-2025-1239,0,0,6187788ffe5fd6000cc24d081f477dcae5b0ef59871d160b3ff23ee25b818501,2025-02-14T14:15:32.687000 CVE-2025-12390,0,0,a9ed5add12fa03d6c2f31f5ef80863558bdf2e863a3a58f0289bb08fb0410539,2025-10-28T14:15:57.980000 CVE-2025-1240,0,0,9207c023a2eb5247a0aa25e5fc1282e1ffb9334849a8245d9bb07761a338e654,2025-08-18T18:14:05.933000 +CVE-2025-12422,1,1,9af04f18aba21311c5930ab3eaa5745541ad79c96884ab702f93c851911332b4,2025-10-28T18:15:36.697000 CVE-2025-1243,0,0,b36908327b1b41fa664c4a39c71934592fd1d75bcc40ba67f7d64ed64955da7e,2025-02-12T01:15:09.073000 CVE-2025-1244,0,0,ca7dde03c53f2f538c0b12fb599e84ae66a426ff6488b7e67f4989aba1f7a6f7,2025-03-13T14:15:34.977000 CVE-2025-1245,0,0,02f6531ee412acf536871fa74be895340813b85f3805e0a3e6f8a053107da143,2025-05-16T14:42:18.700000 @@ -288452,7 +288453,7 @@ CVE-2025-20992,0,0,9afb3e2c523b70b4d88069d24ee793f31c569d16948df8b056dce0648c6bd CVE-2025-20993,0,0,2f2e05380962f23c2442bc279bb02edf00e9574fe76d3c8cb0266c25828d2475,2025-06-04T14:54:33.783000 CVE-2025-20994,0,0,9433fa250a990918bc6b86efd5f43f4cb8ee99e0799546de1201054f6acdb498,2025-06-04T14:54:33.783000 CVE-2025-20995,0,0,b0e261ba12a516e344c63e2844a9aedbf277b62990580f34723653f536b23d63,2025-06-04T14:54:33.783000 -CVE-2025-20996,0,0,2997e4a5961993fb94aabc2509dc00cf8844c2ce85f291a3f0f1326b812fee1f,2025-06-04T14:54:33.783000 +CVE-2025-20996,0,1,a37413d8d1e0a695131032d5bd98fcc123f8799f432c4d6f46abec45e1c7e61b,2025-10-28T18:54:52.860000 CVE-2025-20997,0,0,7749bee41e6114367ebfcae281064b4c8c2aa1d8738eaf021d41f8e03e7efb67,2025-07-08T16:18:14.207000 CVE-2025-20998,0,0,96dd704d4817adb47a9553c3e9a582472e044a00f2f43069d4e0a6f12961f6e8,2025-07-08T16:18:14.207000 CVE-2025-20999,0,0,256bba0cfa09df5c8191234920c3b2f4a55bcd9a86a05e98d3eed951d63e02bc,2025-07-14T18:11:50.003000 @@ -288520,13 +288521,13 @@ CVE-2025-21055,0,0,51768053b6beaa0604c7ea8375c15951dd3b697e083ac15761e49196b6745 CVE-2025-21056,0,0,6a4aaa5b749814b2564b0f46ce4f8866c765af9a4bd6c1cb2523f239d8620241,2025-09-26T14:32:53.583000 CVE-2025-21057,0,0,dff9ad9e3d64bf3716a1ac8215c5f5e763699f9aaf367d4430ffae993bef8144,2025-10-20T18:42:06.587000 CVE-2025-21058,0,0,19f83389b321a0728273f21808d181ca27f7ab1ee23935f5ee87b91d926427a1,2025-10-14T19:37:28.107000 -CVE-2025-21059,0,1,3bca031714c86be8d8d20295236a44d79591455e4151d50574488bc83aaf9f8f,2025-10-28T15:44:30.963000 +CVE-2025-21059,0,0,3bca031714c86be8d8d20295236a44d79591455e4151d50574488bc83aaf9f8f,2025-10-28T15:44:30.963000 CVE-2025-2106,0,0,12e6a433d251be1a7b8caba06a5be90b0fd1db509f397a8d7d7499b4e464efdf,2025-03-13T02:15:13.097000 -CVE-2025-21060,0,1,6dac7a6125442fccc88a87fe28a47a7735353900144a1a29882f2ac2bbaf57dc,2025-10-28T15:41:26.127000 -CVE-2025-21061,0,1,3d0844858630ca2066261f291deb92abae9c4450f527233958f4e6f401a3609c,2025-10-28T15:40:58.597000 -CVE-2025-21062,0,1,e97c0b238aabbdb4a5d29a4d4f938fdcadbd91678219f48e524d7ce5b668da39,2025-10-28T15:39:51.143000 +CVE-2025-21060,0,0,6dac7a6125442fccc88a87fe28a47a7735353900144a1a29882f2ac2bbaf57dc,2025-10-28T15:41:26.127000 +CVE-2025-21061,0,0,3d0844858630ca2066261f291deb92abae9c4450f527233958f4e6f401a3609c,2025-10-28T15:40:58.597000 +CVE-2025-21062,0,0,e97c0b238aabbdb4a5d29a4d4f938fdcadbd91678219f48e524d7ce5b668da39,2025-10-28T15:39:51.143000 CVE-2025-21063,0,0,03c1fdc2d045d0d787aad96bc68bf8f5ffcee770df7757e587d768ac8e5d441d,2025-10-14T19:37:28.107000 -CVE-2025-21064,0,1,f7783f3b4c7d060a44ef65ca6176f4f9e202dd06787342f884f80bf53ecd5640,2025-10-28T15:35:55.367000 +CVE-2025-21064,0,0,f7783f3b4c7d060a44ef65ca6176f4f9e202dd06787342f884f80bf53ecd5640,2025-10-28T15:35:55.367000 CVE-2025-21065,0,0,e635f6d4908e44fbe019c47c0c6f8a114270fbe9ba468f59e50e874ceefa6a12,2025-10-14T19:37:28.107000 CVE-2025-21066,0,0,17085878597d5fb3abdbc0b0855c67f931ab549dbd591d5b0df963a66162adc1,2025-10-16T18:41:57.167000 CVE-2025-21067,0,0,a4f6a0816b8806a5eab3fcd5dd587d24925c5ba13ad92b63a3a7df10174b4dbe,2025-10-16T18:41:14.660000 @@ -289489,9 +289490,9 @@ CVE-2025-21989,0,0,e86b04438e333528cd397f897626ee424331f6dbfef670f4db41dcfd1921d CVE-2025-2199,0,0,6cca999d1fd02ccdc948cc3c785871dcf520469b36ed9558917218ebe5cdd745,2025-03-17T10:15:16.243000 CVE-2025-21990,0,0,35ab340eeaac9572089edd5f3f2db7b2dadda4a63ce6492499ceaecd6ced89bd,2025-10-01T18:15:42.070000 CVE-2025-21991,0,0,06ada0536a1dc39eed5c30f5b8a238006e264699d8903b5a478ecf4045682467,2025-10-01T18:15:42.247000 -CVE-2025-21992,0,0,15562f59303a19ec99d0304ad06949423b421a45c8bc31ef39284adf4b1d9575,2025-04-10T13:15:49.053000 +CVE-2025-21992,0,1,c2a4b2d31d84dc9eee7deb0f906a7c1c0e6b80abc28f71ceab3e94d7b8e8245d,2025-10-28T18:02:07.080000 CVE-2025-21993,0,0,c07a634456b8b6a6222e1c7d7a4476289869db4f46328219646878217f7245f5,2025-10-01T18:15:42.427000 -CVE-2025-21994,0,0,fb9048208441dce66026c77200fbc30f31fbf21a4c08fe3e825028547f121380,2025-04-10T13:15:49.333000 +CVE-2025-21994,0,1,f646fa57b7377bb80d97feda3b281397b814ac4bb5f95542a36ccbb0a7eb8250,2025-10-28T17:19:48.387000 CVE-2025-21995,0,0,028af01cd42e254de5a2079f2deab31d547496da29f9258bb3c6919f3f8674e1,2025-10-01T19:15:34.783000 CVE-2025-21996,0,0,cf8e7451654c26c977cfbabce91cf3e148a4b8996241a2e8a2a3ae3af7aa7c16,2025-10-01T19:15:34.960000 CVE-2025-21997,0,0,da73d4a0b55847d90c6268b2bfaf5701b16d770e80a656191ae76e271477c491,2025-10-01T18:15:42.610000 @@ -289506,27 +289507,27 @@ CVE-2025-22004,0,0,db13fec2a01410c78bea8ecc95c052479e55452fee80a7f7ef15af13236dd CVE-2025-22005,0,0,582b1279e28a4005734d07aaa213a44fb9d141f2cf76f7ae79a094aafcb446ee,2025-10-01T17:15:41.333000 CVE-2025-22006,0,0,cb6c2301bccf5fd057ccd59a1f2e65571d1f00635c0f7372d71396c87a49f5a4,2025-10-01T17:15:41.583000 CVE-2025-22007,0,0,1fc741c09d0a7307014e4b7926efc838d259f5fef90ae6115a42a6006490e6b6,2025-10-01T17:15:41.790000 -CVE-2025-22008,0,0,449f5eef7dd2bb75a7e41bddd73a59d3b022e061262f9ca3223183621379a233,2025-04-10T13:15:50.570000 +CVE-2025-22008,0,1,ba11fa00d3402ac1aa04b5dba27b3d22bbeeb8623408f8af2845893f31c8eb1a,2025-10-28T17:17:34.653000 CVE-2025-22009,0,0,bca24b9f8e7c03250e7e0c279eeb2acb2813f1fd007bfb8aae3fda75ba843d4e,2025-10-01T17:15:41.990000 CVE-2025-2201,0,0,2371e9549039387486019592f5bf6cd7cee4f08ab86a19044d07c960855c7b24,2025-03-17T10:15:16.543000 CVE-2025-22010,0,0,bdac999142019e0464835ba2c58bc0993611c3b3716f57cce8448da038080674,2025-04-10T13:15:50.687000 CVE-2025-22011,0,0,b288759e01447185f781f617bdcdb12d60d30f7034436e4b36fb169309436c91,2025-10-01T19:15:35.163000 CVE-2025-22012,0,0,54dce21ae263c84894f40aa95c59080450e9b5f540c64b3b540e5d20cc5bcea2,2025-10-01T17:15:42.227000 -CVE-2025-22013,0,0,c05b284e6bbb776ad1772396740f4d97285d57edadf404cc4f6ebc96ae232581,2025-05-02T07:15:59.113000 +CVE-2025-22013,0,1,f3102bcc191c514cbd400aa8b20245fef568a254a568b0d80a553124e8d57ba5,2025-10-28T17:16:03.533000 CVE-2025-22014,0,0,d0677bce9b40bf2440f1e3f05d26248d0f1a8e04e3af5766ae8663607da1e5dd,2025-04-10T13:15:50.823000 -CVE-2025-22015,0,0,76ef40b09e4f1cb899d4a2ab31f22c4f6d8c6e60d75140b0b3e5777f401c7fbf,2025-04-08T18:13:53.347000 -CVE-2025-22016,0,0,147b90da5e7863ebd9aa554a0d14ec0b4cb2770bdef3a66630422d63719c334c,2025-04-08T18:13:53.347000 -CVE-2025-22017,0,0,47242ca22d32729ade7b3f671002250e206d140a0d8f74e89394f4529c76da51,2025-04-08T18:13:53.347000 +CVE-2025-22015,0,1,a2a1c12a5ec702e35550d404551bb5474bb3622fa4d5cd829333c1f746110bab,2025-10-28T17:12:34.880000 +CVE-2025-22016,0,1,cb073d7b1774c30f4c46a01dbc4a3c2a55bb31b800f06cc77c76b8829670b862,2025-10-28T17:09:38.110000 +CVE-2025-22017,0,1,fb0e4d7bf4f1bf55c86b73e2ed054a4af8cb980f8b70e76219f852e42013e393,2025-10-28T17:08:48.157000 CVE-2025-22018,0,0,bde8b21968665d19d96fa828433b8130579048ebe1f961882f0c4ac9c156db8f,2025-10-01T17:15:42.460000 CVE-2025-22019,0,0,2b8021bfabee0e0b722fb14fb6aec87a083221969d94af586f8d3c6bee06c30b,2025-04-16T13:25:37.340000 CVE-2025-2202,0,0,cf0ba4cc9b924e183defbee63ce1af96a184cec0b7613a3c88b1e156bd38ec40,2025-03-17T11:15:37.970000 CVE-2025-22020,0,0,d13ad5f6c8e39c36e2372b25bf570cb79ee4cf8b0c866841785b092dfe8a597c,2025-10-01T17:15:42.703000 CVE-2025-22021,0,0,50dcca4c351194649965f94a413fda9ee418151203695e3f5f4cd0948f70e7dc,2025-04-16T13:25:37.340000 CVE-2025-22022,0,0,d8c6f627c0aae82db3664eacd01b3b108a7a98aa602b69d2dca32d890806e687,2025-04-16T13:25:37.340000 -CVE-2025-22023,0,0,3b6cd95ee61722f71d40c3efcbcb19a8146f1840e01fc126c70623b0dacf8288,2025-04-16T13:25:37.340000 +CVE-2025-22023,0,1,a380cf57c8a00578512859e45bd69520f081aba82998b5538ca0f0283b9708c0,2025-10-28T18:53:05.190000 CVE-2025-22024,0,0,1b93b6cc309489f05e559a074d48eb0dd7d13fc62daa4a6679d0d89ddb001d52,2025-10-01T17:15:42.923000 -CVE-2025-22025,0,0,1a53897a92fe3646a399b94874508d29d854ec5d7cd87a098a47c24d7f78eaed,2025-04-17T20:22:16.240000 -CVE-2025-22026,0,0,a774ace20e4789ff640367f4efb7e3a87d8331c14061e80b36413c109b4b7e2b,2025-04-20T09:15:13.753000 +CVE-2025-22025,0,1,f84fe8ba5fc85b0cd6511917d61b08bde1c652e2fe18f87dc4dde5fe4ea4e168,2025-10-28T18:56:17.393000 +CVE-2025-22026,0,1,49df5f039aadc9662b16eac2dc2dc7c5e1cb0203ebe41fd15ecfc1111e380e20,2025-10-28T18:57:06.603000 CVE-2025-22027,0,0,f937c6ea08120d8af7b633bce256bc77ba0964ed9874bb1164903054b6a5a03c,2025-10-01T17:15:43.117000 CVE-2025-22028,0,0,a131f1f27057b0414d743d256c28bb79a3307aa252527a8e5918237b635dbd3f,2025-05-02T07:15:59.497000 CVE-2025-22029,0,0,375b7d760e49f7f6e35afa2a053f915b8ee4873103a7b851d4c8f3aef1596ae2,2025-05-01T15:16:19.647000 @@ -293163,34 +293164,34 @@ CVE-2025-26349,0,0,4d94a2850559ddf665f3424cbf1b168d2f02f4167cf7f8f3c796cc53f1f9f CVE-2025-2635,0,0,05a339a5daf439bf16d42860ccd0d699935bf26928c44e9b502dbb2d9f6e35cd,2025-03-27T16:45:46.410000 CVE-2025-26350,0,0,62d678242e26e6d50dc3989a75a62171be9e20f1a2958c88cfe16730c158c936,2025-10-24T15:01:27.630000 CVE-2025-26351,0,0,eddff8fd8305441108903cb9c5148aa8dc197b84dc6e97a84ce434038420e128,2025-10-24T14:59:31.880000 -CVE-2025-26352,0,1,05d37afd7d3de906635979980ff4ad2a2186a1814f551962218591214415c1fc,2025-10-28T15:46:52.867000 -CVE-2025-26353,0,1,593d06f8fcc0dcfe6ce4b096d8a0d40444b547ce72d8b248235980d15fa5adc2,2025-10-28T15:46:42.513000 -CVE-2025-26354,0,1,8b3e97c1db8db3e02f843051af62e8176d221e69b5355a95232146b988e0ae72,2025-10-28T15:46:35.500000 -CVE-2025-26355,0,1,8ef136218d97ededab10802f6a646be9a73fac13da889a1023141fc12fae160c,2025-10-28T15:46:29.943000 -CVE-2025-26356,0,1,dce33ca82b683eb7adafb8f70e0cee870713db7487ec79dcb09b5f624b7ffe4a,2025-10-28T15:46:25.613000 -CVE-2025-26357,0,1,897e187a3a1d2f0cacaf09616b66ca04096a1fc522b3ba56456fa02c2f00525c,2025-10-28T15:46:19.940000 -CVE-2025-26358,0,1,a69228b0097cf4820dc0f56d6891c35c9c02f78c98636bf8ec3e3866d0b57853,2025-10-28T15:45:41.180000 -CVE-2025-26359,0,1,7b92eae93e043e0cc3d086ffe251cec4dd84d732a92a1b43cfc28ed35ee928e0,2025-10-28T15:45:28.310000 +CVE-2025-26352,0,0,05d37afd7d3de906635979980ff4ad2a2186a1814f551962218591214415c1fc,2025-10-28T15:46:52.867000 +CVE-2025-26353,0,0,593d06f8fcc0dcfe6ce4b096d8a0d40444b547ce72d8b248235980d15fa5adc2,2025-10-28T15:46:42.513000 +CVE-2025-26354,0,0,8b3e97c1db8db3e02f843051af62e8176d221e69b5355a95232146b988e0ae72,2025-10-28T15:46:35.500000 +CVE-2025-26355,0,0,8ef136218d97ededab10802f6a646be9a73fac13da889a1023141fc12fae160c,2025-10-28T15:46:29.943000 +CVE-2025-26356,0,0,dce33ca82b683eb7adafb8f70e0cee870713db7487ec79dcb09b5f624b7ffe4a,2025-10-28T15:46:25.613000 +CVE-2025-26357,0,0,897e187a3a1d2f0cacaf09616b66ca04096a1fc522b3ba56456fa02c2f00525c,2025-10-28T15:46:19.940000 +CVE-2025-26358,0,0,a69228b0097cf4820dc0f56d6891c35c9c02f78c98636bf8ec3e3866d0b57853,2025-10-28T15:45:41.180000 +CVE-2025-26359,0,0,7b92eae93e043e0cc3d086ffe251cec4dd84d732a92a1b43cfc28ed35ee928e0,2025-10-28T15:45:28.310000 CVE-2025-2636,0,0,adf7ef79275f86e65c19cf97bfe27fc52b401cd6bd298f0497c8a162f69e71f8,2025-04-11T15:39:52.920000 -CVE-2025-26360,0,1,5ce9e547de545dab51a51db7247ff055558c3582242060ea672868ebca32203b,2025-10-28T15:45:11.133000 -CVE-2025-26361,0,1,040fb3749ff703f9fc8a9ae83f4a8c8192b9cac75251777a73832ecfe643ccfa,2025-10-28T15:44:31.440000 -CVE-2025-26362,0,1,d9bde65cac299684c4b08db89f978a6ed2d5cb2ddd237fb08022afbcadce3f17,2025-10-28T15:42:30.657000 -CVE-2025-26363,0,1,7d22bb7435cc6baa1f159439fbeb9aad1b781eeffd819e6e595d311f605a18da,2025-10-28T15:42:23.580000 -CVE-2025-26364,0,1,8df375476fc16a3227769ea30d8c1f642082851c54862f46caab777e131ce7cb,2025-10-28T15:42:15.700000 -CVE-2025-26365,0,1,6e4eacf6ac41ca356e01773c83ac09e3690b37617094639c66feb9ebefd80bbd,2025-10-28T15:42:10.587000 -CVE-2025-26366,0,1,d4ff49758ccf5c3e68072a89d39063418130cdb7d3c2fc16b8216d362e0efa9c,2025-10-28T15:42:04.690000 +CVE-2025-26360,0,0,5ce9e547de545dab51a51db7247ff055558c3582242060ea672868ebca32203b,2025-10-28T15:45:11.133000 +CVE-2025-26361,0,0,040fb3749ff703f9fc8a9ae83f4a8c8192b9cac75251777a73832ecfe643ccfa,2025-10-28T15:44:31.440000 +CVE-2025-26362,0,0,d9bde65cac299684c4b08db89f978a6ed2d5cb2ddd237fb08022afbcadce3f17,2025-10-28T15:42:30.657000 +CVE-2025-26363,0,0,7d22bb7435cc6baa1f159439fbeb9aad1b781eeffd819e6e595d311f605a18da,2025-10-28T15:42:23.580000 +CVE-2025-26364,0,0,8df375476fc16a3227769ea30d8c1f642082851c54862f46caab777e131ce7cb,2025-10-28T15:42:15.700000 +CVE-2025-26365,0,0,6e4eacf6ac41ca356e01773c83ac09e3690b37617094639c66feb9ebefd80bbd,2025-10-28T15:42:10.587000 +CVE-2025-26366,0,0,d4ff49758ccf5c3e68072a89d39063418130cdb7d3c2fc16b8216d362e0efa9c,2025-10-28T15:42:04.690000 CVE-2025-26367,0,0,ba39bf35d7a1aee097679ce11cfe5cf3d38c26ade50b71c2868603552f1d4c95,2025-04-10T19:54:17.250000 CVE-2025-26368,0,0,e22c1d04cc63850e0fd72e4b4293e694ab57490912f1e6927b0427014e86bcdd,2025-04-10T18:55:33.947000 CVE-2025-26369,0,0,49e95138136c4471f51a5e58f9eeaa46e00cc8f2bc040b0ad9df6510c64541dd,2025-05-27T21:25:39.230000 CVE-2025-2637,0,0,d781b4ca83dfc8156cc8637398587c48dfc7d889ab11d6fb4b0de92938bdddab,2025-04-02T15:37:24.170000 -CVE-2025-26370,0,1,30305085009f90393875aa4fd1b2af09866ee0bdadf9504c691ef93dc6eb43ad,2025-10-28T15:41:52.430000 +CVE-2025-26370,0,0,30305085009f90393875aa4fd1b2af09866ee0bdadf9504c691ef93dc6eb43ad,2025-10-28T15:41:52.430000 CVE-2025-26371,0,0,c5f72c8ee71a462af287fc8c2367164284833ae1e28887cf67b69761d8d8f46c,2025-04-10T19:54:12.560000 CVE-2025-26372,0,0,de2a693b58e4aceb43078b6b71ca42b9ef9fc3b5d2d8c334ca012461b3455e72,2025-03-03T22:12:13.660000 -CVE-2025-26373,0,1,9e492958b74dc184081aa1024da11504112865689237be820bf1e924cf676f26,2025-10-28T15:41:46.897000 +CVE-2025-26373,0,0,9e492958b74dc184081aa1024da11504112865689237be820bf1e924cf676f26,2025-10-28T15:41:46.897000 CVE-2025-26374,0,0,26cceb5b1ca7dc1616c4fb7aca2989fc82c20bdd33bcad16cbe66ea6bd60ac0a,2025-03-03T22:12:48.590000 CVE-2025-26375,0,0,65d480976bbda3a02fd6aba7467242f0c6431787bf230ced7ba0a954a57b4b4c,2025-04-10T18:55:29.077000 CVE-2025-26376,0,0,9cc6ac5c872d4ddcf52b37d00fd84cbb0c53cdb0192d05e6b6409e77618a054a,2025-04-10T19:54:07.187000 -CVE-2025-26377,0,1,f0b5b604b21f92127095f721637f4eb9a5ee33ac1bb02fc4f22070ac48cd98da,2025-10-28T15:41:39.100000 +CVE-2025-26377,0,0,f0b5b604b21f92127095f721637f4eb9a5ee33ac1bb02fc4f22070ac48cd98da,2025-10-28T15:41:39.100000 CVE-2025-26378,0,0,a494ab6b0f71d020c4f90453f9715a04640e4481e315836f872badbd66544c64,2025-04-10T20:25:15.307000 CVE-2025-2638,0,0,cc1cadb7c34750a1375701cb1da4bb47de30a65ba1265bd222b67359b4a3112a,2025-04-02T15:39:07.113000 CVE-2025-26382,0,0,a25c6ecf60ba832f511e36a1f005dc3e6e7ec8e94a5f6a3c5d744523a73ad4b9,2025-04-29T13:52:28.490000 @@ -294185,8 +294186,8 @@ CVE-2025-27438,0,0,0c7b97c4c08e57f85c788ec466eb50030894d41fa3bf29fd142ed7aaac9d0 CVE-2025-27439,0,0,02b13ec32e70a3861b9c42452b047e8065a25a5c3e88faa5bd430576de4577ba,2025-10-22T19:29:19.450000 CVE-2025-2744,0,0,c1b1ac814d7bf9465db582867ccf68a7143d0a86fb0f9101c178288f695d47af,2025-07-14T20:11:35.590000 CVE-2025-27440,0,0,115115f698a083212079df6e8ad68f39ceab35e57c92e7c69b85993e95c8ca4d,2025-10-22T19:25:45.900000 -CVE-2025-27441,0,0,661dad749f3fa404a5ff1322bf6db1c86556d8f455b73ad9c4ffe793c77800a8,2025-04-08T18:13:53.347000 -CVE-2025-27442,0,0,628a40e84f7c7c007b0efb1cca0b900dee2a477dbe312a3a270d3ab62e779481,2025-04-08T18:13:53.347000 +CVE-2025-27441,0,1,28922e3f8c03be3c5fd5790dfaf7f0c2379d4f9d1785370850c1f31b54dcca06,2025-10-28T17:07:44.403000 +CVE-2025-27442,0,1,bad18aca57eddbd6ab8b0ef66bbe065b310e48fd69f87fbdd1adf46a0eda8364,2025-10-28T17:04:11.833000 CVE-2025-27443,0,0,cadaa634eff76e255ce7874cf1e4d8050679bbbd38e6929bfb60b7c93c164ba0,2025-08-01T19:02:03.573000 CVE-2025-27444,0,0,4a47feecb17e273ada092c286d134005100fd80febdd86293ecde589498b8bab,2025-06-09T15:04:33.780000 CVE-2025-27445,0,0,44c80238eee581b74fbbeb99b67c95ad1993791b07b11e34ee3b282a88925501,2025-06-17T20:15:31.250000 @@ -295458,7 +295459,7 @@ CVE-2025-29998,0,0,fba741cd0989752b903f19df6ae5bf9e87c93be0649e9f2c8b4c92f81f39f CVE-2025-29999,0,0,8b8d91b56d225972b60395d0c4c52c26c06b3c4add7a35dbdf077f8b6c072743,2025-04-08T18:13:53.347000 CVE-2025-3000,0,0,f5727bc4602b988f4b9e06c3f231b43140a74df279dd619a20b5394b734cc80b,2025-05-29T15:53:39.223000 CVE-2025-30000,0,0,affa6abe4dc1f666ac7528d709b6ebffe6f6752eec94a0822b7e3a349ec798e3,2025-04-08T18:13:53.347000 -CVE-2025-30001,0,1,a0a59a21b903ed9a032fa59890d70d870d35d66ae9bb04cb173b03911a8c6456,2025-10-28T15:32:57.337000 +CVE-2025-30001,0,0,a0a59a21b903ed9a032fa59890d70d870d35d66ae9bb04cb173b03911a8c6456,2025-10-28T15:32:57.337000 CVE-2025-30002,0,0,a2817cee99aa52ff8a84f1b2f890326a865fd710d975c5bc6059ad0cf3a2645e,2025-08-19T14:54:04.807000 CVE-2025-30003,0,0,59a9701d7655fb3a3fd0b58644aceabd3601f1ca1bfaf1dcd25175180eb329f7,2025-08-19T14:53:58.180000 CVE-2025-30004,0,0,ed63689cca2dbb213208c9bd7d3c7d573e581354486445eacc9ec1c44ec3fc25,2025-09-23T14:27:46.243000 @@ -296089,7 +296090,7 @@ CVE-2025-30709,0,0,f3c40483fac072901ca97ad029535e702497499fd8805422e6c7fd8999141 CVE-2025-3071,0,0,d39f67730c425b5f5b99adfbc6951a4e62f1e8ef78cc995b7e84ea38ca372723,2025-04-21T20:48:25.733000 CVE-2025-30710,0,0,dbdaef19e8e80425d058f5d23e62a904064b2000f56669985af86199f266cb69,2025-04-21T20:08:35.023000 CVE-2025-30711,0,0,445ffa60ce155378419a16541e5b6ef6eafd9b89cc1d05da79f816d30ef860c7,2025-04-21T20:08:43.567000 -CVE-2025-30712,0,0,62cb59a18b79be86cc73021b044306d47cf8353d21e9f0d4f9066fbf8d1c1e01,2025-05-16T15:15:47.477000 +CVE-2025-30712,0,1,39659d5eadd878871fa61a1be7801e23013bb6061b0003579d67aa053ad6b694,2025-10-28T18:38:13.350000 CVE-2025-30713,0,0,8924d5a6f29b60178830dfdeb7245c39225b2fb7bffe481d7ac6dde4130c7699,2025-04-21T20:08:55.863000 CVE-2025-30714,0,0,8c03e9655ae0b5410c486e7847a66fc797c3b2df136d0016f14ad150437d8a2a,2025-04-21T20:17:53.860000 CVE-2025-30715,0,0,9d5c846ee6237155f15d656abc455c057a32aa3354673b4c01c1dc2bb824b76b,2025-04-21T19:54:56.163000 @@ -298661,28 +298662,28 @@ CVE-2025-34282,0,0,5cf795842e251193e37e36741d5147bc6c13f0c91df63825d76fe7468e7db CVE-2025-3429,0,0,e111017acbfc3ad488b5577926e388fe8cea296485a5a387e88a0046c384d159,2025-07-10T14:18:42.587000 CVE-2025-34292,0,0,3b0d0d9c1ebff66f86c133ea61d36a7619831c3f8d3cd692decb03ca22755882,2025-10-27T16:15:39.850000 CVE-2025-34293,0,0,4fc900fd6217442a213ce5cdfa3d3646768f35c35d6fedd37bbd4b03720a4453,2025-10-27T13:20:15.637000 -CVE-2025-34294,1,1,4020e7d0315525b78b903246eb1caabb85c5877ea06d0a0e9242e6a983afc3fd,2025-10-28T16:15:37.167000 +CVE-2025-34294,0,0,4020e7d0315525b78b903246eb1caabb85c5877ea06d0a0e9242e6a983afc3fd,2025-10-28T16:15:37.167000 CVE-2025-3430,0,0,a8dd209d2f3ffc999e493da170fd38f29e4ca6c65941e704b12a73f04051bb5e,2025-07-10T14:18:52.400000 CVE-2025-34300,0,0,cce5f4cc4ed8eb247036eed6b98280a428439a2fd0486b396e432d3ddbd52102,2025-07-16T15:15:26.410000 -CVE-2025-34301,1,1,cc06f3e2903e51854b2c07a17f1a728125337b10d7d73ae132a86af742092513,2025-10-28T15:16:10.310000 -CVE-2025-34302,1,1,5489240722b55e333929979210ca1cfc7bae106a11094abb5cfc291e2ab76a94,2025-10-28T15:16:10.433000 -CVE-2025-34303,1,1,0c978e8033af3a14c4b703ad917c6c4be46bac8b00d035f009d8b96894c0d28a,2025-10-28T15:16:10.540000 -CVE-2025-34304,1,1,b5d05080c2164b3188001d64af67e6163b77c702ce5ea414760c0829bfcd7208,2025-10-28T15:16:10.647000 -CVE-2025-34305,1,1,3f93a0cdee97699495c08b0dae40622f077e1e512fc20190e50dccff50d3e0b6,2025-10-28T15:16:10.760000 -CVE-2025-34306,1,1,c3d84bb525a0e8fdc516cc7d543c30ce6f835025f2e72acb19c8e1e8048a1e1b,2025-10-28T15:16:10.867000 -CVE-2025-34307,1,1,7345160b1ce6327409f52c86750ef8ba1a872e94fbce83ea96c9a36149c6507a,2025-10-28T15:16:10.973000 -CVE-2025-34308,1,1,ddad367736283dc8eacaff184696d2a692c485d7d3b3cfabe351385fa5e695dc,2025-10-28T15:16:11.080000 -CVE-2025-34309,1,1,a41d55fba5ada9152df03de43de62ffd58932fea6b038569867ad353bd509af7,2025-10-28T15:16:11.190000 +CVE-2025-34301,0,0,cc06f3e2903e51854b2c07a17f1a728125337b10d7d73ae132a86af742092513,2025-10-28T15:16:10.310000 +CVE-2025-34302,0,0,5489240722b55e333929979210ca1cfc7bae106a11094abb5cfc291e2ab76a94,2025-10-28T15:16:10.433000 +CVE-2025-34303,0,0,0c978e8033af3a14c4b703ad917c6c4be46bac8b00d035f009d8b96894c0d28a,2025-10-28T15:16:10.540000 +CVE-2025-34304,0,0,b5d05080c2164b3188001d64af67e6163b77c702ce5ea414760c0829bfcd7208,2025-10-28T15:16:10.647000 +CVE-2025-34305,0,0,3f93a0cdee97699495c08b0dae40622f077e1e512fc20190e50dccff50d3e0b6,2025-10-28T15:16:10.760000 +CVE-2025-34306,0,0,c3d84bb525a0e8fdc516cc7d543c30ce6f835025f2e72acb19c8e1e8048a1e1b,2025-10-28T15:16:10.867000 +CVE-2025-34307,0,0,7345160b1ce6327409f52c86750ef8ba1a872e94fbce83ea96c9a36149c6507a,2025-10-28T15:16:10.973000 +CVE-2025-34308,0,0,ddad367736283dc8eacaff184696d2a692c485d7d3b3cfabe351385fa5e695dc,2025-10-28T15:16:11.080000 +CVE-2025-34309,0,0,a41d55fba5ada9152df03de43de62ffd58932fea6b038569867ad353bd509af7,2025-10-28T15:16:11.190000 CVE-2025-3431,0,0,1b9739a94ae5b4074fbf4f49b44f280bcf9e73440745a031f3bc0447751b9048,2025-06-04T22:27:39.390000 -CVE-2025-34310,1,1,67da0ceedcb5eeb7370152234fa87dde2f2c9d51f044d4bea5cb77ab979905d8,2025-10-28T15:16:11.293000 -CVE-2025-34311,1,1,c58bbe6476df7427da1882887d070460788d52c9f9eafc968e5addd84b6a3d7d,2025-10-28T15:16:11.400000 -CVE-2025-34312,1,1,4b342e5925ecac4a76bf4d7d6e275332b5c367fc3135f0f40abc29d1d9a5bef0,2025-10-28T15:16:11.510000 -CVE-2025-34313,1,1,4e606bfd9b1dddb5b7f2c43731cab8a24e31944ce66a6f2f0e5f3819c73efe97,2025-10-28T15:16:11.613000 -CVE-2025-34314,1,1,a541acf719cf5da5693ef242a9b663c55b191053ad928c84e33c6540a1e73a46,2025-10-28T15:16:11.720000 -CVE-2025-34315,1,1,27f6637761be82bb11a90bdb9085059a01bf0d671cbf2b3cd530b06c24ade1b2,2025-10-28T15:16:11.823000 -CVE-2025-34316,1,1,f6c4b3d5f1f2738a07929dec86f48558b9916cc13c3674fd18aba5d403b5631e,2025-10-28T15:16:11.930000 -CVE-2025-34317,1,1,f9010892509b109b6f5a7ebc1fbc54bab37d71c7a901633798705ba83c1a1d00,2025-10-28T15:16:12.037000 -CVE-2025-34318,1,1,13d22803fb6ef9466b8caec9201173b43bedb71f6ed72eddb2b7fa0b348ddb1b,2025-10-28T15:16:12.147000 +CVE-2025-34310,0,0,67da0ceedcb5eeb7370152234fa87dde2f2c9d51f044d4bea5cb77ab979905d8,2025-10-28T15:16:11.293000 +CVE-2025-34311,0,0,c58bbe6476df7427da1882887d070460788d52c9f9eafc968e5addd84b6a3d7d,2025-10-28T15:16:11.400000 +CVE-2025-34312,0,0,4b342e5925ecac4a76bf4d7d6e275332b5c367fc3135f0f40abc29d1d9a5bef0,2025-10-28T15:16:11.510000 +CVE-2025-34313,0,0,4e606bfd9b1dddb5b7f2c43731cab8a24e31944ce66a6f2f0e5f3819c73efe97,2025-10-28T15:16:11.613000 +CVE-2025-34314,0,0,a541acf719cf5da5693ef242a9b663c55b191053ad928c84e33c6540a1e73a46,2025-10-28T15:16:11.720000 +CVE-2025-34315,0,0,27f6637761be82bb11a90bdb9085059a01bf0d671cbf2b3cd530b06c24ade1b2,2025-10-28T15:16:11.823000 +CVE-2025-34316,0,0,f6c4b3d5f1f2738a07929dec86f48558b9916cc13c3674fd18aba5d403b5631e,2025-10-28T15:16:11.930000 +CVE-2025-34317,0,0,f9010892509b109b6f5a7ebc1fbc54bab37d71c7a901633798705ba83c1a1d00,2025-10-28T15:16:12.037000 +CVE-2025-34318,0,0,13d22803fb6ef9466b8caec9201173b43bedb71f6ed72eddb2b7fa0b348ddb1b,2025-10-28T15:16:12.147000 CVE-2025-3432,0,0,32b4909a605e3dc15d41b2069e1ead14c30bcbe2dfa78debc747a89be022e4ba,2025-04-08T18:13:53.347000 CVE-2025-3433,0,0,46dd66c57af291abbb1b77326145823e13d716692eb68902a18c25a048a17397,2025-04-08T18:13:53.347000 CVE-2025-3434,0,0,b8eaddf3b141c5d0cb4bc5eabf7fd897b349acdd6b9551b14d0e525f524ac410,2025-04-11T15:39:52.920000 @@ -298958,10 +298959,10 @@ CVE-2025-36064,0,0,2c9f3338eb078de2b64244b18db5c111d1fe49031ae0b3c92b953fd0ce93e CVE-2025-3607,0,0,00a61937e6c72150e849325aa06a18ed35736c13546aa89382694e35fbdc7236,2025-04-29T13:52:47.470000 CVE-2025-36071,0,0,d5d43fff2d283efe1b7466d388e3895d926df938c6a656077ceee7cbf7eb8e1b,2025-08-07T00:31:53.567000 CVE-2025-3608,0,0,9a5b2a685e23ed54a5b4d9074656a8f2a2ccacace07a3f4ed149936d1bf208f0,2025-05-21T19:48:33.080000 -CVE-2025-36081,1,1,90d499df0595d37263f39ecbe37b6bc4cfc80415b11a69f5be1816a8a96c85fb,2025-10-28T15:16:12.270000 +CVE-2025-36081,0,0,90d499df0595d37263f39ecbe37b6bc4cfc80415b11a69f5be1816a8a96c85fb,2025-10-28T15:16:12.270000 CVE-2025-36082,0,0,6cbb9a63908a6aeea7f3238878af4fdcd3d938dc45466124f2eba3f308b711a3,2025-09-24T13:17:27.520000 -CVE-2025-36083,1,1,0895ae5b94b587b6e2e908a89de8189cca4864a7e01a2c150c81fc2bcf1754bf,2025-10-28T15:16:12.427000 -CVE-2025-36085,1,1,965ff0c62e603a794d56f09fcc5766beeb5ca2deddd2d2e7aa8ed0cc0b84d61e,2025-10-28T15:16:12.577000 +CVE-2025-36083,0,0,0895ae5b94b587b6e2e908a89de8189cca4864a7e01a2c150c81fc2bcf1754bf,2025-10-28T15:16:12.427000 +CVE-2025-36085,0,0,965ff0c62e603a794d56f09fcc5766beeb5ca2deddd2d2e7aa8ed0cc0b84d61e,2025-10-28T15:16:12.577000 CVE-2025-36087,0,0,526e379ec018c55c55d60b023b5ce014226433dc8a6e30cdaa145627a5af86de,2025-10-20T20:23:01.170000 CVE-2025-36088,0,0,554b7b8ba3439626f6f9885e5fae9db5ed8484f0a77189c8d0d096271b47505d,2025-08-18T20:16:28.750000 CVE-2025-3609,0,0,70aca4a435588edac6811092b960a9852b2ca7d0874089032dd75bd132c774d9,2025-05-07T14:13:35.980000 @@ -298983,7 +298984,7 @@ CVE-2025-36120,0,0,7ac53b5e3c3285cb87452ed084cddcc70885ee350c52359c04c0361f6203c CVE-2025-36121,0,0,798d4880973501c1e3ecd101cd7686078cad5057c420b4b2af3cd074c16b3559,2025-10-27T15:15:38.473000 CVE-2025-36124,0,0,495ab5b80c18934d694b85f1fd5c515432023769133dc6b0f110ddc5106cc50b,2025-08-14T01:23:45.570000 CVE-2025-36125,0,0,065ad8bfb76e5aab8cc5e8bdc82623ade84c6be49c8c9463be9f1d533787a61f,2025-09-11T17:14:25.240000 -CVE-2025-36128,0,1,e45b260341295c02c00efecea7c2f45b1008630fed62c75c96ba43cdff516955,2025-10-28T16:53:08.540000 +CVE-2025-36128,0,0,e45b260341295c02c00efecea7c2f45b1008630fed62c75c96ba43cdff516955,2025-10-28T16:53:08.540000 CVE-2025-3613,0,0,9c314abbc6473987a4462c7f86d0ede7026d1a1d89f3e10127913343b31eedd8,2025-04-15T18:39:27.967000 CVE-2025-36132,0,0,fda7a69a0a56f7e0435c73286c05dadd166bbf3383758a64745bf8a608a4b98b,2025-10-03T17:52:05.920000 CVE-2025-36133,0,0,bee880bb5fb76cfb4423e3458e3e19970e6f04fadc77dc2522065e6f772e6389,2025-09-02T15:55:25.420000 @@ -299039,7 +299040,7 @@ CVE-2025-3636,0,0,9cb7ff4f24fd10c314c98f25cf5b96cfd8dcde96f91f3593344631faedd118 CVE-2025-36361,0,0,49b42286316ebb5bc89812426d930ffb3b8ef329095e535231f529080f7b0145,2025-10-28T14:27:33.283000 CVE-2025-3637,0,0,946817d42dc2041f42a348d496ca1a6d5fbacce7f28ee79d10cc9275bdcb208f,2025-06-24T16:09:21.100000 CVE-2025-3638,0,0,0b36fddd5515287a1a712f272220188fa7e5b84f4e00c89fe48c91044f4ac294,2025-06-16T21:03:13.033000 -CVE-2025-36386,1,1,d1b1fa3ed254151f100539c93628b852f15979c8c54fe3416b0ef6af1f0134eb,2025-10-28T16:15:38.107000 +CVE-2025-36386,0,0,d1b1fa3ed254151f100539c93628b852f15979c8c54fe3416b0ef6af1f0134eb,2025-10-28T16:15:38.107000 CVE-2025-3639,0,0,11736eb218776081cd7b3da7706322847ccacc26f253fe11b2ff4127c02c274d,2025-08-18T20:16:28.750000 CVE-2025-3640,0,0,89519f1f5d6b36321d725f24be5d16155a0d1a3557511153d3c8dc995c4f8ca6,2025-06-24T16:09:36.293000 CVE-2025-3641,0,0,6d9eca1e21313f075d524c170ddf6f7f0aebcd375a77b9807790355eef5dd472,2025-06-24T16:09:43.943000 @@ -304562,9 +304563,9 @@ CVE-2025-47897,0,0,109dc1f592e5a8b777940322079ea4797fc247ab4c306750db6fdb1c729b9 CVE-2025-47898,0,0,4bdc2e47dd7f87b8a496fc88222111102b911b01e8808007a66256e68aba7671,2025-05-14T04:16:23.200000 CVE-2025-47899,0,0,6495f5d2d1b3f957c9f444c54342056b9d91bd61d547188fa54a7057febf5cf7,2025-05-14T04:16:23.340000 CVE-2025-4790,0,0,1cde53f18939fd245b2e017ab5d61b1aabe2517bc390d40b0830feb8eba632b8,2025-05-23T13:31:33.667000 -CVE-2025-47900,0,1,c995bed5e88e6a774694086c7880327fd9d1d863803e6ddf6d33d5e4510b64b5,2025-10-28T15:29:13.490000 -CVE-2025-47901,0,1,82ce69bbc363d4cd281a9321f2bf016d32db70a5c5730b54806af020f9e79616,2025-10-28T15:38:34.610000 -CVE-2025-47902,0,1,cab316f0350cbb52f33db5da21a9a9d4e742f4f681a0820a0653003bcf040aa3,2025-10-28T15:38:43.360000 +CVE-2025-47900,0,0,c995bed5e88e6a774694086c7880327fd9d1d863803e6ddf6d33d5e4510b64b5,2025-10-28T15:29:13.490000 +CVE-2025-47901,0,0,82ce69bbc363d4cd281a9321f2bf016d32db70a5c5730b54806af020f9e79616,2025-10-28T15:38:34.610000 +CVE-2025-47902,0,0,cab316f0350cbb52f33db5da21a9a9d4e742f4f681a0820a0653003bcf040aa3,2025-10-28T15:38:43.360000 CVE-2025-47905,0,0,0badab8f2933a29538d7ef66ea7b6761136968565fc3d324c0e27cff6bcc6258,2025-05-29T09:15:26.587000 CVE-2025-47906,0,0,501f17bd714f7895ea45052555f8bdf224818f69567d1347f2b7ef900456919a,2025-09-19T16:00:27.847000 CVE-2025-47907,0,0,eab9a22180768139e41955638a4ef786b77916d7641f1df4c1f3fe5b74b4d82d,2025-08-07T21:26:37.453000 @@ -306259,8 +306260,8 @@ CVE-2025-50070,0,0,517f545c6cb62878b95604090a58071fe47985cf607cc87823ad216314ec3 CVE-2025-50071,0,0,1d36a3061727eac6b692a96ff451e3a7cc7bd7001adc971f18a4a657e4b8196f,2025-07-24T21:29:35.020000 CVE-2025-50072,0,0,acfc64951f9dd268edb94df0c70001328cf11a70be05bbddf56d164ccebe4b1f,2025-07-24T20:27:11.957000 CVE-2025-50073,0,0,044b8afef56339d5e80e1980437c7aa9f1e6b7accdb1f9148933cde96072469a,2025-07-24T20:27:24.660000 -CVE-2025-50074,0,1,42b8810ca1deb7c66721672b247ab8709c3095dc259ae1c5cb0b0cafb0729a08,2025-10-28T16:15:51.800000 -CVE-2025-50075,0,1,468831948b02f09f1e4a757339dbde36df3cda6843a00bd15bb6a0aca98c210f,2025-10-28T16:15:45.733000 +CVE-2025-50074,0,0,42b8810ca1deb7c66721672b247ab8709c3095dc259ae1c5cb0b0cafb0729a08,2025-10-28T16:15:51.800000 +CVE-2025-50075,0,0,468831948b02f09f1e4a757339dbde36df3cda6843a00bd15bb6a0aca98c210f,2025-10-28T16:15:45.733000 CVE-2025-50076,0,0,8d119603eff4e06ba553b27f3d493c8d3846bc79a53dfa3c15de376ef25ebad5,2025-07-17T12:31:42.750000 CVE-2025-50077,0,0,13cd524e21ea9ffacceaddee5c023c6f66956ff580e2d6d75294e17b15277cd8,2025-07-17T12:31:36.597000 CVE-2025-50078,0,0,0783267d43c4f5206e43c9d7ef9dfd32b8557854feee2b97b5adb519aba7e1d7,2025-07-17T12:31:29.860000 @@ -306562,7 +306563,7 @@ CVE-2025-50944,0,0,67c18b08213ef14bf35aba0c8d92c9a93ba4a7d99576a25368a7183ab54ed CVE-2025-50946,0,0,ba9fff427eaeb43a6713fb513831c31fa10cd0779103d484c40b370a4754052b,2025-10-17T17:58:09.923000 CVE-2025-50949,0,0,a6e5587e7a2c57f2cd0c4dc2bed49b7e2f0f5fdea675c547bb1b318d59c8b6c0,2025-10-27T20:18:04.340000 CVE-2025-5095,0,0,1417d715080791c2b5e3f898ee2599e7fd197d6836611e9d72f818584974b5c9,2025-08-08T20:30:18.180000 -CVE-2025-50950,0,1,adb58c6bb09e481252acae8225603b1492dee0f2fc8a0fa4b21b06ccb55d2324,2025-10-28T16:22:53.463000 +CVE-2025-50950,0,0,adb58c6bb09e481252acae8225603b1492dee0f2fc8a0fa4b21b06ccb55d2324,2025-10-28T16:22:53.463000 CVE-2025-50951,0,0,398a59fde3b665788594719762d698308647cf4f54e0ca3f90af3d0c3e180b5c,2025-10-27T20:17:06.820000 CVE-2025-50952,0,0,e85e4b38363e4a4797200481405204cf3b446c5fd4c076b348f645f98f38f464,2025-08-14T20:08:10.997000 CVE-2025-5096,0,0,0e92e7a2ad14bd1964a36b0320792685fc1aa2087ad9100e70fe83b59bc0b17b,2025-07-11T19:41:21.707000 @@ -307381,7 +307382,7 @@ CVE-2025-5303,0,0,546057fa156dd0bfd15529f37c8ab9dae75346583c1c67316386c3461de424 CVE-2025-53030,0,0,c7d2f5076fe0d4d909edc5233f435dac26b886d26ab86a4b64b713ba01515c7d,2025-07-16T19:57:59.720000 CVE-2025-53031,0,0,a0de3ca71a32b18578f303667116707166aab49fcda79b4cdcb7021b6df3f48c,2025-07-24T20:34:58.503000 CVE-2025-53032,0,0,6c3320bad3b080a8768b96684f937e37c722fbc05dea27fcc03dac2169a2f32f,2025-07-24T20:35:43.353000 -CVE-2025-53034,0,1,186d8c67fff9083af62f4700a2a52ced78983a6b3798c96c365a0c7af2b42d88,2025-10-28T16:16:57.087000 +CVE-2025-53034,0,0,186d8c67fff9083af62f4700a2a52ced78983a6b3798c96c365a0c7af2b42d88,2025-10-28T16:16:57.087000 CVE-2025-53035,0,0,bc14641873e9ac7fd09710e719975bc45ce57e62ba8f1d3d67bde81f41bf2fba,2025-10-23T16:08:56.020000 CVE-2025-53036,0,0,4667d93ac02bca83e8c30243a51a123f1af1c96aefce07c82f961e001fd07a8c,2025-10-23T16:08:47.680000 CVE-2025-53037,0,0,c6039e936f23147cf2e6760a8c03c87107ea9e4699ed99a4c8a4481f2f8a033f,2025-10-23T16:08:38.390000 @@ -307404,15 +307405,15 @@ CVE-2025-53053,0,0,3db91c153369ee60d8f1b25fd55960fb51e0334afa252771d926743d3d904 CVE-2025-53054,0,0,99a2353561b24f81155cf7dd1171fc05d208865273c1d4ad4ec8adfa4beed3b6,2025-10-23T16:06:00.133000 CVE-2025-53055,0,0,46e3e607170c16e1c2de9b4542fea3b81121eafc2a6c7a5f2befb5cc4fe83ae3,2025-10-23T16:05:41.393000 CVE-2025-53056,0,0,902942b513d548dcfe7691d26319aa3dccd01e42b6e5367af52dc8f2ff61d99c,2025-10-23T16:05:29.730000 -CVE-2025-53057,0,1,ec2c50f398e40afc2a83828c6e58fcf9167e5796856b29d11ad5e035371c8f02,2025-10-28T16:15:36.530000 +CVE-2025-53057,0,0,ec2c50f398e40afc2a83828c6e58fcf9167e5796856b29d11ad5e035371c8f02,2025-10-28T16:15:36.530000 CVE-2025-53058,0,0,9b5d8bd7cd19a5231a16fbc6f520df5416f0b8b23a72ccc80b4411a7400ae4e9,2025-10-23T16:05:11.700000 CVE-2025-53059,0,0,b3b23bfc60ec6821992369be2c0e0d702e11b589ff34dabc6c0c1ce633f008bb,2025-10-23T16:04:00.150000 CVE-2025-5306,0,0,8e759a80e2ac17573f0771395d0fe0be685c345a3389988c1ab6b692f3cd05fc,2025-09-16T13:25:41.920000 -CVE-2025-53060,0,1,f1e793041ed9c81699393b555620d0b67dad3dac6bded941f8ac2f2a2c06799d,2025-10-28T16:17:13.273000 -CVE-2025-53061,0,1,ff66548f858895514ac229b6123554b06612def60d40962b4d6c6e2390217653,2025-10-28T16:17:18.020000 -CVE-2025-53062,0,1,7ae47fd32c2bbe179c658b96a88f1ec83f7b9fdf06b658aca1ef8600c367b050,2025-10-28T16:17:03.840000 +CVE-2025-53060,0,0,f1e793041ed9c81699393b555620d0b67dad3dac6bded941f8ac2f2a2c06799d,2025-10-28T16:17:13.273000 +CVE-2025-53061,0,0,ff66548f858895514ac229b6123554b06612def60d40962b4d6c6e2390217653,2025-10-28T16:17:18.020000 +CVE-2025-53062,0,0,7ae47fd32c2bbe179c658b96a88f1ec83f7b9fdf06b658aca1ef8600c367b050,2025-10-28T16:17:03.840000 CVE-2025-53063,0,0,3c9b319d9931c835700cf90b7f796ce715d3e2f91fb34cb691e4362eea32807f,2025-10-23T16:03:45.477000 -CVE-2025-53064,0,1,1d8cfd247a7b193355b8680d6e0a74d42d8ca33a1930eefcf546a5ac311ed339,2025-10-28T16:17:26.297000 +CVE-2025-53064,0,0,1d8cfd247a7b193355b8680d6e0a74d42d8ca33a1930eefcf546a5ac311ed339,2025-10-28T16:17:26.297000 CVE-2025-53065,0,0,6cbf7d3006d599825d29f86936e30c8d9269ee29bc2f4016e02d25c5821575a9,2025-10-23T16:08:26.160000 CVE-2025-53066,0,0,6c2a7219bb853df777d9cf2bbed86ca37d099533c47d1514ec51467ee2b56ac4,2025-10-22T21:13:03.753000 CVE-2025-53067,0,0,c599797e8772ae4ea4cf84205e670dfdf0054f384527bf3f19283e77ffefb0c7,2025-10-24T14:38:12.010000 @@ -308677,7 +308678,7 @@ CVE-2025-54535,0,0,82d151b1fa0fbb644e1a7e6498d8e119ed0e2e57925ef560b1be7408e4d70 CVE-2025-54536,0,0,82106a8385cc43b0ab1358c01b5a663a1eb263761ad405628ad8ab44958be542,2025-07-31T19:23:45.927000 CVE-2025-54537,0,0,20e741bbf378034e9c34d5f178fcd4a527d3ec78972ec45e88d9bd2011b1c7c2,2025-07-29T16:13:14.477000 CVE-2025-54538,0,0,98cc55231038df670f5d1955345a59e4e20ae498be3bf3b4500439f04c7f6050,2025-07-29T16:13:19.390000 -CVE-2025-54539,0,0,158a45eae44c7fb6d36743e9bbd152111b1a219ac888729c0e2a8aebb6477a12,2025-10-16T15:28:59.610000 +CVE-2025-54539,0,1,c4df710b66d6eb3f68b0348f320d49f49ada243a6e1e2ad02375a35eb27d6e70,2025-10-28T17:00:49.247000 CVE-2025-54540,0,0,7b714d0ac4e7437548118011d7c1187e19b6c965d3d5502175ded29c6cc0e818,2025-09-08T17:06:51.980000 CVE-2025-54541,0,0,6fd8b02b708e11667f8b34ac2f706563a66c0f89d238e6da4a049d74d93926d9,2025-09-08T16:56:22.630000 CVE-2025-54542,0,0,505ccc3997af888b70c25d7d2764ebfe17c122f54edab571aa84ac1aa10f34ba,2025-09-08T16:56:12.930000 @@ -308719,6 +308720,8 @@ CVE-2025-54597,0,0,414608d47a1e0935441fd2ed0123256f3029ef0dd12a8db078c0c6448c5d7 CVE-2025-54598,0,0,37dc9045c473407d72144e8bb9743535bc6eda508e4c70ffbdf867ee7a7949c2,2025-09-09T18:46:10.110000 CVE-2025-54599,0,0,32f04632a676f2cbe7c94c1c4f09810c6a2d52de0d39db99608ef53581575896,2025-09-10T18:48:37.770000 CVE-2025-54603,0,0,72733ea7a5bca70462016d1db466707939745490075a8a18f7d621969b3a6111,2025-10-14T19:35:56.913000 +CVE-2025-54604,1,1,2ced0c1f83d9a54e08732d181e10b13638ec56470397bc9c51e650f4a5f119ee,2025-10-28T17:15:37.337000 +CVE-2025-54605,1,1,aaa7ac63e58474aa60d66883f1558088dbda14ef3711b2d313a04c04841d59e7,2025-10-28T17:15:37.903000 CVE-2025-54606,0,0,8c5ed7156cdecb3eb5357cd3a04e349fc5a6069c6ab9fbfd2920e2c6c138f772,2025-08-20T19:02:01.933000 CVE-2025-54607,0,0,800d9bf02d14db39df0812852754c714c07d3a954f730ac3413a4445a1007606,2025-08-20T19:02:06.807000 CVE-2025-54608,0,0,892d917247dd3ddc369639fdc485604b0d9517f6b2108bc7de3f6ade34fb67b8,2025-08-20T19:42:25.900000 @@ -309034,12 +309037,12 @@ CVE-2025-54956,0,0,653267e6116d71780f935491e6448610273e93fb17194ea28638b5b7bb5d2 CVE-2025-54957,0,0,cc55bd8ee9c5133a4e6eb60c8a27680b7a8619b73ab26c160a113a3f52d69b17,2025-10-21T19:31:25.450000 CVE-2025-54958,0,0,d754a1281c62e385a58f163c3e408a5c11d2f2bb60998a9e488b28a2302deba8,2025-08-08T20:30:18.180000 CVE-2025-54959,0,0,62b944cfc8a46cda88d3ec332238de4568c10b3433487d3ea67c01462d71c142,2025-08-08T20:30:18.180000 -CVE-2025-5496,0,1,10e70075140c306e7c8aa206ad4f66ef99642520803ca9b88b136723635c8e59,2025-10-28T15:36:52.253000 +CVE-2025-5496,0,0,10e70075140c306e7c8aa206ad4f66ef99642520803ca9b88b136723635c8e59,2025-10-28T15:36:52.253000 CVE-2025-54962,0,0,758fa9e1c05a0c58dd794f937b3086d72bae4cf9ae7f2a8e2f0a2425c9993c44,2025-08-04T15:06:15.833000 -CVE-2025-54963,0,1,afd4f5af9a3effda4d38c177b7b6855e2ca4707f1cdc75fb2deced580b79c4c2,2025-10-28T16:22:07.663000 -CVE-2025-54964,0,1,4c17044b669926a899f3b5093543b1eaf40d51970323369005b820c927daeb46,2025-10-28T16:19:45.597000 +CVE-2025-54963,0,0,afd4f5af9a3effda4d38c177b7b6855e2ca4707f1cdc75fb2deced580b79c4c2,2025-10-28T16:22:07.663000 +CVE-2025-54964,0,0,4c17044b669926a899f3b5093543b1eaf40d51970323369005b820c927daeb46,2025-10-28T16:19:45.597000 CVE-2025-54965,0,0,c0b18d8e0775023e6e3b7f6a024728085b2dbdde912075e0aad713c6e4a1b995,2025-10-27T19:16:04.150000 -CVE-2025-54966,0,1,3a61c4ad4c4e08942b762ac1f27b27b9ebd3825ed35f2446531caf64c7695e21,2025-10-28T16:19:20.397000 +CVE-2025-54966,0,0,3a61c4ad4c4e08942b762ac1f27b27b9ebd3825ed35f2446531caf64c7695e21,2025-10-28T16:19:20.397000 CVE-2025-54967,0,0,3400c35471a52c096902363073e68f96a19e73c1a059f7de3175db466965e9d0,2025-10-28T14:15:59.387000 CVE-2025-54968,0,0,cc6d80ed48b1d885ffc3406669df2472fc23b85511c2d30b7d0ff30c42776c1e,2025-10-28T14:15:59.563000 CVE-2025-54969,0,0,83c5f3051d32851f6fd303301c0674c497557d07ce87bfbf7af6df42e770d989,2025-10-27T19:16:04.317000 @@ -309643,7 +309646,7 @@ CVE-2025-56301,0,0,84a79046bc10fbe76ae991efd9ea733a91f25b3d138c6e63ba3cbf25b180b CVE-2025-56304,0,0,d577cf66c2d39d4ea7bc3c2da51f6b34c5d66b8829c45d7d5c30125e29efb867,2025-10-08T18:09:35.137000 CVE-2025-5631,0,0,9520f1da612f67ba3cacb4f45328d86005130fcd40654c95da630bdfedd60c11,2025-06-10T15:06:48.390000 CVE-2025-56311,0,0,28fa3b601f90abc7e9c515d93c2e7661f45a96c7368953d76dc8a914b5567147,2025-09-24T18:11:24.520000 -CVE-2025-56316,0,1,43ff3f5a0f6bf5610563799ff670b837ac4f08e48c0656ac9d8c277c6950ea5e,2025-10-28T16:44:48.133000 +CVE-2025-56316,0,0,43ff3f5a0f6bf5610563799ff670b837ac4f08e48c0656ac9d8c277c6950ea5e,2025-10-28T16:44:48.133000 CVE-2025-5632,0,0,8ad0fef869c4049544d603c15d429bacfd075475604feb92364d909438688e36,2025-06-10T15:06:36.483000 CVE-2025-56320,0,0,fd2cf399c086ac8919b657e0feee11c5d2ea5654d9a7039a2d4f8152d10735ac,2025-10-21T19:31:50.020000 CVE-2025-5633,0,0,3b0a21d83cf61d5b5f29a4ba5acd674d201048bb203557b600a037d42bc1f0dc,2025-06-10T15:06:27.257000 @@ -309660,7 +309663,7 @@ CVE-2025-56383,0,0,85e5353b896bd7442f37e4275aa2180985eeb2f6143c3ed88d122e2afe922 CVE-2025-5639,0,0,df69c796d2f2dcdd7b52222b3cca34eb33581a84dfcf4149ec44f708e4f12118,2025-06-06T20:12:28.340000 CVE-2025-56392,0,0,7f29f0d0ec295af17ae707773f96c8aeb12dc97c36355c7b216080cbf9d85310,2025-10-15T18:38:52.640000 CVE-2025-56394,0,0,4b6e024eeee63f03ccfedac4872fae7111b58e0e8f367b2c008a219df94bb056,2025-10-08T17:56:44.457000 -CVE-2025-56399,1,1,c445d53efdf8076238293c6ec30596ac5a8ff9b2f2eacd519e4d3672f767e9c0,2025-10-28T16:15:38.543000 +CVE-2025-56399,0,0,c445d53efdf8076238293c6ec30596ac5a8ff9b2f2eacd519e4d3672f767e9c0,2025-10-28T16:15:38.543000 CVE-2025-5640,0,0,a28c86c8136e1feb945fccbeca2e1e5a219c046c15a8a6365d3963b3188e3fa7,2025-06-05T20:12:23.777000 CVE-2025-56404,0,0,0a851ed4bf17bcf3abeac0adf895c20e98d96e9313781a1454302fb00ed84e5e,2025-09-17T20:32:54.887000 CVE-2025-56405,0,0,0304b6b0912b3f5106e981ea35f7cc32a57eef5a24de92ddcf9bbd612d7f8038,2025-09-17T20:31:22.920000 @@ -311504,7 +311507,7 @@ CVE-2025-59833,0,0,84e0afd062b230c895ae79970dfb499abd43776c4f47baee3a5a33b458abd CVE-2025-59834,0,0,4fdc1163ec6c9bea27bd1820cf347d9bb3059dc0a68bb8eb64a1fcdd68006a9c,2025-10-14T20:05:46.243000 CVE-2025-59835,0,0,79fe82e2c989e76335acddf3d808ba14cbd3b2f5fc401897d4ad7939899ba985,2025-10-06T14:57:05 CVE-2025-59836,0,0,543a2cf472343df9943678bb19f50a07e8d0057a5f9ea62b47d467a3691253f5,2025-10-14T19:36:29.240000 -CVE-2025-59838,0,1,6a1e99f2cc2524f7c527f4db9e7dea57976cdd38da0b0640b247977c7f8ccd7a,2025-10-28T16:15:38.673000 +CVE-2025-59838,0,0,6a1e99f2cc2524f7c527f4db9e7dea57976cdd38da0b0640b247977c7f8ccd7a,2025-10-28T16:15:38.673000 CVE-2025-59839,0,0,0034d3ff669afd639943cb85433761404df54ac8da86ce4df9f56ec74fe9a8a1,2025-10-14T20:02:18.213000 CVE-2025-5984,0,0,9c065cc4f1bf71f29d217205fa1a3017b01589309492c87e21e29320e0443497,2025-06-17T20:34:36.177000 CVE-2025-59841,0,0,dc0cb1f22597c50e4a2d87182f545c51396c652ea1a7d89f6856407129066022,2025-10-08T16:31:08.920000 @@ -311797,13 +311800,15 @@ CVE-2025-60337,0,0,52bd6f245a654f3d967112595da311f2013690421491561a18aa2c15a924c CVE-2025-60338,0,0,bcd8a90a685cb89b4bbbed814f001b2d32375460ab4bca608e464658d6b656f8,2025-10-23T17:15:39.503000 CVE-2025-60339,0,0,19ccb5450b45ef09e7501e5db8df10e6032aaac142546d3337b713a40604a9c7,2025-10-27T16:15:41.590000 CVE-2025-6034,0,0,645d376761e780a7051f07bb8e837833b50788f50b325a750375e5c9570a12de,2025-10-07T13:20:48.400000 -CVE-2025-60340,0,1,bac8c7418af4ee754e9677a484c73f2f5c9fe78e971fa3833d846595ee3bfce9,2025-10-28T16:15:38.817000 -CVE-2025-60341,0,1,53c06bfc6d75e6d3a6e06e5cb37020207e10c85ffd53e3ab1d658f9b2d6d03fa,2025-10-28T16:15:38.987000 +CVE-2025-60340,0,0,bac8c7418af4ee754e9677a484c73f2f5c9fe78e971fa3833d846595ee3bfce9,2025-10-28T16:15:38.817000 +CVE-2025-60341,0,0,53c06bfc6d75e6d3a6e06e5cb37020207e10c85ffd53e3ab1d658f9b2d6d03fa,2025-10-28T16:15:38.987000 CVE-2025-60342,0,0,c94fce5a86e47515fa3644c2ca4a73aa8ac5cd7128a1a205be05ff1cd331040d,2025-10-23T15:15:43.913000 CVE-2025-60343,0,0,de14e420b660673ac72e861c394e4f6b40931c2f807410aeca4613ca2c2718ad,2025-10-24T13:21:06.800000 CVE-2025-60344,0,0,99f5b799651478f723ceb704c6cad3634cd4b699187a17351497655d4ec34fb1,2025-10-21T21:15:39.050000 -CVE-2025-60349,1,1,cecd5c18663bf6341ec766d7e2dc789686cfad75eb32f596a4ba0f33a2793f55,2025-10-28T16:15:39.157000 +CVE-2025-60349,0,0,cecd5c18663bf6341ec766d7e2dc789686cfad75eb32f596a4ba0f33a2793f55,2025-10-28T16:15:39.157000 CVE-2025-6035,0,0,9ae3f54ffd6e0326cd0ac0337f3b3629819c1abcc0d51c53e8ec97c569a12d3d,2025-08-21T20:15:48.673000 +CVE-2025-60354,1,1,7f5b7c3e6f552fa9e5b60a38e42f25578328f102d994e4ae660106d91ee05a94,2025-10-28T18:15:38.853000 +CVE-2025-60355,1,1,b60adb5e59c35beb8d28982dfef73529d694f478e0ea7885093dcdaf3eb85260,2025-10-28T18:15:38.983000 CVE-2025-60358,0,0,1902b076898c41e064f58bd61bc01dcd2cfc257b44956b6826674d2dc65abdae,2025-10-23T12:31:42.327000 CVE-2025-60359,0,0,f30747f0cc9ffb8d1aa900c184716797ac96bbfa92380744365476e03305b839,2025-10-23T12:34:03.940000 CVE-2025-60360,0,0,62a1b873e30e908416dc72b218f3f86206afb21c1e4a2bca17fa8a3c0ef150a6,2025-10-23T12:34:14.797000 @@ -311913,8 +311918,10 @@ CVE-2025-6079,0,0,3acae9406359beeb566b8c872a5ac87499ca5a517d323b5859b95024ba8d79 CVE-2025-60790,0,0,9c57df591c5764c94ef76e8c440ccd12cddc20c135fd04c0054784a9cd00397f,2025-10-27T16:15:42.230000 CVE-2025-60791,0,0,4442d1b5d4d051212ef50fef4b035c75b5de627e1540d0d3ac162629825de3a5,2025-10-27T20:15:53.910000 CVE-2025-6080,0,0,09cd9257aacd26b3c0d0b7db39eeca754c6a52ebacd815d309102b493d922e90,2025-08-18T20:16:28.750000 +CVE-2025-60800,1,1,c5f2b47f309312c4b5a2ef5c1d8f909bd78e3b9aad02fc57d1f8c0bccee72cd6,2025-10-28T18:15:39.113000 CVE-2025-60801,0,0,f7085f2b3e29fcd69f93329234d03470bec3fd39e2daf3d1ddc67eeb8b18618a,2025-10-27T13:20:15.637000 CVE-2025-60803,0,0,78904d89dbffae24512cf1bfaa9bdf8ea281e4b4e3fb21fefc595bf35028a1c9,2025-10-27T13:20:15.637000 +CVE-2025-60805,1,1,d4ee904bfd015ff9e313d197b7743d58c991f1d15c4dff55edcd6052a56d79fa,2025-10-28T18:15:39.270000 CVE-2025-6081,0,0,1392e63485f5340f9ebbe3280ccff994df6ebed7ffeba0a6bfe7122906780321,2025-07-03T15:14:12.767000 CVE-2025-6082,0,0,fba3e65236f32f2f0e83727558294334ebf97c307523fc565b758ec4123e35d5,2025-07-22T13:05:40.573000 CVE-2025-60828,0,0,0f972f342a0b14a76860d942c1d5348f547cb103e4e1e8da84b11f2fcb79d84c,2025-10-10T16:17:11.943000 @@ -311923,12 +311930,12 @@ CVE-2025-60830,0,0,48f142f104f9147692394d596b0be0413eadac4b5e3f8266bdef52bb73700 CVE-2025-60833,0,0,0703b46a8cc62fd54a76a58f3ddfe3eea91f50329fcfa28fc60ac6cbaf1f0f84,2025-10-10T16:16:13.290000 CVE-2025-60834,0,0,80afdf7145390154b73c4b80feefc171583fdb3720f2f9c4f10cad7d96f423b9,2025-10-10T16:16:03.993000 CVE-2025-60837,0,0,e81b51976138ad3b9a670cece8aa670f4cb4e575dec9a9b43b26859d6050c824,2025-10-27T20:13:17.480000 -CVE-2025-60838,0,1,3c322c454198570c79a2f45a73fd2bd323ec81ba9424357501191555b41c3884,2025-10-28T15:32:01.233000 +CVE-2025-60838,0,0,3c322c454198570c79a2f45a73fd2bd323ec81ba9424357501191555b41c3884,2025-10-28T15:32:01.233000 CVE-2025-6085,0,0,eb2995c74572caedd9ef44b1d5b5318f084f938f661bb32c713b72127690df11,2025-09-04T15:35:29.497000 CVE-2025-60852,0,0,8632de341d856bc42cf65d6e727345f58ebd3f9fd6f13113e63b7f1192a76f71,2025-10-27T13:20:33.350000 CVE-2025-60855,0,0,170951ba694bec9cb608039bd521ecf69a9fbe47d10d73f07e2825b74d5dde1f,2025-10-21T19:31:50.020000 CVE-2025-60856,0,0,81e6a9bb24db2c4a9e2052e524739b41174aeee6d0e69804d63c3dcbcabcffc9,2025-10-21T19:31:25.450000 -CVE-2025-60858,1,1,41265cd657db5445e3feddc1b37e434bf1ea52f81c2c572b5295db93ebe6c7c2,2025-10-28T16:15:39.277000 +CVE-2025-60858,0,0,41265cd657db5445e3feddc1b37e434bf1ea52f81c2c572b5295db93ebe6c7c2,2025-10-28T16:15:39.277000 CVE-2025-60859,0,0,e5736450a0d8f7611130c3ff79f1a44fd3b0917a86ad9d2cb5f29a9c164081d0,2025-10-28T02:36:12.920000 CVE-2025-6086,0,0,5fe71f700a5db4748b73456874508af7453c8bbdad176612b1ae063647fd5c71,2025-06-18T13:46:52.973000 CVE-2025-60868,0,0,95c982ab8e0ca0ccdd9d37ac2822154aa0502eb90eeb5b85347e23681b37639d,2025-10-14T19:36:59.730000 @@ -311974,36 +311981,37 @@ CVE-2025-6102,0,0,226571f04d9d9af7c13b51336d43e24fde03b3d2e5774114aa8090b13ea7c8 CVE-2025-6103,0,0,696e9c964da4a6e69e85aac2d42d330e30757f62af6bf540ba2c64bd7b24d94e,2025-06-16T12:32:18.840000 CVE-2025-61035,0,0,71d92690f17e4c5ef40fd3d6e0981c6941486a916fa9fdeba1785888b418e8ec,2025-10-27T14:15:41.250000 CVE-2025-6104,0,0,4956a0e2f40ce3622bc8790617b04042352d384fe4f5245d1c794777153bd9a8,2025-06-16T12:32:18.840000 -CVE-2025-61043,1,1,31c55ae1d8a237de1105d5896e704bcbeb754660ab678af8ffecb60fa8813cfd,2025-10-28T15:16:12.790000 +CVE-2025-61043,0,0,31c55ae1d8a237de1105d5896e704bcbeb754660ab678af8ffecb60fa8813cfd,2025-10-28T15:16:12.790000 CVE-2025-61044,0,0,dbf826c206758247b0836a950a9e288d11376450a29288fea4256e85d75888fd,2025-10-16T20:15:34.650000 CVE-2025-61045,0,0,8d1c7f428a567cb6475a48311e5ce9e1bb791f07f93d6e8c39e10cac4c094e7b,2025-10-21T20:20:50.870000 CVE-2025-6105,0,0,d0b427b8e24eff9c1fd2770ade249e2d64f1c6773b84a7efea055d3510d7400b,2025-06-16T12:32:18.840000 CVE-2025-6106,0,0,b48d6360f042837b8e88cd036f0a136ffee50ce7d87c039a5de866d676f11d5b,2025-10-10T18:20:28.230000 CVE-2025-6107,0,0,515ce59b3a14c6e5359fc28163a1254718bf9c3840594c4c70f4e9091fdfda30,2025-06-16T12:32:18.840000 CVE-2025-6108,0,0,453b26447525a1c77bdd022d41df6e5d7f63a434acb776c6d4a82b4bb7e90eb5,2025-06-16T12:32:18.840000 +CVE-2025-61080,1,1,a3ecf00b1323f4e75e50a730f434533e9c225b50df7d7e30d5c7d8f04c3d4c77,2025-10-28T18:15:39.413000 CVE-2025-61087,0,0,eb2ef51c3cc578dd8a5d4886e1077ceecb28c7b7304b5220f5d93d433227dcfa,2025-10-07T18:15:38.967000 CVE-2025-6109,0,0,0d7db4ecae81615766e8ee4f45643deb77b735eed1bf35a97e5466c4bcea88d6,2025-06-16T12:32:18.840000 CVE-2025-61096,0,0,7e1a705bf9f447af0d9f3fa621ce67fa8e8184ba285067e405db727aa5c0c45e,2025-10-07T18:14:45.790000 -CVE-2025-61099,0,0,4b56b34dfc510ac1d093cecc205fd51d626acaa95da5532a14cf67b2dec4c162,2025-10-27T19:16:04.880000 +CVE-2025-61099,0,1,d232153304c3cb2a7529582379257c5398fe4a15b5243a23bf3a8ce5aa6fa33e,2025-10-28T18:15:39.540000 CVE-2025-6110,0,0,e6ad5566ac94697d2374ca63ba005da6ea647950a470675f2bc0a4660fa49e6e,2025-06-17T19:38:18.840000 -CVE-2025-61100,0,0,f1d63040dc01eb4a7eb2c1b52ff7da6c9315c1117473fcbb1c30d4ac8dd68f25,2025-10-27T19:16:05.060000 -CVE-2025-61101,0,0,58d9527abc04faaa687a86899390fae47cc454e1fe6ffbb4be3b15b27315885f,2025-10-27T20:15:54.050000 -CVE-2025-61102,0,0,a7ec1ea2d2d85dabdc1ca71679ba7fe8525e74575d440b163e148fe711853374,2025-10-27T20:15:54.150000 -CVE-2025-61103,1,1,2c660e52f8ab57b00c3f75f4b5a1038b50201fba0c7c4a7591dc0a6926685133,2025-10-28T15:16:12.910000 -CVE-2025-61104,1,1,c40449490b5cd9ae0f356302fd21603a487a9393fb6f788d5df8d65e0d11400f,2025-10-28T15:16:13.023000 -CVE-2025-61105,0,0,a2a42d77c3c6afddaddfec32c985a4469b76394287f980f55c4cd9e7af70b87a,2025-10-27T20:15:54.240000 -CVE-2025-61106,1,1,c61e1bbf92cb4edd4ff02e05cfc6517b89a5b5bd35c176bd37f15f30bc43dec7,2025-10-28T15:16:13.133000 -CVE-2025-61107,1,1,6ce92b87c45b43680a252ebe630d67eba1d99db1e0089c8fac929766fdbbde36,2025-10-28T15:16:13.243000 +CVE-2025-61100,0,1,14272099bdc5416fb42e87698edf8e864b1a672e4af7093573c69009718c0d98,2025-10-28T18:15:39.717000 +CVE-2025-61101,0,1,c11a162c6278b9d78af2023fee9720e6d3d3aae190ff81108b3641b514afaca4,2025-10-28T18:15:39.910000 +CVE-2025-61102,0,1,4929a131a0416b2a71254217dfdcdaa71169fbd298633c296b1c515a6ddfde90,2025-10-28T17:15:38.040000 +CVE-2025-61103,0,1,ccab1807c191e4e4729d27b1e4f9349ebff4c2d8f8f3ed50068e58beb90823ed,2025-10-28T18:15:40.117000 +CVE-2025-61104,0,1,1e031262753a29fe556261cb53cac748542ba6c3848911bd420364e7a3ecea79,2025-10-28T18:15:40.310000 +CVE-2025-61105,0,1,4db260d34fda858146ca5493c18716bf9db3df24ef61e9da5c4de3a69a62643a,2025-10-28T18:15:40.483000 +CVE-2025-61106,0,1,df282fa4680500eac2b5fb0519cf14f31c5bd1ad2129395f089b2ff6834fabd5,2025-10-28T18:15:40.677000 +CVE-2025-61107,0,1,f86ee18db4605d3d0ec921de1a4d2c3dbba68ca188bce7bff018d9c094a54ba4,2025-10-28T18:15:40.860000 CVE-2025-6111,0,0,ed08010159a7015ca6d5772c7e08fa818e15fba15944cabf5d6defa1f2b84af4,2025-06-17T19:38:24.550000 CVE-2025-6112,0,0,581b9c462b8e756289a5fbc7841b8abf1c4b1a629991f88608285bbb0ff64b98,2025-07-18T12:49:50.367000 -CVE-2025-61128,1,1,33a3b75f0acf1294bc8938fb48e993436385955a56da76f4cf8fb198bb15a4f9,2025-10-28T15:16:13.350000 +CVE-2025-61128,0,0,33a3b75f0acf1294bc8938fb48e993436385955a56da76f4cf8fb198bb15a4f9,2025-10-28T15:16:13.350000 CVE-2025-6113,0,0,0c5f7bf3ffcc790306137c58e7adf127bcac39f60f0d4f5880a251fa13bbbd68,2025-06-17T19:38:13.637000 CVE-2025-61132,0,0,f36b7403d998bbdc9200fd0c855259f79bebf91c7802b96a5de1573ba718b466,2025-10-27T13:20:15.637000 CVE-2025-61136,0,0,63c1fe05f94f27b6871aa887b983f5b7b79c9236df5dad4fde69bceb03986936,2025-10-27T13:20:15.637000 CVE-2025-6114,0,0,a5a1fc96e35eee24acc4782ad200c5dc760c08b01c254701514c850e1da2af86,2025-06-17T20:32:17.510000 CVE-2025-6115,0,0,af077fb1bef81f56ac7ab650236e0c91f9462b0467974cfad475a819f130e356,2025-06-17T20:32:10.530000 CVE-2025-61152,0,0,4ca635a1ce755a06068f7df677bc91923ff9b6fa0cad880c2761bebcf4125cdc,2025-10-14T19:36:59.730000 -CVE-2025-61155,1,1,8f990d2e9311a5947abfd314fd27324f5f842c1ee04b37a1a9e87743d5158d4a,2025-10-28T16:15:39.397000 +CVE-2025-61155,0,0,8f990d2e9311a5947abfd314fd27324f5f842c1ee04b37a1a9e87743d5158d4a,2025-10-28T16:15:39.397000 CVE-2025-6116,0,0,d44218c3866e1610331249ca733fac00cf57282a175ddef805ca7a6861066584,2025-10-09T17:14:03.957000 CVE-2025-6117,0,0,93d397a06a5afb5720582eac4ef4c28b88f1ad759e4a60221b38093e458e4bfb,2025-10-09T17:12:04.323000 CVE-2025-6118,0,0,f1bd3069777ca746f2fdfb8922b0cf5995c7dcab90e77f781e1887e709d6303f,2025-10-09T17:08:25.950000 @@ -312042,7 +312050,7 @@ CVE-2025-6135,0,0,506099148e534a57e74eec0360b5146bb6d16f5700b5c048c16b15d25659f5 CVE-2025-6136,0,0,5f7e8be2da42633353469049b7512fa5d07106f6da9174f3722e62acbd430a92,2025-06-26T16:37:17.293000 CVE-2025-6137,0,0,ddc67afa546c83e767dcbbc7b7e064e9742a4bea6b7f9760a6f55350f1985699,2025-06-26T16:33:18.123000 CVE-2025-6138,0,0,69c19eff97e06c34f5b8cfdfba9cb33f9498a49d64177b5418e8373bd3e2dbbf,2025-06-20T14:34:32.397000 -CVE-2025-61385,0,1,ccd59793767070e0ea2af648fb2da9e07b32bea3ea9cd0bb4dab11353137bd91,2025-10-28T16:15:39.513000 +CVE-2025-61385,0,0,ccd59793767070e0ea2af648fb2da9e07b32bea3ea9cd0bb4dab11353137bd91,2025-10-28T16:15:39.513000 CVE-2025-6139,0,0,1e573675182fd2c70c93e9d60e690c79091588fc0dffcb1bdf91b56cec3b2b4c,2025-06-26T16:27:37.157000 CVE-2025-6140,0,0,b68f1270ebcdebc6a09ed170a65e7944b3aca32e5ee78468b2c7d0a773e49e2a,2025-07-02T18:58:42.230000 CVE-2025-6141,0,0,30982fdd09a9481b77615efdbe4faa0b94853e7b75dc5c93668db33b5b903916,2025-06-17T20:50:23.507000 @@ -312524,7 +312532,7 @@ CVE-2025-62492,0,0,c8046a3aeb88f26ad206deb255f2f1d449b5364d978be60f33521fb64d569 CVE-2025-62493,0,0,fb7d293569b9065e087b0a63df7e2ba325aa8f94d792edae95482bd14e0d5b6e,2025-10-21T19:31:50.020000 CVE-2025-62494,0,0,e5fd75ba7e96314113874b3a97feef676da901abafc53e28b429e73007df8d3b,2025-10-21T19:31:50.020000 CVE-2025-62495,0,0,95f765e143b55fd0fe76536b6a970f3fab32d5c69040d19a9aa76640e613a4b7,2025-10-21T19:31:50.020000 -CVE-2025-62496,0,0,9a0231af6ba9997ffa0c79074e3b7e2969eb5561b4f6ad64b09b211ebc4bb0a1,2025-10-21T19:31:50.020000 +CVE-2025-62496,0,1,bf3b46914c38c1a019644a5925d35ed0ea31bfe8f83e1bce3d49fcfdca1dd187,2025-10-28T18:17:32.570000 CVE-2025-62498,0,0,62f73bb5b76a7efcc6284e70f9930dcf79cd56ac1887beeacf8d0dfe28d5afa4,2025-10-27T13:20:15.637000 CVE-2025-62499,0,0,7da09c606b5e0d92af13246615bc81ec8d1c81f6b4af5ca9396bddf41bcde17f,2025-10-27T13:20:33.350000 CVE-2025-6250,0,0,f86aa971edca455b3672c1372430ee34cca87a7b2c5e296e7489741fc444c7ec,2025-08-04T13:45:22.730000 @@ -312553,9 +312561,9 @@ CVE-2025-6255,0,0,6ecab89e8af2d8d02a75cd59812a3040d10438d233b8022948ad5740b8a45c CVE-2025-6256,0,0,294b3cab2bd3db911bdf2a685f894f61292bb6532436317757d1ecea99330674,2025-08-06T20:23:37.600000 CVE-2025-6257,0,0,cc91b7557b526c88672e08add1b684bde89a65ab4dd7fa052a99a1c1c9c823b5,2025-06-23T20:16:40.143000 CVE-2025-62577,0,0,19a71f95c4fd25208af22a46da2410604ae1bbc35958ae607e0619ba152f07d0,2025-10-21T19:31:25.450000 -CVE-2025-62579,0,1,a49729256e9578edc15cd65f159201c96db1995a4fa353232a1d8f490de6e8a3,2025-10-28T15:24:15.930000 +CVE-2025-62579,0,0,a49729256e9578edc15cd65f159201c96db1995a4fa353232a1d8f490de6e8a3,2025-10-28T15:24:15.930000 CVE-2025-6258,0,0,a4b6be5935c4432c7a129304f469494da82c625050798afddedddfa563a7fe1e,2025-06-26T18:57:43.670000 -CVE-2025-62580,0,1,2680cdc42d2a69a81d72ec9739561981fb835132a129787316a1b55c0c829c71,2025-10-28T15:23:20.707000 +CVE-2025-62580,0,0,2680cdc42d2a69a81d72ec9739561981fb835132a129787316a1b55c0c829c71,2025-10-28T15:23:20.707000 CVE-2025-62583,0,0,b7efc690f1961486c672d56b64acefee08c8372b8b7169056840e396ed1eb094,2025-10-21T13:26:06.710000 CVE-2025-62584,0,0,f1289df5bd814dadc33c33f050d0b892aa27627546c6ebea3f414c4dfed36c8d,2025-10-21T13:24:55.783000 CVE-2025-62585,0,0,49158c21ee03e6b2fe3dc18c996c1641a432069a5357478462ff722d49aefeb7,2025-10-21T13:13:19.683000 @@ -312572,7 +312580,7 @@ CVE-2025-62595,0,0,e00ef1096cde2ef474100abac53c55eb3f02c17b43bb9b554ce59e805c15a CVE-2025-62597,0,0,599516fb5e4182c3a840c451b3bd88579cd7fa85528c5943a0a42fad0f390b74,2025-10-24T15:43:55.920000 CVE-2025-62598,0,0,4f6e9447c8ea842a700ae84a8ab137dd21cda8a5685703b4e9e64d79f013872d,2025-10-22T14:19:55.570000 CVE-2025-6260,0,0,31d8a8fe623c3eb38350582f7b8664017a796cede476db64c602981f5d92a0b2,2025-07-25T15:29:19.837000 -CVE-2025-62604,0,1,14415626bcfc446c606065f42ddab1d196db15735a343758160e8d5f18ca77d8,2025-10-28T16:26:07.087000 +CVE-2025-62604,0,0,14415626bcfc446c606065f42ddab1d196db15735a343758160e8d5f18ca77d8,2025-10-28T16:26:07.087000 CVE-2025-62605,0,0,d5b694693552403f0b0ef20e4c4d827e0f929c0f72fd638d84cd4c89f507bafa,2025-10-21T19:31:25.450000 CVE-2025-62606,0,0,2f6df00397541c15e46f4c6766a03b11a45eb9a3e48c376a6ce5b7683f6c5ceb,2025-10-22T21:12:32.330000 CVE-2025-62607,0,0,f49fcd813cbab490dd3279a2af8af2145168cab2580833defcc7d0f6549131af,2025-10-22T21:12:32.330000 @@ -312595,7 +312603,7 @@ CVE-2025-62639,0,0,c512ada2039406b2a13791e7533209bd3d3a8f38ddee8ab4a25d563582201 CVE-2025-6264,0,0,0d033a9638e3891b2fd010ff13d02eb48a15553ae60fdf9d714728fb6487984d,2025-10-23T01:00:00.913000 CVE-2025-62640,0,0,c66e71a1ff78ffc22ed6b4148f4f8144f96b702de8c909601414357f63da1758,2025-10-18T03:15:47.790000 CVE-2025-62641,0,0,dded4052ead6529f449a52183c3f46ae264469a06d946f2d2b57e39ccd91e1ec,2025-10-23T15:59:57.090000 -CVE-2025-62642,0,1,a424454285ac43a6044889e71e87af4ee7a205d903ee16a889ff355509765923,2025-10-28T16:39:50.600000 +CVE-2025-62642,0,0,a424454285ac43a6044889e71e87af4ee7a205d903ee16a889ff355509765923,2025-10-28T16:39:50.600000 CVE-2025-62643,0,0,debf05d6d10584a686a5ef4bef411c86f3bd3929567f4d832d8a693e220c3344,2025-10-21T19:31:50.020000 CVE-2025-62644,0,0,8ed299273f44a00f993db5bb6dfba2a4312736d1ea094c58c53acf74f0b77cda,2025-10-21T19:31:50.020000 CVE-2025-62645,0,0,31f64e9d3cab66d0a73b6480afa9d59887c83f6997956a31f4bed8a448eef738,2025-10-21T19:31:50.020000 @@ -314377,12 +314385,12 @@ CVE-2025-8043,0,0,ea75f7b96fdb55c7ce83fa93dfc922e086127e42b93b61e17f62a28c1cf968 CVE-2025-8044,0,0,bd829c463fd9867038fa2f74dc8556634c8cc8bff22ebd66d04dce053d366c0f,2025-07-28T14:09:07.917000 CVE-2025-8046,0,0,7dcaea1647f9e5309f772cc92b68450862dfd94c600278d186011798f2097497,2025-08-14T15:15:42.650000 CVE-2025-8047,0,0,5e4bd4476edc92359760c2bdd2becfcc8a4845fae5e615d0ae4a9fe19d384f5a,2025-08-14T15:15:42.840000 -CVE-2025-8048,0,1,44fd817765f96d3f08b98ce12ce3d0c1014536afb3109eb7a47c1ddab93b9149,2025-10-28T16:12:50.687000 -CVE-2025-8049,0,1,2aef254733e3e5f2cad3347ad200f8029967e3621e4185b8a27d4ded9935a898,2025-10-28T16:11:07.157000 -CVE-2025-8050,0,1,828652095f75c4ea124eab202c566fe6f1447a9d070f5d1ae9cc5fd540ceb7ec,2025-10-28T16:16:46.493000 -CVE-2025-8051,0,1,438ffc7a7306e49a0266f555c12f7f0038d617f78a5b6635f6c8bdcda6ae4c5f,2025-10-28T16:14:35.167000 -CVE-2025-8052,0,1,115e6153a1151e62843ac8e5e52cbb9d84659664feb61482c410733f2b2b932a,2025-10-28T16:10:43.003000 -CVE-2025-8053,0,1,359ce49c6651db11d17e54517448372e4d1d0aaa22ca961e508cd055c9924930,2025-10-28T16:08:51.997000 +CVE-2025-8048,0,0,44fd817765f96d3f08b98ce12ce3d0c1014536afb3109eb7a47c1ddab93b9149,2025-10-28T16:12:50.687000 +CVE-2025-8049,0,0,2aef254733e3e5f2cad3347ad200f8029967e3621e4185b8a27d4ded9935a898,2025-10-28T16:11:07.157000 +CVE-2025-8050,0,0,828652095f75c4ea124eab202c566fe6f1447a9d070f5d1ae9cc5fd540ceb7ec,2025-10-28T16:16:46.493000 +CVE-2025-8051,0,0,438ffc7a7306e49a0266f555c12f7f0038d617f78a5b6635f6c8bdcda6ae4c5f,2025-10-28T16:14:35.167000 +CVE-2025-8052,0,0,115e6153a1151e62843ac8e5e52cbb9d84659664feb61482c410733f2b2b932a,2025-10-28T16:10:43.003000 +CVE-2025-8053,0,0,359ce49c6651db11d17e54517448372e4d1d0aaa22ca961e508cd055c9924930,2025-10-28T16:08:51.997000 CVE-2025-8057,0,0,bd2784b3940cbab61ce38f70ad9f93cde5cd29cd762adc58ab2492edbdbe5818,2025-09-17T14:18:55.093000 CVE-2025-8058,0,0,60b0ed3c7ddeb8612a48b2fdd8ab4cf17c1b42ba9e3f774771d76dc2258e2bcd,2025-07-25T15:29:44.523000 CVE-2025-8059,0,0,ba99f6ade890b7f68ee2d12e4c58195aa7ecc119d8c64e4066091850d06144a1,2025-08-12T14:25:33.177000 @@ -314934,7 +314942,7 @@ CVE-2025-8705,0,0,762380c726bda59b2e5ae1ebc82985d3504fabcc47fb08b4b4f1bc2c2b3580 CVE-2025-8706,0,0,620f9042948285f922e7a06a03425478134c31aae47b182b9d2785b21305dc87,2025-09-02T19:21:57.547000 CVE-2025-8707,0,0,08b6fc193d647b5bdd8cc3dbc46b93d447a54ca5fa96295a5f10909cf3732296,2025-09-16T18:27:52.163000 CVE-2025-8708,0,0,c0412fe8b90e05710a555d2b4279ac33151442ba4e349de7fb4f6b2e08dd5b59,2025-08-21T20:54:32.210000 -CVE-2025-8709,0,1,b8b17a422aabcd1fc4aa8648334efd61fa593babac1807b967b18afb5e390c4f,2025-10-28T15:16:13.970000 +CVE-2025-8709,0,0,b8b17a422aabcd1fc4aa8648334efd61fa593babac1807b967b18afb5e390c4f,2025-10-28T15:16:13.970000 CVE-2025-8711,0,0,15c05b3c8d19872bb41105f5a4471139b55142b1e3e691f1d7a0dfcc40835477,2025-09-24T19:58:44.190000 CVE-2025-8712,0,0,5f4597f1723c6ea555ee479c17efeeeb1d8abd4cb174988b23eb297111ce566c,2025-09-24T19:56:42.603000 CVE-2025-8713,0,0,44f7abee99d43d4f704a2464bc94f25aa3e6edfb94deeb3f71f32274a67f2715,2025-08-15T13:13:07.817000 @@ -315247,8 +315255,8 @@ CVE-2025-9058,0,0,c13ac54850c9b1566d57d38e161998769d450eb60323fb8c4ab1eb2cf569f4 CVE-2025-9059,0,0,427226f91d8abe3fe2bb2fdb77425321ee5814b37bb78cfc2bbfbdb74af29750,2025-09-11T17:14:10.147000 CVE-2025-9060,0,0,e9eee4b261fa1fc302e3f3c389a4ed2fe42aeec88abcba4a1a09e8fc026ff451,2025-08-18T20:16:28.750000 CVE-2025-9061,0,0,97bbe1854f47dace4384aa4073b04b8986fe8215ac51fd14da8dddc4f0f7d269,2025-09-09T16:28:43.660000 -CVE-2025-9063,0,1,f1813685283342a35d2cfabdb7f800baa5aebe89255ce055c86579f06732696a,2025-10-28T15:30:39.437000 -CVE-2025-9064,0,1,57123bd83c5c754b5a5edfa1a0c28e3337c16b385861dbad19de6241c915e8ee,2025-10-28T15:20:33.767000 +CVE-2025-9063,0,0,f1813685283342a35d2cfabdb7f800baa5aebe89255ce055c86579f06732696a,2025-10-28T15:30:39.437000 +CVE-2025-9064,0,0,57123bd83c5c754b5a5edfa1a0c28e3337c16b385861dbad19de6241c915e8ee,2025-10-28T15:20:33.767000 CVE-2025-9065,0,0,1a69a7e799d68ad3f16e7241a538923bbe2ee5fce948d3da5d993e7dbcdbe10b,2025-10-20T19:17:27.270000 CVE-2025-9066,0,0,f741a831ec4c8b40924128b8af0fef64500187e71a6bb98bc5f85984cad7d199,2025-10-14T19:36:29.240000 CVE-2025-9067,0,0,04c24dc05ffc74479a75e04e97f4675e8bb6cda806aeefb442875bed94a64678,2025-10-20T20:16:24.947000