From 185cd73519d63ff66fc0403da95d2a1154c0a42d Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Wed, 21 May 2025 16:03:57 +0000 Subject: [PATCH] Auto-Update: 2025-05-21T16:00:19.999702+00:00 --- CVE-2019/CVE-2019-165xx/CVE-2019-16536.json | 78 ++++++ CVE-2021/CVE-2021-252xx/CVE-2021-25254.json | 78 ++++++ CVE-2021/CVE-2021-252xx/CVE-2021-25255.json | 78 ++++++ CVE-2021/CVE-2021-252xx/CVE-2021-25262.json | 78 ++++++ CVE-2021/CVE-2021-278xx/CVE-2021-27854.json | 22 +- CVE-2021/CVE-2021-278xx/CVE-2021-27861.json | 22 +- CVE-2021/CVE-2021-278xx/CVE-2021-27862.json | 22 +- CVE-2021/CVE-2021-414xx/CVE-2021-41433.json | 32 ++- CVE-2021/CVE-2021-439xx/CVE-2021-43980.json | 24 +- CVE-2022/CVE-2022-12xx/CVE-2022-1270.json | 24 +- CVE-2022/CVE-2022-237xx/CVE-2022-23716.json | 22 +- CVE-2022/CVE-2022-27xx/CVE-2022-2760.json | 32 ++- CVE-2022/CVE-2022-309xx/CVE-2022-30935.json | 32 ++- CVE-2022/CVE-2022-321xx/CVE-2022-32166.json | 29 +- CVE-2022/CVE-2022-321xx/CVE-2022-32168.json | 24 +- CVE-2022/CVE-2022-321xx/CVE-2022-32169.json | 27 +- CVE-2022/CVE-2022-321xx/CVE-2022-32170.json | 29 +- CVE-2022/CVE-2022-33xx/CVE-2022-3323.json | 32 ++- CVE-2022/CVE-2022-364xx/CVE-2022-36448.json | 32 ++- CVE-2022/CVE-2022-367xx/CVE-2022-36771.json | 12 +- CVE-2022/CVE-2022-370xx/CVE-2022-37028.json | 32 ++- CVE-2022/CVE-2022-383xx/CVE-2022-38335.json | 32 ++- CVE-2022/CVE-2022-389xx/CVE-2022-38932.json | 32 ++- CVE-2022/CVE-2022-389xx/CVE-2022-38934.json | 32 ++- CVE-2022/CVE-2022-400xx/CVE-2022-40082.json | 32 ++- CVE-2022/CVE-2022-400xx/CVE-2022-40083.json | 32 ++- CVE-2022/CVE-2022-401xx/CVE-2022-40126.json | 32 ++- CVE-2022/CVE-2022-403xx/CVE-2022-40354.json | 32 ++- CVE-2022/CVE-2022-403xx/CVE-2022-40363.json | 32 ++- CVE-2022/CVE-2022-404xx/CVE-2022-40475.json | 32 ++- CVE-2022/CVE-2022-404xx/CVE-2022-40486.json | 32 ++- CVE-2022/CVE-2022-404xx/CVE-2022-40497.json | 32 ++- CVE-2022/CVE-2022-408xx/CVE-2022-40816.json | 32 ++- CVE-2022/CVE-2022-408xx/CVE-2022-40817.json | 32 ++- CVE-2022/CVE-2022-408xx/CVE-2022-40877.json | 32 ++- CVE-2022/CVE-2022-408xx/CVE-2022-40878.json | 32 ++- CVE-2022/CVE-2022-408xx/CVE-2022-40890.json | 32 ++- CVE-2022/CVE-2022-409xx/CVE-2022-40929.json | 32 ++- CVE-2022/CVE-2022-409xx/CVE-2022-40942.json | 32 ++- CVE-2023/CVE-2023-495xx/CVE-2023-49572.json | 8 +- CVE-2023/CVE-2023-495xx/CVE-2023-49575.json | 8 +- CVE-2024/CVE-2024-118xx/CVE-2024-11831.json | 6 +- CVE-2024/CVE-2024-125xx/CVE-2024-12561.json | 60 +++++ CVE-2024/CVE-2024-138xx/CVE-2024-13868.json | 28 +- CVE-2024/CVE-2024-233xx/CVE-2024-23337.json | 68 +++++ CVE-2024/CVE-2024-331xx/CVE-2024-33110.json | 44 ++- CVE-2024/CVE-2024-331xx/CVE-2024-33111.json | 44 ++- CVE-2024/CVE-2024-331xx/CVE-2024-33112.json | 50 +++- CVE-2024/CVE-2024-331xx/CVE-2024-33113.json | 44 ++- CVE-2024/CVE-2024-333xx/CVE-2024-33342.json | 55 +++- CVE-2024/CVE-2024-333xx/CVE-2024-33343.json | 55 +++- CVE-2024/CVE-2024-333xx/CVE-2024-33344.json | 55 +++- CVE-2024/CVE-2024-333xx/CVE-2024-33345.json | 55 +++- CVE-2024/CVE-2024-337xx/CVE-2024-33771.json | 45 +++- CVE-2024/CVE-2024-337xx/CVE-2024-33772.json | 45 +++- CVE-2024/CVE-2024-337xx/CVE-2024-33773.json | 45 +++- CVE-2024/CVE-2024-337xx/CVE-2024-33774.json | 45 +++- CVE-2024/CVE-2024-349xx/CVE-2024-34950.json | 45 +++- CVE-2024/CVE-2024-368xx/CVE-2024-36831.json | 53 +++- CVE-2024/CVE-2024-368xx/CVE-2024-36832.json | 53 +++- CVE-2024/CVE-2024-376xx/CVE-2024-37605.json | 53 +++- CVE-2024/CVE-2024-376xx/CVE-2024-37606.json | 80 +++++- CVE-2024/CVE-2024-410xx/CVE-2024-41057.json | 12 +- CVE-2024/CVE-2024-420xx/CVE-2024-42093.json | 12 +- CVE-2024/CVE-2024-429xx/CVE-2024-42922.json | 21 ++ CVE-2024/CVE-2024-444xx/CVE-2024-44411.json | 49 +++- CVE-2024/CVE-2024-445xx/CVE-2024-44589.json | 44 ++- CVE-2024/CVE-2024-446xx/CVE-2024-44674.json | 44 ++- CVE-2024/CVE-2024-479xx/CVE-2024-47939.json | 8 +- CVE-2024/CVE-2024-481xx/CVE-2024-48150.json | 38 ++- CVE-2024/CVE-2024-482xx/CVE-2024-48246.json | 28 +- CVE-2024/CVE-2024-507xx/CVE-2024-50705.json | 37 ++- CVE-2024/CVE-2024-564xx/CVE-2024-56429.json | 60 +++++ CVE-2024/CVE-2024-566xx/CVE-2024-56662.json | 12 +- CVE-2024/CVE-2024-570xx/CVE-2024-57045.json | 45 +++- CVE-2024/CVE-2024-72xx/CVE-2024-7253.json | 6 +- CVE-2025/CVE-2025-06xx/CVE-2025-0624.json | 6 +- CVE-2025/CVE-2025-14xx/CVE-2025-1415.json | 82 ++++++ CVE-2025/CVE-2025-14xx/CVE-2025-1416.json | 82 ++++++ CVE-2025/CVE-2025-14xx/CVE-2025-1417.json | 82 ++++++ CVE-2025/CVE-2025-14xx/CVE-2025-1418.json | 82 ++++++ CVE-2025/CVE-2025-14xx/CVE-2025-1419.json | 82 ++++++ CVE-2025/CVE-2025-14xx/CVE-2025-1420.json | 82 ++++++ CVE-2025/CVE-2025-14xx/CVE-2025-1421.json | 82 ++++++ CVE-2025/CVE-2025-17xx/CVE-2025-1712.json | 78 ++++++ CVE-2025/CVE-2025-19xx/CVE-2025-1955.json | 82 +++++- CVE-2025/CVE-2025-260xx/CVE-2025-26091.json | 28 +- CVE-2025/CVE-2025-278xx/CVE-2025-27803.json | 33 +++ CVE-2025/CVE-2025-278xx/CVE-2025-27804.json | 33 +++ CVE-2025/CVE-2025-330xx/CVE-2025-33072.json | 58 +++- CVE-2025/CVE-2025-37xx/CVE-2025-3750.json | 64 +++++ CVE-2025/CVE-2025-37xx/CVE-2025-3781.json | 64 +++++ CVE-2025/CVE-2025-38xx/CVE-2025-3810.json | 32 ++- CVE-2025/CVE-2025-38xx/CVE-2025-3811.json | 52 +++- CVE-2025/CVE-2025-38xx/CVE-2025-3876.json | 67 ++++- CVE-2025/CVE-2025-38xx/CVE-2025-3878.json | 64 ++++- CVE-2025/CVE-2025-394xx/CVE-2025-39481.json | 47 +++- CVE-2025/CVE-2025-407xx/CVE-2025-40775.json | 60 +++++ CVE-2025/CVE-2025-40xx/CVE-2025-4094.json | 21 ++ CVE-2025/CVE-2025-412xx/CVE-2025-41232.json | 56 ++++ CVE-2025/CVE-2025-41xx/CVE-2025-4105.json | 64 +++++ CVE-2025/CVE-2025-42xx/CVE-2025-4217.json | 60 +++++ CVE-2025/CVE-2025-42xx/CVE-2025-4219.json | 60 +++++ CVE-2025/CVE-2025-42xx/CVE-2025-4221.json | 60 +++++ CVE-2025/CVE-2025-448xx/CVE-2025-44880.json | 39 ++- CVE-2025/CVE-2025-448xx/CVE-2025-44881.json | 39 ++- CVE-2025/CVE-2025-448xx/CVE-2025-44882.json | 39 ++- CVE-2025/CVE-2025-448xx/CVE-2025-44883.json | 39 ++- CVE-2025/CVE-2025-448xx/CVE-2025-44884.json | 39 ++- CVE-2025/CVE-2025-448xx/CVE-2025-44885.json | 39 ++- CVE-2025/CVE-2025-448xx/CVE-2025-44886.json | 27 +- CVE-2025/CVE-2025-448xx/CVE-2025-44887.json | 39 ++- CVE-2025/CVE-2025-448xx/CVE-2025-44888.json | 39 ++- CVE-2025/CVE-2025-448xx/CVE-2025-44890.json | 39 ++- CVE-2025/CVE-2025-448xx/CVE-2025-44891.json | 39 ++- CVE-2025/CVE-2025-448xx/CVE-2025-44892.json | 21 ++ CVE-2025/CVE-2025-448xx/CVE-2025-44893.json | 39 ++- CVE-2025/CVE-2025-448xx/CVE-2025-44894.json | 39 ++- CVE-2025/CVE-2025-448xx/CVE-2025-44895.json | 21 ++ CVE-2025/CVE-2025-448xx/CVE-2025-44896.json | 39 ++- CVE-2025/CVE-2025-448xx/CVE-2025-44897.json | 39 ++- CVE-2025/CVE-2025-448xx/CVE-2025-44898.json | 39 ++- CVE-2025/CVE-2025-457xx/CVE-2025-45746.json | 54 ++-- CVE-2025/CVE-2025-45xx/CVE-2025-4524.json | 60 +++++ CVE-2025/CVE-2025-46xx/CVE-2025-4611.json | 80 ++++++ CVE-2025/CVE-2025-477xx/CVE-2025-47732.json | 58 +++- CVE-2025/CVE-2025-477xx/CVE-2025-47733.json | 48 +++- CVE-2025/CVE-2025-47xx/CVE-2025-4756.json | 85 +++++- CVE-2025/CVE-2025-47xx/CVE-2025-4771.json | 87 +++++- CVE-2025/CVE-2025-47xx/CVE-2025-4773.json | 94 ++++++- CVE-2025/CVE-2025-47xx/CVE-2025-4777.json | 87 +++++- CVE-2025/CVE-2025-484xx/CVE-2025-48413.json | 56 ++++ CVE-2025/CVE-2025-484xx/CVE-2025-48414.json | 33 +++ CVE-2025/CVE-2025-484xx/CVE-2025-48415.json | 33 +++ CVE-2025/CVE-2025-484xx/CVE-2025-48416.json | 33 +++ CVE-2025/CVE-2025-484xx/CVE-2025-48417.json | 56 ++++ CVE-2025/CVE-2025-484xx/CVE-2025-48419.json | 16 ++ CVE-2025/CVE-2025-484xx/CVE-2025-48420.json | 16 ++ CVE-2025/CVE-2025-484xx/CVE-2025-48421.json | 16 ++ CVE-2025/CVE-2025-484xx/CVE-2025-48422.json | 16 ++ CVE-2025/CVE-2025-484xx/CVE-2025-48423.json | 16 ++ CVE-2025/CVE-2025-484xx/CVE-2025-48424.json | 16 ++ CVE-2025/CVE-2025-484xx/CVE-2025-48425.json | 16 ++ CVE-2025/CVE-2025-484xx/CVE-2025-48426.json | 16 ++ CVE-2025/CVE-2025-484xx/CVE-2025-48427.json | 16 ++ CVE-2025/CVE-2025-48xx/CVE-2025-4803.json | 68 +++++ CVE-2025/CVE-2025-49xx/CVE-2025-4901.json | 99 ++++++- CVE-2025/CVE-2025-49xx/CVE-2025-4902.json | 99 ++++++- CVE-2025/CVE-2025-49xx/CVE-2025-4911.json | 86 +++++- CVE-2025/CVE-2025-49xx/CVE-2025-4925.json | 87 +++++- CVE-2025/CVE-2025-49xx/CVE-2025-4926.json | 87 +++++- CVE-2025/CVE-2025-49xx/CVE-2025-4927.json | 86 +++++- CVE-2025/CVE-2025-49xx/CVE-2025-4949.json | 94 +++++++ CVE-2025/CVE-2025-49xx/CVE-2025-4969.json | 60 +++++ CVE-2025/CVE-2025-50xx/CVE-2025-5001.json | 10 +- CVE-2025/CVE-2025-50xx/CVE-2025-5002.json | 10 +- CVE-2025/CVE-2025-50xx/CVE-2025-5003.json | 10 +- CVE-2025/CVE-2025-50xx/CVE-2025-5004.json | 10 +- CVE-2025/CVE-2025-50xx/CVE-2025-5006.json | 10 +- CVE-2025/CVE-2025-50xx/CVE-2025-5013.json | 137 ++++++++++ CVE-2025/CVE-2025-50xx/CVE-2025-5029.json | 145 ++++++++++ README.md | 65 ++++- _state.csv | 282 ++++++++++++-------- 163 files changed, 7047 insertions(+), 520 deletions(-) create mode 100644 CVE-2019/CVE-2019-165xx/CVE-2019-16536.json create mode 100644 CVE-2021/CVE-2021-252xx/CVE-2021-25254.json create mode 100644 CVE-2021/CVE-2021-252xx/CVE-2021-25255.json create mode 100644 CVE-2021/CVE-2021-252xx/CVE-2021-25262.json create mode 100644 CVE-2024/CVE-2024-125xx/CVE-2024-12561.json create mode 100644 CVE-2024/CVE-2024-233xx/CVE-2024-23337.json create mode 100644 CVE-2024/CVE-2024-429xx/CVE-2024-42922.json create mode 100644 CVE-2024/CVE-2024-564xx/CVE-2024-56429.json create mode 100644 CVE-2025/CVE-2025-14xx/CVE-2025-1415.json create mode 100644 CVE-2025/CVE-2025-14xx/CVE-2025-1416.json create mode 100644 CVE-2025/CVE-2025-14xx/CVE-2025-1417.json create mode 100644 CVE-2025/CVE-2025-14xx/CVE-2025-1418.json create mode 100644 CVE-2025/CVE-2025-14xx/CVE-2025-1419.json create mode 100644 CVE-2025/CVE-2025-14xx/CVE-2025-1420.json create mode 100644 CVE-2025/CVE-2025-14xx/CVE-2025-1421.json create mode 100644 CVE-2025/CVE-2025-17xx/CVE-2025-1712.json create mode 100644 CVE-2025/CVE-2025-278xx/CVE-2025-27803.json create mode 100644 CVE-2025/CVE-2025-278xx/CVE-2025-27804.json create mode 100644 CVE-2025/CVE-2025-37xx/CVE-2025-3750.json create mode 100644 CVE-2025/CVE-2025-37xx/CVE-2025-3781.json create mode 100644 CVE-2025/CVE-2025-407xx/CVE-2025-40775.json create mode 100644 CVE-2025/CVE-2025-40xx/CVE-2025-4094.json create mode 100644 CVE-2025/CVE-2025-412xx/CVE-2025-41232.json create mode 100644 CVE-2025/CVE-2025-41xx/CVE-2025-4105.json create mode 100644 CVE-2025/CVE-2025-42xx/CVE-2025-4217.json create mode 100644 CVE-2025/CVE-2025-42xx/CVE-2025-4219.json create mode 100644 CVE-2025/CVE-2025-42xx/CVE-2025-4221.json create mode 100644 CVE-2025/CVE-2025-448xx/CVE-2025-44892.json create mode 100644 CVE-2025/CVE-2025-448xx/CVE-2025-44895.json create mode 100644 CVE-2025/CVE-2025-45xx/CVE-2025-4524.json create mode 100644 CVE-2025/CVE-2025-46xx/CVE-2025-4611.json create mode 100644 CVE-2025/CVE-2025-484xx/CVE-2025-48413.json create mode 100644 CVE-2025/CVE-2025-484xx/CVE-2025-48414.json create mode 100644 CVE-2025/CVE-2025-484xx/CVE-2025-48415.json create mode 100644 CVE-2025/CVE-2025-484xx/CVE-2025-48416.json create mode 100644 CVE-2025/CVE-2025-484xx/CVE-2025-48417.json create mode 100644 CVE-2025/CVE-2025-484xx/CVE-2025-48419.json create mode 100644 CVE-2025/CVE-2025-484xx/CVE-2025-48420.json create mode 100644 CVE-2025/CVE-2025-484xx/CVE-2025-48421.json create mode 100644 CVE-2025/CVE-2025-484xx/CVE-2025-48422.json create mode 100644 CVE-2025/CVE-2025-484xx/CVE-2025-48423.json create mode 100644 CVE-2025/CVE-2025-484xx/CVE-2025-48424.json create mode 100644 CVE-2025/CVE-2025-484xx/CVE-2025-48425.json create mode 100644 CVE-2025/CVE-2025-484xx/CVE-2025-48426.json create mode 100644 CVE-2025/CVE-2025-484xx/CVE-2025-48427.json create mode 100644 CVE-2025/CVE-2025-48xx/CVE-2025-4803.json create mode 100644 CVE-2025/CVE-2025-49xx/CVE-2025-4949.json create mode 100644 CVE-2025/CVE-2025-49xx/CVE-2025-4969.json create mode 100644 CVE-2025/CVE-2025-50xx/CVE-2025-5013.json create mode 100644 CVE-2025/CVE-2025-50xx/CVE-2025-5029.json diff --git a/CVE-2019/CVE-2019-165xx/CVE-2019-16536.json b/CVE-2019/CVE-2019-165xx/CVE-2019-16536.json new file mode 100644 index 00000000000..a1c75991119 --- /dev/null +++ b/CVE-2019/CVE-2019-165xx/CVE-2019-16536.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2019-16536", + "sourceIdentifier": "browser-security@yandex-team.ru", + "published": "2025-05-21T08:15:26.233", + "lastModified": "2025-05-21T08:15:26.233", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "browser-security@yandex-team.ru", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "browser-security@yandex-team.ru", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + } + ] + } + ], + "references": [ + { + "url": "https://clickhouse.com/docs/whats-new/security-changelog", + "source": "browser-security@yandex-team.ru" + } + ] +} \ No newline at end of file diff --git a/CVE-2021/CVE-2021-252xx/CVE-2021-25254.json b/CVE-2021/CVE-2021-252xx/CVE-2021-25254.json new file mode 100644 index 00000000000..c69f65b0219 --- /dev/null +++ b/CVE-2021/CVE-2021-252xx/CVE-2021-25254.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2021-25254", + "sourceIdentifier": "browser-security@yandex-team.ru", + "published": "2025-05-21T07:15:59.357", + "lastModified": "2025-05-21T07:15:59.357", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "browser-security@yandex-team.ru", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "browser-security@yandex-team.ru", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-116" + } + ] + } + ], + "references": [ + { + "url": "https://yandex.com/bugbounty/i/hall-of-fame-browser/", + "source": "browser-security@yandex-team.ru" + } + ] +} \ No newline at end of file diff --git a/CVE-2021/CVE-2021-252xx/CVE-2021-25255.json b/CVE-2021/CVE-2021-252xx/CVE-2021-25255.json new file mode 100644 index 00000000000..deae7fc4858 --- /dev/null +++ b/CVE-2021/CVE-2021-252xx/CVE-2021-25255.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2021-25255", + "sourceIdentifier": "browser-security@yandex-team.ru", + "published": "2025-05-21T07:16:00.500", + "lastModified": "2025-05-21T07:16:00.500", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "browser-security@yandex-team.ru", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "browser-security@yandex-team.ru", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://yandex.com/bugbounty/i/hall-of-fame-browser/", + "source": "browser-security@yandex-team.ru" + } + ] +} \ No newline at end of file diff --git a/CVE-2021/CVE-2021-252xx/CVE-2021-25262.json b/CVE-2021/CVE-2021-252xx/CVE-2021-25262.json new file mode 100644 index 00000000000..e09936e013e --- /dev/null +++ b/CVE-2021/CVE-2021-252xx/CVE-2021-25262.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2021-25262", + "sourceIdentifier": "browser-security@yandex-team.ru", + "published": "2025-05-21T07:16:00.653", + "lastModified": "2025-05-21T07:16:00.653", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "browser-security@yandex-team.ru", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "browser-security@yandex-team.ru", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-116" + } + ] + } + ], + "references": [ + { + "url": "https://yandex.com/bugbounty/i/hall-of-fame-browser/", + "source": "browser-security@yandex-team.ru" + } + ] +} \ No newline at end of file diff --git a/CVE-2021/CVE-2021-278xx/CVE-2021-27854.json b/CVE-2021/CVE-2021-278xx/CVE-2021-27854.json index 9488a8b2bdd..541ae77c947 100644 --- a/CVE-2021/CVE-2021-278xx/CVE-2021-27854.json +++ b/CVE-2021/CVE-2021-278xx/CVE-2021-27854.json @@ -2,7 +2,7 @@ "id": "CVE-2021-27854", "sourceIdentifier": "cret@cert.org", "published": "2022-09-27T19:15:09.240", - "lastModified": "2024-11-21T05:58:38.640", + "lastModified": "2025-05-21T15:15:54.267", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 } ] }, diff --git a/CVE-2021/CVE-2021-278xx/CVE-2021-27861.json b/CVE-2021/CVE-2021-278xx/CVE-2021-27861.json index 0ecb71c1512..752210c822d 100644 --- a/CVE-2021/CVE-2021-278xx/CVE-2021-27861.json +++ b/CVE-2021/CVE-2021-278xx/CVE-2021-27861.json @@ -2,7 +2,7 @@ "id": "CVE-2021-27861", "sourceIdentifier": "cret@cert.org", "published": "2022-09-27T19:15:09.330", - "lastModified": "2024-11-21T05:58:39.770", + "lastModified": "2025-05-21T15:15:54.530", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 } ] }, diff --git a/CVE-2021/CVE-2021-278xx/CVE-2021-27862.json b/CVE-2021/CVE-2021-278xx/CVE-2021-27862.json index a0dd4d3a71c..75f331746d2 100644 --- a/CVE-2021/CVE-2021-278xx/CVE-2021-27862.json +++ b/CVE-2021/CVE-2021-278xx/CVE-2021-27862.json @@ -2,7 +2,7 @@ "id": "CVE-2021-27862", "sourceIdentifier": "cret@cert.org", "published": "2022-09-27T19:15:09.403", - "lastModified": "2024-11-21T05:58:39.887", + "lastModified": "2025-05-21T15:15:54.743", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 } ] }, diff --git a/CVE-2021/CVE-2021-414xx/CVE-2021-41433.json b/CVE-2021/CVE-2021-414xx/CVE-2021-41433.json index c8f54d8203d..b83ccc25d85 100644 --- a/CVE-2021/CVE-2021-414xx/CVE-2021-41433.json +++ b/CVE-2021/CVE-2021-414xx/CVE-2021-41433.json @@ -2,7 +2,7 @@ "id": "CVE-2021-41433", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-27T23:15:12.457", - "lastModified": "2024-11-21T06:26:14.560", + "lastModified": "2025-05-21T15:15:54.990", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-89" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] } ], "configurations": [ diff --git a/CVE-2021/CVE-2021-439xx/CVE-2021-43980.json b/CVE-2021/CVE-2021-439xx/CVE-2021-43980.json index 51d05989453..aeb7e60e140 100644 --- a/CVE-2021/CVE-2021-439xx/CVE-2021-43980.json +++ b/CVE-2021/CVE-2021-439xx/CVE-2021-43980.json @@ -2,7 +2,7 @@ "id": "CVE-2021-43980", "sourceIdentifier": "security@apache.org", "published": "2022-09-28T14:15:09.880", - "lastModified": "2024-11-21T06:30:08.243", + "lastModified": "2025-05-21T15:15:55.223", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,13 +36,33 @@ }, "exploitabilityScore": 2.2, "impactScore": 1.4 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 3.7, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.2, + "impactScore": 1.4 } ] }, "weaknesses": [ { "source": "security@apache.org", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2022/CVE-2022-12xx/CVE-2022-1270.json b/CVE-2022/CVE-2022-12xx/CVE-2022-1270.json index 8b6082e1e32..eb7737d0d5f 100644 --- a/CVE-2022/CVE-2022-12xx/CVE-2022-1270.json +++ b/CVE-2022/CVE-2022-12xx/CVE-2022-1270.json @@ -2,7 +2,7 @@ "id": "CVE-2022-1270", "sourceIdentifier": "secalert@redhat.com", "published": "2022-09-28T20:15:10.647", - "lastModified": "2024-11-21T06:40:22.903", + "lastModified": "2025-05-21T15:15:55.473", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,13 +36,33 @@ }, "exploitabilityScore": 1.8, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 } ] }, "weaknesses": [ { "source": "secalert@redhat.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2022/CVE-2022-237xx/CVE-2022-23716.json b/CVE-2022/CVE-2022-237xx/CVE-2022-23716.json index 1afec84b8ee..e149f1a09df 100644 --- a/CVE-2022/CVE-2022-237xx/CVE-2022-23716.json +++ b/CVE-2022/CVE-2022-237xx/CVE-2022-23716.json @@ -2,7 +2,7 @@ "id": "CVE-2022-23716", "sourceIdentifier": "bressers@elastic.co", "published": "2022-09-28T20:15:11.307", - "lastModified": "2024-11-21T06:49:10.117", + "lastModified": "2025-05-21T15:15:56.133", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 1.4 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 } ] }, diff --git a/CVE-2022/CVE-2022-27xx/CVE-2022-2760.json b/CVE-2022/CVE-2022-27xx/CVE-2022-2760.json index 467b37797f7..49487500511 100644 --- a/CVE-2022/CVE-2022-27xx/CVE-2022-2760.json +++ b/CVE-2022/CVE-2022-27xx/CVE-2022-2760.json @@ -2,7 +2,7 @@ "id": "CVE-2022-2760", "sourceIdentifier": "security@octopus.com", "published": "2022-09-28T12:15:09.553", - "lastModified": "2024-11-21T07:01:39.310", + "lastModified": "2025-05-21T15:15:56.493", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-209" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-209" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-309xx/CVE-2022-30935.json b/CVE-2022/CVE-2022-309xx/CVE-2022-30935.json index e869bf5b63b..f2e20146bad 100644 --- a/CVE-2022/CVE-2022-309xx/CVE-2022-30935.json +++ b/CVE-2022/CVE-2022-309xx/CVE-2022-30935.json @@ -2,7 +2,7 @@ "id": "CVE-2022-30935", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-28T11:15:09.593", - "lastModified": "2024-11-21T07:03:35.850", + "lastModified": "2025-05-21T14:15:24.050", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.2 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", + "baseScore": 9.1, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.2 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-330" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-330" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-321xx/CVE-2022-32166.json b/CVE-2022/CVE-2022-321xx/CVE-2022-32166.json index f20533faf6d..a53e063a16c 100644 --- a/CVE-2022/CVE-2022-321xx/CVE-2022-32166.json +++ b/CVE-2022/CVE-2022-321xx/CVE-2022-32166.json @@ -2,7 +2,7 @@ "id": "CVE-2022-32166", "sourceIdentifier": "vulnerabilitylab@mend.io", "published": "2022-09-28T10:15:09.560", - "lastModified": "2024-11-21T07:05:51.930", + "lastModified": "2025-05-21T15:15:56.693", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -15,11 +15,34 @@ "value": "ovs versiones v0.90.0 hasta v2.5.0, son vulnerables a una lectura excesiva del buffer de la pila en el archivo flow.c. Una comparaci\u00f3n no segura de la funci\u00f3n \"minimasks\" podr\u00eda conllevar a un acceso a una regi\u00f3n de memoria no mapeada. Esta vulnerabilidad es capaz de bloquear el software, modificar la memoria y una posible ejecuci\u00f3n remota" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 4.2 + } + ] + }, "weaknesses": [ { "source": "vulnerabilitylab@mend.io", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2022/CVE-2022-321xx/CVE-2022-32168.json b/CVE-2022/CVE-2022-321xx/CVE-2022-32168.json index f8a4f4097f6..1caef2664c2 100644 --- a/CVE-2022/CVE-2022-321xx/CVE-2022-32168.json +++ b/CVE-2022/CVE-2022-321xx/CVE-2022-32168.json @@ -2,7 +2,7 @@ "id": "CVE-2022-32168", "sourceIdentifier": "vulnerabilitylab@mend.io", "published": "2022-09-28T09:15:09.520", - "lastModified": "2024-11-21T07:05:52.197", + "lastModified": "2025-05-21T15:15:56.900", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,13 +36,33 @@ }, "exploitabilityScore": 1.8, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 } ] }, "weaknesses": [ { "source": "vulnerabilitylab@mend.io", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2022/CVE-2022-321xx/CVE-2022-32169.json b/CVE-2022/CVE-2022-321xx/CVE-2022-32169.json index a06fa534244..023f95d5524 100644 --- a/CVE-2022/CVE-2022-321xx/CVE-2022-32169.json +++ b/CVE-2022/CVE-2022-321xx/CVE-2022-32169.json @@ -2,7 +2,7 @@ "id": "CVE-2022-32169", "sourceIdentifier": "vulnerabilitylab@mend.io", "published": "2022-09-28T10:15:09.653", - "lastModified": "2024-11-21T07:05:52.330", + "lastModified": "2025-05-21T14:15:24.703", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -15,7 +15,30 @@ "value": "La aplicaci\u00f3n \"Bytebase\" no restringe a usuarios poco privilegiados el acceso a \"admin issues\" para las que un usuario no autorizado puede ver las incidencias \"OPEN\" y \"CLOSE\" por \"Admin\" y el endpoint afectado es \"/issue\"" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, "weaknesses": [ { "source": "vulnerabilitylab@mend.io", diff --git a/CVE-2022/CVE-2022-321xx/CVE-2022-32170.json b/CVE-2022/CVE-2022-321xx/CVE-2022-32170.json index 23c627065eb..364ba508606 100644 --- a/CVE-2022/CVE-2022-321xx/CVE-2022-32170.json +++ b/CVE-2022/CVE-2022-321xx/CVE-2022-32170.json @@ -2,7 +2,7 @@ "id": "CVE-2022-32170", "sourceIdentifier": "vulnerabilitylab@mend.io", "published": "2022-09-28T10:15:09.740", - "lastModified": "2024-11-21T07:05:52.460", + "lastModified": "2025-05-21T14:15:24.923", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -15,11 +15,34 @@ "value": "La aplicaci\u00f3n \"Bytebase\" no restringe a usuarios poco privilegiados el acceso a \"projects\" del administrador, por lo que un usuario no autorizado puede visualizar \"projects\" creados por \"Admin\" y el endpoint afectado es \"/api/project?user=${userId}\"" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, "weaknesses": [ { "source": "vulnerabilitylab@mend.io", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2022/CVE-2022-33xx/CVE-2022-3323.json b/CVE-2022/CVE-2022-33xx/CVE-2022-3323.json index a8233499e9d..f456db1d244 100644 --- a/CVE-2022/CVE-2022-33xx/CVE-2022-3323.json +++ b/CVE-2022/CVE-2022-33xx/CVE-2022-3323.json @@ -2,7 +2,7 @@ "id": "CVE-2022-3323", "sourceIdentifier": "vulnreport@tenable.com", "published": "2022-09-27T23:15:15.867", - "lastModified": "2024-11-21T07:19:17.760", + "lastModified": "2025-05-21T15:15:59.000", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-89" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-364xx/CVE-2022-36448.json b/CVE-2022/CVE-2022-364xx/CVE-2022-36448.json index 8f6f25385ff..5362a9f2059 100644 --- a/CVE-2022/CVE-2022-364xx/CVE-2022-36448.json +++ b/CVE-2022/CVE-2022-364xx/CVE-2022-36448.json @@ -2,7 +2,7 @@ "id": "CVE-2022-36448", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-28T16:15:11.840", - "lastModified": "2024-11-21T07:13:02.127", + "lastModified": "2025-05-21T15:15:57.090", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.5, "impactScore": 6.0 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 8.2, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.5, + "impactScore": 6.0 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-20" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-367xx/CVE-2022-36771.json b/CVE-2022/CVE-2022-367xx/CVE-2022-36771.json index 704f7acb301..2e617d95543 100644 --- a/CVE-2022/CVE-2022-367xx/CVE-2022-36771.json +++ b/CVE-2022/CVE-2022-367xx/CVE-2022-36771.json @@ -2,7 +2,7 @@ "id": "CVE-2022-36771", "sourceIdentifier": "psirt@us.ibm.com", "published": "2022-09-28T16:15:12.160", - "lastModified": "2024-11-21T07:13:40.170", + "lastModified": "2025-05-21T15:15:57.307", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -71,6 +71,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-370xx/CVE-2022-37028.json b/CVE-2022/CVE-2022-370xx/CVE-2022-37028.json index a37ffe127a2..a607d24543c 100644 --- a/CVE-2022/CVE-2022-370xx/CVE-2022-37028.json +++ b/CVE-2022/CVE-2022-370xx/CVE-2022-37028.json @@ -2,7 +2,7 @@ "id": "CVE-2022-37028", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-27T23:15:14.280", - "lastModified": "2024-11-21T07:14:19.143", + "lastModified": "2025-05-21T15:15:57.467", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 2.7 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-79" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-383xx/CVE-2022-38335.json b/CVE-2022/CVE-2022-383xx/CVE-2022-38335.json index bdaa4a4c0a0..73162ade05a 100644 --- a/CVE-2022/CVE-2022-383xx/CVE-2022-38335.json +++ b/CVE-2022/CVE-2022-383xx/CVE-2022-38335.json @@ -2,7 +2,7 @@ "id": "CVE-2022-38335", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-27T23:15:15.120", - "lastModified": "2024-11-21T07:16:17.470", + "lastModified": "2025-05-21T15:15:57.697", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 2.7 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-79" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-389xx/CVE-2022-38932.json b/CVE-2022/CVE-2022-389xx/CVE-2022-38932.json index c640efe6196..3cdf24aee36 100644 --- a/CVE-2022/CVE-2022-389xx/CVE-2022-38932.json +++ b/CVE-2022/CVE-2022-389xx/CVE-2022-38932.json @@ -2,7 +2,7 @@ "id": "CVE-2022-38932", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-27T23:15:15.217", - "lastModified": "2024-11-21T07:17:16.177", + "lastModified": "2025-05-21T15:15:57.980", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.4, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.5, + "impactScore": 5.9 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-787" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-389xx/CVE-2022-38934.json b/CVE-2022/CVE-2022-389xx/CVE-2022-38934.json index 452840fcadd..29045e7dfb7 100644 --- a/CVE-2022/CVE-2022-389xx/CVE-2022-38934.json +++ b/CVE-2022/CVE-2022-389xx/CVE-2022-38934.json @@ -2,7 +2,7 @@ "id": "CVE-2022-38934", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-28T17:15:10.923", - "lastModified": "2024-11-21T07:17:16.330", + "lastModified": "2025-05-21T15:15:58.207", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 1.4 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "baseScore": 3.3, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.8, + "impactScore": 1.4 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-400xx/CVE-2022-40082.json b/CVE-2022/CVE-2022-400xx/CVE-2022-40082.json index 849a04cf58a..fabbf1ee5ed 100644 --- a/CVE-2022/CVE-2022-400xx/CVE-2022-40082.json +++ b/CVE-2022/CVE-2022-400xx/CVE-2022-40082.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40082", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-28T14:15:10.907", - "lastModified": "2024-11-21T07:20:49.127", + "lastModified": "2025-05-21T15:15:59.267", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-22" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-400xx/CVE-2022-40083.json b/CVE-2022/CVE-2022-400xx/CVE-2022-40083.json index 6422713b429..226e4a11552 100644 --- a/CVE-2022/CVE-2022-400xx/CVE-2022-40083.json +++ b/CVE-2022/CVE-2022-400xx/CVE-2022-40083.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40083", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-28T14:15:10.953", - "lastModified": "2024-11-21T07:20:49.287", + "lastModified": "2025-05-21T15:15:59.483", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 6.0 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", + "baseScore": 9.6, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 6.0 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-601" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-601" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-401xx/CVE-2022-40126.json b/CVE-2022/CVE-2022-401xx/CVE-2022-40126.json index 9be58ff739f..f6aa8106403 100644 --- a/CVE-2022/CVE-2022-401xx/CVE-2022-40126.json +++ b/CVE-2022/CVE-2022-401xx/CVE-2022-40126.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40126", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-29T12:15:11.277", - "lastModified": "2024-11-21T07:20:54.870", + "lastModified": "2025-05-21T15:15:59.740", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-552" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-552" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-403xx/CVE-2022-40354.json b/CVE-2022/CVE-2022-403xx/CVE-2022-40354.json index 13ebff87ba4..fae305b8445 100644 --- a/CVE-2022/CVE-2022-403xx/CVE-2022-40354.json +++ b/CVE-2022/CVE-2022-403xx/CVE-2022-40354.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40354", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-27T23:15:16.407", - "lastModified": "2024-11-21T07:21:20.550", + "lastModified": "2025-05-21T15:15:59.960", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-89" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-403xx/CVE-2022-40363.json b/CVE-2022/CVE-2022-403xx/CVE-2022-40363.json index 4604a2d22ad..0d8eea41c57 100644 --- a/CVE-2022/CVE-2022-403xx/CVE-2022-40363.json +++ b/CVE-2022/CVE-2022-403xx/CVE-2022-40363.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40363", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-29T13:15:11.047", - "lastModified": "2024-11-21T07:21:21.300", + "lastModified": "2025-05-21T14:15:25.117", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-787" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-404xx/CVE-2022-40475.json b/CVE-2022/CVE-2022-404xx/CVE-2022-40475.json index 57bc9a95eb5..fb8d433a7f5 100644 --- a/CVE-2022/CVE-2022-404xx/CVE-2022-40475.json +++ b/CVE-2022/CVE-2022-404xx/CVE-2022-40475.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40475", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-29T12:15:11.487", - "lastModified": "2024-11-21T07:21:26.213", + "lastModified": "2025-05-21T15:16:00.163", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-78" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-404xx/CVE-2022-40486.json b/CVE-2022/CVE-2022-404xx/CVE-2022-40486.json index b1648af693b..cc6d460159c 100644 --- a/CVE-2022/CVE-2022-404xx/CVE-2022-40486.json +++ b/CVE-2022/CVE-2022-404xx/CVE-2022-40486.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40486", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-28T13:15:10.410", - "lastModified": "2024-11-21T07:21:27.327", + "lastModified": "2025-05-21T15:16:00.373", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-94" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-404xx/CVE-2022-40497.json b/CVE-2022/CVE-2022-404xx/CVE-2022-40497.json index 85c0aca7a10..6f191da93f5 100644 --- a/CVE-2022/CVE-2022-404xx/CVE-2022-40497.json +++ b/CVE-2022/CVE-2022-404xx/CVE-2022-40497.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40497", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-28T00:15:09.523", - "lastModified": "2024-11-21T07:21:28.137", + "lastModified": "2025-05-21T15:16:00.593", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ] }, @@ -49,6 +69,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-408xx/CVE-2022-40816.json b/CVE-2022/CVE-2022-408xx/CVE-2022-40816.json index b2f2b18a324..af24af10d76 100644 --- a/CVE-2022/CVE-2022-408xx/CVE-2022-40816.json +++ b/CVE-2022/CVE-2022-408xx/CVE-2022-40816.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40816", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-27T23:15:16.483", - "lastModified": "2024-11-21T07:22:05.080", + "lastModified": "2025-05-21T15:16:00.797", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-863" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-408xx/CVE-2022-40817.json b/CVE-2022/CVE-2022-408xx/CVE-2022-40817.json index 3425635a823..5c3fc693d9e 100644 --- a/CVE-2022/CVE-2022-408xx/CVE-2022-40817.json +++ b/CVE-2022/CVE-2022-408xx/CVE-2022-40817.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40817", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-27T23:15:16.543", - "lastModified": "2024-11-21T07:22:05.223", + "lastModified": "2025-05-21T15:16:01.013", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-732" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-732" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-408xx/CVE-2022-40877.json b/CVE-2022/CVE-2022-408xx/CVE-2022-40877.json index 4ce007bcef0..a41a803bd6f 100644 --- a/CVE-2022/CVE-2022-408xx/CVE-2022-40877.json +++ b/CVE-2022/CVE-2022-408xx/CVE-2022-40877.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40877", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-27T23:15:16.630", - "lastModified": "2024-11-21T07:22:11.897", + "lastModified": "2025-05-21T15:16:01.210", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-89" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-408xx/CVE-2022-40878.json b/CVE-2022/CVE-2022-408xx/CVE-2022-40878.json index e5ba7a36986..ec74659a1aa 100644 --- a/CVE-2022/CVE-2022-408xx/CVE-2022-40878.json +++ b/CVE-2022/CVE-2022-408xx/CVE-2022-40878.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40878", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-27T23:15:16.707", - "lastModified": "2024-11-21T07:22:12.057", + "lastModified": "2025-05-21T15:16:01.413", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-434" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-408xx/CVE-2022-40890.json b/CVE-2022/CVE-2022-408xx/CVE-2022-40890.json index 87204188555..3dda0934ac1 100644 --- a/CVE-2022/CVE-2022-408xx/CVE-2022-40890.json +++ b/CVE-2022/CVE-2022-408xx/CVE-2022-40890.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40890", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-29T13:15:11.323", - "lastModified": "2024-11-21T07:22:13.293", + "lastModified": "2025-05-21T14:15:25.360", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-404" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-404" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-409xx/CVE-2022-40929.json b/CVE-2022/CVE-2022-409xx/CVE-2022-40929.json index c0cf3284509..a9b22998daa 100644 --- a/CVE-2022/CVE-2022-409xx/CVE-2022-40929.json +++ b/CVE-2022/CVE-2022-409xx/CVE-2022-40929.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40929", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-28T18:15:09.813", - "lastModified": "2024-11-21T07:22:16.013", + "lastModified": "2025-05-21T15:16:01.620", "vulnStatus": "Modified", "cveTags": [ { @@ -43,6 +43,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -56,6 +76,16 @@ "value": "CWE-78" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-409xx/CVE-2022-40942.json b/CVE-2022/CVE-2022-409xx/CVE-2022-40942.json index 3c54320fe23..23f29c3aca2 100644 --- a/CVE-2022/CVE-2022-409xx/CVE-2022-40942.json +++ b/CVE-2022/CVE-2022-409xx/CVE-2022-40942.json @@ -2,7 +2,7 @@ "id": "CVE-2022-40942", "sourceIdentifier": "cve@mitre.org", "published": "2022-09-28T15:15:13.437", - "lastModified": "2024-11-21T07:22:17.040", + "lastModified": "2025-05-21T15:16:01.870", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-787" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] } ], "configurations": [ diff --git a/CVE-2023/CVE-2023-495xx/CVE-2023-49572.json b/CVE-2023/CVE-2023-495xx/CVE-2023-49572.json index dbdb9bd5b29..e5b55abc1a8 100644 --- a/CVE-2023/CVE-2023-495xx/CVE-2023-49572.json +++ b/CVE-2023/CVE-2023-495xx/CVE-2023-49572.json @@ -2,13 +2,13 @@ "id": "CVE-2023-49572", "sourceIdentifier": "cve-coordination@incibe.es", "published": "2024-05-24T13:15:08.030", - "lastModified": "2025-03-04T17:06:05.060", - "vulnStatus": "Analyzed", + "lastModified": "2025-05-21T12:16:12.143", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14 that could allow an attacker to execute persistent XSS through /setup_odbc in odbc_data_source, odbc_user and odbc_password parameters. This vulnerability could allow an attacker to store malicious JavaScript payloads on the system to be triggered when the page loads." + "value": "A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, and in Disk Pulse Enterprise\u00a010.4.18 version, that could allow an attacker to execute persistent XSS through /setup_odbc in odbc_data_source, odbc_user and odbc_password parameters. This vulnerability could allow an attacker to store malicious JavaScript payloads on the system to be triggered when the page loads." }, { "lang": "es", @@ -62,7 +62,7 @@ "weaknesses": [ { "source": "cve-coordination@incibe.es", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2023/CVE-2023-495xx/CVE-2023-49575.json b/CVE-2023/CVE-2023-495xx/CVE-2023-49575.json index 3f6d279f096..1c17e35bf4e 100644 --- a/CVE-2023/CVE-2023-495xx/CVE-2023-49575.json +++ b/CVE-2023/CVE-2023-495xx/CVE-2023-49575.json @@ -2,13 +2,13 @@ "id": "CVE-2023-49575", "sourceIdentifier": "cve-coordination@incibe.es", "published": "2024-05-24T13:15:09.360", - "lastModified": "2025-03-04T17:07:45.683", - "vulnStatus": "Analyzed", + "lastModified": "2025-05-21T12:16:13.217", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14 that could allow an attacker to execute persistent XSS through /setup_smtp in smtp_server, smtp_user, smtp_password and smtp_email_address parameters. This vulnerability could allow an attacker to store malicious JavaScript payloads on the system to be triggered when the page loads." + "value": "A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, in\u00a0Sync Breeze Enterprise Server 10.4.18 version, and in\u00a0Disk Pulse Enterprise\u00a010.4.18 version, that could allow an attacker to execute persistent XSS through /setup_smtp in smtp_server, smtp_user, smtp_password and smtp_email_address parameters. This vulnerability could allow an attacker to store malicious JavaScript payloads on the system to be triggered when the page loads." }, { "lang": "es", @@ -62,7 +62,7 @@ "weaknesses": [ { "source": "cve-coordination@incibe.es", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2024/CVE-2024-118xx/CVE-2024-11831.json b/CVE-2024/CVE-2024-118xx/CVE-2024-11831.json index b087bebb9b6..0d13ab2a89a 100644 --- a/CVE-2024/CVE-2024-118xx/CVE-2024-11831.json +++ b/CVE-2024/CVE-2024-118xx/CVE-2024-11831.json @@ -2,7 +2,7 @@ "id": "CVE-2024-11831", "sourceIdentifier": "secalert@redhat.com", "published": "2025-02-10T16:15:37.080", - "lastModified": "2025-05-06T08:15:15.800", + "lastModified": "2025-05-21T07:16:00.833", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -68,6 +68,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:4511", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:8059", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2024-11831", "source": "secalert@redhat.com" diff --git a/CVE-2024/CVE-2024-125xx/CVE-2024-12561.json b/CVE-2024/CVE-2024-125xx/CVE-2024-12561.json new file mode 100644 index 00000000000..6e8a641c24b --- /dev/null +++ b/CVE-2024/CVE-2024-125xx/CVE-2024-12561.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2024-12561", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-05-21T12:16:13.357", + "lastModified": "2025-05-21T12:16:13.357", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Affiliate Sales in Google Analytics and other tools plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.4.9. This is due to insufficient validation on the redirect url supplied via the 'afflink' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-601" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/wecantrack/trunk/WecantrackApp.php#L66", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a4b205ab-f042-46d9-a331-f18809477384?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-138xx/CVE-2024-13868.json b/CVE-2024/CVE-2024-138xx/CVE-2024-13868.json index 2ae2b627d85..45911f0205a 100644 --- a/CVE-2024/CVE-2024-138xx/CVE-2024-13868.json +++ b/CVE-2024/CVE-2024-138xx/CVE-2024-13868.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13868", "sourceIdentifier": "contact@wpscan.com", "published": "2025-03-06T06:15:34.720", - "lastModified": "2025-03-06T15:15:15.297", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-05-21T15:28:50.360", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:tahminajannat:url_shortener_\\|_conversion_tracking_\\|_ab_testing_\\|_woocommerce:*:*:*:*:*:wordpress:*:*", + "versionEndIncluding": "9.0.2", + "matchCriteriaId": "07D9E8DB-7D1A-409D-B552-FF83BE10CE3D" + } + ] + } + ] + } + ], "references": [ { "url": "https://wpscan.com/vulnerability/0bff1645-dd53-4416-a90f-7cf4a6b33c1a/", - "source": "contact@wpscan.com" + "source": "contact@wpscan.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-233xx/CVE-2024-23337.json b/CVE-2024/CVE-2024-233xx/CVE-2024-23337.json new file mode 100644 index 00000000000..9f8d82b5b48 --- /dev/null +++ b/CVE-2024/CVE-2024-233xx/CVE-2024-23337.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2024-23337", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-05-21T15:16:03.920", + "lastModified": "2025-05-21T15:16:03.920", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-190" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/jqlang/jq/commit/de21386681c0df0104a99d9d09db23a9b2a78b1e", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/jqlang/jq/issues/3262", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/jqlang/jq/security/advisories/GHSA-2q6r-344g-cx46", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/jqlang/jq/security/advisories/GHSA-2q6r-344g-cx46", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-331xx/CVE-2024-33110.json b/CVE-2024/CVE-2024-331xx/CVE-2024-33110.json index c6ac0bbfe3e..7bf5f4b019d 100644 --- a/CVE-2024/CVE-2024-331xx/CVE-2024-33110.json +++ b/CVE-2024/CVE-2024-331xx/CVE-2024-33110.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33110", "sourceIdentifier": "cve@mitre.org", "published": "2024-05-06T15:15:23.537", - "lastModified": "2024-11-21T09:16:31.670", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T13:02:24.607", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,50 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-845l_firmware:*:*:*:*:*:*:*:*", + "versionEndIncluding": "1.01krb03", + "matchCriteriaId": "BC7DE1C8-D307-491E-8F24-4AD51E896CC3" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-845l:-:*:*:*:*:*:*:*", + "matchCriteriaId": "DD53005B-ECBD-4211-88B1-A33EC5D0DFD7" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Broken Link" + ] }, { "url": "https://github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Broken Link" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-331xx/CVE-2024-33111.json b/CVE-2024/CVE-2024-331xx/CVE-2024-33111.json index 0fb1b6bfe70..44d8feab18f 100644 --- a/CVE-2024/CVE-2024-331xx/CVE-2024-33111.json +++ b/CVE-2024/CVE-2024-331xx/CVE-2024-33111.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33111", "sourceIdentifier": "cve@mitre.org", "published": "2024-05-06T15:15:23.593", - "lastModified": "2025-03-13T18:15:40.687", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T13:02:32.660", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,50 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-845l_firmware:*:*:*:*:*:*:*:*", + "versionEndIncluding": "1.01krb03", + "matchCriteriaId": "BC7DE1C8-D307-491E-8F24-4AD51E896CC3" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-845l:-:*:*:*:*:*:*:*", + "matchCriteriaId": "DD53005B-ECBD-4211-88B1-A33EC5D0DFD7" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Broken Link" + ] }, { "url": "https://github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Broken Link" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-331xx/CVE-2024-33112.json b/CVE-2024/CVE-2024-331xx/CVE-2024-33112.json index 54aa78d5643..2011deee7a0 100644 --- a/CVE-2024/CVE-2024-331xx/CVE-2024-33112.json +++ b/CVE-2024/CVE-2024-331xx/CVE-2024-33112.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33112", "sourceIdentifier": "cve@mitre.org", "published": "2024-05-06T15:15:23.650", - "lastModified": "2025-01-06T15:15:13.940", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T13:02:30.203", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -61,18 +61,58 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-845l_firmware:*:*:*:*:*:*:*:*", + "versionEndIncluding": "1.01krb03", + "matchCriteriaId": "BC7DE1C8-D307-491E-8F24-4AD51E896CC3" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-845l:-:*:*:*:*:*:*:*", + "matchCriteriaId": "DD53005B-ECBD-4211-88B1-A33EC5D0DFD7" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/yj94/Yj_learning/blob/b597925953d8bbb286a63f0019bb547c1617cb61/Week16/D-LINK-POC.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Broken Link" + ] }, { "url": "https://github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Broken Link" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-331xx/CVE-2024-33113.json b/CVE-2024/CVE-2024-331xx/CVE-2024-33113.json index cd533ae7209..4f5fdb4c17b 100644 --- a/CVE-2024/CVE-2024-331xx/CVE-2024-33113.json +++ b/CVE-2024/CVE-2024-331xx/CVE-2024-33113.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33113", "sourceIdentifier": "cve@mitre.org", "published": "2024-05-06T15:15:23.703", - "lastModified": "2024-11-21T09:16:32.287", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T13:02:27.457", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,14 +55,50 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-845l_firmware:*:*:*:*:*:*:*:*", + "versionEndIncluding": "1.01krb03", + "matchCriteriaId": "BC7DE1C8-D307-491E-8F24-4AD51E896CC3" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-845l:-:*:*:*:*:*:*:*", + "matchCriteriaId": "DD53005B-ECBD-4211-88B1-A33EC5D0DFD7" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Broken Link" + ] }, { "url": "https://github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Broken Link" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-333xx/CVE-2024-33342.json b/CVE-2024/CVE-2024-333xx/CVE-2024-33342.json index 78ef9d52245..0f5c6c88447 100644 --- a/CVE-2024/CVE-2024-333xx/CVE-2024-33342.json +++ b/CVE-2024/CVE-2024-333xx/CVE-2024-33342.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33342", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-26T18:15:46.350", - "lastModified": "2024-11-21T09:16:49.267", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T12:51:20.483", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,22 +51,65 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-822\\+_firmware:1.05:*:*:*:*:*:*:*", + "matchCriteriaId": "29A96BE3-BB6E-467A-BD5A-0BBD9F1371F4" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-822\\+:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F25E1113-0D62-445B-B468-F49C715126F9" + } + ] + } + ] + } + ], "references": [ { "url": "http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://github.com/n0wstr/IOTVuln/tree/main/DIR-822%2B/SetPlcNetworkpwd", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Product" + ] }, { "url": "https://github.com/n0wstr/IOTVuln/tree/main/DIR-822%2B/SetPlcNetworkpwd", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-333xx/CVE-2024-33343.json b/CVE-2024/CVE-2024-333xx/CVE-2024-33343.json index e009b99a5b1..f7efa015d97 100644 --- a/CVE-2024/CVE-2024-333xx/CVE-2024-33343.json +++ b/CVE-2024/CVE-2024-333xx/CVE-2024-33343.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33343", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-26T18:15:46.413", - "lastModified": "2024-11-21T09:16:49.480", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T12:51:23.790", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,22 +51,65 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-822\\+_firmware:1.05:*:*:*:*:*:*:*", + "matchCriteriaId": "29A96BE3-BB6E-467A-BD5A-0BBD9F1371F4" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-822\\+:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F25E1113-0D62-445B-B468-F49C715126F9" + } + ] + } + ] + } + ], "references": [ { "url": "http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://github.com/n0wstr/IOTVuln/tree/main/DIR-822%2B/ChgSambaUserSettings", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Product" + ] }, { "url": "https://github.com/n0wstr/IOTVuln/tree/main/DIR-822%2B/ChgSambaUserSettings", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-333xx/CVE-2024-33344.json b/CVE-2024/CVE-2024-333xx/CVE-2024-33344.json index fc4b47c09b6..d94679418ef 100644 --- a/CVE-2024/CVE-2024-333xx/CVE-2024-33344.json +++ b/CVE-2024/CVE-2024-333xx/CVE-2024-33344.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33344", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-26T18:15:46.467", - "lastModified": "2024-11-21T09:16:49.700", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T12:51:29.240", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,22 +51,65 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-822\\+_firmware:1.05:*:*:*:*:*:*:*", + "matchCriteriaId": "29A96BE3-BB6E-467A-BD5A-0BBD9F1371F4" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-822\\+:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F25E1113-0D62-445B-B468-F49C715126F9" + } + ] + } + ] + } + ], "references": [ { "url": "http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://github.com/n0wstr/IOTVuln/tree/main/DIR-822%2B/UploadFirmware", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Product" + ] }, { "url": "https://github.com/n0wstr/IOTVuln/tree/main/DIR-822%2B/UploadFirmware", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-333xx/CVE-2024-33345.json b/CVE-2024/CVE-2024-333xx/CVE-2024-33345.json index ff1759348ee..8bedee1e815 100644 --- a/CVE-2024/CVE-2024-333xx/CVE-2024-33345.json +++ b/CVE-2024/CVE-2024-333xx/CVE-2024-33345.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33345", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-29T18:15:07.990", - "lastModified": "2024-11-21T09:16:49.910", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T12:54:39.047", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,22 +51,65 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-823g_firmware:1.0.2b05:*:*:*:*:*:*:*", + "matchCriteriaId": "14A8546A-7F37-43D2-AD1E-DF65C6734057" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-823g:a1:*:*:*:*:*:*:*", + "matchCriteriaId": "EF303ADD-7BAC-4D2A-B644-D03B23F76DDB" + } + ] + } + ] + } + ], "references": [ { "url": "http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-823G", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://github.com/n0wstr/IOTVuln/tree/main/DIR-823g/UploadFirmware", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-823G", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Product" + ] }, { "url": "https://github.com/n0wstr/IOTVuln/tree/main/DIR-823g/UploadFirmware", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-337xx/CVE-2024-33771.json b/CVE-2024/CVE-2024-337xx/CVE-2024-33771.json index 5d7458edbbf..2566962b0a9 100644 --- a/CVE-2024/CVE-2024-337xx/CVE-2024-33771.json +++ b/CVE-2024/CVE-2024-337xx/CVE-2024-33771.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33771", "sourceIdentifier": "cve@mitre.org", "published": "2024-05-14T15:38:05.203", - "lastModified": "2024-11-21T09:17:27.720", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T14:42:20.190", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-619l_firmware:2.06b1:*:*:*:*:*:*:*", + "matchCriteriaId": "29F7A866-771C-4FA7-B52C-487841644F4C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-619l:b1:*:*:*:*:*:*:*", + "matchCriteriaId": "6F28B093-482C-4105-A89D-8B1F1FFD59E9" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-337xx/CVE-2024-33772.json b/CVE-2024/CVE-2024-337xx/CVE-2024-33772.json index b6673c55223..19199b9c25d 100644 --- a/CVE-2024/CVE-2024-337xx/CVE-2024-33772.json +++ b/CVE-2024/CVE-2024-337xx/CVE-2024-33772.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33772", "sourceIdentifier": "cve@mitre.org", "published": "2024-05-14T15:38:05.437", - "lastModified": "2024-11-21T09:17:27.913", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T14:42:45.587", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-619l_firmware:2.06b1:*:*:*:*:*:*:*", + "matchCriteriaId": "29F7A866-771C-4FA7-B52C-487841644F4C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-619l:b1:*:*:*:*:*:*:*", + "matchCriteriaId": "6F28B093-482C-4105-A89D-8B1F1FFD59E9" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-337xx/CVE-2024-33773.json b/CVE-2024/CVE-2024-337xx/CVE-2024-33773.json index 2ad4cd1e79c..48fa27aedc5 100644 --- a/CVE-2024/CVE-2024-337xx/CVE-2024-33773.json +++ b/CVE-2024/CVE-2024-337xx/CVE-2024-33773.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33773", "sourceIdentifier": "cve@mitre.org", "published": "2024-05-14T15:38:05.627", - "lastModified": "2024-11-21T09:17:28.097", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T14:42:51.290", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-619l_firmware:2.06b1:*:*:*:*:*:*:*", + "matchCriteriaId": "29F7A866-771C-4FA7-B52C-487841644F4C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-619l:b1:*:*:*:*:*:*:*", + "matchCriteriaId": "6F28B093-482C-4105-A89D-8B1F1FFD59E9" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-337xx/CVE-2024-33774.json b/CVE-2024/CVE-2024-337xx/CVE-2024-33774.json index c0551158cd6..5950af4e1eb 100644 --- a/CVE-2024/CVE-2024-337xx/CVE-2024-33774.json +++ b/CVE-2024/CVE-2024-337xx/CVE-2024-33774.json @@ -2,8 +2,8 @@ "id": "CVE-2024-33774", "sourceIdentifier": "cve@mitre.org", "published": "2024-05-14T15:38:05.770", - "lastModified": "2024-11-21T09:17:28.287", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T14:42:59.237", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-619l_firmware:2.06b1:*:*:*:*:*:*:*", + "matchCriteriaId": "29F7A866-771C-4FA7-B52C-487841644F4C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-619l:b1:*:*:*:*:*:*:*", + "matchCriteriaId": "6F28B093-482C-4105-A89D-8B1F1FFD59E9" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-349xx/CVE-2024-34950.json b/CVE-2024/CVE-2024-349xx/CVE-2024-34950.json index 6a74c617d8a..b56aa2e543d 100644 --- a/CVE-2024/CVE-2024-349xx/CVE-2024-34950.json +++ b/CVE-2024/CVE-2024-349xx/CVE-2024-34950.json @@ -2,8 +2,8 @@ "id": "CVE-2024-34950", "sourceIdentifier": "cve@mitre.org", "published": "2024-05-14T16:17:30.633", - "lastModified": "2024-11-21T09:19:37.233", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T13:05:30.327", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-822\\+_firmware:1.05:*:*:*:*:*:*:*", + "matchCriteriaId": "29A96BE3-BB6E-467A-BD5A-0BBD9F1371F4" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-822\\+:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F25E1113-0D62-445B-B468-F49C715126F9" + } + ] + } + ] + } + ], "references": [ { "url": "https://dear-sunshine-ba5.notion.site/D-Link-DIR-822-v1-0-5-Stack-Overflow-e77ff3d9c31f4a98bfa0fa71eca54000", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://dear-sunshine-ba5.notion.site/D-Link-DIR-822-v1-0-5-Stack-Overflow-e77ff3d9c31f4a98bfa0fa71eca54000", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-368xx/CVE-2024-36831.json b/CVE-2024/CVE-2024-368xx/CVE-2024-36831.json index 3c0b0b3a812..565baeebaa7 100644 --- a/CVE-2024/CVE-2024-368xx/CVE-2024-36831.json +++ b/CVE-2024/CVE-2024-368xx/CVE-2024-36831.json @@ -2,8 +2,8 @@ "id": "CVE-2024-36831", "sourceIdentifier": "cve@mitre.org", "published": "2024-12-17T15:15:12.720", - "lastModified": "2024-12-17T16:15:25.390", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T15:21:54.140", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,22 +51,63 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dap-1520_firmware:1.10b04:beta02:*:*:*:*:*:*", + "matchCriteriaId": "ABD145A7-CB4A-4F94-91E1-51371B7D7CC7" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dap-1520:-:*:*:*:*:*:*:*", + "matchCriteriaId": "7AD111C3-D73F-4D3C-85FA-DF7F61F7C8F9" + } + ] + } + ] + } + ], "references": [ { "url": "https://docs.google.com/document/d/15CVb7XHIgtfeW1W1pLZJWvlBMYN1rtr75vqZqf1v3Eo/edit?usp=sharing", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10395", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.dlink.com/en", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://www.dlink.com/en/security-bulletin/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-368xx/CVE-2024-36832.json b/CVE-2024/CVE-2024-368xx/CVE-2024-36832.json index 6ee66f781c8..3be00ff5440 100644 --- a/CVE-2024/CVE-2024-368xx/CVE-2024-36832.json +++ b/CVE-2024/CVE-2024-368xx/CVE-2024-36832.json @@ -2,8 +2,8 @@ "id": "CVE-2024-36832", "sourceIdentifier": "cve@mitre.org", "published": "2024-12-17T15:15:13.097", - "lastModified": "2024-12-17T17:15:08.467", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T13:21:05.300", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,22 +51,63 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dap-1513_firmware:1.01:*:*:*:*:*:*:*", + "matchCriteriaId": "0F65059E-F9A7-4B47-8ABB-A214B83A7D37" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dap-1513:-:*:*:*:*:*:*:*", + "matchCriteriaId": "EC3074BA-FE3F-4AD1-8C5D-B698905415C3" + } + ] + } + ] + } + ], "references": [ { "url": "https://docs.google.com/document/d/1qTpwAg7B5E4mqkBzijjuoOWWnf3OE1HXIKBv7OcS8Mc/edit?usp=sharing", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10396", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.dlink.com/en", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://www.dlink.com/en/security-bulletin/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-376xx/CVE-2024-37605.json b/CVE-2024/CVE-2024-376xx/CVE-2024-37605.json index aa9e67693f4..80bc8b3f2b2 100644 --- a/CVE-2024/CVE-2024-376xx/CVE-2024-37605.json +++ b/CVE-2024/CVE-2024-376xx/CVE-2024-37605.json @@ -2,8 +2,8 @@ "id": "CVE-2024-37605", "sourceIdentifier": "cve@mitre.org", "published": "2024-12-17T15:15:13.357", - "lastModified": "2024-12-17T18:15:22.377", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T15:29:32.967", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,22 +51,63 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-860l_firmware:2.04.b04_ic5b:*:*:*:*:*:*:*", + "matchCriteriaId": "A19504E4-8DEE-43F3-AB6B-7E361637B680" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-860l:-:*:*:*:*:*:*:*", + "matchCriteriaId": "CCDB9720-8F5A-4F02-A436-920CDAC15D69" + } + ] + } + ] + } + ], "references": [ { "url": "https://docs.google.com/document/d/1cWlVLaVvr_xzkqbKIXY7EW89hNHE89SSlNtesv6lzl8/edit?usp=sharing", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10397", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.dlink.com/en", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://www.dlink.com/en/security-bulletin/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-376xx/CVE-2024-37606.json b/CVE-2024/CVE-2024-376xx/CVE-2024-37606.json index e3fe4a12c6c..d05b0659391 100644 --- a/CVE-2024/CVE-2024-376xx/CVE-2024-37606.json +++ b/CVE-2024/CVE-2024-376xx/CVE-2024-37606.json @@ -2,8 +2,8 @@ "id": "CVE-2024-37606", "sourceIdentifier": "cve@mitre.org", "published": "2024-12-17T15:15:13.643", - "lastModified": "2024-12-17T18:15:23.083", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T15:49:22.807", + "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [ { @@ -51,22 +51,90 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dcs-932l_revb_firmware:2.18.01:*:*:*:*:*:*:*", + "matchCriteriaId": "9DEFD69C-9297-492B-AF23-E2FB61469879" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dcs-932l:-:*:*:*:*:*:*:*", + "matchCriteriaId": "34775D9A-F16B-43C5-A8F4-88C0F9760364" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dcs-932l_firmware:2.18.01:*:*:*:*:*:*:*", + "matchCriteriaId": "2AD4BC0A-6ADE-47C3-83D9-288D46A60EA4" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dcs-932l:-:*:*:*:*:*:*:*", + "matchCriteriaId": "34775D9A-F16B-43C5-A8F4-88C0F9760364" + } + ] + } + ] + } + ], "references": [ { "url": "https://docs.google.com/document/d/1qWJh2jgEhmyeW3OefMQNsrlKdATMSU6Twjkk1p3qfAs/edit?usp=sharing", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10247", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.dlink.com/en", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://www.dlink.com/en/security-bulletin/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-410xx/CVE-2024-41057.json b/CVE-2024/CVE-2024-410xx/CVE-2024-41057.json index 9b2d8486930..3d508910889 100644 --- a/CVE-2024/CVE-2024-410xx/CVE-2024-41057.json +++ b/CVE-2024/CVE-2024-410xx/CVE-2024-41057.json @@ -2,8 +2,8 @@ "id": "CVE-2024-41057", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-07-29T15:15:13.773", - "lastModified": "2024-11-21T09:32:09.390", - "vulnStatus": "Modified", + "lastModified": "2025-05-21T15:58:15.910", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -22,11 +22,11 @@ "type": "Primary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", - "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, "baseSeverity": "HIGH", "attackVector": "LOCAL", - "attackComplexity": "LOW", + "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", @@ -34,7 +34,7 @@ "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, - "exploitabilityScore": 1.8, + "exploitabilityScore": 1.0, "impactScore": 5.9 } ] diff --git a/CVE-2024/CVE-2024-420xx/CVE-2024-42093.json b/CVE-2024/CVE-2024-420xx/CVE-2024-42093.json index 2efbe67f4e5..cac5e496ea1 100644 --- a/CVE-2024/CVE-2024-420xx/CVE-2024-42093.json +++ b/CVE-2024/CVE-2024-420xx/CVE-2024-42093.json @@ -2,8 +2,8 @@ "id": "CVE-2024-42093", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-07-29T18:15:11.833", - "lastModified": "2024-11-21T09:33:35.027", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-05-21T15:58:30.673", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -22,20 +22,20 @@ "type": "Primary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", - "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", + "baseScore": 7.3, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", - "confidentialityImpact": "HIGH", + "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, "exploitabilityScore": 1.8, - "impactScore": 5.9 + "impactScore": 5.5 } ] }, diff --git a/CVE-2024/CVE-2024-429xx/CVE-2024-42922.json b/CVE-2024/CVE-2024-429xx/CVE-2024-42922.json new file mode 100644 index 00000000000..dd33ffc9aa0 --- /dev/null +++ b/CVE-2024/CVE-2024-429xx/CVE-2024-42922.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2024-42922", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-05-21T14:15:26.183", + "lastModified": "2025-05-21T14:15:26.183", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "AAPanel v7.0.7 was discovered to contain an OS command injection vulnerability." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/mstfsec/c4c05ddfb1cf8779422ff780587723c8", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-444xx/CVE-2024-44411.json b/CVE-2024/CVE-2024-444xx/CVE-2024-44411.json index faa4da75308..3f83753a894 100644 --- a/CVE-2024/CVE-2024-444xx/CVE-2024-44411.json +++ b/CVE-2024/CVE-2024-444xx/CVE-2024-44411.json @@ -2,8 +2,8 @@ "id": "CVE-2024-44411", "sourceIdentifier": "cve@mitre.org", "published": "2024-09-09T21:15:11.567", - "lastModified": "2024-09-10T14:35:06.690", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T13:14:56.650", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,18 +51,57 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:di-8300_firmware:16.07.26a1:*:*:*:*:*:*:*", + "matchCriteriaId": "703A6A50-00DA-482E-925C-01463CE0CF64" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:di-8300:a1:*:*:*:*:*:*:*", + "matchCriteriaId": "9D86A9AE-87FA-4248-8AD0-B72071516BDA" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/LYaoBoL/IOTsec/blob/main/D-Link/DI-8300A1/CVE-2024-44411", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://github.com/LYaoBoL/IOTsec/blob/main/D-Link/DI-8300A1/DI-8300A1-2.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.dlink.com/en/security-bulletin/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-445xx/CVE-2024-44589.json b/CVE-2024/CVE-2024-445xx/CVE-2024-44589.json index f9eb5e304bb..a98f82f90dc 100644 --- a/CVE-2024/CVE-2024-445xx/CVE-2024-44589.json +++ b/CVE-2024/CVE-2024-445xx/CVE-2024-44589.json @@ -2,8 +2,8 @@ "id": "CVE-2024-44589", "sourceIdentifier": "cve@mitre.org", "published": "2024-09-18T20:15:03.410", - "lastModified": "2024-09-20T12:30:17.483", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T14:45:00.773", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,50 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dcs-960l_firmware:1.09:*:*:*:*:*:*:*", + "matchCriteriaId": "9A2178DF-C1FB-4670-8418-289520A7B0D8" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dcs-960l:-:*:*:*:*:*:*:*", + "matchCriteriaId": "53B716CA-EEF2-407F-8A38-B347100AF1C7" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/Xshacry/iot-vuln/blob/main/d-link/dcs-935l/readme.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.dlink.com/en/security-bulletin/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44674.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44674.json index 457c782ac81..d7f06928a14 100644 --- a/CVE-2024/CVE-2024-446xx/CVE-2024-44674.json +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44674.json @@ -2,8 +2,8 @@ "id": "CVE-2024-44674", "sourceIdentifier": "cve@mitre.org", "published": "2024-10-07T18:15:04.590", - "lastModified": "2024-10-10T12:57:21.987", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T14:51:38.190", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,50 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:covr-2600r_firmware:1.01b05:*:*:*:*:*:*:*", + "matchCriteriaId": "FD8EAD93-D348-459B-9925-14163B1BDB7C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:covr-2600r:-:*:*:*:*:*:*:*", + "matchCriteriaId": "B01A37F0-C258-4E5A-86E0-20B9E85BBE03" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/REYu6/iot/blob/21e59c0cf491a9663423c515370c4fcb43436ae0/CVE/dlink/Covr-3902/2600R.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.dlink.com/en/security-bulletin/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-479xx/CVE-2024-47939.json b/CVE-2024/CVE-2024-479xx/CVE-2024-47939.json index 61a0d6ff610..2f70e90bc71 100644 --- a/CVE-2024/CVE-2024-479xx/CVE-2024-47939.json +++ b/CVE-2024/CVE-2024-479xx/CVE-2024-47939.json @@ -2,13 +2,13 @@ "id": "CVE-2024-47939", "sourceIdentifier": "vultures@jpcert.or.jp", "published": "2024-11-01T05:15:05.950", - "lastModified": "2025-03-25T02:15:13.070", + "lastModified": "2025-05-21T07:16:01.050", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Stack-based buffer overflow vulnerability exists in multiple Ricoh laser printers and MFPs which implement Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendor under [References]." + "value": "Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendors under [References]." }, { "lang": "es", @@ -60,6 +60,10 @@ "url": "https://jvn.jp/en/jp/JVN87770340/", "source": "vultures@jpcert.or.jp" }, + { + "url": "https://www.konicaminolta.jp/business/support/important/250519_01_01.html", + "source": "vultures@jpcert.or.jp" + }, { "url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000011", "source": "vultures@jpcert.or.jp" diff --git a/CVE-2024/CVE-2024-481xx/CVE-2024-48150.json b/CVE-2024/CVE-2024-481xx/CVE-2024-48150.json index 26791a0e396..d0e29e24a91 100644 --- a/CVE-2024/CVE-2024-481xx/CVE-2024-48150.json +++ b/CVE-2024/CVE-2024-481xx/CVE-2024-48150.json @@ -2,8 +2,8 @@ "id": "CVE-2024-48150", "sourceIdentifier": "cve@mitre.org", "published": "2024-10-14T16:15:03.750", - "lastModified": "2024-10-15T16:35:10.450", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T13:28:23.077", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,42 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-820l_firmware:1.05b03:*:*:*:*:*:*:*", + "matchCriteriaId": "5195E86A-22A4-412B-B22C-614A68942FB5" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-820l:-:*:*:*:*:*:*:*", + "matchCriteriaId": "88CE60CD-DCDA-43E0-80A9-257557EDBC29" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/fu37kola/cve/blob/main/D-Link/DIR-820L/D-Link%20DIR-820L%20Stack%20Overflow%20Vulnerability.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Broken Link" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-482xx/CVE-2024-48246.json b/CVE-2024/CVE-2024-482xx/CVE-2024-48246.json index 109f781c96d..8c96fa3beb8 100644 --- a/CVE-2024/CVE-2024-482xx/CVE-2024-48246.json +++ b/CVE-2024/CVE-2024-482xx/CVE-2024-48246.json @@ -2,8 +2,8 @@ "id": "CVE-2024-48246", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-05T19:15:37.453", - "lastModified": "2025-03-06T15:15:15.917", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-05-21T15:34:19.317", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sourcecodester:vehicle_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "54BBD9D1-EC73-4F44-9E20-2E7209933D28" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/ShadowByte1/CVE-2024-48246", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory", + "Mitigation" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-507xx/CVE-2024-50705.json b/CVE-2024/CVE-2024-507xx/CVE-2024-50705.json index 3f71ff1aec2..e4205e0fa82 100644 --- a/CVE-2024/CVE-2024-507xx/CVE-2024-50705.json +++ b/CVE-2024/CVE-2024-507xx/CVE-2024-50705.json @@ -2,8 +2,8 @@ "id": "CVE-2024-50705", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-04T15:15:19.027", - "lastModified": "2025-03-04T17:15:12.523", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-05-21T15:42:14.520", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,43 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:uniguest:tripleplay:*:*:*:*:*:*:*:*", + "versionEndExcluding": "24.1.2", + "matchCriteriaId": "A185B9AB-4E31-45A5-9C05-76D08EF3190E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:uniguest:tripleplay:24.2:*:*:*:*:*:*:*", + "matchCriteriaId": "C073DD05-CDEB-4561-B492-BE18B7089323" + } + ] + } + ] + } + ], "references": [ { "url": "https://uniguest.com/cve-bulletins/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://uniguest.com/wp-content/uploads/2025/02/CVE-2024-50705-Vulnerability-Summary.pdf", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-564xx/CVE-2024-56429.json b/CVE-2024/CVE-2024-564xx/CVE-2024-56429.json new file mode 100644 index 00000000000..6391ab7803e --- /dev/null +++ b/CVE-2024/CVE-2024-564xx/CVE-2024-56429.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2024-56429", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-05-21T14:15:26.343", + "lastModified": "2025-05-21T14:15:26.343", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "itech iLabClient 3.7.1 relies on the hard-coded YngAYdgAE/kKZYu2F2wm6w== key (found in iLabClient.jar) for local users to read or write to the database." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@mitre.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", + "baseScore": 7.7, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.5, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "cve@mitre.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-321" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/lisa-2905/CVE-2024-56429", + "source": "cve@mitre.org" + }, + { + "url": "https://itech-gmbh.de/produkte/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-566xx/CVE-2024-56662.json b/CVE-2024/CVE-2024-566xx/CVE-2024-56662.json index d3cf83de59f..2e8cbbab9e1 100644 --- a/CVE-2024/CVE-2024-566xx/CVE-2024-56662.json +++ b/CVE-2024/CVE-2024-566xx/CVE-2024-56662.json @@ -2,7 +2,7 @@ "id": "CVE-2024-56662", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-12-27T15:15:26.073", - "lastModified": "2025-01-06T18:51:31.593", + "lastModified": "2025-05-21T15:57:45.637", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -22,19 +22,19 @@ "type": "Primary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", - "baseScore": 7.1, - "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 6.0, + "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", - "privilegesRequired": "LOW", + "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "HIGH" }, - "exploitabilityScore": 1.8, + "exploitabilityScore": 0.8, "impactScore": 5.2 } ] diff --git a/CVE-2024/CVE-2024-570xx/CVE-2024-57045.json b/CVE-2024/CVE-2024-570xx/CVE-2024-57045.json index 4167c2864e3..9dd2e8a0d89 100644 --- a/CVE-2024/CVE-2024-570xx/CVE-2024-57045.json +++ b/CVE-2024/CVE-2024-570xx/CVE-2024-57045.json @@ -2,8 +2,8 @@ "id": "CVE-2024-57045", "sourceIdentifier": "cve@mitre.org", "published": "2025-02-18T15:15:16.677", - "lastModified": "2025-02-19T16:15:40.317", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T13:08:12.557", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-859_a3_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "1.05", + "matchCriteriaId": "F723C548-E454-4DF0-9416-E528CA9DD37B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-859_a3:-:*:*:*:*:*:*:*", + "matchCriteriaId": "6642871A-6E64-4592-8BFD-ABD0AC3CAC2D" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/Shuanunio/CVE_Requests/blob/main/D-Link/DIR-859/ACL%20bypass%20Vulnerability%20in%20D-Link%20DIR-859.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.dlink.com/en/security-bulletin/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-72xx/CVE-2024-7253.json b/CVE-2024/CVE-2024-72xx/CVE-2024-7253.json index 4494c063bf0..3a2bce88894 100644 --- a/CVE-2024/CVE-2024-72xx/CVE-2024-7253.json +++ b/CVE-2024/CVE-2024-72xx/CVE-2024-7253.json @@ -2,7 +2,7 @@ "id": "CVE-2024-7253", "sourceIdentifier": "zdi-disclosures@trendmicro.com", "published": "2024-11-22T22:15:17.667", - "lastModified": "2024-11-26T20:00:48.783", + "lastModified": "2025-05-21T10:39:46.163", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -91,8 +91,8 @@ "vulnerable": true, "criteria": "cpe:2.3:a:nomachine:nomachine:*:*:*:*:*:*:*:*", "versionStartIncluding": "8.0", - "versionEndExcluding": "8.12.3", - "matchCriteriaId": "32F804FE-5441-4B6E-84C2-921A269AD395" + "versionEndExcluding": "8.12.13", + "matchCriteriaId": "87E1A306-C092-4C46-84FA-D9451744A4D4" } ] } diff --git a/CVE-2025/CVE-2025-06xx/CVE-2025-0624.json b/CVE-2025/CVE-2025-06xx/CVE-2025-0624.json index 90cf9119754..c5725e46437 100644 --- a/CVE-2025/CVE-2025-06xx/CVE-2025-0624.json +++ b/CVE-2025/CVE-2025-06xx/CVE-2025-0624.json @@ -2,7 +2,7 @@ "id": "CVE-2025-0624", "sourceIdentifier": "secalert@redhat.com", "published": "2025-02-19T19:15:15.120", - "lastModified": "2025-05-16T23:15:19.337", + "lastModified": "2025-05-21T15:16:04.547", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -116,6 +116,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:4422", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:7702", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-0624", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-14xx/CVE-2025-1415.json b/CVE-2025/CVE-2025-14xx/CVE-2025-1415.json new file mode 100644 index 00000000000..efdac4606af --- /dev/null +++ b/CVE-2025/CVE-2025-14xx/CVE-2025-1415.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-1415", + "sourceIdentifier": "cvd@cert.pl", + "published": "2025-05-21T12:16:20.817", + "lastModified": "2025-05-21T12:16:20.817", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A low-privileged user is able to obtain information about tasks executed on devices controlled by Proget MDM (Mobile Device Management), as well as details of the devices like their UUIDs needed for exploitation of CVE-2025-1416.\n\nIn order to perform the attack, one has to know a task_id, but since it's a low integer and there is no limit of requests an attacker can perform to a vulnerable endpoint, the task_id might be simply brute forced.\n\nThis issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite)." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/en/posts/2025/05/CVE-2025-1415", + "source": "cvd@cert.pl" + }, + { + "url": "https://proget.pl/en/mobile-device-management/", + "source": "cvd@cert.pl" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-14xx/CVE-2025-1416.json b/CVE-2025/CVE-2025-14xx/CVE-2025-1416.json new file mode 100644 index 00000000000..6085a9aa83a --- /dev/null +++ b/CVE-2025/CVE-2025-14xx/CVE-2025-1416.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-1416", + "sourceIdentifier": "cvd@cert.pl", + "published": "2025-05-21T13:16:00.700", + "lastModified": "2025-05-21T13:16:00.700", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In Proget MDM, a low-privileged user can retrieve passwords for managed devices and subsequently\u00a0use functionalities restricted by the MDM (Mobile Device Management). For it to happen, they must know the UUIDs of targetted devices, which might be obtained by exploiting\u00a0CVE-2025-1415 or\u00a0CVE-2025-1417.\n\nThis issue has been fixed in\u00a02.17.5 version of\u00a0Konsola Proget (server part of the MDM suite)." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/en/posts/2025/05/CVE-2025-1415", + "source": "cvd@cert.pl" + }, + { + "url": "https://proget.pl/en/mobile-device-management/", + "source": "cvd@cert.pl" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-14xx/CVE-2025-1417.json b/CVE-2025/CVE-2025-14xx/CVE-2025-1417.json new file mode 100644 index 00000000000..b0bbff031f6 --- /dev/null +++ b/CVE-2025/CVE-2025-14xx/CVE-2025-1417.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-1417", + "sourceIdentifier": "cvd@cert.pl", + "published": "2025-05-21T13:16:01.760", + "lastModified": "2025-05-21T13:16:01.760", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In Proget MDM, a low-privileged user can access information about changes contained in backups of all devices managed by the MDM (Mobile Device Management). This information include user ids, email addresses, first names, last names and device UUIDs. The last one can be used for exploitation of CVE-2025-1416.\n\nSuccessful exploitation requires UUID of a targeted backup, which cannot be brute forced.\u00a0\n\nThis issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite)." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.6, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/en/posts/2025/05/CVE-2025-1415", + "source": "cvd@cert.pl" + }, + { + "url": "https://proget.pl/en/mobile-device-management/", + "source": "cvd@cert.pl" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-14xx/CVE-2025-1418.json b/CVE-2025/CVE-2025-14xx/CVE-2025-1418.json new file mode 100644 index 00000000000..93be46c52f8 --- /dev/null +++ b/CVE-2025/CVE-2025-14xx/CVE-2025-1418.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-1418", + "sourceIdentifier": "cvd@cert.pl", + "published": "2025-05-21T13:16:01.927", + "lastModified": "2025-05-21T13:16:01.927", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A low-privileged user can access information about profiles created in\u00a0Proget MDM (Mobile Device Management), which contain details about allowed/prohibited functions. The profiles do not reveal any sensitive information (including their usage in connected devices).\u00a0 \u00a0\n\n\nThis issue has been fixed in\u00a02.17.5 version of\u00a0Konsola Proget (server part of the MDM suite)." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/en/posts/2025/05/CVE-2025-1415", + "source": "cvd@cert.pl" + }, + { + "url": "https://proget.pl/en/mobile-device-management/", + "source": "cvd@cert.pl" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-14xx/CVE-2025-1419.json b/CVE-2025/CVE-2025-14xx/CVE-2025-1419.json new file mode 100644 index 00000000000..5f46e155450 --- /dev/null +++ b/CVE-2025/CVE-2025-14xx/CVE-2025-1419.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-1419", + "sourceIdentifier": "cvd@cert.pl", + "published": "2025-05-21T13:16:02.110", + "lastModified": "2025-05-21T13:16:02.110", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Input provided in comment section of Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack.\n\n\nThis issue has been fixed in\u00a02.17.5 version of\u00a0Konsola Proget (server part of the MDM suite)." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.4, + "baseSeverity": "LOW", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/en/posts/2025/05/CVE-2025-1415", + "source": "cvd@cert.pl" + }, + { + "url": "https://proget.pl/en/mobile-device-management/", + "source": "cvd@cert.pl" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-14xx/CVE-2025-1420.json b/CVE-2025/CVE-2025-14xx/CVE-2025-1420.json new file mode 100644 index 00000000000..55cf6a44e7e --- /dev/null +++ b/CVE-2025/CVE-2025-14xx/CVE-2025-1420.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-1420", + "sourceIdentifier": "cvd@cert.pl", + "published": "2025-05-21T13:16:02.283", + "lastModified": "2025-05-21T13:16:02.283", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Input provided in a field containing \"activationMessage\"\u00a0in Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack.\n\n\nThis issue has been fixed in\u00a02.17.5 version of\u00a0Konsola Proget (server part of the MDM suite)." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.4, + "baseSeverity": "LOW", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/en/posts/2025/05/CVE-2025-1415", + "source": "cvd@cert.pl" + }, + { + "url": "https://proget.pl/en/mobile-device-management/", + "source": "cvd@cert.pl" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-14xx/CVE-2025-1421.json b/CVE-2025/CVE-2025-14xx/CVE-2025-1421.json new file mode 100644 index 00000000000..63f6aed4e32 --- /dev/null +++ b/CVE-2025/CVE-2025-14xx/CVE-2025-1421.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-1421", + "sourceIdentifier": "cvd@cert.pl", + "published": "2025-05-21T13:16:02.450", + "lastModified": "2025-05-21T13:16:02.450", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Data provided in a request performed to the server while activating a new device are put in a database.\u00a0Other high privileged users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker could gain remote access to the user's PC.\n\n\nThis issue has been fixed in\u00a02.17.5 version of\u00a0Konsola Proget (server part of the MDM suite)." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.4, + "baseSeverity": "LOW", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-1236" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/en/posts/2025/05/CVE-2025-1415", + "source": "cvd@cert.pl" + }, + { + "url": "https://proget.pl/en/mobile-device-management/", + "source": "cvd@cert.pl" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-17xx/CVE-2025-1712.json b/CVE-2025/CVE-2025-17xx/CVE-2025-1712.json new file mode 100644 index 00000000000..8f89e0b6026 --- /dev/null +++ b/CVE-2025/CVE-2025-17xx/CVE-2025-1712.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-1712", + "sourceIdentifier": "security@checkmk.com", + "published": "2025-05-21T09:15:35.520", + "lastModified": "2025-05-21T09:15:35.520", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Argument injection in special agent configuration in Checkmk <2.4.0p1, <2.3.0p32, <2.2.0p42 and 2.1.0 allows authenticated attackers to write arbitrary files" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@checkmk.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@checkmk.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-88" + } + ] + } + ], + "references": [ + { + "url": "https://checkmk.com/werk/17996", + "source": "security@checkmk.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-19xx/CVE-2025-1955.json b/CVE-2025/CVE-2025-19xx/CVE-2025-1955.json index bc3255670ea..fdf0595c931 100644 --- a/CVE-2025/CVE-2025-19xx/CVE-2025-1955.json +++ b/CVE-2025/CVE-2025-19xx/CVE-2025-1955.json @@ -2,8 +2,8 @@ "id": "CVE-2025-1955", "sourceIdentifier": "cna@vuldb.com", "published": "2025-03-04T21:15:12.940", - "lastModified": "2025-03-04T21:15:12.940", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-05-21T15:37:10.890", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.1, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 } ], "cvssMetricV2": [ @@ -122,28 +142,74 @@ "value": "CWE-94" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:code-projects:online_class_and_exam_scheduling_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07C30A4E-A477-439A-B6BC-701D9AA4784C" + } + ] + } + ] } ], "references": [ { "url": "https://code-projects.org/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://hexotion.notion.site/Online-Class-and-Exam-Scheduling-System-in-PHP-has-Stored-Cross-Site-Scripting-vulnerability-in-prof-1a7bb766cf32809b9f0be980e90d83f7?pvs=73", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.298556", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.298556", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.510689", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-260xx/CVE-2025-26091.json b/CVE-2025/CVE-2025-260xx/CVE-2025-26091.json index af0d761f467..9884615aab8 100644 --- a/CVE-2025/CVE-2025-260xx/CVE-2025-26091.json +++ b/CVE-2025/CVE-2025-260xx/CVE-2025-26091.json @@ -2,8 +2,8 @@ "id": "CVE-2025-26091", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-04T17:15:18.243", - "lastModified": "2025-04-09T19:15:47.703", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-05-21T15:00:43.580", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:teampasswordmanager:team_password_manager:*:*:*:*:*:*:*:*", + "versionEndIncluding": "12.162.284", + "matchCriteriaId": "CA1AE483-8D32-46F1-86B0-3CE7EA997AC5" + } + ] + } + ] + } + ], "references": [ { "url": "https://brunocaseiro.github.io/CVE-2025-26091/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-278xx/CVE-2025-27803.json b/CVE-2025/CVE-2025-278xx/CVE-2025-27803.json new file mode 100644 index 00000000000..7f785f30879 --- /dev/null +++ b/CVE-2025/CVE-2025-278xx/CVE-2025-27803.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-27803", + "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "published": "2025-05-21T12:16:21.100", + "lastModified": "2025-05-21T12:16:21.100", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The devices do not implement any authentication for the web interface or the MQTT server. An attacker who has network access to the device immediately gets administrative access to the devices and can perform arbitrary administrative actions and reconfigure the devices or potentially gain access to sensitive data." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], + "references": [ + { + "url": "https://r.sec-consult.com/echarge", + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-278xx/CVE-2025-27804.json b/CVE-2025/CVE-2025-278xx/CVE-2025-27804.json new file mode 100644 index 00000000000..7a5fec2d0e9 --- /dev/null +++ b/CVE-2025/CVE-2025-278xx/CVE-2025-27804.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-27804", + "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "published": "2025-05-21T12:16:21.283", + "lastModified": "2025-05-21T12:16:21.283", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script. By publishing a specially crafted message to a certain MQTT topic arbitrary OS commands can be executed with root permissions." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "https://r.sec-consult.com/echarge", + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-330xx/CVE-2025-33072.json b/CVE-2025/CVE-2025-330xx/CVE-2025-33072.json index 8c0ab3b9724..24663588039 100644 --- a/CVE-2025/CVE-2025-330xx/CVE-2025-33072.json +++ b/CVE-2025/CVE-2025-330xx/CVE-2025-33072.json @@ -2,8 +2,8 @@ "id": "CVE-2025-33072", "sourceIdentifier": "secure@microsoft.com", "published": "2025-05-08T23:15:52.803", - "lastModified": "2025-05-12T17:32:52.810", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-05-21T14:52:32.977", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "secure@microsoft.com", @@ -26,7 +26,7 @@ "cvssMetricV31": [ { "source": "secure@microsoft.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", @@ -43,6 +43,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 5.2 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -56,12 +76,42 @@ "value": "CWE-284" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:msagsfeedback.azurewebsites.net:-:*:*:*:*:*:*:*", + "matchCriteriaId": "77823A47-22E2-4C29-B6ED-521AC0F7D69D" + } + ] + } + ] } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33072", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-37xx/CVE-2025-3750.json b/CVE-2025/CVE-2025-37xx/CVE-2025-3750.json new file mode 100644 index 00000000000..7216024662c --- /dev/null +++ b/CVE-2025/CVE-2025-37xx/CVE-2025-3750.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-3750", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-05-21T12:16:21.447", + "lastModified": "2025-05-21T12:16:21.447", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Network Posts Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018post_height\u2019 parameter in all versions up to, and including, 7.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/network-posts-extended/trunk/network-posts-extended.php#L663", + "source": "security@wordfence.com" + }, + { + "url": "https://wordpress.org/plugins/network-posts-extended/#developers", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/64a15397-0bd6-4be9-90e3-6cb1f56394ad?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-37xx/CVE-2025-3781.json b/CVE-2025/CVE-2025-37xx/CVE-2025-3781.json new file mode 100644 index 00000000000..933436ac582 --- /dev/null +++ b/CVE-2025/CVE-2025-37xx/CVE-2025-3781.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-3781", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-05-21T12:16:21.677", + "lastModified": "2025-05-21T12:16:21.677", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Raisely Donation Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's raisely_donation_form shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/raisely-donation-form/trunk/inc/base/providers/shortcodes.php#L46", + "source": "security@wordfence.com" + }, + { + "url": "https://wordpress.org/plugins/raisely-donation-form/#developers", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0716485b-e94b-4e09-9c01-1059017bfcc8?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-38xx/CVE-2025-3810.json b/CVE-2025/CVE-2025-38xx/CVE-2025-3810.json index 90fde5e5967..52eb8a82ee1 100644 --- a/CVE-2025/CVE-2025-38xx/CVE-2025-3810.json +++ b/CVE-2025/CVE-2025-38xx/CVE-2025-3810.json @@ -2,8 +2,8 @@ "id": "CVE-2025-3810", "sourceIdentifier": "security@wordfence.com", "published": "2025-05-09T03:15:24.150", - "lastModified": "2025-05-12T17:32:52.810", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T14:39:49.083", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:iqonicdesign:wpbookit:*:*:*:*:*:wordpress:*:*", + "versionEndExcluding": "1.0.3", + "matchCriteriaId": "5406CBD4-1AD2-42B7-BE27-634DA0BF0A8A" + } + ] + } + ] + } + ], "references": [ { "url": "https://plugins.trac.wordpress.org/changeset/3278939/wpbookit/trunk/core/admin/classes/controllers/class.wpb-profile-controller.php", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Patch" + ] }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/54f1ebfb-67f1-461d-91f1-269b0a2c0653?source=cve", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-38xx/CVE-2025-3811.json b/CVE-2025/CVE-2025-38xx/CVE-2025-3811.json index 1239b5edb89..b45ee79011c 100644 --- a/CVE-2025/CVE-2025-38xx/CVE-2025-3811.json +++ b/CVE-2025/CVE-2025-38xx/CVE-2025-3811.json @@ -2,8 +2,8 @@ "id": "CVE-2025-3811", "sourceIdentifier": "security@wordfence.com", "published": "2025-05-09T03:15:24.307", - "lastModified": "2025-05-12T17:32:52.810", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T14:08:03.370", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -19,6 +19,26 @@ "cvssMetricV31": [ { "source": "security@wordfence.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + }, + { + "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "3.1", @@ -51,14 +71,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:iqonicdesign:wpbookit:*:*:*:*:*:wordpress:*:*", + "versionEndExcluding": "1.0.3", + "matchCriteriaId": "5406CBD4-1AD2-42B7-BE27-634DA0BF0A8A" + } + ] + } + ] + } + ], "references": [ { "url": "https://plugins.trac.wordpress.org/changeset/3278939/wpbookit/trunk/core/admin/classes/controllers/class.wpb-customer-controller.php", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Patch" + ] }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a61cce43-0df7-4ca9-8897-24c7d131b505?source=cve", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-38xx/CVE-2025-3876.json b/CVE-2025/CVE-2025-38xx/CVE-2025-3876.json index 24795863776..8236387b132 100644 --- a/CVE-2025/CVE-2025-38xx/CVE-2025-3876.json +++ b/CVE-2025/CVE-2025-38xx/CVE-2025-3876.json @@ -2,8 +2,8 @@ "id": "CVE-2025-3876", "sourceIdentifier": "security@wordfence.com", "published": "2025-05-10T12:15:35.670", - "lastModified": "2025-05-12T17:32:32.760", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T13:35:09.450", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -19,6 +19,26 @@ "cvssMetricV31": [ { "source": "security@wordfence.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + }, + { + "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "3.1", @@ -51,26 +71,59 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cozyvision:sms_alert_order_notifications:*:*:*:*:free:wordpress:*:*", + "versionEndExcluding": "3.8.2", + "matchCriteriaId": "FC050880-F7A8-436C-AD72-5E4201199421" + } + ] + } + ] + } + ], "references": [ { "url": "https://plugins.trac.wordpress.org/browser/sms-alert/tags/3.8.0/handler/forms/class-wplogin.php#L145", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Product" + ] }, { "url": "https://plugins.trac.wordpress.org/browser/sms-alert/tags/3.8.0/handler/forms/class-wplogin.php#L447", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Product" + ] }, { "url": "https://plugins.trac.wordpress.org/changeset/3290478/", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Patch" + ] }, { "url": "https://wordpress.org/plugins/sms-alert/#developers", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1cf65f79-d386-4dd4-a360-b2f764dfaf19?source=cve", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-38xx/CVE-2025-3878.json b/CVE-2025/CVE-2025-38xx/CVE-2025-3878.json index 5480245f820..b4980ec9ba0 100644 --- a/CVE-2025/CVE-2025-38xx/CVE-2025-3878.json +++ b/CVE-2025/CVE-2025-38xx/CVE-2025-3878.json @@ -2,8 +2,8 @@ "id": "CVE-2025-3878", "sourceIdentifier": "security@wordfence.com", "published": "2025-05-10T12:15:36.323", - "lastModified": "2025-05-12T17:32:32.760", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T13:36:16.070", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -19,7 +19,7 @@ "cvssMetricV31": [ { "source": "security@wordfence.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.1, "impactScore": 2.7 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 } ] }, @@ -51,22 +71,52 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cozyvision:sms_alert_order_notifications:*:*:*:*:free:wordpress:*:*", + "versionEndExcluding": "3.8.2", + "matchCriteriaId": "FC050880-F7A8-436C-AD72-5E4201199421" + } + ] + } + ] + } + ], "references": [ { "url": "https://plugins.trac.wordpress.org/browser/sms-alert/tags/3.8.0/helper/shortcode.php#L103", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Product" + ] }, { "url": "https://plugins.trac.wordpress.org/changeset/3290478/", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Patch" + ] }, { "url": "https://wordpress.org/plugins/sms-alert/#developers", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a85461b7-6d16-435c-a149-ad25419a1585?source=cve", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39481.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39481.json index 09a26244b1e..7cf55b40206 100644 --- a/CVE-2025/CVE-2025-394xx/CVE-2025-39481.json +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39481.json @@ -2,8 +2,8 @@ "id": "CVE-2025-39481", "sourceIdentifier": "audit@patchstack.com", "published": "2025-05-16T16:15:40.290", - "lastModified": "2025-05-19T13:35:50.497", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T14:23:08.503", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 4.7 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -51,10 +71,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:imithemes:eventer:*:*:*:*:*:wordpress:*:*", + "versionEndIncluding": "3.9.6", + "matchCriteriaId": "9AD1FEFC-4519-42DC-B76E-5183BFD86C2B" + } + ] + } + ] + } + ], "references": [ { "url": "https://patchstack.com/database/wordpress/plugin/eventer/vulnerability/wordpress-eventer-wordpress-event-booking-manager-plugin-plugin-3-9-6-sql-injection-vulnerability?_s_id=cve", - "source": "audit@patchstack.com" + "source": "audit@patchstack.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-407xx/CVE-2025-40775.json b/CVE-2025/CVE-2025-407xx/CVE-2025-40775.json new file mode 100644 index 00000000000..5c55adcce8c --- /dev/null +++ b/CVE-2025/CVE-2025-407xx/CVE-2025-40775.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-40775", + "sourceIdentifier": "security-officer@isc.org", + "published": "2025-05-21T13:16:02.623", + "lastModified": "2025-05-21T15:16:04.783", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND always checks it. If the TSIG contains an invalid value in the algorithm field, BIND immediately aborts with an assertion failure.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.8 and 9.21.0 through 9.21.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-officer@isc.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security-officer@isc.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-232" + } + ] + } + ], + "references": [ + { + "url": "https://kb.isc.org/docs/cve-2025-40775", + "source": "security-officer@isc.org" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2025/05/21/1", + "source": "af854a3a-2127-422b-91ae-364da2661108" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-40xx/CVE-2025-4094.json b/CVE-2025/CVE-2025-40xx/CVE-2025-4094.json new file mode 100644 index 00000000000..d62bcbf779b --- /dev/null +++ b/CVE-2025/CVE-2025-40xx/CVE-2025-4094.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-4094", + "sourceIdentifier": "contact@wpscan.com", + "published": "2025-05-21T06:16:28.507", + "lastModified": "2025-05-21T06:16:28.507", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://wpscan.com/vulnerability/b5f0a263-644b-4954-a1f0-d08e2149edbb/", + "source": "contact@wpscan.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-412xx/CVE-2025-41232.json b/CVE-2025/CVE-2025-412xx/CVE-2025-41232.json new file mode 100644 index 00000000000..edb2655d2d1 --- /dev/null +++ b/CVE-2025/CVE-2025-412xx/CVE-2025-41232.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-41232", + "sourceIdentifier": "security@vmware.com", + "published": "2025-05-21T12:16:21.993", + "lastModified": "2025-05-21T14:15:28.000", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Spring Security Aspects may not correctly locate method security annotations on private methods. This can cause an authorization bypass.\n\nYour application may be affected by this if the following are true:\n\n * You are using @EnableMethodSecurity(mode=ASPECTJ)\u00a0and spring-security-aspects, and\n * You have Spring Security method annotations on a private method\nIn that case, the target method may be able to be invoked without proper authorization.\n\nYou are not affected if:\n\n * You are not using @EnableMethodSecurity(mode=ASPECTJ)\u00a0or spring-security-aspects, or\n * You have no Spring Security-annotated private methods" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@vmware.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", + "baseScore": 9.1, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-693" + } + ] + } + ], + "references": [ + { + "url": "http://spring.io/security/cve-2025-41232", + "source": "security@vmware.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-41xx/CVE-2025-4105.json b/CVE-2025/CVE-2025-41xx/CVE-2025-4105.json new file mode 100644 index 00000000000..f188f6cd69b --- /dev/null +++ b/CVE-2025/CVE-2025-41xx/CVE-2025-4105.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-4105", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-05-21T12:16:22.473", + "lastModified": "2025-05-21T12:16:22.473", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Splitit plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on several functions in the 'splitIt-flexfields-payment-gateway.php' file in all versions up to, and including, 4.2.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change plugin settings, including changing the environment from sandbox to production and vice versa." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/splitit-installment-payments/tags/4.2.6/splitIt-flexfields-payment-gateway.php#L1927", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/splitit-installment-payments/tags/4.2.6/splitIt-flexfields-payment-gateway.php#L765", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6471b075-8115-4d38-a7dd-2308dca69f15?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-42xx/CVE-2025-4217.json b/CVE-2025/CVE-2025-42xx/CVE-2025-4217.json new file mode 100644 index 00000000000..584e31e396d --- /dev/null +++ b/CVE-2025/CVE-2025-42xx/CVE-2025-4217.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-4217", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-05-21T12:16:22.700", + "lastModified": "2025-05-21T12:16:22.700", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The WP YouTube Video Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ib_youtube' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/wp-youtube-video-optimizer/trunk/wp-youtube-video-optimizer.php#L20", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/71a933ef-f49d-4520-90d5-9957f72d7452?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-42xx/CVE-2025-4219.json b/CVE-2025/CVE-2025-42xx/CVE-2025-4219.json new file mode 100644 index 00000000000..a94d5a48300 --- /dev/null +++ b/CVE-2025/CVE-2025-42xx/CVE-2025-4219.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-4219", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-05-21T12:16:22.930", + "lastModified": "2025-05-21T12:16:22.930", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The DPEPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dpe' shortcode in all versions up to, and including, 0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/dpepress/trunk/dpepress.php#L72", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ccd273dc-9de3-4863-a787-db653f2003ca?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-42xx/CVE-2025-4221.json b/CVE-2025/CVE-2025-42xx/CVE-2025-4221.json new file mode 100644 index 00000000000..14cf7164028 --- /dev/null +++ b/CVE-2025/CVE-2025-42xx/CVE-2025-4221.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-4221", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-05-21T12:16:23.157", + "lastModified": "2025-05-21T12:16:23.157", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Animated Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'auto-downloader' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/animated-buttons/trunk/Animated_Buttons.php#L52", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e778399f-f7fe-47c5-9722-b833d78f475c?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44880.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44880.json index 70769c3d435..7b0efd6531e 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44880.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44880.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44880", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T21:15:23.170", - "lastModified": "2025-05-20T21:15:23.170", + "lastModified": "2025-05-21T14:15:28.137", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A command injection vulnerability in the component /cgi-bin/adm.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via a crafted input." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], "references": [ { "url": "https://lafdrew.github.io/2025/03/27/Remote-Command-Execution-in-adm-cgi-of-wavlink-WL-WN579A3-Device/", diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44881.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44881.json index 24513c0ef0d..a9d0d008f7a 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44881.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44881.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44881", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T20:15:41.763", - "lastModified": "2025-05-20T20:15:41.763", + "lastModified": "2025-05-21T14:15:28.323", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A command injection vulnerability in the component /cgi-bin/qos.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via a crafted input." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], "references": [ { "url": "https://lafdrew.github.io/2025/03/31/Remote-Command-Execution-in-qos-cgi-of-wavlink-WL-WN579A3-Device/", diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44882.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44882.json index 7e48feb9301..126d4d0eb55 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44882.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44882.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44882", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T21:15:23.257", - "lastModified": "2025-05-20T21:15:23.257", + "lastModified": "2025-05-21T14:15:28.540", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A command injection vulnerability in the component /cgi-bin/firewall.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via a crafted input." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], "references": [ { "url": "https://lafdrew.github.io/2025/03/31/Remote-Command-Execution-in-firewall-cgi-of-wavlink-WL-WN579A3-Device/", diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44883.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44883.json index f728e7ba999..303fb351f4c 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44883.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44883.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44883", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T21:15:23.343", - "lastModified": "2025-05-20T21:15:23.343", + "lastModified": "2025-05-21T14:15:28.720", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the tacIp parameter in the web_tacplus_serverEdit_post function." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], "references": [ { "url": "https://lafdrew.github.io/2025/04/20/web-tacplus-serverEdit-post-tacIp/", diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44884.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44884.json index 2ead9e39d5d..3eada37ac20 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44884.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44884.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44884", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T20:15:41.897", - "lastModified": "2025-05-20T20:15:41.897", + "lastModified": "2025-05-21T14:15:28.913", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the web_sys_infoContact_post function." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], "references": [ { "url": "https://lafdrew.github.io/2025/04/20/web-sys-infoContact-post-contact/", diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44885.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44885.json index e06d59f1c9f..169cf2bbfe0 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44885.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44885.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44885", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T20:15:42.017", - "lastModified": "2025-05-20T20:15:42.017", + "lastModified": "2025-05-21T14:15:29.090", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the remote_ip parameter in the web_snmpv3_remote_engineId_add_post function." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], "references": [ { "url": "https://lafdrew.github.io/2025/04/20/web-snmpv3-remote-engineId-add-post-remote-ip/", diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44886.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44886.json index b50d3942063..0e1ce285bf5 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44886.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44886.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44886", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T20:15:42.153", - "lastModified": "2025-05-20T20:15:42.153", + "lastModified": "2025-05-21T14:15:29.290", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the byruleEditName parameter in the web_acl_mgmt_Rules_Edit_postcontains function." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "references": [ { "url": "https://lafdrew.github.io/2025/04/20/web-acl-mgmt-Rules-Edit-post-ruleEditName/", diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44887.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44887.json index f13132900d0..cb15ffcb1fc 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44887.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44887.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44887", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T20:15:42.290", - "lastModified": "2025-05-20T20:15:42.290", + "lastModified": "2025-05-21T14:15:29.480", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radIpkey parameter in the web_radiusSrv_post function." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], "references": [ { "url": "https://lafdrew.github.io/2025/04/20/web-radiusSrv-post-radIp/", diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44888.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44888.json index 488f880d6e7..b96a02c913e 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44888.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44888.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44888", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T20:15:42.420", - "lastModified": "2025-05-20T20:15:42.420", + "lastModified": "2025-05-21T14:15:29.667", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the stp_conf_name parameter in the web_stp_globalSetting_post function." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], "references": [ { "url": "https://lafdrew.github.io/2025/04/20/web-stp-globalSetting-post-stp-conf-name/", diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44890.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44890.json index cce8179d41f..ba073ffb37f 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44890.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44890.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44890", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T20:15:42.543", - "lastModified": "2025-05-20T20:15:42.543", + "lastModified": "2025-05-21T14:15:29.857", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_notifyv3_add_post function." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], "references": [ { "url": "https://lafdrew.github.io/2025/04/20/web-snmp-notifyv3-add-post-host-ip/", diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44891.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44891.json index 9b580c66da8..3aebe03ed87 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44891.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44891.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44891", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T21:15:23.430", - "lastModified": "2025-05-20T21:15:23.430", + "lastModified": "2025-05-21T14:15:30.077", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_v3host_add_post function." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], "references": [ { "url": "https://lafdrew.github.io/2025/04/20/web-snmp-v3host-add-post-host-ip/", diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44892.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44892.json new file mode 100644 index 00000000000..63aa3663844 --- /dev/null +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44892.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-44892", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-05-21T14:15:30.243", + "lastModified": "2025-05-21T14:15:30.243", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ownekey parameter in the web_rmon_alarm_post_rmon_alarm function." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://lafdrew.github.io/2025/04/20/web-rmon-alarm-post-rmon-alarm-owne/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44893.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44893.json index 5d3d8eff7cd..d6c2d5effee 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44893.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44893.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44893", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T20:15:42.663", - "lastModified": "2025-05-20T20:15:42.663", + "lastModified": "2025-05-21T14:15:30.380", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ruleNamekey parameter in the web_acl_mgmt_Rules_Apply_post function." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], "references": [ { "url": "https://lafdrew.github.io/2025/04/20/web-acl-mgmt-Rules-Apply-post-ruleName/", diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44894.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44894.json index 911c34ab044..0bc989573d2 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44894.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44894.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44894", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T21:15:23.517", - "lastModified": "2025-05-20T21:15:23.517", + "lastModified": "2025-05-21T14:15:30.657", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radDftParamKey parameter in the web_radiusSrv_dftParam_post function." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], "references": [ { "url": "https://lafdrew.github.io/2025/04/20/web-radiusSrv-dftParam-post-radDftParamKey/", diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44895.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44895.json new file mode 100644 index 00000000000..608b62be085 --- /dev/null +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44895.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-44895", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-05-21T14:15:30.850", + "lastModified": "2025-05-21T14:15:30.850", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ipv4Aclkey parameter in the web_acl_ipv4BasedAceAdd function." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://lafdrew.github.io/2025/04/18/web-acl-ipv4BasedAceAdd-post-ipv4Acl-StackOverflow/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44896.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44896.json index 217dc3c5b51..148c6aa89a3 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44896.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44896.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44896", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T21:15:23.600", - "lastModified": "2025-05-20T21:15:23.600", + "lastModified": "2025-05-21T14:15:30.990", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bindEditMACName parameter in the web_acl_bindEdit_post function." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], "references": [ { "url": "https://lafdrew.github.io/2025/04/18/web-acl-bindEdit-post-bindEditMACName-StackOverflow/", diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44897.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44897.json index 42700a13620..9b3c1107555 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44897.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44897.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44897", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T21:15:23.683", - "lastModified": "2025-05-20T21:15:23.683", + "lastModified": "2025-05-21T14:15:31.177", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bytftp_srvip parameter in the web_tool_upgradeManager_post function." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], "references": [ { "url": "https://lafdrew.github.io/2025/04/20/web-tool-upgradeManager-post-tftp-srvip/", diff --git a/CVE-2025/CVE-2025-448xx/CVE-2025-44898.json b/CVE-2025/CVE-2025-448xx/CVE-2025-44898.json index 5ff567eadcc..e71bb9ecb2b 100644 --- a/CVE-2025/CVE-2025-448xx/CVE-2025-44898.json +++ b/CVE-2025/CVE-2025-448xx/CVE-2025-44898.json @@ -2,7 +2,7 @@ "id": "CVE-2025-44898", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-20T21:15:23.770", - "lastModified": "2025-05-20T21:15:23.770", + "lastModified": "2025-05-21T14:15:31.360", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the theauthName parameter in the web_aaa_loginAuthlistEdit function." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], "references": [ { "url": "https://lafdrew.github.io/2025/04/18/web-aaa-loginAuthlistEdit-get-authName-StackOverflow/", diff --git a/CVE-2025/CVE-2025-457xx/CVE-2025-45746.json b/CVE-2025/CVE-2025-457xx/CVE-2025-45746.json index 8d3cfe7ceed..ae5ed43afef 100644 --- a/CVE-2025/CVE-2025-457xx/CVE-2025-45746.json +++ b/CVE-2025/CVE-2025-457xx/CVE-2025-45746.json @@ -2,13 +2,20 @@ "id": "CVE-2025-45746", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-13T19:15:51.593", - "lastModified": "2025-05-15T18:38:00.693", - "vulnStatus": "Analyzed", - "cveTags": [], + "lastModified": "2025-05-21T14:15:31.553", + "vulnStatus": "Modified", + "cveTags": [ + { + "sourceIdentifier": "cve@mitre.org", + "tags": [ + "disputed" + ] + } + ], "descriptions": [ { "lang": "en", - "value": "In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console." + "value": "In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console. NOTE: the Supplier disputes the significance of this report because the service console is typically only accessible from a local area network, and because access to the service console does not result in login access or data access in the context of the application software platform." }, { "lang": "es", @@ -18,28 +25,28 @@ "metrics": { "cvssMetricV31": [ { - "source": "nvd@nist.gov", - "type": "Primary", + "source": "cve@mitre.org", + "type": "Secondary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", - "baseScore": 9.8, - "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", - "confidentialityImpact": "HIGH", - "integrityImpact": "HIGH", - "availabilityImpact": "HIGH" + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" }, "exploitabilityScore": 3.9, - "impactScore": 5.9 + "impactScore": 2.5 }, { - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", - "type": "Secondary", + "source": "nvd@nist.gov", + "type": "Primary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", @@ -61,18 +68,18 @@ }, "weaknesses": [ { - "source": "nvd@nist.gov", - "type": "Primary", + "source": "cve@mitre.org", + "type": "Secondary", "description": [ { "lang": "en", - "value": "CWE-798" + "value": "CWE-321" } ] }, { - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", - "type": "Secondary", + "source": "nvd@nist.gov", + "type": "Primary", "description": [ { "lang": "en", @@ -99,13 +106,6 @@ } ], "references": [ - { - "url": "http://zkbio.com", - "source": "cve@mitre.org", - "tags": [ - "Broken Link" - ] - }, { "url": "https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2025-45746.md", "source": "cve@mitre.org", diff --git a/CVE-2025/CVE-2025-45xx/CVE-2025-4524.json b/CVE-2025/CVE-2025-45xx/CVE-2025-4524.json new file mode 100644 index 00000000000..3791b0ad4d2 --- /dev/null +++ b/CVE-2025/CVE-2025-45xx/CVE-2025-4524.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-4524", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-05-21T07:16:01.220", + "lastModified": "2025-05-21T07:16:01.220", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Madara \u2013 Responsive and modern WordPress theme for manga sites theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.2 via the 'template' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://mangabooth.com/product/wp-manga-theme-madara/", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a3ee01da-218a-421d-8f9c-1dc6c056ef74?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-46xx/CVE-2025-4611.json b/CVE-2025/CVE-2025-46xx/CVE-2025-4611.json new file mode 100644 index 00000000000..3fe01966b10 --- /dev/null +++ b/CVE-2025/CVE-2025-46xx/CVE-2025-4611.json @@ -0,0 +1,80 @@ +{ + "id": "CVE-2025-4611", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-05-21T12:16:23.453", + "lastModified": "2025-05-21T12:16:23.453", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Slim SEO \u2013 Fast & Automated WordPress SEO Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's slim_seo_breadcrumbs shortcode in all versions up to, and including, 4.5.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/elightup/slim-seo/commit/b475dceff3a6bd94335d5a79eb12cdd92e2c8350", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/slim-seo/tags/4.5.3/src/Breadcrumbs.php#L109", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/slim-seo/tags/4.5.3/src/Breadcrumbs.php#L37", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/slim-seo/tags/4.5.3/src/Breadcrumbs.php#L85", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3296099/", + "source": "security@wordfence.com" + }, + { + "url": "https://wordpress.org/plugins/slim-seo/#developers", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6318a1cf-716f-450c-a1c2-497de8095daa?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-477xx/CVE-2025-47732.json b/CVE-2025/CVE-2025-477xx/CVE-2025-47732.json index 315268b936a..5ed534f8375 100644 --- a/CVE-2025/CVE-2025-477xx/CVE-2025-47732.json +++ b/CVE-2025/CVE-2025-477xx/CVE-2025-47732.json @@ -2,8 +2,8 @@ "id": "CVE-2025-47732", "sourceIdentifier": "secure@microsoft.com", "published": "2025-05-08T23:15:52.940", - "lastModified": "2025-05-12T17:32:52.810", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-05-21T14:46:28.843", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "secure@microsoft.com", @@ -26,7 +26,7 @@ "cvssMetricV31": [ { "source": "secure@microsoft.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", @@ -43,6 +43,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 5.8 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -56,12 +76,42 @@ "value": "CWE-502" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:dataverse:-:*:*:*:*:*:*:*", + "matchCriteriaId": "55709E21-D006-4F43-A6ED-B11AF1EA83BC" + } + ] + } + ] } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47732", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-477xx/CVE-2025-47733.json b/CVE-2025/CVE-2025-477xx/CVE-2025-47733.json index bb595bace68..205e84c77cb 100644 --- a/CVE-2025/CVE-2025-477xx/CVE-2025-47733.json +++ b/CVE-2025/CVE-2025-477xx/CVE-2025-47733.json @@ -2,8 +2,8 @@ "id": "CVE-2025-47733", "sourceIdentifier": "secure@microsoft.com", "published": "2025-05-08T23:15:53.090", - "lastModified": "2025-05-12T17:32:52.810", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-05-21T14:43:14.013", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "secure@microsoft.com", @@ -26,7 +26,7 @@ "cvssMetricV31": [ { "source": "secure@microsoft.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", @@ -43,6 +43,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.2 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -58,10 +78,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:power_apps:-:*:*:*:*:*:*:*", + "matchCriteriaId": "420F7BF6-15F9-4C35-8F16-3C4E0066BFC1" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47733", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-47xx/CVE-2025-4756.json b/CVE-2025/CVE-2025-47xx/CVE-2025-4756.json index 82c36dc5015..721e77c9402 100644 --- a/CVE-2025/CVE-2025-47xx/CVE-2025-4756.json +++ b/CVE-2025/CVE-2025-47xx/CVE-2025-4756.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4756", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-16T08:15:55.760", - "lastModified": "2025-05-16T14:42:18.700", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T13:40:10.450", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ], "cvssMetricV2": [ @@ -120,26 +140,75 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:di-7003g_firmware:24.04.18d1_r\\(68125\\):*:*:*:*:*:*:*", + "matchCriteriaId": "84A82F4D-9A82-46F3-B5FF-80F9753B5D9E" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:di-7003g:v2.d1:*:*:*:*:*:*:*", + "matchCriteriaId": "31604D70-5B52-47AC-93A2-71166176253E" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/restart.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.309058", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.309058", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.571077", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.dlink.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-47xx/CVE-2025-4771.json b/CVE-2025/CVE-2025-47xx/CVE-2025-4771.json index 40aac867f76..43310bfa066 100644 --- a/CVE-2025/CVE-2025-47xx/CVE-2025-4771.json +++ b/CVE-2025/CVE-2025-47xx/CVE-2025-4771.json @@ -2,13 +2,17 @@ "id": "CVE-2025-4771", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-16T12:15:19.220", - "lastModified": "2025-05-16T14:42:18.700", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T14:16:02.380", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability, which was classified as critical, was found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/course.php. The manipulation of the argument coursecode leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "es", + "value": "Se encontr\u00f3 una vulnerabilidad clasificada como cr\u00edtica en PHPGurukul Online Course Registration 3.1. La vulnerabilidad afecta a una funci\u00f3n desconocida del archivo /admin/course.php. La manipulaci\u00f3n del argumento coursecode provoca una inyecci\u00f3n SQL. Es posible ejecutar el ataque de forma remota. Se ha hecho p\u00fablico el exploit y puede que sea utilizado." } ], "metrics": { @@ -59,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,28 +142,75 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:online_course_registration:3.1:*:*:*:*:*:*:*", + "matchCriteriaId": "D81E8295-443B-41A0-8E43-C59108EC60D0" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/FLYFISH567/CVE/issues/4", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://phpgurukul.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://vuldb.com/?ctiid.309072", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.309072", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.572135", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-47xx/CVE-2025-4773.json b/CVE-2025/CVE-2025-47xx/CVE-2025-4773.json index 972d376230b..6a167b318dc 100644 --- a/CVE-2025/CVE-2025-47xx/CVE-2025-4773.json +++ b/CVE-2025/CVE-2025-47xx/CVE-2025-4773.json @@ -2,13 +2,17 @@ "id": "CVE-2025-4773", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-16T13:15:53.170", - "lastModified": "2025-05-16T14:42:18.700", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T14:34:08.967", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability was found in PHPGurukul Online Course Registration 3.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/level.php. The manipulation of the argument level leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "es", + "value": "Se encontr\u00f3 una vulnerabilidad en PHPGurukul Online Course Registration 3.1, clasificada como cr\u00edtica. Este problema afecta a una funcionalidad desconocida del archivo /admin/level.php. La manipulaci\u00f3n del argumento level provoca una inyecci\u00f3n SQL. El ataque puede ejecutarse en remoto. Se ha hecho p\u00fablico el exploit y puede que sea utilizado." } ], "metrics": { @@ -59,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,32 +142,84 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:online_course_registration:3.1:*:*:*:*:*:*:*", + "matchCriteriaId": "D81E8295-443B-41A0-8E43-C59108EC60D0" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/FLYFISH567/CVE/issues/6", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://phpgurukul.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://vuldb.com/?ctiid.309074", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.309074", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.572144", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/FLYFISH567/CVE/issues/6", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-47xx/CVE-2025-4777.json b/CVE-2025/CVE-2025-47xx/CVE-2025-4777.json index a13f483a4d8..ea36c4a8e6d 100644 --- a/CVE-2025/CVE-2025-47xx/CVE-2025-4777.json +++ b/CVE-2025/CVE-2025-47xx/CVE-2025-4777.json @@ -2,13 +2,17 @@ "id": "CVE-2025-4777", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-16T13:15:53.350", - "lastModified": "2025-05-16T14:42:18.700", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T14:31:24.410", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been classified as critical. This affects an unknown part of the file /view-foreigner-ticket.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "es", + "value": "Se encontr\u00f3 una vulnerabilidad en PHPGurukul Park Ticketing Management System 2.0. Se ha clasificado como cr\u00edtica. Afecta una parte desconocida del archivo /view-foreigner-ticket.php. La manipulaci\u00f3n del argumento viewid provoca una inyecci\u00f3n SQL. Es posible iniciar el ataque de forma remota. Se ha hecho p\u00fablico el exploit y puede que sea utilizado." } ], "metrics": { @@ -59,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,28 +142,75 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:park_ticketing_management_system:2.0:*:*:*:*:*:*:*", + "matchCriteriaId": "033F3C02-8BD6-4644-8A6B-D3351806F60C" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/f1rstb100d/myCVE/issues/3", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://phpgurukul.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://vuldb.com/?ctiid.309075", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.309075", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.572155", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48413.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48413.json new file mode 100644 index 00000000000..0c17ffece21 --- /dev/null +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48413.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48413", + "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "published": "2025-05-21T12:16:22.170", + "lastModified": "2025-05-21T15:16:04.963", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The `/etc/passwd` and `/etc/shadow` files reveal hard-coded password hashes for the operating system \"root\" user. The credentials are shipped with the update files. There is no option for deleting or changing their passwords for an enduser. An attacker can use the credentials to log into the device. Authentication can be performed via SSH backdoor or likely via physical access (UART shell)." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", + "baseScore": 7.7, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.5, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-798" + } + ] + } + ], + "references": [ + { + "url": "https://r.sec-consult.com/echarge", + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48414.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48414.json new file mode 100644 index 00000000000..f8dfaea4baf --- /dev/null +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48414.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48414", + "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "published": "2025-05-21T12:16:22.327", + "lastModified": "2025-05-21T12:16:22.327", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "There are several scripts in the web interface that are accessible via undocumented hard-coded credentials. The scripts provide access to additional administrative/debug functionality and are likely intended for debugging during development and provides an additional attack surface." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-798" + } + ] + } + ], + "references": [ + { + "url": "https://r.sec-consult.com/echarge", + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48415.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48415.json new file mode 100644 index 00000000000..bad4ed86cc4 --- /dev/null +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48415.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48415", + "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "published": "2025-05-21T13:16:02.810", + "lastModified": "2025-05-21T13:16:02.810", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted \"salia.ini\" files. The .ini file can contain several \"commands\" that could be exploited by an attacker to export or modify the device configuration, enable an SSH backdoor\u00a0 or perform other administrative actions. Ultimately, this backdoor also allows arbitrary execution of OS commands." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-749" + } + ] + } + ], + "references": [ + { + "url": "https://r.sec-consult.com/echarge", + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48416.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48416.json new file mode 100644 index 00000000000..0a5dc115b22 --- /dev/null +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48416.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-48416", + "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "published": "2025-05-21T13:16:02.947", + "lastModified": "2025-05-21T13:16:02.947", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the \"/etc/shadow\" file in the firmware image for the \"root\" user. However, in the default SSH configuration the \"PermitRootLogin\" is disabled, preventing the root user from logging in via SSH. This configuration can be bypassed/changed by an attacker through multiple paths though." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-912" + } + ] + } + ], + "references": [ + { + "url": "https://r.sec-consult.com/echarge", + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48417.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48417.json new file mode 100644 index 00000000000..006058924c0 --- /dev/null +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48417.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48417", + "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "published": "2025-05-21T13:16:03.080", + "lastModified": "2025-05-21T14:15:31.903", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The certificate and private key used for providing transport layer security for connections to the web interface (TCP port 443) is hard-coded in the firmware and are shipped with the update files. An attacker can use the private key to perform man-in-the-middle attacks against users of the admin interface. The files are located in /etc/ssl (e.g. salia.local.crt, salia.local.key and salia.local.pem). There is no option to upload/configure custom TLS certificates." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-321" + } + ] + } + ], + "references": [ + { + "url": "https://r.sec-consult.com/echarge", + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48419.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48419.json new file mode 100644 index 00000000000..c1b393c3e79 --- /dev/null +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48419.json @@ -0,0 +1,16 @@ +{ + "id": "CVE-2025-48419", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-05-21T06:16:27.723", + "lastModified": "2025-05-21T06:16:27.723", + "vulnStatus": "Rejected", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rejected reason: Not used" + } + ], + "metrics": {}, + "references": [] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48420.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48420.json new file mode 100644 index 00000000000..406046b9dd1 --- /dev/null +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48420.json @@ -0,0 +1,16 @@ +{ + "id": "CVE-2025-48420", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-05-21T06:16:27.857", + "lastModified": "2025-05-21T06:16:27.857", + "vulnStatus": "Rejected", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rejected reason: Not used" + } + ], + "metrics": {}, + "references": [] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48421.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48421.json new file mode 100644 index 00000000000..7ab463d560c --- /dev/null +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48421.json @@ -0,0 +1,16 @@ +{ + "id": "CVE-2025-48421", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-05-21T06:16:27.937", + "lastModified": "2025-05-21T06:16:27.937", + "vulnStatus": "Rejected", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rejected reason: Not used" + } + ], + "metrics": {}, + "references": [] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48422.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48422.json new file mode 100644 index 00000000000..4501d199f82 --- /dev/null +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48422.json @@ -0,0 +1,16 @@ +{ + "id": "CVE-2025-48422", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-05-21T06:16:28.017", + "lastModified": "2025-05-21T06:16:28.017", + "vulnStatus": "Rejected", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rejected reason: Not used" + } + ], + "metrics": {}, + "references": [] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48423.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48423.json new file mode 100644 index 00000000000..d86cf7a1724 --- /dev/null +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48423.json @@ -0,0 +1,16 @@ +{ + "id": "CVE-2025-48423", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-05-21T06:16:28.103", + "lastModified": "2025-05-21T06:16:28.103", + "vulnStatus": "Rejected", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rejected reason: Not used" + } + ], + "metrics": {}, + "references": [] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48424.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48424.json new file mode 100644 index 00000000000..7dde8252033 --- /dev/null +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48424.json @@ -0,0 +1,16 @@ +{ + "id": "CVE-2025-48424", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-05-21T06:16:28.183", + "lastModified": "2025-05-21T06:16:28.183", + "vulnStatus": "Rejected", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rejected reason: Not used" + } + ], + "metrics": {}, + "references": [] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48425.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48425.json new file mode 100644 index 00000000000..48d893575dc --- /dev/null +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48425.json @@ -0,0 +1,16 @@ +{ + "id": "CVE-2025-48425", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-05-21T06:16:28.263", + "lastModified": "2025-05-21T06:16:28.263", + "vulnStatus": "Rejected", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rejected reason: Not used" + } + ], + "metrics": {}, + "references": [] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48426.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48426.json new file mode 100644 index 00000000000..aa909f4c0b9 --- /dev/null +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48426.json @@ -0,0 +1,16 @@ +{ + "id": "CVE-2025-48426", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-05-21T06:16:28.347", + "lastModified": "2025-05-21T06:16:28.347", + "vulnStatus": "Rejected", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rejected reason: Not used" + } + ], + "metrics": {}, + "references": [] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48427.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48427.json new file mode 100644 index 00000000000..424ff38d527 --- /dev/null +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48427.json @@ -0,0 +1,16 @@ +{ + "id": "CVE-2025-48427", + "sourceIdentifier": "psirt@fortinet.com", + "published": "2025-05-21T06:16:28.427", + "lastModified": "2025-05-21T06:16:28.427", + "vulnStatus": "Rejected", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rejected reason: Not used" + } + ], + "metrics": {}, + "references": [] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-48xx/CVE-2025-4803.json b/CVE-2025/CVE-2025-48xx/CVE-2025-4803.json new file mode 100644 index 00000000000..7908c7afafb --- /dev/null +++ b/CVE-2025/CVE-2025-48xx/CVE-2025-4803.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2025-4803", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-05-21T12:16:23.673", + "lastModified": "2025-05-21T12:16:23.673", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Glossary by WPPedia \u2013 Best Glossary plugin for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.0 via deserialization of untrusted input from the 'posttypes' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/bfiessinger/wppedia/blob/1d0b8568349c9c9479372f845a812eb2aa4b3d09/core/classes/traits/trait-sanitizes-data.php#L64", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/wppedia/tags/1.3.0/core/classes/class-options.php#L396", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/wppedia/tags/1.3.0/core/classes/traits/trait-sanitizes-data.php#L64", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/53fb54bc-6eaa-4e99-a41c-e59a9bae81e5?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-49xx/CVE-2025-4901.json b/CVE-2025/CVE-2025-49xx/CVE-2025-4901.json index 735c4c2da55..7adc5eef69d 100644 --- a/CVE-2025/CVE-2025-49xx/CVE-2025-4901.json +++ b/CVE-2025/CVE-2025-49xx/CVE-2025-4901.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4901", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-19T00:15:17.400", - "lastModified": "2025-05-19T14:15:25.620", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T13:40:20.293", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ], "cvssMetricV2": [ @@ -122,32 +142,95 @@ "value": "CWE-284" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:di-7003g_firmware:24.04.18d1_r\\(68125\\):*:*:*:*:*:*:*", + "matchCriteriaId": "84A82F4D-9A82-46F3-B5FF-80F9753B5D9E" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:di-7003g:v2.d1:*:*:*:*:*:*:*", + "matchCriteriaId": "31604D70-5B52-47AC-93A2-71166176253E" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/state_view.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.309457", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.309457", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.578049", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.dlink.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/state_view.md", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-49xx/CVE-2025-4902.json b/CVE-2025/CVE-2025-49xx/CVE-2025-4902.json index 6925e15b448..7370a79b232 100644 --- a/CVE-2025/CVE-2025-49xx/CVE-2025-4902.json +++ b/CVE-2025/CVE-2025-49xx/CVE-2025-4902.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4902", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-19T01:15:20.960", - "lastModified": "2025-05-19T14:15:25.747", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T13:37:47.987", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ], "cvssMetricV2": [ @@ -122,32 +142,95 @@ "value": "CWE-284" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:di-7003g_firmware:24.04.18d1_r\\(68125\\):*:*:*:*:*:*:*", + "matchCriteriaId": "84A82F4D-9A82-46F3-B5FF-80F9753B5D9E" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:di-7003g:v2.d1:*:*:*:*:*:*:*", + "matchCriteriaId": "31604D70-5B52-47AC-93A2-71166176253E" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/versionupdate.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.309458", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.309458", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.578050", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.dlink.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/versionupdate.md", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-49xx/CVE-2025-4911.json b/CVE-2025/CVE-2025-49xx/CVE-2025-4911.json index 9a6fb37c54f..0b191443303 100644 --- a/CVE-2025/CVE-2025-49xx/CVE-2025-4911.json +++ b/CVE-2025/CVE-2025-49xx/CVE-2025-4911.json @@ -2,13 +2,17 @@ "id": "CVE-2025-4911", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-19T05:15:18.160", - "lastModified": "2025-05-19T13:35:20.460", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T13:26:25.383", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/view-foreigner-ticket.php. The manipulation of the argument viewid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "es", + "value": "Se encontr\u00f3 una vulnerabilidad clasificada como cr\u00edtica en PHPGurukul Zoo Management System 2.1. La funci\u00f3n afectada es desconocida en el archivo /admin/view-foreigner-ticket.php. La manipulaci\u00f3n del argumento viewid provoca una inyecci\u00f3n SQL. Es posible ejecutar el ataque de forma remota. Se ha hecho p\u00fablico el exploit y puede que sea utilizado." } ], "metrics": { @@ -59,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,28 +142,74 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:zoo_management_system:2.1:*:*:*:*:*:*:*", + "matchCriteriaId": "C8805D6F-ADC2-4739-87E6-E3CB242BDFB3" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/xiguala123/myCVE/issues/6", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://phpgurukul.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://vuldb.com/?ctiid.309468", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://vuldb.com/?id.309468", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.578751", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-49xx/CVE-2025-4925.json b/CVE-2025/CVE-2025-49xx/CVE-2025-4925.json index 8de6874cba2..df9eb3d88bf 100644 --- a/CVE-2025/CVE-2025-49xx/CVE-2025-4925.json +++ b/CVE-2025/CVE-2025-49xx/CVE-2025-4925.json @@ -2,13 +2,17 @@ "id": "CVE-2025-4925", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-19T09:15:25.590", - "lastModified": "2025-05-19T13:35:20.460", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T12:58:28.507", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /expense-monthwise-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "es", + "value": "Se ha encontrado una vulnerabilidad en PHPGurukul Daily Expense Tracker System 1.1, clasificada como cr\u00edtica. Esta vulnerabilidad afecta a una funcionalidad desconocida del archivo /expense-monthwise-reports-detailed.php. La manipulaci\u00f3n del argumento fromdate/todate provoca una inyecci\u00f3n SQL. El ataque puede ejecutarse en remoto. Se ha hecho p\u00fablico el exploit y puede que sea utilizado." } ], "metrics": { @@ -59,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,28 +142,75 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:daily_expense_tracker_system:1.1:*:*:*:-:*:*:*", + "matchCriteriaId": "0EA23473-6F20-499A-9088-4567AACC8157" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/f1rstb100d/myCVE/issues/24", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://phpgurukul.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://vuldb.com/?ctiid.309487", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.309487", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.579105", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-49xx/CVE-2025-4926.json b/CVE-2025/CVE-2025-49xx/CVE-2025-4926.json index a6da4b49966..387748532a3 100644 --- a/CVE-2025/CVE-2025-49xx/CVE-2025-4926.json +++ b/CVE-2025/CVE-2025-49xx/CVE-2025-4926.json @@ -2,13 +2,17 @@ "id": "CVE-2025-4926", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-19T10:15:21.327", - "lastModified": "2025-05-19T13:35:20.460", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T12:46:59.150", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability was found in PHPGurukul Car Rental Project 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/post-avehical.php. The manipulation of the argument img1/img2/img3/img4/img5 leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "es", + "value": "Se encontr\u00f3 una vulnerabilidad en PHPGurukul Car Rental Project 1.0, clasificada como cr\u00edtica. Este problema afecta a una funcionalidad desconocida del archivo /admin/post-avehical.php. La manipulaci\u00f3n del argumento img1/img2/img3/img4/img5 permite la carga sin restricciones. El ataque puede ejecutarse en remoto. Se ha hecho p\u00fablico el exploit y puede que sea utilizado." } ], "metrics": { @@ -59,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +80,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,28 +142,75 @@ "value": "CWE-434" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:car_rental_portal:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "D93DD93F-20B4-4C19-AD78-14359061EB19" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/6BXK6/cve/issues/4", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://phpgurukul.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://vuldb.com/?ctiid.309488", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.309488", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.579163", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-49xx/CVE-2025-4927.json b/CVE-2025/CVE-2025-49xx/CVE-2025-4927.json index cb575b9bbcb..8af4d8ea2f8 100644 --- a/CVE-2025/CVE-2025-49xx/CVE-2025-4927.json +++ b/CVE-2025/CVE-2025-49xx/CVE-2025-4927.json @@ -2,13 +2,17 @@ "id": "CVE-2025-4927", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-19T10:15:21.623", - "lastModified": "2025-05-19T13:35:20.460", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-21T12:42:13.543", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability was found in PHPGurukul Online Marriage Registration System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/between-dates-application-report.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "es", + "value": "Se encontr\u00f3 una vulnerabilidad en PHPGurukul Online Marriage Registration System 1.0. Se ha clasificado como cr\u00edtica. Afecta una parte desconocida del archivo /admin/between-dates-application-report.php. La manipulaci\u00f3n del argumento fromdate/todate provoca una inyecci\u00f3n SQL. Es posible iniciar el ataque de forma remota. Se ha hecho p\u00fablico el exploit y puede que sea utilizado." } ], "metrics": { @@ -59,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,28 +142,74 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:online_marriage_registration_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "69C28429-BE21-447D-AFEE-837E239F2B00" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/sknadklasdls/CVE/issues/1", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://phpgurukul.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://vuldb.com/?ctiid.309489", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required" + ] }, { "url": "https://vuldb.com/?id.309489", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.579300", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-49xx/CVE-2025-4949.json b/CVE-2025/CVE-2025-49xx/CVE-2025-4949.json new file mode 100644 index 00000000000..3d8498c6bd8 --- /dev/null +++ b/CVE-2025/CVE-2025-49xx/CVE-2025-4949.json @@ -0,0 +1,94 @@ +{ + "id": "CVE-2025-4949", + "sourceIdentifier": "emo@eclipse.org", + "published": "2025-05-21T07:16:01.397", + "lastModified": "2025-05-21T12:16:23.933", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This vulnerability can lead to information disclosure, denial of service, and other security issues." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "emo@eclipse.org", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:L/U:Green", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NEGLIGIBLE", + "Automatable": "YES", + "Recovery": "USER", + "valueDensity": "DIFFUSE", + "vulnerabilityResponseEffort": "LOW", + "providerUrgency": "GREEN" + } + } + ] + }, + "weaknesses": [ + { + "source": "emo@eclipse.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-611" + }, + { + "lang": "en", + "value": "CWE-827" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.eclipse.org/security/cve-assignement/-/issues/64", + "source": "emo@eclipse.org" + }, + { + "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281", + "source": "emo@eclipse.org" + }, + { + "url": "https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1", + "source": "emo@eclipse.org" + }, + { + "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-49xx/CVE-2025-4969.json b/CVE-2025/CVE-2025-49xx/CVE-2025-4969.json new file mode 100644 index 00000000000..a09b4dd12fc --- /dev/null +++ b/CVE-2025/CVE-2025-49xx/CVE-2025-4969.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-4969", + "sourceIdentifier": "secalert@redhat.com", + "published": "2025-05-21T06:16:28.937", + "lastModified": "2025-05-21T06:16:28.937", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. This can allow a remote attacker to send a specially crafted multipart HTTP body, causing the libsoup-consuming server to read beyond its allocated memory boundaries (out-of-bounds read)." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secalert@redhat.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "secalert@redhat.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2025-4969", + "source": "secalert@redhat.com" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2367552", + "source": "secalert@redhat.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-50xx/CVE-2025-5001.json b/CVE-2025/CVE-2025-50xx/CVE-2025-5001.json index e0abb0d34b6..169d961a24a 100644 --- a/CVE-2025/CVE-2025-50xx/CVE-2025-5001.json +++ b/CVE-2025/CVE-2025-50xx/CVE-2025-5001.json @@ -2,7 +2,7 @@ "id": "CVE-2025-5001", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-20T22:15:19.043", - "lastModified": "2025-05-20T22:15:19.043", + "lastModified": "2025-05-21T14:15:32.490", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -144,6 +144,10 @@ { "url": "https://www.gnu.org/", "source": "cna@vuldb.com" + }, + { + "url": "https://savannah.gnu.org/bugs/index.php?67069", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-50xx/CVE-2025-5002.json b/CVE-2025/CVE-2025-50xx/CVE-2025-5002.json index c6edea1514a..5208c3e9aac 100644 --- a/CVE-2025/CVE-2025-50xx/CVE-2025-5002.json +++ b/CVE-2025/CVE-2025-50xx/CVE-2025-5002.json @@ -2,7 +2,7 @@ "id": "CVE-2025-5002", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-20T22:15:19.410", - "lastModified": "2025-05-20T22:15:19.410", + "lastModified": "2025-05-21T15:16:05.120", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -140,6 +140,10 @@ { "url": "https://www.sourcecodester.com/", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/laifeng-boy/cve/issues/5", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-50xx/CVE-2025-5003.json b/CVE-2025/CVE-2025-50xx/CVE-2025-5003.json index ed5c28451f0..efd0d8f1798 100644 --- a/CVE-2025/CVE-2025-50xx/CVE-2025-5003.json +++ b/CVE-2025/CVE-2025-50xx/CVE-2025-5003.json @@ -2,7 +2,7 @@ "id": "CVE-2025-5003", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-20T22:15:19.600", - "lastModified": "2025-05-20T22:15:19.600", + "lastModified": "2025-05-21T15:16:05.397", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -136,6 +136,10 @@ { "url": "https://vuldb.com/?submit.580195", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/huangyi234/CVE/issues/4", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-50xx/CVE-2025-5004.json b/CVE-2025/CVE-2025-50xx/CVE-2025-5004.json index 901f0ce5cf5..56c51164eef 100644 --- a/CVE-2025/CVE-2025-50xx/CVE-2025-5004.json +++ b/CVE-2025/CVE-2025-50xx/CVE-2025-5004.json @@ -2,7 +2,7 @@ "id": "CVE-2025-5004", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-20T23:15:19.530", - "lastModified": "2025-05-20T23:15:19.530", + "lastModified": "2025-05-21T15:16:05.530", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -136,6 +136,10 @@ { "url": "https://vuldb.com/?submit.580201", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/huangyi234/CVE/issues/8", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-50xx/CVE-2025-5006.json b/CVE-2025/CVE-2025-50xx/CVE-2025-5006.json index a3e38b334c5..64fe7d7b3b1 100644 --- a/CVE-2025/CVE-2025-50xx/CVE-2025-5006.json +++ b/CVE-2025/CVE-2025-50xx/CVE-2025-5006.json @@ -2,7 +2,7 @@ "id": "CVE-2025-5006", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-20T23:15:19.750", - "lastModified": "2025-05-20T23:15:19.750", + "lastModified": "2025-05-21T14:15:32.637", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -140,6 +140,10 @@ { "url": "https://www.campcodes.com/", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/Zhaozhizhi/CVE/issues/3", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-50xx/CVE-2025-5013.json b/CVE-2025/CVE-2025-50xx/CVE-2025-5013.json new file mode 100644 index 00000000000..933fe08e7c8 --- /dev/null +++ b/CVE-2025/CVE-2025-50xx/CVE-2025-5013.json @@ -0,0 +1,137 @@ +{ + "id": "CVE-2025-5013", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-05-21T06:16:29.103", + "lastModified": "2025-05-21T06:16:29.103", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702. This affects an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", + "baseScore": 5.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "NONE", + "integrityImpact": "PARTIAL", + "availabilityImpact": "NONE" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 10.0, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + }, + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://gitee.com/Hk_Cms/HkCms/issues/IBZ2G7", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.309729", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.309729", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-50xx/CVE-2025-5029.json b/CVE-2025/CVE-2025-50xx/CVE-2025-5029.json new file mode 100644 index 00000000000..4eb49cde68e --- /dev/null +++ b/CVE-2025/CVE-2025-50xx/CVE-2025-5029.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-5029", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-05-21T15:16:05.660", + "lastModified": "2025-05-21T15:16:05.660", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been found in Kingdee Cloud Galaxy Private Cloud BBC System up to 9.0 Patch April 2025 and classified as critical. Affected by this vulnerability is the function BaseServiceFactory.getFileUploadService.deleteFileAction of the file fileUpload/deleteFileAction.jhtml of the component File Handler. The manipulation of the argument filePath leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.5 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:P", + "baseScore": 5.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "NONE", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 4.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://vip.kingdee.com/knowledge/708656434111770368", + "source": "cna@vuldb.com" + }, + { + "url": "https://vip.kingdee.com/school/detail/713028702245944320?productLineId=1&lang=zh-CN", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.309847", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.309847", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.570956", + "source": "cna@vuldb.com" + }, + { + "url": "https://wx.mail.qq.com/s?k=nFbp0U0gSX0QVechIO", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 20c061ce221..c4c33ef59e9 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-05-21T02:00:19.779264+00:00 +2025-05-21T16:00:19.999702+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-05-21T00:15:22.310000+00:00 +2025-05-21T15:58:30.673000+00:00 ``` ### Last Data Feed Release @@ -33,24 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -294986 +295036 ``` ### CVEs added in the last Commit -Recently added CVEs: `2` +Recently added CVEs: `50` -- [CVE-2025-5010](CVE-2025/CVE-2025-50xx/CVE-2025-5010.json) (`2025-05-21T00:15:22.137`) -- [CVE-2025-5011](CVE-2025/CVE-2025-50xx/CVE-2025-5011.json) (`2025-05-21T00:15:22.310`) +- [CVE-2025-4219](CVE-2025/CVE-2025-42xx/CVE-2025-4219.json) (`2025-05-21T12:16:22.930`) +- [CVE-2025-4221](CVE-2025/CVE-2025-42xx/CVE-2025-4221.json) (`2025-05-21T12:16:23.157`) +- [CVE-2025-44892](CVE-2025/CVE-2025-448xx/CVE-2025-44892.json) (`2025-05-21T14:15:30.243`) +- [CVE-2025-44895](CVE-2025/CVE-2025-448xx/CVE-2025-44895.json) (`2025-05-21T14:15:30.850`) +- [CVE-2025-4524](CVE-2025/CVE-2025-45xx/CVE-2025-4524.json) (`2025-05-21T07:16:01.220`) +- [CVE-2025-4611](CVE-2025/CVE-2025-46xx/CVE-2025-4611.json) (`2025-05-21T12:16:23.453`) +- [CVE-2025-4803](CVE-2025/CVE-2025-48xx/CVE-2025-4803.json) (`2025-05-21T12:16:23.673`) +- [CVE-2025-48413](CVE-2025/CVE-2025-484xx/CVE-2025-48413.json) (`2025-05-21T12:16:22.170`) +- [CVE-2025-48414](CVE-2025/CVE-2025-484xx/CVE-2025-48414.json) (`2025-05-21T12:16:22.327`) +- [CVE-2025-48415](CVE-2025/CVE-2025-484xx/CVE-2025-48415.json) (`2025-05-21T13:16:02.810`) +- [CVE-2025-48416](CVE-2025/CVE-2025-484xx/CVE-2025-48416.json) (`2025-05-21T13:16:02.947`) +- [CVE-2025-48417](CVE-2025/CVE-2025-484xx/CVE-2025-48417.json) (`2025-05-21T13:16:03.080`) +- [CVE-2025-48419](CVE-2025/CVE-2025-484xx/CVE-2025-48419.json) (`2025-05-21T06:16:27.723`) +- [CVE-2025-48420](CVE-2025/CVE-2025-484xx/CVE-2025-48420.json) (`2025-05-21T06:16:27.857`) +- [CVE-2025-48421](CVE-2025/CVE-2025-484xx/CVE-2025-48421.json) (`2025-05-21T06:16:27.937`) +- [CVE-2025-48422](CVE-2025/CVE-2025-484xx/CVE-2025-48422.json) (`2025-05-21T06:16:28.017`) +- [CVE-2025-48423](CVE-2025/CVE-2025-484xx/CVE-2025-48423.json) (`2025-05-21T06:16:28.103`) +- [CVE-2025-48424](CVE-2025/CVE-2025-484xx/CVE-2025-48424.json) (`2025-05-21T06:16:28.183`) +- [CVE-2025-48425](CVE-2025/CVE-2025-484xx/CVE-2025-48425.json) (`2025-05-21T06:16:28.263`) +- [CVE-2025-48426](CVE-2025/CVE-2025-484xx/CVE-2025-48426.json) (`2025-05-21T06:16:28.347`) +- [CVE-2025-48427](CVE-2025/CVE-2025-484xx/CVE-2025-48427.json) (`2025-05-21T06:16:28.427`) +- [CVE-2025-4949](CVE-2025/CVE-2025-49xx/CVE-2025-4949.json) (`2025-05-21T07:16:01.397`) +- [CVE-2025-4969](CVE-2025/CVE-2025-49xx/CVE-2025-4969.json) (`2025-05-21T06:16:28.937`) +- [CVE-2025-5013](CVE-2025/CVE-2025-50xx/CVE-2025-5013.json) (`2025-05-21T06:16:29.103`) +- [CVE-2025-5029](CVE-2025/CVE-2025-50xx/CVE-2025-5029.json) (`2025-05-21T15:16:05.660`) ### CVEs modified in the last Commit -Recently modified CVEs: `3` +Recently modified CVEs: `111` -- [CVE-2024-12243](CVE-2024/CVE-2024-122xx/CVE-2024-12243.json) (`2025-05-21T00:15:21.700`) -- [CVE-2024-6538](CVE-2024/CVE-2024-65xx/CVE-2024-6538.json) (`2025-05-21T00:15:21.840`) -- [CVE-2025-0129](CVE-2025/CVE-2025-01xx/CVE-2025-0129.json) (`2025-05-21T00:15:21.960`) +- [CVE-2025-44890](CVE-2025/CVE-2025-448xx/CVE-2025-44890.json) (`2025-05-21T14:15:29.857`) +- [CVE-2025-44891](CVE-2025/CVE-2025-448xx/CVE-2025-44891.json) (`2025-05-21T14:15:30.077`) +- [CVE-2025-44893](CVE-2025/CVE-2025-448xx/CVE-2025-44893.json) (`2025-05-21T14:15:30.380`) +- [CVE-2025-44894](CVE-2025/CVE-2025-448xx/CVE-2025-44894.json) (`2025-05-21T14:15:30.657`) +- [CVE-2025-44896](CVE-2025/CVE-2025-448xx/CVE-2025-44896.json) (`2025-05-21T14:15:30.990`) +- [CVE-2025-44897](CVE-2025/CVE-2025-448xx/CVE-2025-44897.json) (`2025-05-21T14:15:31.177`) +- [CVE-2025-44898](CVE-2025/CVE-2025-448xx/CVE-2025-44898.json) (`2025-05-21T14:15:31.360`) +- [CVE-2025-45746](CVE-2025/CVE-2025-457xx/CVE-2025-45746.json) (`2025-05-21T14:15:31.553`) +- [CVE-2025-4756](CVE-2025/CVE-2025-47xx/CVE-2025-4756.json) (`2025-05-21T13:40:10.450`) +- [CVE-2025-4771](CVE-2025/CVE-2025-47xx/CVE-2025-4771.json) (`2025-05-21T14:16:02.380`) +- [CVE-2025-4773](CVE-2025/CVE-2025-47xx/CVE-2025-4773.json) (`2025-05-21T14:34:08.967`) +- [CVE-2025-47732](CVE-2025/CVE-2025-477xx/CVE-2025-47732.json) (`2025-05-21T14:46:28.843`) +- [CVE-2025-47733](CVE-2025/CVE-2025-477xx/CVE-2025-47733.json) (`2025-05-21T14:43:14.013`) +- [CVE-2025-4777](CVE-2025/CVE-2025-47xx/CVE-2025-4777.json) (`2025-05-21T14:31:24.410`) +- [CVE-2025-4901](CVE-2025/CVE-2025-49xx/CVE-2025-4901.json) (`2025-05-21T13:40:20.293`) +- [CVE-2025-4902](CVE-2025/CVE-2025-49xx/CVE-2025-4902.json) (`2025-05-21T13:37:47.987`) +- [CVE-2025-4911](CVE-2025/CVE-2025-49xx/CVE-2025-4911.json) (`2025-05-21T13:26:25.383`) +- [CVE-2025-4925](CVE-2025/CVE-2025-49xx/CVE-2025-4925.json) (`2025-05-21T12:58:28.507`) +- [CVE-2025-4926](CVE-2025/CVE-2025-49xx/CVE-2025-4926.json) (`2025-05-21T12:46:59.150`) +- [CVE-2025-4927](CVE-2025/CVE-2025-49xx/CVE-2025-4927.json) (`2025-05-21T12:42:13.543`) +- [CVE-2025-5001](CVE-2025/CVE-2025-50xx/CVE-2025-5001.json) (`2025-05-21T14:15:32.490`) +- [CVE-2025-5002](CVE-2025/CVE-2025-50xx/CVE-2025-5002.json) (`2025-05-21T15:16:05.120`) +- [CVE-2025-5003](CVE-2025/CVE-2025-50xx/CVE-2025-5003.json) (`2025-05-21T15:16:05.397`) +- [CVE-2025-5004](CVE-2025/CVE-2025-50xx/CVE-2025-5004.json) (`2025-05-21T15:16:05.530`) +- [CVE-2025-5006](CVE-2025/CVE-2025-50xx/CVE-2025-5006.json) (`2025-05-21T14:15:32.637`) ## Download and Usage diff --git a/_state.csv b/_state.csv index b58d0b53381..0b9cbc6573d 100644 --- a/_state.csv +++ b/_state.csv @@ -134423,6 +134423,7 @@ CVE-2019-16532,0,0,00c12348ad90d933237a6bedbdad7630b1f2315d42edcbaa9f858b32d0270 CVE-2019-16533,0,0,9981d589cb2c6a2333906e53b2698ea3cb77df81a99c8b000c7e4dc1e8d43edb,2024-11-21T04:30:46.747000 CVE-2019-16534,0,0,b8cd3a4caf58fff341660dc3f6ae2c9dddebda869ab485c641f77e65f337ec10,2024-11-21T04:30:46.890000 CVE-2019-16535,0,0,7dc8ac2689e405f410a4eea9c92c0ca322bc0d86958188411657f4a7214344a3,2024-11-21T04:30:47.033000 +CVE-2019-16536,1,1,a558c44d905087c0355a331e79165710624a43b10e1ba8b73920bb290a9f1d8c,2025-05-21T08:15:26.233000 CVE-2019-16538,0,0,995fc2a04e0441c78315e326891241cb00233a90a3d004d795ae3c0385ba5f8d,2024-11-21T04:30:47.140000 CVE-2019-16539,0,0,cd64e42a64b00853e655eaaefef2132bb5046e4d97764aa715e2d499543453fa,2024-11-21T04:30:47.253000 CVE-2019-1654,0,0,9db86d5fe2cb603a176ac1ff7edc12527a169c530b7cf57ffd5b8fb3c4b29917,2024-11-21T04:37:01.390000 @@ -171444,7 +171445,10 @@ CVE-2021-25250,0,0,96519546aeb87bad9029102e4300efb25b808ffdf1c828af74d8d543fe8fd CVE-2021-25251,0,0,8c8a953b35b3c6e5c868ffcdd7a83f2a6369d515eddabb2af8810ffb1ef353bd,2024-11-21T05:54:37.997000 CVE-2021-25252,0,0,b40ffbd137384ef442803b417e70cc774bb124d382846609d546be19f0b4e85e,2024-11-21T05:54:38.113000 CVE-2021-25253,0,0,cef2da2f2368330d32f768134c44dc06d846a0e31fc9829e407445816d3ee74d,2024-11-21T05:54:38.240000 +CVE-2021-25254,1,1,5d682d4c096a61b8f5819ff98cf7b4ee6e1023dd1bc5ceced918e0fef1114207,2025-05-21T07:15:59.357000 +CVE-2021-25255,1,1,b128325150f1bd71f0efc2ca0e76b9b924c23be6ba9c787eabc14edd05309be4,2025-05-21T07:16:00.500000 CVE-2021-25261,0,0,e424baf935cc2db17e7e9aa8dcc27202f3de4105b2e80009de8df8c0cea86d31,2024-11-21T05:54:38.350000 +CVE-2021-25262,1,1,fcb01881e9dac404ac722b7e39e9d4e53d6bf4a2fbd1e7eba8f535ef880b3358,2025-05-21T07:16:00.653000 CVE-2021-25263,0,0,8a4f44573226c5d23cad36c4ef35264823931930bfb498cd8e6f9bcd97cb7ed2,2024-11-21T05:54:38.477000 CVE-2021-25264,0,0,edc127a1408accde22a7ba9636f26063c7c22770e733c74a28bb9bffa142ac57,2024-11-21T05:54:38.583000 CVE-2021-25265,0,0,a9dd62733ae74882452e725edf4339311bf95ed2c987dce38156b96069be94b8,2024-11-21T05:54:38.700000 @@ -173191,15 +173195,15 @@ CVE-2021-27850,0,0,479fa7afc5c923133ccf799b26b11e7736e6ed124f9dda10f48eed426abb7 CVE-2021-27851,0,0,6c5b29ff988e9029718e843f6f018543e5608b93aeeb1f3d414c298cfb95ee0d,2024-11-21T05:58:38.123000 CVE-2021-27852,0,0,5b6b4c8d45e5265faab8e1702e57361ae2b187a67954ca127cd88aa6d612c867,2025-02-19T19:46:30.107000 CVE-2021-27853,0,0,f3063fc8474b10bc4f53fb2a5e888bede0bd4fbd15089a364bb18fb4f3c13320,2024-11-21T05:58:38.377000 -CVE-2021-27854,0,0,e958ac7f8ffe683c3ed177377b2c90d73e194d0b91ee2238a7cc91bfc6ae2140,2024-11-21T05:58:38.640000 +CVE-2021-27854,0,1,cab67334dd735e945a1be648c92d87216132474872c8be97f6de3c14629c8f5d,2025-05-21T15:15:54.267000 CVE-2021-27855,0,0,2c7f9bfe834654dc0eba8aed238e4f6d4952502f9afe25f6b1dbf2e18f32eb42,2024-11-21T05:58:38.793000 CVE-2021-27856,0,0,d7bc8bb72d926ce2608ca8272557430126ed37c3bc122f7867ee95bdbd971ac5,2024-11-21T05:58:38.990000 CVE-2021-27857,0,0,a92aeab5f77913205f2f3122fcb2642d9a50f5863cf9dfaef115a155cfaf06c1,2024-11-21T05:58:39.150000 CVE-2021-27858,0,0,fcaba7b89a1fa66ff59111299b1c491c2457facdb6a6b6cca629f71510895428,2024-11-21T05:58:39.313000 CVE-2021-27859,0,0,993f7636ab44f63e13208197998ae7db16b9d062167251918517bbcbfe7e1626,2024-11-21T05:58:39.460000 CVE-2021-27860,0,0,c94ed8fbaf490d6cfa123f689a45b52d89d7e8c172499a93a24a17b09f52bb97,2025-04-02T20:22:46.853000 -CVE-2021-27861,0,0,2e874793f7920b781935eba26fcbb236ca8c4ecce3e14a7ee776186e960e718b,2024-11-21T05:58:39.770000 -CVE-2021-27862,0,0,fc7e14948885397a858c226d74b5728d90a6f062785c550fae571d5169db34ae,2024-11-21T05:58:39.887000 +CVE-2021-27861,0,1,6a653896c594d5235478af30183c8fd6c4f1218e4104e38b2a23545f1b64dfbf,2025-05-21T15:15:54.530000 +CVE-2021-27862,0,1,639fa42cb1c23d3c47db17fbace27754d745a2c65780a72a16f81b8b618eb57e,2025-05-21T15:15:54.743000 CVE-2021-27876,0,0,b86d5cebb2ebd764fa100539345ba9abea3a3f0fc983e852509299d0f1e05bab,2025-03-07T15:44:43.407000 CVE-2021-27877,0,0,711a57f242d1f3e147dedcc0126e9eafd99aa1464b385706d7a37891f5959943,2025-03-07T15:44:24.300000 CVE-2021-27878,0,0,a075b24378d73e3328b3733ff77adc7f87815f7e357f3fa701ffe4e485072b74,2025-03-07T15:43:44.467000 @@ -183469,7 +183473,7 @@ CVE-2021-41427,0,0,291d6824e0d1427ad5f1146db040969290ea6d88e415826185733be38182a CVE-2021-41428,0,0,f218c3b53e26385056fa962fde520777f78e8933f8fc16bf9e8fcb0dda5c7bd2,2023-11-07T03:38:56.450000 CVE-2021-4143,0,0,1cc052ddf6133d5300818af7655d01fe596cf5969cf632b8a35b2b6ea61cd957,2024-11-21T06:36:59.620000 CVE-2021-41432,0,0,2b29fb59e046ac6c2fd75fa5415b900f172fdf794d0e6de8783b66b9a0f66d9c,2024-11-21T06:26:14.377000 -CVE-2021-41433,0,0,52467a4f393cbd8bad5d4585f99061b2d760a942d0687412c43649e24bdab1a3,2024-11-21T06:26:14.560000 +CVE-2021-41433,0,1,389ade0784bbeab9b3106ae6d3dd3189040af5a34f6e50dc79383a0639fc01a4,2025-05-21T15:15:54.990000 CVE-2021-41434,0,0,7674858fd5948665edb56e11f643653be8b4a2011af187e09f3d105239846575,2025-05-20T21:15:19.953000 CVE-2021-41435,0,0,2677ef67dddcc0de94bd69c0ff23e51a3af1f2ac6ba925cbb122f90fc512b482,2024-11-21T06:26:14.863000 CVE-2021-41436,0,0,97a206c06c8915c0283c28b3e22982bc29ac7486394e503bdc68e03b7de57e0f,2024-11-21T06:26:15.047000 @@ -185279,7 +185283,7 @@ CVE-2021-43977,0,0,36dd4e2d7e2fd0b6a12a2d2ba30b3efebc3d061853fa53800e289cc084c6a CVE-2021-43978,0,0,4a752b650893fa31a84cccebe3734fe51b4cf39b504dfb61d96d1e73e8fbb743,2024-11-21T06:30:07.830000 CVE-2021-43979,0,0,2cde71f38f3a75fb5d490854846a898e306d2b32a88ce2af47f442bb345b3a53,2024-11-21T06:30:08.037000 CVE-2021-4398,0,0,0412609d2c0b44ec1347273da9947aa93fdda0ea00da82de2a862aea798fa850,2024-11-21T06:37:36.333000 -CVE-2021-43980,0,0,227ff9d44398c0a236392db6096105fe1e2928ebe0d2c1254a5395fd5bdf1a05,2024-11-21T06:30:08.243000 +CVE-2021-43980,0,1,7c25479baff80000c4803ea155a06a659fde5e7c3b85e8d7dca4307152f19592,2025-05-21T15:15:55.223000 CVE-2021-43981,0,0,f77fae7e852a89a200e644ffb98118b61aba2fd0ae4a0b8f66459f934f442aaf,2024-11-21T06:30:08.420000 CVE-2021-43982,0,0,28a56dbf2e65d532d70cad9810df1ab19646ded1a7193b3eab5406d45abf4845,2024-11-21T06:30:08.570000 CVE-2021-43983,0,0,1703ee8298a5514c508f9fdd06c1a883f1cc1cce6c47c38a55af71cb5dc173b5,2024-11-21T06:30:08.740000 @@ -189153,7 +189157,7 @@ CVE-2022-1266,0,0,fc0fa60b684f81f24cf4aba3114e1844631aa1700d9249737aca1b5c064711 CVE-2022-1267,0,0,685937d46fe8fc36f93822774c505754a05e41482acaf9d41f386abfdf83d608,2024-11-21T06:40:22.550000 CVE-2022-1268,0,0,997c98d744203f2f7d48a8aa3d133349e67aea93f73428c6eee499f30fd272e0,2024-11-21T06:40:22.667000 CVE-2022-1269,0,0,5d4548d0624bfdcc2c580a2e1005b48c5da1d60cafdbc0a4348dc566fe222b98,2024-11-21T06:40:22.780000 -CVE-2022-1270,0,0,63d228e89a77445fc65780dc39daff81fa5e58b3c221ec79ffee5d58a785ef73,2024-11-21T06:40:22.903000 +CVE-2022-1270,0,1,b3494721dd0972b649d6d4d16e359902b695684dcb5ad1295277889a34e43988,2025-05-21T15:15:55.473000 CVE-2022-1271,0,0,0520cc772eb21539b0d472889f76cbc069702ebcf7f6f21a0cae614116ec6e83,2025-05-05T14:12:33.207000 CVE-2022-1273,0,0,270b7010113b82bf7ab089af2f6cae3b9118181dd514b4d77892e79b91fe5251,2024-11-21T06:40:23.207000 CVE-2022-1274,0,0,079fbce78f728303f12019f1d9d6658cdd6566d5e11c862ae6c7a104401ea957,2024-11-21T06:40:23.330000 @@ -193411,7 +193415,7 @@ CVE-2022-23712,0,0,d1644307cd7347e7e7e2bb13a2f1cb28ebe4fa3c60e1923d7a6d981352ee0 CVE-2022-23713,0,0,23765743004fe4b6e0502e953700ef86413b68a90f7865227eca1215d22a6932,2024-11-21T06:49:09.713000 CVE-2022-23714,0,0,94dd082d49ec62a96e7e9b6e7763ed23ea8006728ac49cd1bd5baad7ab27c501,2024-11-21T06:49:09.870000 CVE-2022-23715,0,0,6afe6e44d9b1076241464348eebb80f79941e3fd92ea76b694d77be09dc568c2,2024-11-21T06:49:10 -CVE-2022-23716,0,0,f6f803bab2f023faa44cda7827f2b7d14532d978154b272589fafbde849652f8,2024-11-21T06:49:10.117000 +CVE-2022-23716,0,1,c30aacddce50b8faa7717a9fff68a989c6ec892abb8c6bd80a9d656acf19b5bb,2025-05-21T15:15:56.133000 CVE-2022-23717,0,0,f14d8234de92fd65a17a6dcdc4adc7c86295af1270f59a0862a51184943b645f,2024-11-21T06:49:10.240000 CVE-2022-23718,0,0,07e1a542bdf78253f3e7f4f6ae5564f9bea1df3675c4bfe6f710b618ec4b92cb,2024-11-21T06:49:10.377000 CVE-2022-23719,0,0,f1c960c32807f369a4f84e1fead567f66c0d8042173ef50f4d53984aded4ef19,2024-11-21T06:49:10.510000 @@ -196648,7 +196652,7 @@ CVE-2022-27596,0,0,de91c479a58e4c99a5ce57a7602dd2488878bd799e4aa4ab33cd7aa89f6da CVE-2022-27597,0,0,23f30da02fb388a756c6553184d09d3c3fbd10d0bb61b2bbed572a178725a39b,2024-11-21T06:56:00.510000 CVE-2022-27598,0,0,48708060d327bc2334c912e928dcd9e09da1779b8994f1ba1e5ee8aed4fb262b,2024-11-21T06:56:00.640000 CVE-2022-27599,0,0,31f0dff53f8adc680b7a853c4eb052daebf1d1a17068d71465110b1205e79c5e,2024-11-21T06:56:00.760000 -CVE-2022-2760,0,0,39b63fcba734c3d2e164dd75b17785069fd6ff7ae83424f9c5ed3eb3939466b2,2024-11-21T07:01:39.310000 +CVE-2022-2760,0,1,77481fd437f716483021d85e4966be8d45643251de833839f875a515d7740b1c,2025-05-21T15:15:56.493000 CVE-2022-27600,0,0,71ed3506bfcd397996f66c17a56a0689e6182e7001e24ce52ac5ec2eecaca3b0,2024-12-19T02:15:21.493000 CVE-2022-27607,0,0,4cd08f5d87af0c3fb5f0c97a466b0ca7907f2f8457d2661840ae19b1976cef47,2024-11-21T06:56:00.877000 CVE-2022-27608,0,0,eae93bed9c189e4761611bfe3c317cb8a60d88c1cd792f46fb9a31f73282bd14,2024-11-21T06:56:01.007000 @@ -199389,7 +199393,7 @@ CVE-2022-3093,0,0,52309c4e6ac86b17193dd152025d6644ca4bb4de51b6296ae2ffb6b69efdea CVE-2022-30930,0,0,b27ef634285ca57bdc5fe5f311615d4b93bb00a4f03c6a25bb079029034aa2f9,2024-11-21T07:03:35.550000 CVE-2022-30931,0,0,769da091f765a5603c57ce8abd5eaf55237d898dde72684a23c3ed17d63a2aa7,2024-11-21T07:03:35.683000 CVE-2022-30932,0,0,25e9eb525bb2d066e237417e5543e11c8f3729d88c12efac8bf113370b2e9b91,2023-11-07T03:47:26.450000 -CVE-2022-30935,0,0,0d8b943d6dd3795c10db3364859b11880e172e715ee80864f31eaa81af0e4bf5,2024-11-21T07:03:35.850000 +CVE-2022-30935,0,1,a8699b720c0d0093332682a84762c5dfd04119325c8ca63acbb282b623e62ef5,2025-05-21T14:15:24.050000 CVE-2022-30937,0,0,ee5a0315ab977e8772575963d3c30e6a4e982099032b83c5eb302271c27d9de3,2024-11-21T07:03:35.987000 CVE-2022-30938,0,0,372153bc380df81d7ffadd6919b1148fff22f8b2391e3352e125b902e169d985,2024-11-21T07:03:36.107000 CVE-2022-3094,0,0,b5b98a4f95c062f4d4613a3f0b2c8dc2ee39dc17f9f99a7678974a1bfc543a8a,2025-04-01T14:15:16.557000 @@ -200406,12 +200410,12 @@ CVE-2022-32157,0,0,696ad642237b06bfb8f179edcc91bb7d08ecfbb66ccf3b54c353a172f4776 CVE-2022-32158,0,0,7fccb85847af4648cd616ffdc60a33cd66d4852e039980be63ec1a4ecb389a55,2024-11-21T07:05:51.657000 CVE-2022-32159,0,0,ce1bd2bd0cdc296cbf35b5818f72f1aa1df9b457d97afc878bf4b65b2b2876ef,2024-11-21T07:05:51.793000 CVE-2022-3216,0,0,09d121b5790466a1f88400b8122865a5b18b4b443ed802219506272f1d9a3a03,2024-11-21T07:19:04.280000 -CVE-2022-32166,0,0,a8e7b9474aa48c9f4a36d83ef3631ba6ecaee8aee9514c335f8d1af63f8c5793,2024-11-21T07:05:51.930000 +CVE-2022-32166,0,1,11092ccb0894aab8d614687fb676c33e14869b95f6becb90b49e00d2cf0f4527,2025-05-21T15:15:56.693000 CVE-2022-32167,0,0,ae2312f5d634a0a9b428691c74df14db3ba0745ea8701bb360f506a3a3ec536c,2024-11-21T07:05:52.063000 -CVE-2022-32168,0,0,41790ba18c087826dd86b483392e63986353f6b852acaab45d2fc9299c1aa74e,2024-11-21T07:05:52.197000 -CVE-2022-32169,0,0,8680239af9824d0a525089f9d3a32471d04b7cdcf610c21a5ca27211fa208311,2024-11-21T07:05:52.330000 +CVE-2022-32168,0,1,493e68c1b39b0d5c869a315fe1900297d83400b5a78c0d75a8e94ab1c974d303,2025-05-21T15:15:56.900000 +CVE-2022-32169,0,1,eb2db6f0e3c0431ff5c61c6fc53233ec73345d35dc330a5b66c0b5d3f5c4f3c6,2025-05-21T14:15:24.703000 CVE-2022-3217,0,0,93c6313c48ea214bfdc825d568fb3d2a6557a88cb3cce82974c509a6836b16dd,2024-11-21T07:19:04.450000 -CVE-2022-32170,0,0,91e0456a709ae891f965e8979b4d33a082618b84ae64486761acdcf78f641c30,2024-11-21T07:05:52.460000 +CVE-2022-32170,0,1,41ea4f53c2b35637b2d338cb9f4e8548d54f3a73a091a0a341faec73063c28eb,2025-05-21T14:15:24.923000 CVE-2022-32171,0,0,c85f63aede57320323ae1a2ebbd2b2231650080f9e8bc7a2f59f301b1a0e46ac,2024-11-21T07:05:52.620000 CVE-2022-32172,0,0,9e03ec762bc2a2bf5fe6d1a6e27501b8b9466de6c6113433dd5d615d062062f9,2024-11-21T07:05:52.753000 CVE-2022-32173,0,0,49de0ff126b44d9d22bade09423e277a6e52858ed23ba620c77657daee61a584,2024-11-21T07:05:52.883000 @@ -201371,7 +201375,7 @@ CVE-2022-33226,0,0,6268c42ba05a5baeed4e301355562adc554c1c5057d727bf11cb03bdc1b63 CVE-2022-33227,0,0,3d75993e4c64394569f4a2eeb95f7c54c5e8d19782b6d9b7c62891cdf66c3fb4,2024-11-21T07:07:46.650000 CVE-2022-33228,0,0,e449f59ca0ac91e689d3eee6149f0edf1d5c1fab7b39e68dbdcd805a353f54f7,2024-11-21T07:07:46.900000 CVE-2022-33229,0,0,31c791a3ac4a600f230da24b0cc84d329ddf5ae1af7651f6c44f5336beed2b37,2024-11-21T07:07:47.047000 -CVE-2022-3323,0,0,a234ff615031ee3b70a099fed7aa021bcf440d38bd0c47ec53804d45d1586ba5,2024-11-21T07:19:17.760000 +CVE-2022-3323,0,1,58633951d90f82082f45370f6522d2d9669e381f7bfea4e9e57e9de9e5e211a3,2025-05-21T15:15:59 CVE-2022-33230,0,0,aee0690dd9da1b9758a7ccc2264d1411a20fe1c6807625bd3b3487b14efeaa42,2024-11-21T07:07:47.220000 CVE-2022-33231,0,0,03134518b65fc592688657c5bbbb596491bfa86d7368f0220ec8fcf67f17c1d6,2024-11-21T07:07:47.433000 CVE-2022-33232,0,0,ebf02d92426cadb52d5b143a8a30c64e09cbfc2e05951a59204ee244b48c21bc,2024-11-21T07:07:47.850000 @@ -203894,7 +203898,7 @@ CVE-2022-36443,0,0,d2e104b682a7f5d244a12a9d4512d31085118a3916976f9b74da6dd0b9c06 CVE-2022-36444,0,0,1e2e348270d7a31ab761b6ff629c656d43a57096ea9a02b1242b7f2074c41ecb,2024-11-21T07:13:01.607000 CVE-2022-36446,0,0,916b2196c19aa016856c9806701bb695efdb90725330e47655f732f72d52694b,2024-11-21T07:13:01.783000 CVE-2022-36447,0,0,610470b8298f5cc38da6f37ec3f5c742c2a83dcc392632b38bb5a67a4675e018,2024-11-21T07:13:01.960000 -CVE-2022-36448,0,0,c3bfbff2189ed91f04228c36ef7f79a1bc46d537d24ed905f1d90e7125d6bad3,2024-11-21T07:13:02.127000 +CVE-2022-36448,0,1,fe225d75f74959807a3999b1c68ecfeb51b3f03bfa4cf526a214df6f4ca06f4b,2025-05-21T15:15:57.090000 CVE-2022-36449,0,0,cb701fd641a2928f844cc6a5c720f63307733e7b9cf3600bca18b1508e3d6295,2025-04-07T12:47:11.043000 CVE-2022-36450,0,0,e6c92eda88ef15edd6d60b94131feccc39f875cacde26c9ef71f64e597c581dc,2024-11-21T07:13:02.477000 CVE-2022-36451,0,0,3d23567c35686f92c7f347112614e01f25bc007fa1c246bde3cfe225223a1890,2025-05-07T21:15:54.683000 @@ -204166,7 +204170,7 @@ CVE-2022-36765,0,0,5069aeb0623fe94e4faa3e254885d316db8b08a5e269ac6f1ecb3a6cdb8f7 CVE-2022-36768,0,0,a0afb747cfc2d7fd2e32d93ff4a04fd681208b42b9739c9d8c90980b590c1dcd,2024-11-21T07:13:39.903000 CVE-2022-36769,0,0,01f0a2021aed3dc7ce75051ba8e4297b1fbb606d8275cd6f6d456499935a90c9,2024-11-21T07:13:40.033000 CVE-2022-3677,0,0,f5ca2c3d077787b58c8fc5301ec6f9650336caea767cd32f7885abedde8af582,2025-04-24T14:15:34.947000 -CVE-2022-36771,0,0,2e1bc3e9fcd477d641f0f1fd985a5d9dc8aef4bbfb3f7897fbc032425cae2440,2024-11-21T07:13:40.170000 +CVE-2022-36771,0,1,90392650f1b6838570ee59374ac8b59fe48e404a1bbdfd52ff1381f393e83799,2025-05-21T15:15:57.307000 CVE-2022-36772,0,0,cb120d96cf68ba93a023e31e1bbe85dcd775357dd0dae223ed8dfb80568fecf0,2024-11-21T07:13:40.297000 CVE-2022-36773,0,0,c164d7f948453bd52b44f0c5bb7ebdc82eead6259979e2af134eac43659d611b,2024-11-21T07:13:40.440000 CVE-2022-36774,0,0,1646588c4461c952a8d993f12eaa603a936f8e9627e9d91fe5f542615b1c6bbc,2024-11-21T07:13:40.573000 @@ -204412,7 +204416,7 @@ CVE-2022-37024,0,0,174f308f911bc89fbaae349377a798a89a82c9127a9fa575a6edd1753fc20 CVE-2022-37025,0,0,d7df770686036a0000439653e25f519fcf0e4794a36932e540a66ddc4328f445,2024-11-21T07:14:18.670000 CVE-2022-37026,0,0,b640399643e272fbb9504a4054cc7d14f880462de839d99be87399a2e3fb086f,2024-11-21T07:14:18.823000 CVE-2022-37027,0,0,56287492d8422eccc47b97f9a0377e46b469afb6d68b20da8d023de2cc2f4d57,2024-11-21T07:14:18.980000 -CVE-2022-37028,0,0,bd539a96f7801eeae2153d143f2bdf100a8bd07d733e9fcb21e36f4594347843,2024-11-21T07:14:19.143000 +CVE-2022-37028,0,1,e22f6bddf2b5c21613096449111ffd54f8f3946ac8c52f74b66ed96c568f678d,2025-05-21T15:15:57.467000 CVE-2022-3703,0,0,d270c0eda8062a6961d530a312cc65d4820ef229221ccabdf4b8b021e6dc2fce,2024-11-21T07:20:04.203000 CVE-2022-37030,0,0,f31eccb9156d9f1d90e5cc0fdb0b1435815807d8ed6cec4c6f7652d69d2bcdeb,2024-11-21T07:14:19.300000 CVE-2022-37032,0,0,ff39d18cd10ed157f9fed3798330a418e0b5476e273d94149ab17d7fd474210c,2024-11-21T07:14:19.473000 @@ -205314,7 +205318,7 @@ CVE-2022-38329,0,0,7491b23f4dbb0183807cd13c54f1a1794cfea6daa2f509e1c06ab6ca6a57c CVE-2022-3833,0,0,87704f32fa72b98c1ce75d804ab58293995acd79e11f28523b93d6324cb0d485,2025-04-25T18:15:24.417000 CVE-2022-38333,0,0,56d7bfd5982c43db05a55606c661f8e0c65aff61b2fbcf70156d5f71c00f433c,2024-11-21T07:16:16.637000 CVE-2022-38334,0,0,860dd9433bcbaf1585f6c36716391fc7a1ca2a042ef681020b899ecb163d199d,2024-11-21T07:16:16.843000 -CVE-2022-38335,0,0,d08b6845818eafc543c4273cf30fe8e86802268f690ea2f3c4cb8ff57a721fd0,2024-11-21T07:16:17.470000 +CVE-2022-38335,0,1,4d89077f1dbf21b4c99d3b4c7fabab9538eab9674873262ee281d75849d1a27d,2025-05-21T15:15:57.697000 CVE-2022-38336,0,0,5f92404dd0742cbefad620b5c1e7343fa54300f9487952a381eea4bac15c3d4c,2025-04-24T15:15:47.970000 CVE-2022-38337,0,0,3cb1c57cab7583cc2f2bbb0c977b57d29ba970ba0d7dd1d838072815b4bfd1e8,2025-04-24T15:15:48.140000 CVE-2022-38339,0,0,22400e800f8cb8d6e513344c6222068e1cb3630588e52f7029ffc49a1b9d305f,2024-11-21T07:16:17.940000 @@ -205752,8 +205756,8 @@ CVE-2022-38923,0,0,49de48be827439aad30a1200f1f3b4997a55bea4b903a7990aec70cc1069e CVE-2022-38928,0,0,6b98a5bb7c0fa08033d7aaa0d401c575e5bf6c62505e34d5677b96483eb9fdf9,2024-11-21T07:17:15.873000 CVE-2022-3893,0,0,169977ea85d0f87efc6cc15872f3136d1ff5790f1b49d91b9e93fa4cc18a8375,2024-11-21T07:20:27.953000 CVE-2022-38931,0,0,63708f1f0fec781abc03b238820cd8696f0c8dcb998e2d4c808a709948897300,2024-11-21T07:17:16.023000 -CVE-2022-38932,0,0,4fbcf04648ec48b9776eb4f6f8e67445b5540150079fa0800f24418529c5ee66,2024-11-21T07:17:16.177000 -CVE-2022-38934,0,0,40d670d084123a35b6cf8e015d52100eba55e2e591a681d9be36901d5638d2d3,2024-11-21T07:17:16.330000 +CVE-2022-38932,0,1,b479186a0d60cf8bca2655e695acf933054a8e8feb9abc213034af17a8942bb6,2025-05-21T15:15:57.980000 +CVE-2022-38934,0,1,c2d39d460bed98c5f8218272f0b72e0a5cc56ab6f6fa7a238f661ea3751a73f2,2025-05-21T15:15:58.207000 CVE-2022-38935,0,0,2867d602c6816f4aac26b935d0fc4fa197c9c6383b9487da9bba57d30962066a,2025-03-19T18:15:17.327000 CVE-2022-38936,0,0,b3e505552a6410e493866b78c37513e198bc95afcfc929838b193c22c9abfd36,2024-11-21T07:17:16.647000 CVE-2022-3894,0,0,b65672f2b7fa6c87ba7d4ddc2f311715efba1c64fcf556984e6c7ac4fdc452c5,2025-02-26T19:15:13.690000 @@ -206517,8 +206521,8 @@ CVE-2022-40075,0,0,528238a21c223c94fd7e677a83885dfb032391305d3ea4dd2958f5640e7c5 CVE-2022-40076,0,0,c046b91313e33d852e787506d4c9c3b2814c879e207d5c27f199fbb28002715c,2024-11-21T07:20:48.800000 CVE-2022-4008,0,0,28c0600c4c80574bd433740004937a0bb4ed140166e2773d99506a9fae24173e,2025-01-28T15:15:09.060000 CVE-2022-40080,0,0,989885be218514621c01aa31dd573ddbba98c2318521d272ebfbfe7078e50461,2025-03-19T15:15:40.463000 -CVE-2022-40082,0,0,56e76875663e98850cea47c91ae372970f7a80cab7e0f217ec87951590fd2597,2024-11-21T07:20:49.127000 -CVE-2022-40083,0,0,00c52ecc769d6134409ef73ebc9833bdb81527bec230aa202b259398d890e40a,2024-11-21T07:20:49.287000 +CVE-2022-40082,0,1,e5b6afc6553af3408336eca448a701167b0d88725b445d3ed85207894eef9c19,2025-05-21T15:15:59.267000 +CVE-2022-40083,0,1,02ea898d7d70251b73669dfcfb0975b2b2457724ff3305b5069a45f62a0547d0,2025-05-21T15:15:59.483000 CVE-2022-40084,0,0,57ac1015481cbd5f2f6788d0dffc4aeb5795a81820b1e40a618338ec22819f28,2025-05-08T16:15:21.743000 CVE-2022-40087,0,0,745e928d9be69968dd66aca8eb345aedd3ba650171ca2c3347b7eb5a5f75b125,2024-11-21T07:20:49.620000 CVE-2022-40088,0,0,4a57bc7aacf43df38d8f397852ac19f494188d1af6ce4be4d53d365fb6374d20,2024-11-21T07:20:49.787000 @@ -206557,7 +206561,7 @@ CVE-2022-40120,0,0,d394b66bde011038d2b1be8d59dc7a08644245c1203bbf44ec654895da4d2 CVE-2022-40121,0,0,07cd6be81707a1a203705aaf7eff55dd04db22de4deeb7d3d7ae348f8d3b9af2,2024-11-21T07:20:54.400000 CVE-2022-40122,0,0,b95fdd90577434a278fb951aae04e99ade6d404c81d5d54b3078fa228185753d,2024-11-21T07:20:54.557000 CVE-2022-40123,0,0,dfc582cededdfe118039aad4c2dce94b716c475a97e9fbaf9e7b1086c764d2d0,2024-11-21T07:20:54.707000 -CVE-2022-40126,0,0,1acecde63c9a76ceba3bf4e4d668a88419ce7f3ee5ccf31e74ca1defdcedb378,2024-11-21T07:20:54.870000 +CVE-2022-40126,0,1,b6efc2d3b8d2ab80289fe630edd28c9a83136ffa755ca6a1b82bcc26363d5153,2025-05-21T15:15:59.740000 CVE-2022-40127,0,0,9c7f69950c6a4a1110193e0272b9cf37aa0bc2e0626cbcc7a30184349956f215,2025-04-30T19:15:50.510000 CVE-2022-40128,0,0,cab0febf7fdce029d001215b162d2237645b6b0366e18f28d1c2858c584c7bc4,2024-11-21T07:20:55.153000 CVE-2022-40129,0,0,44b1908bfecee8177f1d8157935c9f1fb683b557152342d33b2e001a52edf443,2024-11-21T07:20:55.290000 @@ -206758,13 +206762,13 @@ CVE-2022-40348,0,0,d99927cc7cfec487324c0de3d61b1328e2b138ee703348d32ab3316185ba0 CVE-2022-4035,0,0,61ab29a5bac69207542ed40aa18fd4ec1a06fe69482f0f0cae1402d93c370f5c,2024-11-21T07:34:29.310000 CVE-2022-40352,0,0,b0a787c58aa475a965a8144d6b63aca7f35b5788a2f6ead64068afacba583683,2024-11-21T07:21:20.253000 CVE-2022-40353,0,0,89953807e711c5c8d84fcb7c2c5231f43a2acc00d29d5827887e075723abff7f,2024-11-21T07:21:20.407000 -CVE-2022-40354,0,0,ad42e326c50dda3e03ad88d4872dd1392e16776772d93edf54d9b09c52ef854c,2024-11-21T07:21:20.550000 +CVE-2022-40354,0,1,24f964a9719fb8055996a44f51c873c25a1af18c0a66c9f2b5f77f34a1e690cc,2025-05-21T15:15:59.960000 CVE-2022-40357,0,0,c305d3460da5fa0692bc28e239f2f3ce64a7cd424d222c978ff07e5b56d76c3f,2024-11-21T07:21:20.690000 CVE-2022-40358,0,0,6507c6a7c1c0acfd2a5b1684026f2bfedb1f28a60dc782285593651039ad17e6,2024-11-21T07:21:20.840000 CVE-2022-40359,0,0,b1866f650a0c7b9d865a25e3f8ba093d7127d902b0a7c46b635fc122292a7c81,2024-11-21T07:21:20.993000 CVE-2022-4036,0,0,115831242908d4be1ab19f46aa39460a1926637174ba1ad971369ab78af698f0,2024-11-21T07:34:29.427000 CVE-2022-40361,0,0,70b3932ea511598c0d3d7069a689e6718f9d25542c71c50c253b29eaedca1d89,2024-11-21T07:21:21.140000 -CVE-2022-40363,0,0,422700ae8c0846f0e2b4307545f4849a654496d2b3003f74d9b1f07cf14fc648,2024-11-21T07:21:21.300000 +CVE-2022-40363,0,1,4583d551c915f126c951086465728b260006d4fb64c5d9bbdce3f3faee725d40,2025-05-21T14:15:25.117000 CVE-2022-40365,0,0,11248d09b53c311f4c945e2c845b9980aea90ed2e5ff3c8cf85f8d767dae1a02,2024-11-21T07:21:21.453000 CVE-2022-4037,0,0,124ac240cf09eb9d7d675e42462f1aa0d9f92965ba6a825538e829ff2b863cbb,2025-04-08T17:15:32.497000 CVE-2022-40373,0,0,1a436fab29ab103ca90b6da34c5d8038e60c0e12bc00688977e94e103680c1d8,2025-04-21T15:15:51.773000 @@ -206807,7 +206811,7 @@ CVE-2022-4047,0,0,7e6fa65e419cb592ed720d5874c4b9673ddd13d6032def0c20db74fd71a815 CVE-2022-40470,0,0,8f6a3837d9dc8b61d23206af56cfad7921bdf66e71df67d56def5f5b6aaa8dbd,2025-04-29T20:15:21.047000 CVE-2022-40471,0,0,f175df5216892aa07c1d57871353de12f51147f95cfd551c9c2adf4e501092ac,2025-05-06T16:15:25.590000 CVE-2022-40472,0,0,7a4ef199f7ab2aa6295453dd47c476e0c5c59ec951b3d9eb4ff11f5b278263bf,2025-05-20T20:15:24.437000 -CVE-2022-40475,0,0,6de94b9a336ae41b3d1d3adc1f78b66800eb00ccc5db069c8886c55d9bf936f5,2024-11-21T07:21:26.213000 +CVE-2022-40475,0,1,913ae4a0f1bd5b91d307626d2394b8eb340406082962e52993399668dc557cac,2025-05-21T15:16:00.163000 CVE-2022-40476,0,0,fe4e93dab516974550ab95d0993fe50d2a081a2c7aa47ef0599f49a47be7069d,2024-11-21T07:21:26.367000 CVE-2022-4048,0,0,078ca5ed72f6aed7a90faf02ab6f85e1474cb4ba97a87f704be733be7414d83d,2024-11-21T07:34:30.583000 CVE-2022-40480,0,0,1c5e8651674d6006a11c59df5f66aac7bfd7e0b124b7114bf525e2a747c65e72,2025-03-25T16:15:15.587000 @@ -206815,14 +206819,14 @@ CVE-2022-40482,0,0,adf86389892f7a95569aa98f0e2f6a341d90adac7010847b374647ab76ccd CVE-2022-40483,0,0,60c8097e6a915de7214200aa26f52cd02d74d232a175bcb245d590ece07c4dba,2024-11-21T07:21:26.860000 CVE-2022-40484,0,0,4a2721e015188f13a3c8cebba998fdc46540c181e160a823911afe0177fc6508,2024-11-21T07:21:27.020000 CVE-2022-40485,0,0,a98e46b39dcbae79f7b24f45d7af6400d61f0a9cb4e84cd27ffa7ba75dbc7829,2024-11-21T07:21:27.173000 -CVE-2022-40486,0,0,aaf6506e979f23d031c3c5b26e8004bcc3fa3682db7e86bce6186583a3d13185,2024-11-21T07:21:27.327000 +CVE-2022-40486,0,1,660cf912da846c1c38ddae120e9320a5540809b0448534bbec34298905263915,2025-05-21T15:16:00.373000 CVE-2022-40487,0,0,ef8f817c3f87856c98f98d0144296cd5ef87ba2758d8859d1cd23e7c4747fdb5,2025-05-06T17:15:53.147000 CVE-2022-40488,0,0,9194eb143c1c77674507db7cb9e7fccbc0013a14ca7460a2433d805438fbc496,2025-05-06T19:15:56.677000 CVE-2022-40489,0,0,47bf330dda9d02d214dcfa3828c851609a0fff438b749182231ed0af31b7a645,2025-04-24T21:15:19.220000 CVE-2022-4049,0,0,8181e06dd3fae450f77160dbe4fb34cd4ca2f899d214ff5c70369731169816a6,2025-04-10T19:15:50.447000 CVE-2022-40490,0,0,027201e4ca2289999a83d7c21c75a857240923a9abc577ba189f3c2b7fe68a7d,2025-02-06T21:15:17.307000 CVE-2022-40494,0,0,2971ee2f1e72df00356bdff7594516fce15b8044e554c8c19d239c8ee018a141,2025-04-17T14:55:58.350000 -CVE-2022-40497,0,0,718b25a3e9ff61f82c28c3226d1972f3ae3dd1d71111e6da5c3dcfb3038a8996,2024-11-21T07:21:28.137000 +CVE-2022-40497,0,1,3cc620998c0c639b5b9f6bb2e7e15424cfb0b55a5d962adfc4b40ca36176c572,2025-05-21T15:16:00.593000 CVE-2022-4050,0,0,f734c989b98140121ecbe08d2650e22afdb3198a353dfc75862be1c15ed08add,2025-04-17T14:15:24.787000 CVE-2022-40502,0,0,0c7b693db05d13c2cafd12a984b917e6e2dab77b24414bce042eb9a334c3208b,2024-11-21T07:21:28.307000 CVE-2022-40503,0,0,6771bb616f65e66219daee3ebd6ba0a915f9cc17e6cbba158f7bab7715db1638,2024-11-21T07:21:28.610000 @@ -207115,8 +207119,8 @@ CVE-2022-4081,0,0,5481d04211e8baa850b257b56050c9ef5c840d18bc4a73e75f563a11e01295 CVE-2022-40810,0,0,aa30a2f4942702342f69bea1c5250c982c12b2601f3a83de5ed99d102777bd1b,2024-11-21T07:22:04.633000 CVE-2022-40811,0,0,a4e652917ce18a7b11ad7c745dadd67921e4f7b616e2f85c686c835fe123b5ef,2024-11-21T07:22:04.787000 CVE-2022-40812,0,0,20658e0f5f5b43959e87faaa03501a41e7d11b6f5d461ba80a732dbd7a3b5e47,2024-11-21T07:22:04.937000 -CVE-2022-40816,0,0,3335737b317f83cecc6bb7ffcc425edbf761148813708b75bccdaccd2029cda9,2024-11-21T07:22:05.080000 -CVE-2022-40817,0,0,b00c66c9483ba86cd471da25c9e4ac38870b0f6a3adb281bcbdddecec1299583,2024-11-21T07:22:05.223000 +CVE-2022-40816,0,1,11bc78bf6f612ccb8d75889180816b21bc21207587b29739adc4151fea82f98a,2025-05-21T15:16:00.797000 +CVE-2022-40817,0,1,390f97f6dbc8f85c2dd8b8fdbd338fb1b3f08de8c1ec35ff29016bbe7b854933,2025-05-21T15:16:01.013000 CVE-2022-4082,0,0,6c9f2a779f86c723b81d667216f2cba3a80aab4e10f9bb44404a11b7ebd7f970,2023-11-07T03:56:52.890000 CVE-2022-40824,0,0,0d2c2b605c3d57ef3b9e3794d62b46c3dae693f9de2dfddf01cca9ed5d327fa5,2024-11-21T07:22:05.360000 CVE-2022-40825,0,0,6853627f0b2b9b8ea40c0f7f6603ff266ddef9cb2774d1b7eb36c76e14eede3a,2024-11-21T07:22:05.597000 @@ -207164,8 +207168,8 @@ CVE-2022-40872,0,0,5a6ab0b9053626ab980eab16d34ff62b555b21e684e8fd7853cc0827a1ebc CVE-2022-40874,0,0,3bb313cf7562046e009bb485adb56125dc99398b823892b26a3f013f8edbe283,2025-05-07T17:15:56.057000 CVE-2022-40875,0,0,62c4c184e2e8acc7223151cbe7bb456add27c40bbe4c647d7eba72746ddee9fb,2025-05-07T17:15:56.333000 CVE-2022-40876,0,0,22656a1f42ec0ce09b848e2384b229e771c0bbbf366447a464d586fd3a4899ab,2025-05-07T17:15:56.590000 -CVE-2022-40877,0,0,1131351eb38cb515e89a440a9f6d058203d057e3b4fbad85d7f195ac3db3275b,2024-11-21T07:22:11.897000 -CVE-2022-40878,0,0,fe966d638caea1bd33715f4dd97753755981861314c1e8bc908afeab98b10d52,2024-11-21T07:22:12.057000 +CVE-2022-40877,0,1,7a6e17165b4c9714d851963f0fcf3c5e88f56ca3cf45db02cb3e83e66e428e84,2025-05-21T15:16:01.210000 +CVE-2022-40878,0,1,68e4ce1963ef8bc070ac6dce330637bd82d4f97289599ce53d0a7c622db10b7f,2025-05-21T15:16:01.413000 CVE-2022-40879,0,0,5eff4333787ae7b16a3dc86ef6266b199ca2654d35b944fd41ed6be8f236c776,2025-05-20T20:15:24.647000 CVE-2022-4088,0,0,9136580de98f800166fce6fe667b2750969ccacb66e9583692b321bc6b7f72f1,2024-11-21T07:34:33.613000 CVE-2022-40881,0,0,9c7344440b5f34748e679365f37dfd5342afd2c4beab1d1a4f804d546b4ec690,2025-04-29T21:15:48.483000 @@ -207175,7 +207179,7 @@ CVE-2022-40886,0,0,c9d2df1cd9ea6702e0f1e4ef5869430c51e9dd9783c47f2227286985e0090 CVE-2022-40887,0,0,b62167aa209c2e3e3dd6ff4e108ba133dc15b07915587923ab9baa37684e9c2d,2025-05-20T20:15:25.050000 CVE-2022-40889,0,0,8aa5844a2c5517a8851a7673ac782a8aaf5b27560078fa4a93ea5d2c00347759,2025-05-13T15:15:49.840000 CVE-2022-4089,0,0,34c5c78d3ed7402dc5eb3176f000a72f78d85146eb3ca4332f749f3603eeb36f,2024-11-21T07:34:33.740000 -CVE-2022-40890,0,0,5db8b4f94548d0689f7c19154cad63d3196401bfcda582215e3f0f0d1c6ed754,2024-11-21T07:22:13.293000 +CVE-2022-40890,0,1,7b419d4a0a12cbb6501fa791f28166cf7957e1496b69de731df7c60148d94cde,2025-05-21T14:15:25.360000 CVE-2022-40895,0,0,bfc86ced07b9bf089a1a4e6b12fc384222fd3cea495ce0592cebd0a11c889518,2024-11-21T07:22:13.450000 CVE-2022-40896,0,0,cd9a1597291d9807d915625d1c248186318d82900a68cc1b2162369d53738633,2024-11-21T07:22:13.610000 CVE-2022-40897,0,0,57dcea1570a489c54fa85e609c3acbff31a70edf8b009eb9c781a9b32a8f6275,2024-11-21T07:22:13.787000 @@ -207196,7 +207200,7 @@ CVE-2022-40925,0,0,f3a9f00915055e67283fe69a69abfc1e406208fa0f056410b03f19bcfbf24 CVE-2022-40926,0,0,6a6fc18932273b0245556dbf8501dd4584b75e7fdaee96c5671257e6deffdaf0,2024-11-21T07:22:15.570000 CVE-2022-40927,0,0,9ea044a9c1ab29d8166b1c0046501742749e8920dfc21bd6b455dcc7967ded39,2024-11-21T07:22:15.713000 CVE-2022-40928,0,0,420e177dc537f88756012ba3b7cb793ae9ccb36805349b160ce41715cf22e3de,2024-11-21T07:22:15.863000 -CVE-2022-40929,0,0,9b0631ef52d29614849da9dffb0c89434da8f4056ad438d64770628e8b4bc56a,2024-11-21T07:22:16.013000 +CVE-2022-40929,0,1,b843101579209329d6a62995c0bae2f9c130b1826806e9eccb910837dd0092fc,2025-05-21T15:16:01.620000 CVE-2022-4093,0,0,f5763db694a637f957b67f908816427321b5d020cc201e3177cd5cd8d8d9ce38,2024-11-21T07:34:34.257000 CVE-2022-40931,0,0,8cbc67170826a80eff8cb1c9931869f9bce52c695781e8d5fe307018268c5e78,2025-05-20T18:15:43.703000 CVE-2022-40932,0,0,284f6302d363b607c54075b59046717f23c9c75940587bc41bdc33ed64c92e1e,2024-11-21T07:22:16.310000 @@ -207204,7 +207208,7 @@ CVE-2022-40933,0,0,7cc3a0b458775e96dcaceb91a5267d6ff0d91bdf1679c55fcd08a75682527 CVE-2022-40934,0,0,9c7e88afd5c651bb4c8c18e4fb7dbf9f342c3b57f93c18e72e8465be7be137df,2024-11-21T07:22:16.610000 CVE-2022-40935,0,0,c2d4784b5e2e9ad1ac6067575e9ecd6f901fb635d19843a61c1a26dfbd263631,2024-11-21T07:22:16.750000 CVE-2022-40939,0,0,6e1ccaf8024eda05ec95b333e94368c9e8349cce401e979f75e9651a261c0675,2025-04-22T21:15:43.420000 -CVE-2022-40942,0,0,7b291ca016d3664acfaa687583c918329696f86856aba25a1c0c44b07bb6143a,2024-11-21T07:22:17.040000 +CVE-2022-40942,0,1,a3699e29954535599a7482d9440c5efd18dcaafc0bb6a350c2db938ec78d15ae,2025-05-21T15:16:01.870000 CVE-2022-40943,0,0,03712480acb5c9385bf7fe33e4b4da0e88c3b4264a09969e0e016603babf904d,2025-05-20T16:15:22.473000 CVE-2022-40944,0,0,a99577fd59bc3d1e39f0b031d98cbfce28ef26e4158490203604b38cbb685a0f,2025-05-20T17:15:45.877000 CVE-2022-40946,0,0,657514247a23d4019514c4be4ea49ed31df545798b64fe3a2569aa4f52653132,2025-02-06T17:15:13.863000 @@ -239335,10 +239339,10 @@ CVE-2023-49568,0,0,ac97689f0ee3fdbcc2dd33fe136cfca6f31010f7eecffece93c383b28fe47 CVE-2023-49569,0,0,6c6e37b06c255397b0b6ba93613bda98a26f6fadb0c9e852279f687080822d18,2024-11-21T08:33:34.583000 CVE-2023-4957,0,0,ca889a9477285b07904ddd4eb86ae0d0f9a134a768a54c58b84e7d4c0bad85c1,2024-11-21T08:36:20.357000 CVE-2023-49570,0,0,ca1fd3c4a6664ff51e0f833771fbe4b305afce1cae6ae36eb7fba6255bca1b86,2024-10-22T16:26:47.317000 -CVE-2023-49572,0,0,a3c695097566efd5011723158a6db56b72c60649c65badaa5d2629319256c3dd,2025-03-04T17:06:05.060000 +CVE-2023-49572,0,1,2c1cadca7621fb73b95e8192fd2a4b749ae827a3c968515c5a4c3dbfb15ed7ec,2025-05-21T12:16:12.143000 CVE-2023-49573,0,0,bc1284835243c3a40b2658f02b758f2543e87df33ffb3837476cc5640ea994a4,2025-03-04T17:07:50.210000 CVE-2023-49574,0,0,286b601795fb57724910070d60ad16d33009a84c5d62b3ebbffb382243967498,2025-03-04T17:07:47.923000 -CVE-2023-49575,0,0,4f64f68206e8bfea8679dd5e907ce2eddbb87f96174d0b07214bc5fc4af5ffc0,2025-03-04T17:07:45.683000 +CVE-2023-49575,0,1,8fc6f33552b7d4b451ecbd731a8c242cfff2496b3bfcf2e4ae533b0d617af747,2025-05-21T12:16:13.217000 CVE-2023-49577,0,0,374576f0b7a20639768bf93404ed6883519f2037ce77b80e5b8b44acc944ff9c,2024-11-21T08:33:35.403000 CVE-2023-49578,0,0,2f6804b61c4d3d159baddcc8b0f8a76f68f452d5bcb145d2b1d282d25199de35,2024-11-21T08:33:35.570000 CVE-2023-4958,0,0,7f001dea70f53cb5a7a2462105854a03aaf170261e405f2314f4fd789e045b32,2024-11-21T08:36:20.490000 @@ -246756,7 +246760,7 @@ CVE-2024-11828,0,0,2182fcc94d5c2924b387611eabcc64629aff0d6ea201e85bc92b19a7228cc CVE-2024-11829,0,0,69c985051f8ba94b9fa4dc84b0c753dff2563e51518549f413112c5cfd5d6732,2025-02-04T17:49:14.273000 CVE-2024-1183,0,0,65ecfa5c3d2b221c19281f6b798c6cc7087d171223e10f3dd191314d09620aec,2024-11-21T08:49:58.950000 CVE-2024-11830,0,0,2b9bcbcc6b8510fbe3715609ebd917cba06af0eebf5118baa1afa85039e0b1f0,2025-01-08T11:15:06.443000 -CVE-2024-11831,0,0,a1f6c45f24c6c633fc0b63c55a2620b60379a6e45b193247870d99fe409bedd7,2025-05-06T08:15:15.800000 +CVE-2024-11831,0,1,bfa84fc953eeec4480bc618f208b11ef56a3bac90453030e3ce1f74fadcad3c0,2025-05-21T07:16:00.833000 CVE-2024-11832,0,0,7a6414b8a97e02ea73c05598b642d3e1c0cc9c0557b16b568dca85c729ab2498,2025-01-07T18:12:54.040000 CVE-2024-11833,0,0,508bcce82814de0a5ab20d2d4557e0c0ce4c9dd038000fc513cde0b65b845abf,2024-12-13T06:15:25.233000 CVE-2024-11834,0,0,3e4bbf7d975d33cb98deb34c5acbe1f3c43954f92e3b7f44576d4d1a8fcd397a,2024-12-16T18:15:08.243000 @@ -247175,7 +247179,7 @@ CVE-2024-12239,0,0,2dd2f60a878bde8fc4082e44b55290b6330ca8ddb5c2322a79fe1567e7103 CVE-2024-1224,0,0,cbfbaa5b4f0e1c410530412d727d5bf58dfe126bd3d740f330bf5c6e93a0658e,2024-11-21T08:50:05.487000 CVE-2024-12240,0,0,6672995b52813f98387098ac3b3013676e82d4cc5e92b1023b4a144f1eea1a77,2025-01-14T11:15:15.137000 CVE-2024-12242,0,0,2f55c665eef830ff2620035cbcfe4292d890dc745ab209f9df7f0382ca44ae3c,2025-02-11T02:15:33.653000 -CVE-2024-12243,0,1,4c244703cf2465e40240f943c3cb19029f5fa73684f49dfaeced1a0f7aaa0458,2025-05-21T00:15:21.700000 +CVE-2024-12243,0,0,4c244703cf2465e40240f943c3cb19029f5fa73684f49dfaeced1a0f7aaa0458,2025-05-21T00:15:21.700000 CVE-2024-12244,0,0,902128c7510fb9ce8d0215617298469dd7c5ca7cd9d40c58e1ffed541e8e617f,2025-04-29T13:52:47.470000 CVE-2024-12245,0,0,31276812dc8de5bfdb7bab3cdab8b1c866149ec90ff0dd7db23266bd4fc80d08,2025-03-14T18:15:27.530000 CVE-2024-12246,0,0,25e368b7b625668da07b20dc2399fc14978a413e8f5dc9b92a1c223e61cf9256,2025-02-11T02:15:33.710000 @@ -247506,6 +247510,7 @@ CVE-2024-12558,0,0,ff1dd3178bf5e061322cf2e1a359f721c0d270a183cd44116b64f362a8103 CVE-2024-12559,0,0,57ab0e0bbf049179f4bb043a31125569183e3823c6e0814b5b25df137c49ef14,2025-01-07T04:15:09.433000 CVE-2024-1256,0,0,ea8829298a5ced036094d7fead955f33827bc36bbc0a7f87a81ee1f95b95b282,2024-11-21T08:50:10.293000 CVE-2024-12560,0,0,c4badef93e9695e179fc22ccefcad430cf1b1e062ed03914e83a1a3466756d57,2025-02-28T22:59:28.950000 +CVE-2024-12561,1,1,f0882504af818f57a8ca8ef268d82a9a9534ba293c343852a13418c5f317c990,2025-05-21T12:16:13.357000 CVE-2024-12562,0,0,f6fdb7dd65105d9fa08541345d21ee8334878a0ad966d21f84d39c9a763ff4af,2025-02-24T12:27:50.967000 CVE-2024-12563,0,0,f173d3cca6301d80dcbd1f11af68618026210ab9c0a3d095920424b75607eb78,2025-03-18T21:15:23.590000 CVE-2024-12564,0,0,64c9ab8425ea7ad44b89133fb88850d8b2c31e87a29b2ffd7d7d1399315fc0b6,2024-12-12T15:15:12.097000 @@ -248845,7 +248850,7 @@ CVE-2024-13864,0,0,c8005b10478f0295163ea4c5800d8b7b3333680590f2b8cc9e73f5cd9636e CVE-2024-13865,0,0,43bd178e19baead4cb7ac71c7cec0c8d0b10d0e9d09c994c9739aa715cdd0945,2025-05-20T20:15:36.660000 CVE-2024-13866,0,0,a701a4a58094c13382e4ccc07ff53f8edcaa8a7b85d65b60e80e37b7129c441c,2025-03-05T09:15:09.587000 CVE-2024-13867,0,0,d1ccd3c88095b1998a7fe8f4f64aebb963278c8b08e66fe2014f445cd5f48e2a,2025-02-18T18:41:21.660000 -CVE-2024-13868,0,0,1afe0bf870e0d5c4c9f10a53b130e1730b8df25d9bac8ecc4a35f37dbd746a04,2025-03-06T15:15:15.297000 +CVE-2024-13868,0,1,5f90da423a6fd804019ae30399be671545219c7108740f7ff15c5b00d0b55e4b,2025-05-21T15:28:50.360000 CVE-2024-13869,0,0,326fdc063c0dd9eb08b2abdeec62a6d05762866ea06482d13d566bd8959cf70c,2025-03-05T21:42:08.193000 CVE-2024-1387,0,0,8e6bcbdaec79085616e17d0cff8f7e9074033b4370339ebb2fb375231d6ccb3f,2025-01-07T18:19:26.400000 CVE-2024-13870,0,0,3cb87b62ec130122ba819c9d907ccf45e4d470775a7726fc8ca4fa815401f8db,2025-03-12T12:15:12.443000 @@ -252219,6 +252224,7 @@ CVE-2024-23333,0,0,0ce507d9128043e9140244402c880eb4e81dce5a3ce65cedad46c5c7e37a0 CVE-2024-23334,0,0,24e22a9f85144a6eb80a966dfeee736b72688dbc715298232762b9057f0067b8,2024-11-21T08:57:32.007000 CVE-2024-23335,0,0,de7f349b152f92f737c021e47e0cabdc50557a944e31259bc2e405bafe42a824,2024-11-21T08:57:32.177000 CVE-2024-23336,0,0,4abac73264efb3ee98b509450e97c2c3efefdddaa6ba486ed0dee4b6115d0057,2024-11-21T08:57:32.330000 +CVE-2024-23337,1,1,0739e24a8ca8fafb8a9f675113e658f6eb94be76f777951c36acd18a7920347a,2025-05-21T15:16:03.920000 CVE-2024-23338,0,0,f58e3dae5cf0c4c68340ef9b15d9086b7094eb5eb8c170306769557f46f11afe,2025-03-28T22:15:16.150000 CVE-2024-23339,0,0,4ed8c1a7853a803ffbe035c0abd3aa76c7fa65b36f181c9915b990b81e7293ca,2024-11-21T08:57:32.477000 CVE-2024-2334,0,0,37c318054d295980ee4f52e7ea8ce94d0a9447e28250146e346bf263f72c74af,2024-11-21T09:09:31.687000 @@ -259771,10 +259777,10 @@ CVE-2024-33102,0,0,28bcc830975086115c47dc17d04fb98a32b4da78b9a20f3a6ff338a1002a8 CVE-2024-33103,0,0,8e358b701d1f75fcd166c9ed8cee8e40c06eacab0459b279ad0a15af14fd67d5,2024-11-21T09:16:31.230000 CVE-2024-33109,0,0,9d310e44a0938cb912ac0cdae9f92408fe4443679d6f4d813b944e47d0499fea,2024-09-25T14:47:54.217000 CVE-2024-3311,0,0,e8c56c0bd7fb02eaf3dabe1c1a4c1e221b18f2ed2a3be71ca96f8c6846410e32,2025-04-04T16:35:34.023000 -CVE-2024-33110,0,0,91c17feea0b419df1889446da137532b61005e84ac93a83ccedda0afa0de832e,2024-11-21T09:16:31.670000 -CVE-2024-33111,0,0,c1d8be00d7f61b5bdcc0c48e627d932a7917444a52c29780b3e05685d045ae60,2025-03-13T18:15:40.687000 -CVE-2024-33112,0,0,e076d0e5e8f72d13a2ccb800f3a3dba68805667556d37629dbb313c4b22a8bdb,2025-01-06T15:15:13.940000 -CVE-2024-33113,0,0,a2af3da0d2a1c1c9a30bda71eae95c4c88b98a90214b7932af280cb3f23d7545,2024-11-21T09:16:32.287000 +CVE-2024-33110,0,1,6ffbc94f167a52dfbd0ed621b524235b74f27a94f81d2620691ca07e335ee121,2025-05-21T13:02:24.607000 +CVE-2024-33111,0,1,17f4a588b6771453aae4fc0d8fe54488d2c27b36ab3b37893b9ded6fd2912f18,2025-05-21T13:02:32.660000 +CVE-2024-33112,0,1,f8ad2bcf8d7e340ab8b56d4ec4e1bfe3463c718134abce8b16f9a87aaa63e418,2025-05-21T13:02:30.203000 +CVE-2024-33113,0,1,7cf7987cc0dd6caecd85afedffd5aa13c551f5a0cf5e90dfd19e9f43dd0dd370,2025-05-21T13:02:27.457000 CVE-2024-33117,0,0,fa5a8875d38650ef6b59de02925d02e55a750e8834071e6e262197cc6d34464f,2024-12-06T21:15:07.340000 CVE-2024-33118,0,0,01cf7fb9b011c86aa5f92aee373c394da860653f62b9c7477080c66ec60949f5,2024-11-21T09:16:32.650000 CVE-2024-3312,0,0,5f7abfea07e26708b46deb725eba9cf7ab27075e45367056ede9366567e02312,2024-11-21T09:29:22.277000 @@ -259875,10 +259881,10 @@ CVE-2024-33335,0,0,611d5c247a5ed8c68e8c37144affed7213a93ec1992045174cf05e693148d CVE-2024-33338,0,0,9aba9f074eed914559e92385b75aa2e67badfc0f8399adc4210b14741ab06231,2025-04-23T01:28:50.760000 CVE-2024-33339,0,0,1bca262a290e7823541ac5c56ca607cb8f0a9af8877c53f0a0d3e60cf0f91403,2024-04-29T05:15:06.340000 CVE-2024-3334,0,0,f7b8fc61d289171164a101b81b52a33aefa1b785a01d8f4f835fce34d342927b,2024-11-18T17:11:56.587000 -CVE-2024-33342,0,0,fc22ab26c7f3b2c89721791d5577d12acfff8bdabae857a6e6a2c1fe334411e8,2024-11-21T09:16:49.267000 -CVE-2024-33343,0,0,3b25218e14a4821ba0eac4a6c6ed420e32b5cdba503f19a06876a789f30a2092,2024-11-21T09:16:49.480000 -CVE-2024-33344,0,0,3fe394222daaec53bc87e2ab7ca36ee7a0e9c46f34e1b050be3d59f967a185ca,2024-11-21T09:16:49.700000 -CVE-2024-33345,0,0,a8b9da8625e9e7d1f318edd169704726fe3cbd3a4dd41a6886247bc8f14160cd,2024-11-21T09:16:49.910000 +CVE-2024-33342,0,1,f1cd9121c1aeb37fda9b2b38e9ab8d72ca22cc5474a54eec9928c398f39cbf1c,2025-05-21T12:51:20.483000 +CVE-2024-33343,0,1,22fb5c186b8d20e0cc219d731c244ca0c68959bc12ed1d8fe4f3825d48b5d623,2025-05-21T12:51:23.790000 +CVE-2024-33344,0,1,bf00327a4fcb0c21f2e093ee7fe359acf13ba1003a255d1b4e7db47e9965c574,2025-05-21T12:51:29.240000 +CVE-2024-33345,0,1,e7ccc46572f3bbb45109594f681596833d0779a1a7232cbdc0662850102d3d46,2025-05-21T12:54:39.047000 CVE-2024-33350,0,0,9b08d2c3a8fe3dd6854baef5a026d3d1e5b049ad043519c6fcd46d8cec17cda5,2025-04-16T18:46:24.537000 CVE-2024-33365,0,0,f9ec22e06c79b3095977478bbee8588c545c1f3b46abddf9b07a4f7a5b6bc35f,2024-11-21T09:16:50.347000 CVE-2024-33368,0,0,1aed4b18a1492d5e22723c399fa6202a83f88860ce0815b8c4855ef51f160f76,2024-09-30T12:45:57.823000 @@ -260179,10 +260185,10 @@ CVE-2024-33766,0,0,8a54b1c601b8a4ab2eaddf7f86c183bad42cefdc71c367319f3ac24d8bf55 CVE-2024-33767,0,0,6340372d3c1cc6172f0c80ffb91a1edb6bc397cc48027a7ff7dfad5e476e75f5,2025-04-15T17:13:56.770000 CVE-2024-33768,0,0,86391c332a8005a5a48b389c0669527eaf62dd16990094649227664cc1e254fc,2025-04-15T17:13:40.663000 CVE-2024-3377,0,0,7f76d05faaa215288a08a6c46b24d1d9b3fb3f660927e99111ba1aac2fb257d8,2025-01-17T17:35:40.243000 -CVE-2024-33771,0,0,ed0b49470c65e3871d1940fa0b3cbacf7ab413d179c5d64a9d938d0a4abdc56b,2024-11-21T09:17:27.720000 -CVE-2024-33772,0,0,a6a00fe9413924c4a4b26071283f7474a04c107e4dee0d16d05d331c8ad95c1b,2024-11-21T09:17:27.913000 -CVE-2024-33773,0,0,56f82f3734f8ba835b2e983e98b73956fee4286b1269d584a86ea254d75725ee,2024-11-21T09:17:28.097000 -CVE-2024-33774,0,0,a06f168a5b5fb71bd2da679a8521789f11d2f22d2a9e5cd6f924b027ef128168,2024-11-21T09:17:28.287000 +CVE-2024-33771,0,1,f0add2ede557b0082aae42dabf4ed3c8fbc6aa15a6a6905ad64a036368536342,2025-05-21T14:42:20.190000 +CVE-2024-33772,0,1,91ebf0199b77f4fab29c23a278d1f8ef519ea660b4a9fb2413f7104260f44151,2025-05-21T14:42:45.587000 +CVE-2024-33773,0,1,034058b04ec93ca6c5edc4f174f8f4df83d661d3c6f32106b0dd0a828f81c868,2025-05-21T14:42:51.290000 +CVE-2024-33774,0,1,52b770b7f333615156ba87f01b3cea08102d5ac65159461b358a36f647f81817,2025-05-21T14:42:59.237000 CVE-2024-33775,0,0,bc597e520cb5802c10bcc9b429b021dd323dfc44b73d29075d59180bbe1246e2,2024-11-21T09:17:28.473000 CVE-2024-3378,0,0,3baf56e09d4e512582bd0fad8896d230d93b23be4ed5cff61b2d7585ee2d7eb6,2024-11-21T09:29:29.847000 CVE-2024-33780,0,0,dd3e53956d8ee8195483bfc72c30a74f0a4554b33535ae0f2f6a3917333d2615,2024-11-21T09:17:28.657000 @@ -261140,7 +261146,7 @@ CVE-2024-34947,0,0,d71da53311f378a50f279ba533f809437661e390d7f913efc4df893b6bab2 CVE-2024-34948,0,0,49bda64427407ecb2180b4b1b7b2e9653684a7b457eb15865cb81d1a7a2be1a6,2024-11-21T09:19:36.550000 CVE-2024-34949,0,0,b071e3a6c100e9a327bd79bacd5f4de547f0a047eed909ca9f420db03fa2e8c4,2024-11-21T09:19:36.760000 CVE-2024-3495,0,0,3fb1c314cfd57cb18d26d7cef17b997e0ca6bdd9b2251ef3488472e3c5f60221,2024-11-21T09:29:43.573000 -CVE-2024-34950,0,0,a6b126d64aa0ba456ecd616d45f62074a5406fa93e0daab388c44de3be35d7cc,2024-11-21T09:19:37.233000 +CVE-2024-34950,0,1,2ce194ed7e2dc61a16ae8f04d3ab7fc5bd8b1533d8747a6fca54e67d92089fd0,2025-05-21T13:05:30.327000 CVE-2024-34952,0,0,714ced0a477a50c4477397d464fcf76c2900d64e8398efd585991120c91f7ac3,2025-03-27T20:15:26.297000 CVE-2024-34953,0,0,39e1673dd79aa740ac449bee0990185e133e2cdfb359047cbaf9f24df0c042d4,2024-11-21T09:19:37.610000 CVE-2024-34954,0,0,069cc0997160dbea9bc19a47b3b4714194d21adb413db5b5be732c3218c105f9,2025-04-04T14:26:05.893000 @@ -262566,8 +262572,8 @@ CVE-2024-36821,0,0,60cb795fbe9a2a2c4467b14534d7f52c86dd48fb5403218bbc6cdeec30e43 CVE-2024-36823,0,0,4115541b3676ab4f89f2ad0f2ae7bf543cac68122e284621e98e2071b39b99b5,2025-03-25T19:15:43.420000 CVE-2024-36827,0,0,4370617d87c87d513f2b3860d8a55936fc3c62670aba299e7f31d155e1a7a78c,2025-03-28T20:15:24.577000 CVE-2024-36829,0,0,889a5257373f42050d89550c917e5c7c089246da5ef78ae00e520eca300421c0,2024-11-21T09:22:40.973000 -CVE-2024-36831,0,0,d2dafb538c0c01dc23e852a32bdf39c702498c2f303af3ef5c2148412ca98ac5,2024-12-17T16:15:25.390000 -CVE-2024-36832,0,0,bc99c97b09ee0afaaa8b7f300e3a80a0a0895cb088adc76fbb005719241b84ff,2024-12-17T17:15:08.467000 +CVE-2024-36831,0,1,5e46b3bfccddc38f23293f7d63bcce3e8de838c881c95c5fdb57f144e31ec495,2025-05-21T15:21:54.140000 +CVE-2024-36832,0,1,05760d9dc964772960c4f0fbed38e055e7ee731b05b8f1cd59dc33cebba95aa0,2025-05-21T13:21:05.300000 CVE-2024-36837,0,0,d83fc28981d319ecf854be01b7dc28f82c71da56080e984abdcd526f25d1bab7,2024-11-21T09:22:41.213000 CVE-2024-3684,0,0,bc358363415738df391830c2c3e66cdd750f4480781ea5b14341855b580ed24b,2024-11-21T09:30:10.410000 CVE-2024-36840,0,0,df76986cf4b78b412b0f52e824699180a22287010c032e08a5b788b4993c826f,2024-11-21T09:22:41.443000 @@ -263299,8 +263305,8 @@ CVE-2024-37600,0,0,f710248456c05894524d16003e15be0e197a07a7510d4da52e6169177ae03 CVE-2024-37601,0,0,e9a859d77c3f6ae6dd127ad7de3e246ee7eb96fc5f22828aa79dd90470cf25b0,2025-02-18T14:15:27.900000 CVE-2024-37602,0,0,5576258acf791ede4a0c438846415fbcaf4a746c6a262baf39d7814b0d88f3e2,2025-02-14T17:15:15.447000 CVE-2024-37603,0,0,94c92e9da739c409f07503f0d7fc5d973de120cea504b90a7d0f8a2afe74097c,2025-02-18T14:15:28.070000 -CVE-2024-37605,0,0,fb11c6ec5c9451d0fce3b495eefe0ce37a1a8006db99445feeb56f6a0d8feffd,2024-12-17T18:15:22.377000 -CVE-2024-37606,0,0,c23e13fa4f81bf586aa65db6e3fff01a9663acc134fa0dd95dc5e03eb97a040f,2024-12-17T18:15:23.083000 +CVE-2024-37605,0,1,c838e538d754978f8c417ba24adbe85ba47016e4a5e7d17b41eb849dadadcafd,2025-05-21T15:29:32.967000 +CVE-2024-37606,0,1,3341aa7418339e4a21f2b0045001de170ed9ccf0265137aece89d02cb8b63db7,2025-05-21T15:49:22.807000 CVE-2024-37607,0,0,8deda97648c5ef6da6da35c94a7a01dc1d7b58245833491e93a1544a6a0717f3,2024-12-17T18:15:23.343000 CVE-2024-3761,0,0,9a4b93141a41c863f41135b100c90ac7e276be511dc64fedc24f5e35c2657725,2025-01-10T14:36:20.713000 CVE-2024-37619,0,0,b796fecf90674fedbf0dfe40b1af68e953925893a23f847b6b6ad0964ef79609,2024-11-21T09:24:06.573000 @@ -265918,7 +265924,7 @@ CVE-2024-41053,0,0,d7c9b0be8c781a101e02864ca84f6bfe7c15da4b3bf0dc4df34ff4b4e91ea CVE-2024-41054,0,0,6d8bd98febcc5ed90da83753dc0ec2dda266dc3b0d5d67859d6b11093044671e,2024-11-21T09:32:08.973000 CVE-2024-41055,0,0,cb1680bdaa321d17235cf95b78f3142bb2925314baf4174352c781ae8d2c70e3,2024-11-21T09:32:09.107000 CVE-2024-41056,0,0,14f22991ffbae2822078f4185ae260b3d1853d0ffd90c9ddb9baa3fbf8698b37,2024-11-21T09:32:09.250000 -CVE-2024-41057,0,0,3a5f344e9b738bed540fe29fdc99c58a8d04c5811d70f043305835eb4d04b2d1,2024-11-21T09:32:09.390000 +CVE-2024-41057,0,1,a09c9c1d9e4857f9ace5db0651a7055ce5e230040ecebc3ff3f239bbdb94b7c2,2025-05-21T15:58:15.910000 CVE-2024-41058,0,0,f8efc4291acdef95084d42ab374bcb797cf15a545a161ed47d1f92c43e9dc991,2024-11-21T09:32:09.537000 CVE-2024-41059,0,0,a98674a5fbcb42761b1de39591df7add46eef8e4172cb4d87db24217b6ee0468,2024-11-21T09:32:09.670000 CVE-2024-4106,0,0,6e215eda84af809cd6a1569033fe91f864ded8f0d643ae48fa939b7c281ebb7c,2024-11-21T09:42:12.223000 @@ -266674,7 +266680,7 @@ CVE-2024-4209,0,0,0e07b375fd826f554818c9fa0e20a3c7e6efcd67458200e078373e008a1b75 CVE-2024-42090,0,0,1ed36ef6ca031090e7d53c07bfa7aa0cc25e23809ef28216357adcb81fc3f860,2024-11-21T09:33:34.603000 CVE-2024-42091,0,0,780abd2a6513a50b905097212f47654d7d2b3bd4140482c21de2667066c32da9,2024-11-21T09:33:34.770000 CVE-2024-42092,0,0,f752fbbb8177a98e0948bd3883c7bf3867457b830fe31a1e5dff4fc54e50c44e,2024-11-21T09:33:34.900000 -CVE-2024-42093,0,0,e9b8ce0dc99092cc15f4515c11fa19e08ddbc51f23622a0f3f62c9590bff8e90,2024-11-21T09:33:35.027000 +CVE-2024-42093,0,1,550f98a1964bc8a86a44bdb82ec90bca67aca00dd52a5d594cca58ae71fe64d7,2025-05-21T15:58:30.673000 CVE-2024-42094,0,0,12f2f74ea265f17f27c96cf534ac5f3b5665d8f8c30c0ec545f0091a3717f53f,2025-04-17T16:56:56.417000 CVE-2024-42095,0,0,d187eafc1814da2d7a4ffcd45e3b5a53a66294aa84897c8466d702d83501d5ca,2024-11-21T09:33:35.347000 CVE-2024-42096,0,0,0ad26ba3c54a07792099d3e95d54ebedba57486712c7e4b3e1a3c1e4289c7425,2024-11-21T09:33:35.473000 @@ -267319,6 +267325,7 @@ CVE-2024-42915,0,0,82774ecce7752d395797d1dd840fdb0ac74bcfb8cf5c14ba63693e387ea4e CVE-2024-42918,0,0,85fe1a70ccf07c658fa7c361fcc78b201258d106fef71b367ad14b322fcde97c,2025-03-13T16:15:21.900000 CVE-2024-42919,0,0,a305acff2d0e7d3ee2fce42b4ec8edc005d505db79a8c438cdea4ae23467c174,2024-09-06T17:35:15.190000 CVE-2024-4292,0,0,aadd195e174cdf2c4fac6389aaff8dc86b25c7743bd2be9bf1a6d13c5672b95c,2024-11-21T09:42:33.450000 +CVE-2024-42922,1,1,d4e79143cf95b5a4fc4b9f2407a765efc5f10e60213e87a3ed27d4137b87176c,2025-05-21T14:15:26.183000 CVE-2024-4293,0,0,ca0f63b3ea8846463b2e39cd0996c51deb0d14649af556fec98af5a705c840f0,2025-02-27T17:10:22.713000 CVE-2024-42930,0,0,a557ac2cd2318146e50cd8e0f732fa527215d4b8eec31cead4ef8f3e2dd6a450,2025-04-17T18:43:12.570000 CVE-2024-42934,0,0,1230de0d8b2dfa26c1ccbdc909ca39b36c856f70ea241827e7d7fc70ef4ace93,2024-10-31T20:35:05.250000 @@ -268652,7 +268659,7 @@ CVE-2024-44402,0,0,3ea7fc3b488d39a72ce82ce377bc00788dc32d59d4bb56e78f8214a9b080a CVE-2024-44408,0,0,0b23f9eaafb97fbc4bf740747a64b142e0a1b3cd51e3fd65fb3e9ba84133c753,2024-09-10T17:01:55.630000 CVE-2024-4441,0,0,5bede8403a4b8698d290bf287f25edbf160d1ec475da8de09388d5750e8b98ee,2024-11-21T09:42:50.273000 CVE-2024-44410,0,0,4663a2f9e9fa7d2fe704e47c277c6abbb1750372bc286e03000c2051b7596db7,2024-09-10T19:00:29.527000 -CVE-2024-44411,0,0,8fd5fe7aefec485ddb780eb5069c8ce23d4369f7df235e556eaba490480c99c7,2024-09-10T14:35:06.690000 +CVE-2024-44411,0,1,16540aecbd358872d9af8a2564d089385af30ed912a0cf62b27213c75c4c6777,2025-05-21T13:14:56.650000 CVE-2024-44413,0,0,1c7331724e1069528ea71c914e597a80f9fee01b1f49db10e059a4f381495403,2024-10-15T21:35:28.267000 CVE-2024-44414,0,0,dc7d65251b691aa26fb8772136cea972c688c2155fdee90c6b03421b6c48346a,2024-10-15T12:57:46.880000 CVE-2024-44415,0,0,c95e4fe9c4cbb98c419c230ec020cce90c8d211b357893d315b155eb63f177d3,2024-10-15T21:35:29.017000 @@ -268703,7 +268710,7 @@ CVE-2024-44575,0,0,2fdb4523fb93480e17a81cb2289c26fd5b8fb4bd885808938c0dc8387a7e0 CVE-2024-44577,0,0,012cd3687489f6b683572bfff38cebfa29461ab1df5e35223241e335c2144a6f,2025-04-28T15:13:42.720000 CVE-2024-4458,0,0,d181cdfe1239b7370e0229e24ced49e59c93df8ded36a14106b44f2e538fe3b1,2024-11-21T09:42:52.170000 CVE-2024-44587,0,0,214e8442e48a413fa5bc3b5eb5520932333a436f3595657cc5e581a98bd01f2f,2025-05-14T15:40:19.570000 -CVE-2024-44589,0,0,efe6dd10612c3f4023c557d137bbb3d918a6e4892340cf75c11b9c76638fa63e,2024-09-20T12:30:17.483000 +CVE-2024-44589,0,1,cdfef6665a687254489bcdcd221844fef84a44765272978dd7e05364ddc7fca7,2025-05-21T14:45:00.773000 CVE-2024-4459,0,0,4d78e97673e9a50f3b0b9ccb765089dc882f743499afafc2bd6f590c32236b06,2024-11-21T09:42:52.300000 CVE-2024-4460,0,0,91888f8bde5a4d48a24dfa2195fe74c4db2ec96b9dcf1f6b0a4392132da82baa,2024-07-17T11:15:10.240000 CVE-2024-4461,0,0,c00a88035372d85665145d8ea87a9b77c623553eea3422d18ba4808ef12fe581,2024-11-21T09:42:52.430000 @@ -268717,7 +268724,7 @@ CVE-2024-4465,0,0,1f05c15cd46a20341c0574f7f282b6792943d148b5e92669d3dfc00e099ccf CVE-2024-4466,0,0,e3cd45fefb4caa578c3a777906a4e9abf96ac1bf88640e5b948697edef383b07,2024-11-21T09:42:52.820000 CVE-2024-44667,0,0,c45d991e3e5755dd4bd6b2799c96326bd2bc462b166e82b876732032251f93de,2024-10-29T16:35:13.953000 CVE-2024-4467,0,0,7435e1edc5d4ab53fd884338611646eb141c365df221a6cdc5952ed1cc1b40c2,2024-11-21T09:42:52.947000 -CVE-2024-44674,0,0,8f3b6a67fdb91e214bdd072812af3c2ef73dbb26bddf629694102a0acec11013,2024-10-10T12:57:21.987000 +CVE-2024-44674,0,1,0ad142cde47185c8d007cce77ab0224053e7feb2ad982b28abdc94b064fd08ff,2025-05-21T14:51:38.190000 CVE-2024-44676,0,0,55ab6e98b8fb2e8335512299f61d6769af2afb3969ae52f7abdf08cf622b282d,2025-04-14T16:15:21.090000 CVE-2024-44677,0,0,24a9b30edcad0e8b0934ed12413b84eb3d707e3ac15d231423ec510aa6108a27,2025-03-31T16:15:22.023000 CVE-2024-44678,0,0,7c6040aac76a55faa1753224a581817a4c40d04b0f0585acd275b3cb0ea8d66e,2024-09-26T14:35:14.687000 @@ -271210,7 +271217,7 @@ CVE-2024-47926,0,0,484379ebe866d5f80b8df90be76850be47d4ff1695103f0fb6b101347d861 CVE-2024-4793,0,0,8f8d213042dd93a999736e061d0b2d842220778c0af6e02c4dc652643ef283b0,2025-02-20T18:23:45.077000 CVE-2024-47934,0,0,f6442eedb05ff02580ad694316069b27af97d384d3677baf492d0ce5c2b952f4,2025-01-08T03:15:08.550000 CVE-2024-47935,0,0,d0ad6a30600cc3e99b6dd112b63446a26523a856983df4b6127fa6046b2052c7,2025-02-17T06:15:13.053000 -CVE-2024-47939,0,0,7faf401d96b09e934bbbfe929a8ff16243a52ce1c2896a7fdbf954d8be99b110,2025-03-25T02:15:13.070000 +CVE-2024-47939,0,1,fffc897474cfd97e11c19319c0a76aef74d42c2ecd0da2d1c5ab2dcaa50a9f17,2025-05-21T07:16:01.050000 CVE-2024-4794,0,0,98a72307e185fe1ebcdbe465a8e92442dae9220581740707a3414bf42f6f4122,2025-02-20T18:22:57.657000 CVE-2024-47940,0,0,8e131fde2b9324945d980aa8295564fd41e66188f4f5ae4e8bf40a16b2d3387b,2024-11-13T23:14:54.567000 CVE-2024-47941,0,0,c14597f29ad3a4a8a32128ea5b010d0814d869c0e2360c56651603c13be16469,2024-11-13T23:15:09.783000 @@ -271335,7 +271342,7 @@ CVE-2024-48143,0,0,9f0a838d197761a16b4cd2831666e0ea35080b8356efee62551384a141f8f CVE-2024-48144,0,0,e047b920acc6a20f9806bb6b167e998089a50b6807fe762dd21d50a01178d8a2,2024-10-28T20:35:17.553000 CVE-2024-48145,0,0,593268a70870cf96b8df0248d386b5f9076e5d9dec9d11839dc47c82c0e6d7df,2024-10-28T20:35:18.340000 CVE-2024-4815,0,0,c76aad9a37d635b7a48461ef462b99d398a01655167739dc2edb340b798dab0f,2024-11-21T09:43:40.620000 -CVE-2024-48150,0,0,7e0e8a001062b532c3059fdc4e866d0a1df7baf74eecbf43787dc95e0441e644,2024-10-15T16:35:10.450000 +CVE-2024-48150,0,1,5c3154f7b526a17c8d2e2f122c1310407b9b8bca4b4ab510dbf891d4a662e4c9,2025-05-21T13:28:23.077000 CVE-2024-48153,0,0,9bb9eb59904f586d47ff40e919dda4bdb08a716843f5073379f22d991946e5d8,2025-04-10T14:37:33.973000 CVE-2024-4816,0,0,ce32cface130ddbce58c7f843e2c9d00c85ee2f9f85ea1376e23d5c2db8b5645,2024-11-21T09:43:40.753000 CVE-2024-48168,0,0,4513528ab3b6469e6eaff2e5a81a4b324296c72aaea1ff6bdafb5190d80bae3c,2025-05-07T16:06:57.460000 @@ -271386,7 +271393,7 @@ CVE-2024-48239,0,0,150999466b9913bb39d725025f345b709775b852cf8ae7b1e5357c6269e9f CVE-2024-4824,0,0,99e5c25e3efbae2d6155cb78a769b081c4e63979dfca195378dce1a55688edc2,2024-11-21T09:43:41.940000 CVE-2024-48241,0,0,942b4afc357baeaceadf6e602d4d8e3bfa0474bc4cebfcbfe23fbed098a739b4,2024-11-01T12:57:03.417000 CVE-2024-48245,0,0,24922a2d7e07e6658bda8116d06f7d7a042d2aff2acd1eb5bf13301caf6d9893,2025-05-14T16:06:12.270000 -CVE-2024-48246,0,0,017e94d832aeddb463ab8daa87be91fee4d8d41a51f87daed349fd285b340510,2025-03-06T15:15:15.917000 +CVE-2024-48246,0,1,9e54d8ae569997b2da7f9b0bd6618b2d7111ed51e20372574de285e89a2b6c23,2025-05-21T15:34:19.317000 CVE-2024-48248,0,0,bfaaa427608ee7a1887b41f59bd89b64643bcbb880eb573595b1a553986426d5,2025-03-25T18:48:31.753000 CVE-2024-48249,0,0,2b7bc564c0f7feefef01fa93cd50d56ca2a93e73b5f3eb01b90321a2b54ebe80,2024-10-15T18:35:15.607000 CVE-2024-4825,0,0,5c1d8ba2e7dfb16ca18af9c563e1590f25a3d396f69347243d31cae6dbf069a9,2024-11-21T09:43:42.050000 @@ -273328,7 +273335,7 @@ CVE-2024-50701,0,0,a80b1dc6acfa0163b2b418f9af2de103abd46652e86be76b69c935d1bde09 CVE-2024-50702,0,0,364da4b19de28c5c7b507be40fbdae2c11e3df8d6828b6df401d4df157b3f54d,2024-12-30T16:15:11.550000 CVE-2024-50703,0,0,e1914095d1b7a0ffe223f333a29d6d8f0777fb87821c72e0f90605f07525e975,2024-12-30T16:15:11.713000 CVE-2024-50704,0,0,3a7a624f0c58bae39aa038173569271ea319495a13055be68866465d97c985dc,2025-03-04T17:15:12.323000 -CVE-2024-50705,0,0,fd09bee80a9d432852b90932dca43e99a16407b703429303bba6463496ecd82a,2025-03-04T17:15:12.523000 +CVE-2024-50705,0,1,653b9ab38cd8fc4d4340939ca6f50518252d716444ecd47a376819fa9881b2a0,2025-05-21T15:42:14.520000 CVE-2024-50706,0,0,9d694d1fc70580914014f0f40264a1fc47bc45af6952e94fce64de19bc489e6c,2025-04-17T18:15:47.383000 CVE-2024-50707,0,0,1673aca67f94d8dc0ed87963b962426d321c443e687e61ac945b402f9af89706,2025-03-04T17:15:12.700000 CVE-2024-5071,0,0,bb7f626100661647bc42c770083fe93a8dc698299f29fbe9101c401c204869f3,2025-05-19T21:02:30.093000 @@ -276977,6 +276984,7 @@ CVE-2024-56413,0,0,379dc229ccabdf364af9829d579c8a73e199b5e7c66cddebda4706bf51009 CVE-2024-56414,0,0,8d131c69616c062c73dec88651a9a991bc9ee2aa5d8bfac07e8125110c170173,2025-01-02T16:15:08.693000 CVE-2024-5642,0,0,272b3c46f017079f5e7a4c3a57dae457f6d7a543b129faf9804cec24715f8735,2024-11-21T09:48:04.713000 CVE-2024-56427,0,0,d0713d12a7fbea802ac83a826422f78300c12b1546bb6367946bbb8ec49be1fd,2025-05-19T18:15:26.630000 +CVE-2024-56429,1,1,bf6fdf949c3a4ad18d65f19405caeff6d001964f7362692d251dcc46a78d77e1,2025-05-21T14:15:26.343000 CVE-2024-56430,0,0,2bffe926c5e68f1bdd0512132587fbce173389a8e75ddcf80974890bd54440ad,2025-04-26T13:15:42.940000 CVE-2024-56431,0,0,67cc611113625e736ceaa831a4486700220f1e0f8c3f1b943c5f85189d898fc7,2025-04-25T20:15:38.220000 CVE-2024-56433,0,0,41933bdf4cf50f4b61b9a39102f868e297a293e10ec834a2eac62b7879bed51f,2024-12-26T09:15:07.267000 @@ -277204,7 +277212,7 @@ CVE-2024-56659,0,0,5af48fbfd500475e97f794efbfd7019c9d1e6ea37e201e41e887360f28ef3 CVE-2024-5666,0,0,8139975e898ee1091802fa011bf50726a9ce2f054b4cff2fd9267df5d7986a48,2024-11-21T09:48:07.360000 CVE-2024-56660,0,0,cfed4a787333c42a3454657a06f0d3b7a6226ccb05b4cc27e3c9f4d563a87d98,2025-01-06T18:43:45.897000 CVE-2024-56661,0,0,c6c9e404b12664e81d58b8990f331d53c7130ec908c72b71de88eceee8fff31e,2025-01-06T18:49:40.310000 -CVE-2024-56662,0,0,2eb37c849d1c944c9ea82f37c67388f3c32521454fb617ad4e1f9a3fad26a35b,2025-01-06T18:51:31.593000 +CVE-2024-56662,0,1,2adad5234d75b87fa1b4d43723d942d1499a7932ca5519b0b3cfa82898935d94,2025-05-21T15:57:45.637000 CVE-2024-56663,0,0,b24b5ff415051e92cf82550565ee0a00212026738720b005f89116c862f514b2,2025-01-06T18:52:41.737000 CVE-2024-56664,0,0,510234c87d7ebcf9cc6fd0c5a7bd6e82fdb9857b952048590afcfc56a3b9b610,2025-04-10T13:15:46.037000 CVE-2024-56665,0,0,b08ee739572f10c32d239f33de64977bec1256b54835c47ccb8efd3ec8866d26,2025-01-06T18:42:12.090000 @@ -277452,7 +277460,7 @@ CVE-2024-57036,0,0,294e511f9e30b7948e16503f78b4d191862dd753fcf70aa88d3fb1cdba8a1 CVE-2024-5704,0,0,cbccfff62486c3c4f34573a6ffedc788349c4048d54ed4b150463209e5b954e3,2024-11-21T09:48:12.583000 CVE-2024-57040,0,0,33933917891b5c81929460ab67ed0d7164ee900a0e5137644747b9fb793e41c5,2025-04-07T18:29:36.293000 CVE-2024-57041,0,0,0979fe76d9e8316158a2a941acc94a8ef64339b0f6c4a4654fbbd04ce63283cd,2025-02-06T22:15:39 -CVE-2024-57045,0,0,9e88193dd5b32a09e508dddb0c4a8c2c596170562f8ae97e69edc85973af8d81,2025-02-19T16:15:40.317000 +CVE-2024-57045,0,1,fb5ea4e4f7a4b9889a1febeaf0802625e04c77b289c8befbcdbc515a09b01b01,2025-05-21T13:08:12.557000 CVE-2024-57046,0,0,ed4764a2183714deed727de4acb95079ff6351d4a17070f6f3c7fbd3a859097c,2025-02-19T22:15:23.207000 CVE-2024-57049,0,0,72e4153e948b22daf264938fc035d68c4ce564ff6470b7a7d4ef6548a1ce31ea,2025-02-19T15:15:15.297000 CVE-2024-5705,0,0,f3b79a5d6cb194f0bd96745c53b497323f2e376cb2b6ea3a0bd2883a13683047,2025-02-19T23:15:10.823000 @@ -278818,7 +278826,7 @@ CVE-2024-6533,0,0,7c76cd0497295bcea8ddaf17ea367bd3231a092d4f1d355ad959ac1bbed5a9 CVE-2024-6534,0,0,77773ba8637f01892ca3f6641fe8442e5c6280672a181b114b53032c7b4aca6d,2025-05-19T19:15:47.540000 CVE-2024-6535,0,0,44388289212b949983bbcb08fc4f387d14a7864b80be8ec8b5ccdce879cce735,2024-11-21T09:49:49.560000 CVE-2024-6536,0,0,7d70c9cba7e8708c505e036090d6fe133ada37c87b1ad8d8ecddea844c9eaa67,2024-11-21T09:49:50.537000 -CVE-2024-6538,0,1,2c696936cc4fa31d9ffe13c04e6d402da324c38b24c1ee7e007ddef2fa798bdc,2025-05-21T00:15:21.840000 +CVE-2024-6538,0,0,2c696936cc4fa31d9ffe13c04e6d402da324c38b24c1ee7e007ddef2fa798bdc,2025-05-21T00:15:21.840000 CVE-2024-6539,0,0,488f82b4dd195018a4571a7b41599ab86771c19553aea6769341658d3043c227,2024-11-21T09:49:50.707000 CVE-2024-6540,0,0,f3ea6a455e292a17968899748da95526cfa3d10fdcac7853f32fce07f60e60be,2024-11-21T09:49:50.857000 CVE-2024-6542,0,0,95c08c38ec0cfe53af1e3f2fc6b95f2c5e43a181678f8155f2d77a836dccc44c,2024-11-21T09:49:50.997000 @@ -279489,7 +279497,7 @@ CVE-2024-7249,0,0,5aa3a812d1f0251cb8d39b7db15af9ff39e19781022a6d80d602145f3b1a07 CVE-2024-7250,0,0,77e3676540095583ee54282377d752e59ba470ce7bc9b0c39a793c956014b296,2024-11-21T09:51:08.753000 CVE-2024-7251,0,0,4f5492038d53a952aae52e1170da3aea84a43d615d1a1fa4149c5ff70cda5bab,2024-11-21T09:51:08.880000 CVE-2024-7252,0,0,24d74b26883cf8151f149bfa7deed5d8a63133a6167165e30cc462ead5fd458a,2024-11-21T09:51:09.003000 -CVE-2024-7253,0,0,c74d8b1443ed2599fa1a0e185c951c99d83cfd82e91633185a8d5e4170834865,2024-11-26T20:00:48.783000 +CVE-2024-7253,0,1,584a033ffb592d83b01df6ad961d3e9d5269faa0ce5491eba30847d8b97978a8,2025-05-21T10:39:46.163000 CVE-2024-7254,0,0,b6f466e95cabbf6cdd49c5230587715cf41f374825ef35c4949832db33c35765,2025-04-19T01:15:44.387000 CVE-2024-7255,0,0,ba60a86cf283a25cbf44d00829e275d7a0bb026ed551fecdfd5dd1e8d3ece898,2024-10-29T20:35:42.023000 CVE-2024-7256,0,0,6943aac07a7fc5ab85c828a3f2feda9d7e5f422c60266753c20567487922742d,2025-01-02T17:41:48.610000 @@ -282121,7 +282129,7 @@ CVE-2025-0125,0,0,e554dff44f9688a52010db8440762a4a8d907276dd2745e071baf7624a2a0b CVE-2025-0126,0,0,1b4453e3324d0750a93960a33294f4914c0302b059bcbcc71281d7c9d513d6bf,2025-04-11T15:39:52.920000 CVE-2025-0127,0,0,e303a9a2c01a285aee210c2131c17c310104b348913f180c4d8d27a3c936dc7b,2025-04-11T15:39:52.920000 CVE-2025-0128,0,0,5a6e1f2103fed6b7d0a6d6bd4052b1f0b447f16d29b0b3df590d2aa9e8e29a5b,2025-04-11T15:39:52.920000 -CVE-2025-0129,0,1,61ce1fbe36e66a96d028493d656420ee165e0500087d6f0c0ca93d4a4191276f,2025-05-21T00:15:21.960000 +CVE-2025-0129,0,0,61ce1fbe36e66a96d028493d656420ee165e0500087d6f0c0ca93d4a4191276f,2025-05-21T00:15:21.960000 CVE-2025-0130,0,0,53f538a28a27dae8770d2d86d166d8c6e319cc27bb4fd4c2844d047cf49af081,2025-05-16T14:43:56.797000 CVE-2025-0131,0,0,72805228620815c23b9ed746c533e73e9f7ffe5288b86ae6fea272ca18571c25,2025-05-16T14:43:56.797000 CVE-2025-0132,0,0,c5eaf0dce2a68000eef4f52849b027e2a926f4561b36107aaf03bfeddb481a26,2025-05-16T14:43:56.797000 @@ -282512,7 +282520,7 @@ CVE-2025-0618,0,0,a593804ad72ce2a28c45218d44c74c44e97fb22bf3ef7b7191613950f392ed CVE-2025-0619,0,0,d6798daeef3d7924598dddc8037e69d4ae3bc1784ffc6b426878fbbb52aa2ee9,2025-01-23T11:15:10.700000 CVE-2025-0622,0,0,229742090c833003a7f4d1cfe9dcad29abd83cefc6f00fded6ecc64324cc88e4,2025-05-13T20:15:25.703000 CVE-2025-0623,0,0,341d910d0f0f4575e107592c92f38288f68e01fe716af21df488a6d82193e481,2025-01-21T17:15:16.817000 -CVE-2025-0624,0,0,a75c309f4dcb09ed0e7ff476fa82408d047a5a7c7d24883799465364595a91c2,2025-05-16T23:15:19.337000 +CVE-2025-0624,0,1,5e7cc7e5662444cde03f306d8020f755456ce74e001137340eb6cbb9d3fbcdcc,2025-05-21T15:16:04.547000 CVE-2025-0625,0,0,7c04d9cc9e6db59033b94aeccc3a86f517f7789f1f78caf25d9921a8f7736cad,2025-03-28T19:14:20.063000 CVE-2025-0626,0,0,16ee263c85f3aad6f9b7c5ed60390a064032d53adec3f9f8437b4c73151fb8c7,2025-03-01T18:15:34.140000 CVE-2025-0627,0,0,b8c3ed2cc7ba0ac39c654b768fbae2dc9179628b49afe50ff36158215480fde3,2025-04-30T18:29:49.693000 @@ -283130,6 +283138,13 @@ CVE-2025-1410,0,0,1acd34ee1bf4de50c7bb7990bb2833820ce8a935ac6fe3383da13c0fe4fe3d CVE-2025-1412,0,0,15006068dde5667dc534d1c6a1b910fc18a441695fc7fe8438811af885c4587d,2025-02-24T08:15:09.890000 CVE-2025-1413,0,0,5c3f38d9cc7b7010909c2af97131be7654555b0227082bf07ca01df8093ffd5a,2025-03-26T16:15:20.833000 CVE-2025-1414,0,0,3a97550374709a951d5410aaca1ecbf1ee05e0ec13bcab848c3fdf8c74845735,2025-03-28T19:05:18.850000 +CVE-2025-1415,1,1,5e3f8829a8c4dd2fca13bb505b42bec0c8ae5327e02005dd42fbf476e648c1c1,2025-05-21T12:16:20.817000 +CVE-2025-1416,1,1,a058ea67299fd516e0a6106350e84603be4abb613f3f581bbf8640f09bb2a7f4,2025-05-21T13:16:00.700000 +CVE-2025-1417,1,1,39a7c7fa7af9766a139f07b13fc3004ec9e0b1299ddb823bb648d6d25c24e01d,2025-05-21T13:16:01.760000 +CVE-2025-1418,1,1,de13bbcff2dd62bb42158a0a09cebe9dcec0a2f9d1e03036cb6a0ed34963e890,2025-05-21T13:16:01.927000 +CVE-2025-1419,1,1,ee5c54d7e09d47cc892eca1414154199835ce75efbc7940cc22f991ba187c629,2025-05-21T13:16:02.110000 +CVE-2025-1420,1,1,c16336c643198135c6d06fa129fb6580856afb4e96e13169c3271c6ee335c17a,2025-05-21T13:16:02.283000 +CVE-2025-1421,1,1,4bf655b8b3252d8ebc952590e5d0dda9f901d87f4c2869766a625732e75c4ae6,2025-05-21T13:16:02.450000 CVE-2025-1424,0,0,028aeccf06b420fd3ae1e41e07745fbc6608efab9b9570b82ad820d0434865c8,2025-03-04T16:15:36.663000 CVE-2025-1425,0,0,5581bc90886ae6a96bcdd3391932814fcfec4b3e066f6fbd2840021651a3a39d,2025-03-04T16:15:36.803000 CVE-2025-1426,0,0,60141100bd9735be12f5cd9169f41386898969b0da12ae7065d80dffff26c600,2025-04-07T19:07:52.300000 @@ -283357,6 +283372,7 @@ CVE-2025-1704,0,0,45ed10bd85c28150ffd6d9e18a4e608ac36e439afa1d7fa6e04c31ca92cc52 CVE-2025-1705,0,0,269e355c7cfca537a526c588669165c0e79ec506469175122c59352a58fa4621,2025-03-28T18:11:40.180000 CVE-2025-1706,0,0,dd52d06f7144d980c22c3ae884303aff0dbdae65eafe12989e3ba4c9649fb2b5,2025-05-19T21:15:22.120000 CVE-2025-1707,0,0,eb806af042366277371dce5ba4e4d20eb3821597874c2eb4040b48171f171ef9,2025-03-11T22:15:12.583000 +CVE-2025-1712,1,1,013c2b94b09ef6d88eafc4abc46488e51831bb1efd959701544f3be875ecb17f,2025-05-21T09:15:35.520000 CVE-2025-1714,0,0,6e67e5fe1ad7d1f8ea60e413f9fa7e7e2f63bd8d4c4369040436660c144fa80c,2025-03-07T05:15:16.233000 CVE-2025-1716,0,0,7b54faf04c0c346ecfa632bdb4185fc3c19aff41bf7399ecadc1ddfb775e6d41,2025-03-03T16:15:39.520000 CVE-2025-1717,0,0,3d4f0d449e7852a9bab717d0d55b537c9dc57d522d200e81bab92be20a7c833d,2025-03-11T16:12:42.783000 @@ -283550,7 +283566,7 @@ CVE-2025-1951,0,0,aced608a33ae134771b50e5247c6c62cee95d7e2661bc2c085b7d24c6e6500 CVE-2025-1952,0,0,48d11dd9e3c9fde175b7dfbd4bb5191c5d29ff981ae8aba2ed276f3868143917,2025-04-03T13:31:17.857000 CVE-2025-1953,0,0,2c90b159f704d80556f6fbd39c129612beee1a10d98b5c1d8e7852c91636b6e4,2025-03-04T20:15:37.657000 CVE-2025-1954,0,0,df215b88c67bb1af9517c32085007ddd928021c9d45641655e99c1e6c593f39e,2025-05-08T19:02:02.957000 -CVE-2025-1955,0,0,97f69b27e89d2039b8a85e67751c30fe947b3d05b2ab1ab4541c449415dc2ffc,2025-03-04T21:15:12.940000 +CVE-2025-1955,0,1,6cd32d0e3f6a0fd7fbab4c68b127e089862ad273f4ba9e608d48133b42d355d1,2025-05-21T15:37:10.890000 CVE-2025-1956,0,0,2bf02b02edbffa09a20d39ab24ac5d77306ff5541b26adcc35d8b80e7c39822d,2025-04-03T13:32:25.373000 CVE-2025-1957,0,0,ee1e7eb515d72a2e9fcfbd11acfbe0bf19e43e781862a3df4bad0d0b4d6e8b83,2025-04-03T13:32:30.633000 CVE-2025-1958,0,0,bcb1c0f9f921d2945fb3c18ad14ba54e023ee613791e4353242ad75faf6b45e5,2025-03-05T17:15:13.980000 @@ -287992,7 +288008,7 @@ CVE-2025-2607,0,0,ea39a635d57ac49d7a31a70d534f5af560e3e3d78a75679954fc5294ace5f0 CVE-2025-2608,0,0,395a3ff0fef5b202765640afba28730e4f66b29fc7ca9f4d8859e0bfbd6d824b,2025-03-21T22:15:26.250000 CVE-2025-26086,0,0,5bfeb5227764d9203b8260efe292c56f30aa0e92a33d9433b88459ecd54d41d0,2025-05-20T16:15:25.577000 CVE-2025-2609,0,0,98f4e2ddc30f3944fa89ec225fed012beb586ca920ba0b78ac92c5cce135928b,2025-04-01T20:28:29.337000 -CVE-2025-26091,0,0,a6c4a95423e44779db1da8a869e4d7b7450c2965513dd3dad726613d36e4c73a,2025-04-09T19:15:47.703000 +CVE-2025-26091,0,1,3b6f415cafaed6ccbf96b2feb6b8d2a9f428802f20e7abae07af1bf6503113a3,2025-05-21T15:00:43.580000 CVE-2025-2610,0,0,d9535a1c139910205321aca35370cfc0b0260764ca92a5dd60f7ed3f175deffb,2025-04-01T20:28:16.643000 CVE-2025-26125,0,0,4ae7f7ba353601c45dbee82b55634f507486c612ec0e7fb0295802c5ca1a95ba,2025-03-24T13:15:25.920000 CVE-2025-26127,0,0,ff848518068745ae246227c687011816436068efa4d4914700821387766f6d15,2025-03-17T18:15:21.860000 @@ -289161,6 +289177,8 @@ CVE-2025-27795,0,0,4ff7b2f77f376cfe6fd93166198dd47ff9402055417a29c3c719e8e028d29 CVE-2025-27796,0,0,896c9fe3f771a2fa3519e20ae6313b458be8f4415e50a669613e7a3928ce34c1,2025-03-07T22:15:37.813000 CVE-2025-27797,0,0,9a60543973f63e25f94999edfa3d615a1a0fe385d1f0b28469238539eafe3d42,2025-04-09T20:02:41.860000 CVE-2025-2780,0,0,8ce61193bdd5d01c360c9dde19d31cb5df8ec0c3ce67c7effda6feb1168c2491,2025-04-07T14:18:15.560000 +CVE-2025-27803,1,1,78f043315bdd266abdb0cf73245c12b70e3d7148b5b021d7565dd73458b7f91d,2025-05-21T12:16:21.100000 +CVE-2025-27804,1,1,f2fc2f9eeca26b7e9780182bd223969312be60f3afaab42922a91e5a6a79959d,2025-05-21T12:16:21.283000 CVE-2025-27809,0,0,acf17088263ac0454f3c19e9b5b69eee2adc10f0e02e48930b8a575ccd37ca6c,2025-03-27T16:45:46.410000 CVE-2025-2781,0,0,f71242cf9553514cc2ec12a96aa1195882b54360169109a0233e1040d7956dda,2025-04-01T20:26:30.593000 CVE-2025-27810,0,0,d1482541c832943462d5d5141f3260f826675da05c4de1d17a8d8000d1e76d18,2025-03-27T16:45:46.410000 @@ -292202,7 +292220,7 @@ CVE-2025-3304,0,0,971303943133f5ed6eb60660fa397dcccebbcd6ad76ec02322956d0062ae88 CVE-2025-3305,0,0,caed50d99616da9f2a70f5ff8ff690cbc48b6002cca415c3290f8e367603d490,2025-04-08T16:46:55.203000 CVE-2025-3306,0,0,116c94def1d4a2e814002f4948b93b65daa72c17537f71098e725bdf140a908b,2025-04-08T14:54:03.220000 CVE-2025-3307,0,0,764533eb55c36b857743124d26869569dc2e30546eb2b26c9f7f85b2c9a577e7,2025-04-08T14:59:43.193000 -CVE-2025-33072,0,0,7aaa777b1596817357a26d142dd9e6f41f75ecb29940df8d749c05a37ab6ba98,2025-05-12T17:32:52.810000 +CVE-2025-33072,0,1,da8dbb3f32bc92a4fea66cbf1913465f4b8680e98b695ceda185e1985ccda963,2025-05-21T14:52:32.977000 CVE-2025-33074,0,0,18fcd41dcb3c6273c73253eac7fa48f9c3a067330384af16f609b96399dd2bb1,2025-05-12T19:42:26.413000 CVE-2025-3308,0,0,4b8d71911211f133728a91e073b25c990ecfbff65585df599965a7e80c999bcc,2025-04-08T17:38:09.607000 CVE-2025-3309,0,0,a58e1bb45b0a2c034508b5544fcd67ebdb644ea57ad12470bb804c5eb6749d73,2025-04-07T14:17:50.220000 @@ -292557,6 +292575,7 @@ CVE-2025-3744,0,0,3f73082b9469ff058968c99eb56071f754893aafb95f1532497931c7d3ca6e CVE-2025-3746,0,0,a86a651df3282f85719d4a575f858bc382b89f41f2a44ddb9edbfecb08dfd910,2025-05-02T13:52:51.693000 CVE-2025-3748,0,0,f656b45b9de08724a85050ecaaed385b8f387fc0302b2168ae266799199d4f28,2025-05-06T15:19:46.247000 CVE-2025-3749,0,0,14aaad335c014cbeccb261defa731183a6eb2ae9c2ac67520874b6a4993af798,2025-04-29T13:52:28.490000 +CVE-2025-3750,1,1,88d63317f790899034ee72d3700ee64ea7102d49ff0e3fb30cfbe134a8dd0ed5,2025-05-21T12:16:21.447000 CVE-2025-3752,0,0,d2506056192e2113b9ac384bd8a44cc6a89b03568f3884b5df5d848c9dc8d52a,2025-04-29T13:52:28.490000 CVE-2025-3757,0,0,8b9feb7b58e7154a668b8c7ce74e1717274dd22dc258e833693363a2701b9551,2025-05-13T19:35:18.080000 CVE-2025-3758,0,0,f098340d8e39ee5e79f8b2c366ee00cbd2531b4c039872f0da7121d32f257cd6,2025-05-08T14:39:09.683000 @@ -292646,6 +292665,7 @@ CVE-2025-37806,0,0,a2d4f60486ccafd2f4df719bdb456db53bc631e303a76cb62bc3ac88d2558 CVE-2025-37807,0,0,c094d442bf637b5c848a3cf2a97163194d549b32b014ac2b0585fadc654c651f,2025-05-08T14:39:09.683000 CVE-2025-37808,0,0,490bbe4b85f9f91d86a92fb04bdae968ee8bdf98aa18eec96121b4d1d45355c4,2025-05-08T14:39:09.683000 CVE-2025-37809,0,0,ae7ead2515feacb087ff0946c0b9fec7b137e79e9ac265d72b0e7ed50c7f7d59,2025-05-08T14:39:09.683000 +CVE-2025-3781,1,1,be8ff25dc9dee3e10ee0306ef42e3db4bd439369a40f8ab91d0def1e8b627195,2025-05-21T12:16:21.677000 CVE-2025-37810,0,0,64449b32e01a75fbff6c3d5a1e954edc4ebea10d4c829dd19bcedec1093fd65b,2025-05-08T14:39:09.683000 CVE-2025-37811,0,0,e0bd29a831475b41d763c956a72010ed6bf0e695f4378cf45b94d432877e035e,2025-05-08T14:39:09.683000 CVE-2025-37812,0,0,1eab85c774a82339faf46124d5aafc2a1bcb859336ce6af14f85aeb2d66fd6ba,2025-05-08T14:39:09.683000 @@ -292856,9 +292876,9 @@ CVE-2025-3806,0,0,e36e660d067cc6351c2747c692d90bee5c708f7ff9070031d9f67a35bf91f8 CVE-2025-3807,0,0,057776e91a97dea0c0cfa3b526925a979fc884811e2b0dc151ff467798773a60,2025-04-21T14:23:45.950000 CVE-2025-3808,0,0,c9d9b38c3b98d0e004f3d362b1c7affeec1437a2f1dff864304e4ff67e8ee1e9,2025-04-21T14:23:45.950000 CVE-2025-3809,0,0,b0f7ce143ffe6fc36f9bbc17873d1316b0e5d9337b65e2cd57e88fbec5f74a76,2025-04-21T14:23:45.950000 -CVE-2025-3810,0,0,53ab33a85ddd7972da5c221845f8b1fae3bd5d83b39d482f8e46ed807b9bd826,2025-05-12T17:32:52.810000 +CVE-2025-3810,0,1,969f6ac87070c4164f54ddbb008c2e0ea10a92995f12f2bba35fa71773ee21b8,2025-05-21T14:39:49.083000 CVE-2025-38104,0,0,95fa066b9b297f0f71658bda9667ee4683e7719a8295e0ac6102597f6b2d67e5,2025-04-21T14:23:45.950000 -CVE-2025-3811,0,0,c144adb2569a12771addffc0282f9bcdfbb7667a6f254af05274ba1cb78c9cb4,2025-05-12T17:32:52.810000 +CVE-2025-3811,0,1,d8e5c197c987fa9a87399054dc44bee083db8a738da2ad57d0bfbdc6a9a31512,2025-05-21T14:08:03.370000 CVE-2025-3812,0,0,0f66093f84eb06bf3e1833106e7d524992fb03c23cda567c6a3d9deec629a713,2025-05-19T13:35:20.460000 CVE-2025-3814,0,0,11c279efbeec4fa23a54b22cf013841136b5f0f0ea6d94e898bb584de2240f97,2025-04-23T14:08:13.383000 CVE-2025-3815,0,0,e6d6eafdf99072b79b824cef8fe42ba5009e89200a72e7566988b88e2d1ef899,2025-05-05T20:54:19.760000 @@ -292916,9 +292936,9 @@ CVE-2025-3870,0,0,5d27427174a3606bfdd389a0cb245ecba9bd450174244992e8a6859595ce8c CVE-2025-3872,0,0,26604960001ce7e7efc01090e0c7f3ace8c54075c9f64bec667f2f9d611a1cbd,2025-04-29T13:52:47.470000 CVE-2025-3874,0,0,48404b5920dfb8e9d0e9a6f6c853dfae3dfd8be20985f098e8a46e30a37014f9,2025-05-06T15:39:29.083000 CVE-2025-3875,0,0,b30577bbfa040195edd099c3a49fc2b31cd5fc3c42a45e423a13f212f5536570,2025-05-16T14:43:56.797000 -CVE-2025-3876,0,0,4d634e50325445f93ed2428cd0da86d8623ad00df5fadf6800b2672f3a7172f4,2025-05-12T17:32:32.760000 +CVE-2025-3876,0,1,98fa4965cd0fb5896f08763a0582c93ea252014e67d6fd79d41bdf5071b00a40,2025-05-21T13:35:09.450000 CVE-2025-3877,0,0,bd5b5066ee71dddb026ff4be45d533ff8a45759049f3b5031ade33120dd16821,2025-05-16T14:43:56.797000 -CVE-2025-3878,0,0,204c704c51df224591697a6ce7c0d65ae03e7333b382700ff582acd7d72a254e,2025-05-12T17:32:32.760000 +CVE-2025-3878,0,1,5d0ea49e265f118a3a830204c906368e4ab75640c7d76d121d2e4f7feb7a8abf,2025-05-21T13:36:16.070000 CVE-2025-3879,0,0,d832e10f3f5a35fa6f778cb83701763ba1ca0a6464dece4429751c1aa0bef5fb,2025-05-05T20:54:19.760000 CVE-2025-3886,0,0,2fc53166978634d08e3de1f22695786efe31d1a12a27d176dfd8ae397c364dba,2025-05-12T19:08:46.017000 CVE-2025-3888,0,0,49e1b00723b387f853a81c82f5f016b5f1d15af81d74668da125765b119b544b,2025-05-19T13:35:20.460000 @@ -293071,7 +293091,7 @@ CVE-2025-39469,0,0,e18849e95e863d0389b13542e78fc7e5370e06514982d8ca59d2eba138210 CVE-2025-39470,0,0,e010fc0801cd6bb4936cb1b65898bdce69bac41af3bf33793e9451cff50a9a80,2025-04-21T14:23:45.950000 CVE-2025-39471,0,0,21ed7a6e1899b30a1a56f084c0c39ef4da03cd3bced83cdf5407e02bb87fb289,2025-04-21T14:23:45.950000 CVE-2025-39472,0,0,a7cbfd1fcbc3c3b205d7e0f46a012bccf0b5c525fa1ae0195e8c3aeff79f686a,2025-04-17T20:21:48.243000 -CVE-2025-39481,0,0,fc795dd8586cc7f03cd0f2004da7b89a070980a3d5f68033100dd7b26f035212,2025-05-19T13:35:50.497000 +CVE-2025-39481,0,1,ffc38075b9c9e137d0a9f220b07f654268d9b6b192ff077aaa96738d747f33c5,2025-05-21T14:23:08.503000 CVE-2025-39482,0,0,9c1ba107f4176b4e49317c98c181438ca48e79f3fd12343796019c3a6b9bf988,2025-05-19T13:35:50.497000 CVE-2025-3949,0,0,168e2abe66849b76f108d2275699dc7aa3f34d482497d50c4cedde8b889e7a83,2025-05-12T17:32:32.760000 CVE-2025-39491,0,0,ea7e1194bdf2a642209992ec9183b2b23fa84b67beeb68c0df3db0f81a91fcee,2025-05-19T13:35:50.497000 @@ -293325,6 +293345,7 @@ CVE-2025-4074,0,0,67c949a36ba05d695588494a1af59c90dcd6f218e799b578e62cc10508e921 CVE-2025-4075,0,0,980439803ac2a564a1211ca7907d1f8cd24fb9992986c85d77b9d15e9738b3a9,2025-05-02T13:53:40.163000 CVE-2025-4076,0,0,15e359152ac3968e95f76736d18611ed85f132cae7da09b8e96a2ab1cfc7b92d,2025-05-02T13:53:40.163000 CVE-2025-4077,0,0,8079a7498d68430e78a72c093e01ac09f17f033b46e97453ab1f898650cf61ff,2025-05-14T20:12:06.770000 +CVE-2025-40775,1,1,e4c9e2e0a54dea11be7335eb8f33d5dbfd94225348a4a9946b28eddbec3e6925,2025-05-21T15:16:04.783000 CVE-2025-4078,0,0,4b8b5e7f15fa37ae5bc923ff04abd72923f120f9d21e9b75dc1df139d8ff0dd5,2025-05-02T13:53:40.163000 CVE-2025-4079,0,0,efa2800aa7a8a38a15e06637ef605cbc230e645971f346a71263253743886bf2,2025-05-12T20:41:25.883000 CVE-2025-4080,0,0,e07f10494ffa549c5eb668e2c727c6f217f22db50f097d1c2e17f8109146e749,2025-05-14T20:04:22.563000 @@ -293343,6 +293364,7 @@ CVE-2025-40907,0,0,a5fce20c067c86758114403e285ee666069f29296ec9209932f5210c5b135 CVE-2025-4091,0,0,798a4cccfe2006913bea941ae05240fec836c7335fe01bd824f887f2a82ba4a5,2025-05-09T19:32:09.470000 CVE-2025-4092,0,0,5c481b9edaa4dc01b6e2af0355fb37068b547aa3807c69c17d8381f725e9d766,2025-05-09T19:32:00.773000 CVE-2025-4093,0,0,426d6945e92bfa0f6784cfac27262306e33a71ed38b9d14699e5d2c984a980bf,2025-05-09T19:31:46.917000 +CVE-2025-4094,1,1,ad9a39bb030ead8ee236b525730a26196f6b60fcea941235700951bbefb32e8a,2025-05-21T06:16:28.507000 CVE-2025-4095,0,0,cae8e1c6358f7e063ff4b8cb5365d4cbb9a8d43b36017ef3b6ccb02f60becbc1,2025-05-02T13:53:40.163000 CVE-2025-4096,0,0,383f5aa8be2c137aaa0a3d5a1d68693920a99e354dfda32889c6b5f351929641,2025-05-06T04:16:25.090000 CVE-2025-4098,0,0,c3d876ba0075045c7b4d4f0cde2463861d6f50b3f862fa37275045a58fd42c62,2025-05-12T17:32:52.810000 @@ -293350,6 +293372,7 @@ CVE-2025-4099,0,0,c24d719d1b6efaf6dca2a20eacc9c261b731d2019f4de35e18539c4a75aa9e CVE-2025-4100,0,0,f77bad4e79dd995e69fb9df2c2feed5b3f15d25f3ec0714aaa9ab5523a58223e,2025-05-02T13:53:40.163000 CVE-2025-4101,0,0,28b0d09afbbfe8ca63929eb68d3cea0c3d2891466bbe52112a4ade67cc0a71fa,2025-05-19T13:35:20.460000 CVE-2025-4104,0,0,9db1e5ec3f96560cc3897212bafef6028f8660c26f74adb7629202cb67ed1418,2025-05-07T14:13:20.483000 +CVE-2025-4105,1,1,d25bea0ea4c0275c0bfe20f62a926f576b2f8b9a7aa3059bc0e835996465dd1c,2025-05-21T12:16:22.473000 CVE-2025-4107,0,0,80bb7abdec5d37800b07ca68e7dfa10215abe5d87f8e994a47512d482e70dee5,2025-05-08T23:15:53.240000 CVE-2025-4108,0,0,99f1be6498bde74cd0dec545c35ee00e799f5fd928071043f07160da085a8dfe,2025-05-13T20:26:29.923000 CVE-2025-4109,0,0,0fdd257ebdcd9712bbbe8c6079eccfde19a10a05d503fef8381784b5bf1bee49,2025-05-13T20:26:18.360000 @@ -293373,6 +293396,7 @@ CVE-2025-41228,0,0,5d8d55c7942c4340189f199adb70c2c93dbd531ffb16dab121a0eed60da06 CVE-2025-41229,0,0,68819befb26ee9174585e5f787caee9982ca12e42f1b0be339a0c4ae9bad8253,2025-05-20T13:15:47.807000 CVE-2025-41230,0,0,870175b95a7edef971d3c65ca6238dd6826e7b8be65e2f368c02b0361e94f5fe,2025-05-20T13:15:47.950000 CVE-2025-41231,0,0,e5b0b45ab0c1038cab4502370cd35b4375b5ab766a27e7689d8077b913b0b4ea,2025-05-20T14:15:49.600000 +CVE-2025-41232,1,1,32f0698c0281472282cae9ac0c0c3e4795236646d6b312deb4a2870a79d30f79,2025-05-21T14:15:28 CVE-2025-4124,0,0,2116d33601d18584d8ff86788e21befdf79ee067b30d9afca370ae97d0f6cb63,2025-05-16T16:56:49.807000 CVE-2025-4125,0,0,9ce360e53c445df2b459e99f4cc1a32fbf05cb06f761d7887ca2ad1edf5cdba7,2025-05-16T16:56:47.173000 CVE-2025-4126,0,0,c504eb8f9e35e66ea3a2e9e649e0b3ff59910e9bf49695680cf85ff18119f2ac,2025-05-16T14:43:26.160000 @@ -293459,8 +293483,11 @@ CVE-2025-4211,0,0,7b377b1fe79abd98aed247483194f99833800614ea9e83186c5526dbe4e98f CVE-2025-4213,0,0,c4055f836ce609297ed017db84a26b805606186ae85d94f7aec59b8cf713ccde,2025-05-05T20:54:19.760000 CVE-2025-4214,0,0,38da5629ba6961991e62510ab5795d1953bf3e9e01d9516a024687d65d6fab3f,2025-05-05T20:54:19.760000 CVE-2025-4215,0,0,59d1024bfb3eb80aa05dbd498a6f0a87cab63497c07c3cbb3c681703a5949035,2025-05-05T20:54:19.760000 +CVE-2025-4217,1,1,ec296e505024a4fe6eeccc25d46da4d8018a23f788a2be7c62b0c36e783d375b,2025-05-21T12:16:22.700000 CVE-2025-4218,0,0,2c49204cc3b286450f9a71e19a17dbb76984ced9134a20a4535356e38fc3ed60,2025-05-05T20:54:19.760000 +CVE-2025-4219,1,1,c295956f41b7a7266538fc9b42ec63fb1646229b4d9dad0e15d8b48ed8d81b1c,2025-05-21T12:16:22.930000 CVE-2025-4220,0,0,5c86caee7e1d137cda1341728be0ecf7fbbff93f4260af3080c92a642cb60159,2025-05-07T14:13:20.483000 +CVE-2025-4221,1,1,903aeb080d46044500c770e485b76fc89a16221706f7640efb4fd6bec9ac533d,2025-05-21T12:16:23.157000 CVE-2025-4222,0,0,0ac402cc845bab4a30e9252ea588813619c6f19618452a717b52c67067208bc3,2025-05-13T18:15:41.657000 CVE-2025-4226,0,0,55e01873b1998142ff26478b55a0f9c85ffac636046a42d324d6210461fec550,2025-05-09T13:41:45.353000 CVE-2025-4236,0,0,4a998b3d009e2e5b8d6c745dec0a05483fadfb16e9111b778387c6694f340a68,2025-05-16T15:04:03.170000 @@ -293824,23 +293851,25 @@ CVE-2025-44872,0,0,e28eeda7c0947da22b97110002ac704c99b939adb3197ea183dfd5fb1b3c8 CVE-2025-44877,0,0,3e88cb68e2a05c83bbbae83e9f4fcc100cdeaa55ebf89cef995ce2e36b39c0d6,2025-05-06T16:15:29.140000 CVE-2025-44879,0,0,ff1ef867ce69e37912432278bb7e0aa14cd74213d1fc79ab0c52cd134a93eccd,2025-05-16T14:43:26.160000 CVE-2025-4488,0,0,6a99f0313dc7f97a5c97149c95e04b5ae66bfa8e7bdbbb32a1650fd0a61c4703,2025-05-13T19:02:35.513000 -CVE-2025-44880,0,0,116426f1613f27051122dd99339515e05a5acc549338a3b579104eb95e4af1df,2025-05-20T21:15:23.170000 -CVE-2025-44881,0,0,8803805193062f6c7961c41e572d3b811517f8d0f369bcab597c3812ade81224,2025-05-20T20:15:41.763000 -CVE-2025-44882,0,0,f6b69c45d5f610df72485bd0436a3389a1a9646a8fdea716abdf19692c2616a8,2025-05-20T21:15:23.257000 -CVE-2025-44883,0,0,34386e23f6df876c9b7458928a6be33c7ef4f011c245b634ee1da8243a74dd48,2025-05-20T21:15:23.343000 -CVE-2025-44884,0,0,ad7c4c722d9a37597d70ea47daf2da9fced0609597179de87bcae2091be85653,2025-05-20T20:15:41.897000 -CVE-2025-44885,0,0,d48fd111cd8c78b78ee3efddf87b2cfd0e1787bfc83c90aa46366b02eee2e630,2025-05-20T20:15:42.017000 -CVE-2025-44886,0,0,ff0156ddcf2344c6d93b74c8dd14bd4dd368e24d3a1cb2cfe711aa7036a6c330,2025-05-20T20:15:42.153000 -CVE-2025-44887,0,0,e12ea7e8c7d5c7f72491b3ce901393d1293ac241f3a6445f23bcdbbfd7101383,2025-05-20T20:15:42.290000 -CVE-2025-44888,0,0,5b172aeaeede4b7ba538f6f403c7bfbc764c2acf441870af14d0b4f269a7fa70,2025-05-20T20:15:42.420000 +CVE-2025-44880,0,1,2b83de0ca66fb4eb765fafefdc2163de4d689cbeb9ad74969a927482a4b4953c,2025-05-21T14:15:28.137000 +CVE-2025-44881,0,1,e7086f9abaf5ca9b9497d45ebcb59235a808eb2ba20d94dfcc372d73147ef538,2025-05-21T14:15:28.323000 +CVE-2025-44882,0,1,3c4f7811354038e8697b3d342aa3c54684f20845ce52c767a521991f711a43e0,2025-05-21T14:15:28.540000 +CVE-2025-44883,0,1,79744189f22dc85ec6cf7a184f5257117b9d809af7179d5a3f1d19524b132da2,2025-05-21T14:15:28.720000 +CVE-2025-44884,0,1,b97331aa4c818e0cf28b3bd8ea8f93e0e6e0b00c20b532048c5366fbccbc0557,2025-05-21T14:15:28.913000 +CVE-2025-44885,0,1,678d4cba4709e9d3e085cf7017681d7a0d5842cab16591df2cd57d6aeead6110,2025-05-21T14:15:29.090000 +CVE-2025-44886,0,1,1ada459bb96084a01d863cd0885f07e6daad17a15183ece8e4dd7a14a033862f,2025-05-21T14:15:29.290000 +CVE-2025-44887,0,1,753334ef601963d996fa36d0d3f9357c359f5da36c3982ea5f8f00b20058efaa,2025-05-21T14:15:29.480000 +CVE-2025-44888,0,1,7d3df5b66f1bb95498ce726445fef77e1b761c98bcd2b215674b9ccd10345a8f,2025-05-21T14:15:29.667000 CVE-2025-4489,0,0,cb384b96cb79a18c629a4cd7799ac59df883e74bbe4965dab7b87a7ec502eeef,2025-05-13T18:57:46.763000 -CVE-2025-44890,0,0,501af72500c1a34e62678be21f61b09d4de41265a6c1af335fe0f60e843dc115,2025-05-20T20:15:42.543000 -CVE-2025-44891,0,0,d6ca266c7ff93fff1abeca44ea6168bd04045ba34f3ff445d40501fe5c9b8897,2025-05-20T21:15:23.430000 -CVE-2025-44893,0,0,80dbb50a89a8d9c64622c833bcb32a6bb74a082051cd4a8111fe8624bf2e5db2,2025-05-20T20:15:42.663000 -CVE-2025-44894,0,0,47f6182da94a413662404471e3fa7a4feac7091a77c3c875ebca1a08cef276b1,2025-05-20T21:15:23.517000 -CVE-2025-44896,0,0,4ca09835a65738e17a570a2e12a16f554e8b80d9e3e722cbda11595cfe63cf2e,2025-05-20T21:15:23.600000 -CVE-2025-44897,0,0,1980fe88c8cfe601dba94ad496713a698f9a34f2df4e17732fdfb313bc841bc5,2025-05-20T21:15:23.683000 -CVE-2025-44898,0,0,673403043bb1d68caa8bf1dc76207caa39174ff7adc1a8036a4a030c44abdf91,2025-05-20T21:15:23.770000 +CVE-2025-44890,0,1,d7fb16c1abfac04c3fa586579067d81afd6f497371a4e463706806fa27990658,2025-05-21T14:15:29.857000 +CVE-2025-44891,0,1,8a53e6f6325979aed10573d6969d18a695a758209f96ba7ff141058082d7d7fa,2025-05-21T14:15:30.077000 +CVE-2025-44892,1,1,c04a5132b18f4b855fdebbb9d7d060d4608e99110bfda97649f5456c94e17ebf,2025-05-21T14:15:30.243000 +CVE-2025-44893,0,1,bd680f4e4f5517629864a66d418e302dda760cf7d4e0841f2ad58d2423c649a7,2025-05-21T14:15:30.380000 +CVE-2025-44894,0,1,584f2df8cd646015035f1a0a6bdfa25f594eb4c9375040bad800aeaab94d4809,2025-05-21T14:15:30.657000 +CVE-2025-44895,1,1,032064bfa4560cca92c7338cbcf9b897f7ef7a47795949cb1eb4d9d015efa02a,2025-05-21T14:15:30.850000 +CVE-2025-44896,0,1,5811baf8f6ec6318da1d48b506c30bdbe2260c6d0b0a3d37544cf0915f78547f,2025-05-21T14:15:30.990000 +CVE-2025-44897,0,1,5357ca2fe16dca139c02dad1016d1ac57846275d393e52ca8f0f8b004d563542,2025-05-21T14:15:31.177000 +CVE-2025-44898,0,1,9f9a7cd31c1d3fc57a116649078cfbfdf041a793842d82cb9eee771da308fc7b,2025-05-21T14:15:31.360000 CVE-2025-44899,0,0,a6524ee52e41b298cace5f5f5a30feec0d2d27a0571f52dadd73c5dead4c36cf,2025-05-07T14:15:44.197000 CVE-2025-4490,0,0,241f08f705ae3e66d0cf435e9f641db9abaac260a233ab4f24995312c1bd3320,2025-05-13T18:57:34.007000 CVE-2025-44900,0,0,d7f585488bf63991947e2720256c2c1afe3c83676d3f367516c6384bf0f4d822,2025-05-07T14:13:20.483000 @@ -293885,6 +293914,7 @@ CVE-2025-45236,0,0,4ca5831e33dd66784c123f97c0a9d8265ca1feabbffaf4dc2d39d3c2f66d4 CVE-2025-45237,0,0,414c6d4926aa8e975f1ceb6a1391c6c89ae9a0f19f49206e4657b3ab23d52111,2025-05-06T04:16:14.413000 CVE-2025-45238,0,0,a6f473d2bd6d6f6e07ce82d8d58a5df97305f0e54ddef68ecc758cad7fac1452,2025-05-06T14:15:37.490000 CVE-2025-45239,0,0,438ea4470bca4ade7e14a70b53543f4fbc61ad19aa95dd198e606d85a136745c,2025-05-13T20:15:29.720000 +CVE-2025-4524,1,1,b4f90bfc79deb08da19fc9102ccfb381605eabed930e049627b0e5bf666093c7,2025-05-21T07:16:01.220000 CVE-2025-45240,0,0,b3fa4732cd3fe0410ba0cb0ea322edc8d17fe51adae8c6c59441a10d82835964,2025-05-05T20:54:19.760000 CVE-2025-45242,0,0,36f934926e07ba7e9332b5541f124f03a9edff59fec5fdafed956a62eb096932,2025-05-05T20:54:19.760000 CVE-2025-4525,0,0,e5068efff3345b6299bf1d3b4c556a2d330551e5529391b80301dc64e770c372,2025-05-12T17:32:32.760000 @@ -293954,7 +293984,7 @@ CVE-2025-45617,0,0,45ec32c91fa8777f902c441e0ad6a5cbb4b231cb8d61355ddcbbf662a9985 CVE-2025-45618,0,0,767ee00e764e7ef5bf5da280443f8f8ac155a067bd61e2227396cf4720a51137,2025-05-06T04:16:18.347000 CVE-2025-4564,0,0,8d3f9720d908e446b737db8b900434db81b180dd53397ac7362129a7e91e5314,2025-05-16T14:43:26.160000 CVE-2025-4574,0,0,a936e70ea81d08570f1b370d85f904e33ed32b85014f55e350943da2afdfcfb5,2025-05-16T14:43:56.797000 -CVE-2025-45746,0,0,f377323639a281953465294dcf35f99890269033b4a122c51271e54350096cbe,2025-05-15T18:38:00.693000 +CVE-2025-45746,0,1,4f739c19260013516117a27de71915ddd8b481653d1fe15c253a574b15da0223,2025-05-21T14:15:31.553000 CVE-2025-45751,0,0,de89d7eb563ced8140d03e3271409a0c1ca243ce5972ff6bb5c7d466a89cb054,2025-05-07T19:16:08.903000 CVE-2025-45779,0,0,c093a7d91bfb997294cab32f2ebe8a712075ae66c80f7c18bdd9520e3509f542,2025-05-12T22:15:26.173000 CVE-2025-45787,0,0,839c7946d0f8e2e3f388e984cf0b3d259f804d96030c23335dfd861ac831e334,2025-05-16T15:38:25.723000 @@ -293998,6 +294028,7 @@ CVE-2025-4600,0,0,443d51b9ddf4d7aa84f2f0b2fbbf08e74eefe8d4261eb08798e0eecaa33c61 CVE-2025-46052,0,0,ab7d3250787ede688cd6b355d8aec0cc3dda171eb18d9b03fdd032c02ce8c40d,2025-05-16T14:43:26.160000 CVE-2025-46053,0,0,a812a9fd2122f294cfbb7de5fd43b870987b1f7127ab686b037255809ebad4e4,2025-05-19T19:15:51.580000 CVE-2025-4610,0,0,d61d953fe0fd6f0d2b21233839836df5133468380db75b47c2a05d78020b6b82,2025-05-19T13:35:20.460000 +CVE-2025-4611,1,1,fd27919d72e1a934ef7dfcc3b5ae9cac908c6847aa06d8f824e53790c0a8e837,2025-05-21T12:16:23.453000 CVE-2025-46188,0,0,62504d193088b5af38edf980f90565e160a5d439e8354158258072ac715243f5,2025-05-12T17:32:32.760000 CVE-2025-46189,0,0,8899683f487b9059df5f58e8f90bb3b1e4a778b58359218db5d2efce3fa37ef3,2025-05-12T17:32:32.760000 CVE-2025-46190,0,0,47ff0be82d13945d97d9110110ae8d990947c8306c051fd494a8ea49162c3a96,2025-05-12T17:32:32.760000 @@ -294532,7 +294563,7 @@ CVE-2025-47550,0,0,629dfc1b5d3dae27c215f668b417f5d7d77b81c396c5312e859726ef80f60 CVE-2025-47551,0,0,1ff47bb4d657c7e33aa1dcc67f35e113ebaf811e1c3c764c0a360a72784cc1b2,2025-05-08T14:39:09.683000 CVE-2025-47556,0,0,06063b9894785c3f6de11ab2418874bc9eef693faf7cbeeae3efc54dd06a8e64,2025-05-19T13:35:50.497000 CVE-2025-47557,0,0,30fe5baef7cb4352c2f9471d036fd77d02b114de359294a33b494a876933071c,2025-05-19T13:35:50.497000 -CVE-2025-4756,0,0,44526ffe878a29d37d03d7fc865269b9458470def0b82782c6bbf2313952aa9a,2025-05-16T14:42:18.700000 +CVE-2025-4756,0,1,b935e91bacb1926bc8cf1fe1b0f1de476b8b7bfbf44789827c7a23f8c6f1b349,2025-05-21T13:40:10.450000 CVE-2025-47560,0,0,c42216d7ef93cb02bf2cefc33ab7720ff1060436a899db11fa007bd5ae21264e,2025-05-19T13:35:50.497000 CVE-2025-47562,0,0,879496304ffa94481070c08ba70f4beeb80850bcaa0cd491262f65c2fe9f8f35,2025-05-19T13:35:50.497000 CVE-2025-47563,0,0,72acd05048e66bf43174d423048963fa4336cfd5d05a950e28ccf6a586953f28,2025-05-19T13:35:50.497000 @@ -294634,14 +294665,14 @@ CVE-2025-47706,0,0,d40cdfcbb25ab76df54ebe49d0d1100af29fd6817507b2cb357524cfe9177 CVE-2025-47707,0,0,ea0353563aa3f594f8710ba5ac2ef85c343128f887d66da5826b92e66e7f13a2,2025-05-16T14:43:56.797000 CVE-2025-47708,0,0,b46183ff90ad8011319bd811809b8dcc43906e688b5b61113c48b937e14fc71c,2025-05-20T17:15:49.700000 CVE-2025-47709,0,0,9c00b271893f53d1f52294cb240e92548326ebdfcea3825170f6a366a64bc3e2,2025-05-19T15:15:24.443000 -CVE-2025-4771,0,0,bf8f8a637063b808fb04337a505e7296ea118a5335dc365dee0239802236e915,2025-05-16T14:42:18.700000 +CVE-2025-4771,0,1,098fa6c5f50ab00bca1e41fbaecb02800df7623ac7bf2fda48146206c10d346e,2025-05-21T14:16:02.380000 CVE-2025-47710,0,0,3861e04e9e65074d020efa7dab9e00a25ecb80cf10fb272d3ea074fb3b627c14,2025-05-19T15:15:24.580000 CVE-2025-4772,0,0,eecb13bad93795bc677e110d3d69e31ef525b6fda2dde1da48da86078dc71ee5,2025-05-16T14:42:18.700000 CVE-2025-47729,0,0,5840dd56191421d2692f93cc2a1893a68781531005d1e7155e40c9e73a0b9865,2025-05-14T13:12:53.603000 -CVE-2025-4773,0,0,e1055cf66c5471970ce18a73477c2cfe9df600987585295a0d3265a26bbc6f26,2025-05-16T14:42:18.700000 +CVE-2025-4773,0,1,f64a68d0e35e414617bee17967e5c3c9909f1d1c34fed1a1c8d53f16a98c123a,2025-05-21T14:34:08.967000 CVE-2025-47730,0,0,32919bd9d895e6a4d64320c41f6d81f839bd7e464e3e623f1b4fc5607c47e300,2025-05-08T14:39:09.683000 -CVE-2025-47732,0,0,cf1df1f775da4005dd19c9013919751b75861e819986215aa630217ca0316a4d,2025-05-12T17:32:52.810000 -CVE-2025-47733,0,0,4bec5c7fdc76770078f29946d3d625988163608caa4297c319bd060ac7528608,2025-05-12T17:32:52.810000 +CVE-2025-47732,0,1,1dbc6a0cbcb6492c6b335caee3a252c21fa591bd0f36b7b915e4dfa6c055b3c9,2025-05-21T14:46:28.843000 +CVE-2025-47733,0,1,8ca49357b50ecb80722b97ab3f7e121e8dcb83e490a4a143991ae1fbc243a2e4,2025-05-21T14:43:14.013000 CVE-2025-47735,0,0,2f52e7c2d058d86629cac68f734c0774cf880fe4e8f98eedcaeede1d23aa6eff,2025-05-12T17:32:52.810000 CVE-2025-47736,0,0,2f11e9b0a9d748da2f6ce9c62d30862cdd6596c7ac96ac5f1028db67479c00c6,2025-05-12T17:32:52.810000 CVE-2025-47737,0,0,60cb12bc89ce6f2a8fe9e7af3463c6e9c2bcca5ef96322a90d7cccb126b389d1,2025-05-12T17:32:52.810000 @@ -294665,7 +294696,7 @@ CVE-2025-47766,0,0,bbd1725d4e60639c938f266df647f9c4b858dc29a12043cccd9a5c3eb377d CVE-2025-47767,0,0,87aedfcb0c6fae93f6d910446e796a76ed2327ca439a265ce5d58d1841e3723d,2025-05-10T03:15:24.700000 CVE-2025-47768,0,0,58352dd04b23dd70f6a6f9dc07cdb300ca9894e8b77f365928e387cdf2c0a06e,2025-05-10T03:15:24.760000 CVE-2025-47769,0,0,191a2625db99bf988b4216f9a0393389195e7a62dd877407382043a09941caa6,2025-05-10T03:15:24.813000 -CVE-2025-4777,0,0,e7265f37e2c2340dcce804e97e1dee3a388e92c59ae1a450ab0f01ff79ecdb58,2025-05-16T14:42:18.700000 +CVE-2025-4777,0,1,c0dc4eae42d0a5bf818cb2ada8342af24186ecc6019dc19abb8a3d472e9b301f,2025-05-21T14:31:24.410000 CVE-2025-47770,0,0,2c7f1062a80967c1f6432862f70e4d464db4eee082af6f48036a63ff6fe40b3c,2025-05-10T03:15:24.870000 CVE-2025-47774,0,0,6b1fb7f6eb1a6e80bb22b1fbffd29dcff8043e23a498d4697f7ac9cb0d4a0014,2025-05-16T14:43:26.160000 CVE-2025-47775,0,0,c90459b935f19603b5aede65e1f203f35b4531c7caea49456656086a71503192,2025-05-16T14:43:56.797000 @@ -294760,6 +294791,7 @@ CVE-2025-48018,0,0,1a62147b1239f95412e4d5e28c4322c889ed5907f27ee1f5921b118a23c0e CVE-2025-4802,0,0,2a148a0493cf06638fddf9e45c724f8f955f7a1a526578b92596c7ade5396dd0,2025-05-20T14:15:51.347000 CVE-2025-48024,0,0,ac746fb497cccde7b671eda6326e72522381250e5b7c54697735594cf6f8aedc,2025-05-16T14:43:26.160000 CVE-2025-48027,0,0,1553e3de579c54b8c12347894e7e439de00450ca8ef6f8ae1617a684639bd852,2025-05-16T14:43:26.160000 +CVE-2025-4803,1,1,f0d759b05e9fa1d04e3e40dce5904477c05bc6a1e93de8ccabb0b722897a6617,2025-05-21T12:16:23.673000 CVE-2025-4804,0,0,f8b39e70bd38762aab6b504fb7be417981a55297f3e6e74902fda434f25564c4,2025-05-19T13:35:20.460000 CVE-2025-4805,0,0,c6073c9a851be5e89b9b6a73f6e0a94d727dba70f9dad98357bef818a7d70880,2025-05-19T13:35:20.460000 CVE-2025-48050,0,0,fb11876c739186b17efdda0f201617f2ba38492e858d291ddb8ff8349bb73ea9,2025-05-16T15:15:48.510000 @@ -294873,7 +294905,21 @@ CVE-2025-4838,0,0,cca1a773a7995c2ad406db6e7e45380cc26c88e64223942ad0ce97b436093f CVE-2025-4839,0,0,3e65b07de0e0b2e6d627bc237ff1a0e673826cc1b3416686e2911073e2351e4f,2025-05-19T15:15:34.287000 CVE-2025-48391,0,0,003efce3493af944afc0fc3e83217992848e75733fc1218e4ba2fcc16d5ab6fd,2025-05-20T18:15:47.653000 CVE-2025-4841,0,0,106812e18b2c2f4d3a8d922ab838c995ef48093efe462829e961e7a7425149e0,2025-05-19T13:35:20.460000 +CVE-2025-48413,1,1,4e43c6b6cbe0164f4765aa337716ddc46c2cb7787ef860cbf834dac6e9d8730f,2025-05-21T15:16:04.963000 +CVE-2025-48414,1,1,472da89ced0db2e16d97025624647637a132cace661c095f749d5f4c03ef7235,2025-05-21T12:16:22.327000 +CVE-2025-48415,1,1,041f061eb481dd319fba99b2350a8a39bfd1a9893f7dbb0a90920181d914b14c,2025-05-21T13:16:02.810000 +CVE-2025-48416,1,1,ddd2d9f6ccb08bbacc7bd42d31c8ebf04bb97dcdbd11b95f7960fdf17978e8d9,2025-05-21T13:16:02.947000 +CVE-2025-48417,1,1,6e269fe484296e9fcfb5010d3312f74b6e95d4551a6132034862f31b69995442,2025-05-21T14:15:31.903000 +CVE-2025-48419,1,1,bd155ca402a63269dbed2daa279e8edaca6f34dd02051e6bfb974a88f54d0842,2025-05-21T06:16:27.723000 CVE-2025-4842,0,0,61c70dcf803df53c69e9542f1bffee262e62578440268183917238b648c87d8c,2025-05-19T13:35:20.460000 +CVE-2025-48420,1,1,0d1b6e75d1f11dee22a7abaa2697eadcb15c03748c23bb2d3e9a20f779e8e48d,2025-05-21T06:16:27.857000 +CVE-2025-48421,1,1,c234d1b50966469307e096bbb2356394d84b99d503e249a5a8a0d4208647c9bd,2025-05-21T06:16:27.937000 +CVE-2025-48422,1,1,1881a13174dfad004d06a89d13327f64f83e6e7101c65958f8518c2e4fa004ee,2025-05-21T06:16:28.017000 +CVE-2025-48423,1,1,d121135e83ec9d8960d6399a062f6721f8b223df352675338e06bfbfc6defcb2,2025-05-21T06:16:28.103000 +CVE-2025-48424,1,1,8229e11232a74492e60d75acaa7df426dfe360ea5e392e449af992513ba14071,2025-05-21T06:16:28.183000 +CVE-2025-48425,1,1,5375b1213c661d9c8e265e6ccb918fa737a0a97c61c46c0979c4669ee5fa8ebf,2025-05-21T06:16:28.263000 +CVE-2025-48426,1,1,4a81f9becf3c9368a66d400667b54c85edc5dcfa7efc6202bcbc6fb457650122,2025-05-21T06:16:28.347000 +CVE-2025-48427,1,1,7b7d0b24d905cbea3b50146b37b4cf62666de442b9ee6475e1cabe343e0aa3f7,2025-05-21T06:16:28.427000 CVE-2025-4843,0,0,34c629e6d8f1b5e4cb55658f5c6333109aec731adc4541b4fbdcaf490f6f3efc,2025-05-19T13:35:20.460000 CVE-2025-4844,0,0,fd50c644d5a2f0239203a32d5fb288c6607e706d454632507bfb6a9c543d2b74,2025-05-19T13:35:20.460000 CVE-2025-4845,0,0,975167164fe593bc70dfc7318a7c9afd425a95580231c39050aa7b8e4ecbe8d7,2025-05-19T13:35:20.460000 @@ -294924,8 +294970,8 @@ CVE-2025-4897,0,0,9734192ca5e9de89a79676311924280e6011349f97052fdf4677d907a8079f CVE-2025-4898,0,0,0e3b43fbe59615a636c1ec325dbac5cd77a6c21c7edc3c9df51fe669488622b9,2025-05-19T14:15:25.240000 CVE-2025-4899,0,0,1be2f374baa6df5fd613a1a39d41ced6880b6d9a82df9e628876be551df675f1,2025-05-19T14:15:25.367000 CVE-2025-4900,0,0,b2dd8cb33114f605cb8822c787483818af3a3eb74d9ff1c0cb311b6d4853e5a0,2025-05-19T14:15:25.500000 -CVE-2025-4901,0,0,ee0d4df0b7a53cb3602a6cf75b9efed4ceffd5c9f3766ef286207139512950e6,2025-05-19T14:15:25.620000 -CVE-2025-4902,0,0,f14d6ef03d52cb00c69a26099717c7f8c5a712320a23fa5f948701d3c7c1c8de,2025-05-19T14:15:25.747000 +CVE-2025-4901,0,1,e27cda4f5daf0c789b44760e4e5b993aff83932164a6246a45c2b68bff562e8d,2025-05-21T13:40:20.293000 +CVE-2025-4902,0,1,6a78a99defe072cc999de50623b42fd325c4fdcaf44bc58ff1a0ab5edd3f00ae,2025-05-21T13:37:47.987000 CVE-2025-4903,0,0,cbe4caff84fc26d638eadec09934b6755769c5675401deca2ccfc2e4b058b003,2025-05-19T13:35:20.460000 CVE-2025-4904,0,0,b35add6829510dc3fb8a7683bea93d229ac41bb41f226ecdd9acefc3be1cde2b,2025-05-19T13:35:20.460000 CVE-2025-4905,0,0,72f083950e5c2b9609e1e3ad96e22a6906ac358b8ea48d3874848e6f315bb24a,2025-05-19T14:15:25.867000 @@ -294934,7 +294980,7 @@ CVE-2025-4907,0,0,f051819e8470a0e710bc31646e0e90cbee16e63d239fa4cbef54f5c5acdff9 CVE-2025-4908,0,0,79d581139dfa08bb4528e89bbeae385a3920514135d7977b3944e1f0b644123c,2025-05-19T14:15:26.230000 CVE-2025-4909,0,0,4dbad9f6650d0a70a9e26529e700eb6b1d716c338a9f05321e246d8baaeb372e,2025-05-19T14:15:26.353000 CVE-2025-4910,0,0,b1fcc18f7209106f8b114f23032a2cc4f621b9d6b2a3d8175e2bc6bfd5f8a18f,2025-05-19T14:15:26.477000 -CVE-2025-4911,0,0,a8a36ff0261cdd915404ae95ff150842dc0b5dbb2f3c3da3c24598c3626a177b,2025-05-19T13:35:20.460000 +CVE-2025-4911,0,1,8165f0d1dc1e78afded21e50626575112805e2ff63d8f266295fb56c02f3696f,2025-05-21T13:26:25.383000 CVE-2025-4912,0,0,95a1d0feb601a2fc1a68af86f6f41890fb2378e3c4a33b5af97cde081c40a110,2025-05-19T14:15:26.667000 CVE-2025-4913,0,0,53b3af32223266d4fefa6288fa7668d3e6278e5d2f6f83bce997bdbd90d149c2,2025-05-19T17:37:22.390000 CVE-2025-4914,0,0,a988b116f09ba2a954362a47d883dbc77032cfbf0fc2d8366f3812d4ec746e85,2025-05-19T17:37:31.327000 @@ -294947,9 +294993,9 @@ CVE-2025-4920,0,0,3f754dcd1f915b78f78753940c39593d2b8252e0b2ac1b3316d99c54b7913a CVE-2025-4921,0,0,6764dccda373512b657fe3c8300f9213acc595572fe2b42c347ebcd82da48e2d,2025-05-18T20:15:19.273000 CVE-2025-4923,0,0,fc117d7289121edfa82674c417aac6907f34b1f7bc1653c5ea23160693ae966e,2025-05-19T13:35:20.460000 CVE-2025-4924,0,0,905db9c7ab501a45fed3ac5b7d0d99f76cdd3aa0fc7fe71a2a839f748191d3c2,2025-05-19T13:35:20.460000 -CVE-2025-4925,0,0,1adb982e7b1e901a3e2b931cd59a473c739ae596165c16f925b7ac70d63da358,2025-05-19T13:35:20.460000 -CVE-2025-4926,0,0,fcaa9f7a860b68e39c350191b92f0f13b5e6f0c2987a4c548d248d518da2b202,2025-05-19T13:35:20.460000 -CVE-2025-4927,0,0,136a3f3d5830f950e8b6f0ee44dae23bb023e4563e83005bad5105de25b70476,2025-05-19T13:35:20.460000 +CVE-2025-4925,0,1,c7c7b57edd485a39535f310e5e884e623df880c83d50cc9504511597c6a8f4a8,2025-05-21T12:58:28.507000 +CVE-2025-4926,0,1,321f7efe7ac33228adea3a7bf6c22d3279632b362ddc9dd47d64aee357b84d4f,2025-05-21T12:46:59.150000 +CVE-2025-4927,0,1,2750a792f3319584debfa65553b14ad85f4e2aa32076ab9798f492c480349e76,2025-05-21T12:42:13.543000 CVE-2025-4928,0,0,522c34038aebd470f2ec02afc72fe3f8fe8df8d6d18cbfb00a6750d9b3b69290,2025-05-19T13:35:20.460000 CVE-2025-4929,0,0,563d480fc249ff968319665b79cc0928b073e07cdcfd9a8305a09dad1f4ce360,2025-05-19T13:35:20.460000 CVE-2025-4930,0,0,368a23c5f786c53528abcaff1d7229342f22a0ccca0d031c16433adf5939cbe4,2025-05-19T13:35:20.460000 @@ -294966,7 +295012,9 @@ CVE-2025-4940,0,0,b6be136fc0ef4b0eb5a8eec752f22b0f38f3d3b001a9b3bbdf166af200dea9 CVE-2025-4941,0,0,4c57c981711880dd52105d2b77aac4c5f12f4423aa23a377c58de75d52cc1c76,2025-05-19T17:15:28.883000 CVE-2025-4945,0,0,da8fb39a1d18adc5b07df1f5ff561259b24dda4c7d62b67ade3bc1e2feb817ce,2025-05-19T17:15:29.103000 CVE-2025-4948,0,0,f655cc28946460aec5eb35f476b31c0d2a80bbf05c0aebc0d5eae8ac7d7d37b6,2025-05-19T16:15:36.790000 +CVE-2025-4949,1,1,2bc04360b49d9d8c07d7bb7a0cf537dda202877198031d5c7f15ae0ceafdc184,2025-05-21T12:16:23.933000 CVE-2025-4951,0,0,b4c30a581d030a75b450a9c4c5578dfa2f0031aca87c2209df151d924369b706,2025-05-20T09:15:21.207000 +CVE-2025-4969,1,1,d3c0972a9cfd3b769f549a7b1b69c93c0933db33494b29bf4f175f1c52f7007e,2025-05-21T06:16:28.937000 CVE-2025-4971,0,0,bd64c77f6ebfe3123c278b4a1adcfdb3e60cd3a30600fc53908cb97638876438,2025-05-20T00:15:25.253000 CVE-2025-4977,0,0,2733ab644bd3e608135c74860bb8bd6fea789e0ef1c79fa50323e771b950b0e1,2025-05-20T15:16:08.807000 CVE-2025-4978,0,0,68eff1079758cc1f96c63b4490d94fe0b14b515346284428de8f126fa5844ed2,2025-05-20T15:16:09.003000 @@ -294976,12 +295024,14 @@ CVE-2025-4997,0,0,95d226ea5de3b7136a949ffbeb86345c6268c1e4a7737118d293356ba2df2c CVE-2025-4998,0,0,6a9be53ed09677d85eeda70dcaa5965b04c834d8e16b7bc354f3e9d7d6cd2790,2025-05-20T21:15:23.920000 CVE-2025-4999,0,0,cede96a024992b2a3c62c664c9a6e26a2ccd2abce7e8c9cfdc4cf31305a5f20e,2025-05-20T21:15:24.083000 CVE-2025-5000,0,0,f42d4dda2d616ffd5c794530fae5b5b54a62b589063957af268548e686f284db,2025-05-20T21:15:24.253000 -CVE-2025-5001,0,0,f9feaff3cf7f399668bc19ee14c9c4bb39dc01c35c4d92c557c5541f8a41881e,2025-05-20T22:15:19.043000 -CVE-2025-5002,0,0,8d71047744727dc7c6b63eb89b611cb9b7b601285ba219929940baeeb679eb6b,2025-05-20T22:15:19.410000 -CVE-2025-5003,0,0,dde78a7785a30588c9cbd95519997a57756dc5ee05886f88da0c0f12e652cd60,2025-05-20T22:15:19.600000 -CVE-2025-5004,0,0,d63abb13ac3e402c5167efe41721a87d48f92cd665b96df691c94bba3ae17283,2025-05-20T23:15:19.530000 -CVE-2025-5006,0,0,f93893d3d6e3b099b6157ab8b75802bb8c0e5d354507889d345ce8e373393831,2025-05-20T23:15:19.750000 +CVE-2025-5001,0,1,9796d662bd185545be286d86db737981355d7870cab45a935b3951b765263a14,2025-05-21T14:15:32.490000 +CVE-2025-5002,0,1,928bf6600a48df30a9b48bdb4fc7d9bc26eae3c3b2f5cdbef6dba3b05013164b,2025-05-21T15:16:05.120000 +CVE-2025-5003,0,1,1086be9756c474dd007cc3e649a53e3b75ffa0d9cc5f8fb794b46c0b2b4a30b3,2025-05-21T15:16:05.397000 +CVE-2025-5004,0,1,3684f577ebb19b712b70b8915d16ee6dd69860113006bc86ab04e12f0ecaac06,2025-05-21T15:16:05.530000 +CVE-2025-5006,0,1,bcfd90380a8ea7cd67ac7f5d2b4b045356fbf3e4cff70c323b97181fcdeb246e,2025-05-21T14:15:32.637000 CVE-2025-5007,0,0,156249e332fcb1c7edff8fd0dd227310b223f9004b248e00480926d9e44e165b,2025-05-20T23:15:19.937000 CVE-2025-5008,0,0,688cc915e04dda45ea03a22bcb0187f44ea6e9bc3232236fa5e403957770de91,2025-05-20T23:15:20.133000 -CVE-2025-5010,1,1,6c63b159bf62f77684939d22f7ccc0d8d10397ba33be8be596148b4cba7465fd,2025-05-21T00:15:22.137000 -CVE-2025-5011,1,1,7783517fc50ec250b99cd634ec5c0a0cfc2e14888b9a49652f663ecd0c98b7ea,2025-05-21T00:15:22.310000 +CVE-2025-5010,0,0,6c63b159bf62f77684939d22f7ccc0d8d10397ba33be8be596148b4cba7465fd,2025-05-21T00:15:22.137000 +CVE-2025-5011,0,0,7783517fc50ec250b99cd634ec5c0a0cfc2e14888b9a49652f663ecd0c98b7ea,2025-05-21T00:15:22.310000 +CVE-2025-5013,1,1,ae0f20e411aab34444f290ebfb1e5ab60a36d3464da561f62bff522768986532,2025-05-21T06:16:29.103000 +CVE-2025-5029,1,1,6e66e880255df3b9b8d57d637066154db3aaa61506879e2ada104d8e810917dd,2025-05-21T15:16:05.660000