admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-24 17:04:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-12-04T21:00:12.081908+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-12-04 21:04:02 +00:00
1 parent 4b0543e867
commit 1a84267fb2
59 files changed
+5525 -842
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2015/CVE-2015-52xx/CVE-2015-5224.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2015-5224",
"sourceIdentifier": "[email protected]",
"published": "2017-08-23T15:29:00.207",
"lastModified": "2025-04-20T01:37:25.860",
"lastModified": "2025-12-04T20:16:16.327",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -74,6 +94,16 @@
"value": "NVD-CWE-noinfo"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-377"
}
]
}
],
"configurations": [
CVE-2024/CVE-2024-270xx/CVE-2024-27094.json
+125 -35
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-27094",
"sourceIdentifier": "[email protected]",
"published": "2024-03-21T02:52:18.063",
"lastModified": "2024-11-21T09:03:50.780",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-04T20:13:27.070",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 4.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 5.2
}
]
},
@@ -51,46 +71,116 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/commit/2d081f24cac1a867f6f73d512f2022e1fa987854",
"source": "[email protected]"
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:openzeppelin:contracts:*:*:*:*:*:node.js:*:*",
"versionStartIncluding": "4.5.0",
"versionEndExcluding": "4.9.6",
"matchCriteriaId": "AFE4954A-1F77-4EAD-85B6-4FA68BA03719"
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/commit/723f8cab09cdae1aca9ec9cc1cfa040c2d4b06c1",
"source": "[email protected]"
"vulnerable": true,
"criteria": "cpe:2.3:a:openzeppelin:contracts:*:*:*:*:*:node.js:*:*",
"versionStartIncluding": "5.0.0",
"versionEndExcluding": "5.0.2",
"matchCriteriaId": "2193380A-ABB6-42C3-8AE6-6A13D7B007E9"
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts/commit/92224533b1263772b0774eec3134e132a3d7b2a6",
"source": "[email protected]"
"vulnerable": true,
"criteria": "cpe:2.3:a:openzeppelin:contracts_upgradeable:*:*:*:*:*:node.js:*:*",
"versionStartIncluding": "4.5.0",
"versionEndIncluding": "4.9.6",
"matchCriteriaId": "D1D3D69D-791D-4AA2-B751-A6300854BCCB"
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts/commit/a6286d0fded8771b3a645e5813e51993c490399c",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-9vx6-7xxf-x967",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/commit/2d081f24cac1a867f6f73d512f2022e1fa987854",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/commit/723f8cab09cdae1aca9ec9cc1cfa040c2d4b06c1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts/commit/92224533b1263772b0774eec3134e132a3d7b2a6",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts/commit/a6286d0fded8771b3a645e5813e51993c490399c",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-9vx6-7xxf-x967",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"vulnerable": true,
"criteria": "cpe:2.3:a:openzeppelin:contracts_upgradeable:*:*:*:*:*:node.js:*:*",
"versionStartIncluding": "5.0.0",
"versionEndExcluding": "5.0.2",
"matchCriteriaId": "972AD148-5CC7-48ED-AA55-CBB1149BAF23"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/commit/2d081f24cac1a867f6f73d512f2022e1fa987854",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/commit/723f8cab09cdae1aca9ec9cc1cfa040c2d4b06c1",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts/commit/92224533b1263772b0774eec3134e132a3d7b2a6",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts/commit/a6286d0fded8771b3a645e5813e51993c490399c",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-9vx6-7xxf-x967",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/commit/2d081f24cac1a867f6f73d512f2022e1fa987854",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/commit/723f8cab09cdae1aca9ec9cc1cfa040c2d4b06c1",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts/commit/92224533b1263772b0774eec3134e132a3d7b2a6",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts/commit/a6286d0fded8771b3a645e5813e51993c490399c",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-9vx6-7xxf-x967",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-279xx/CVE-2024-27918.json
+99 -37
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-27918",
"sourceIdentifier": "[email protected]",
"published": "2024-03-21T02:52:20.863",
"lastModified": "2024-11-21T09:05:25.243",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-04T20:09:41.653",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,46 +51,108 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/coder/coder/commit/1171ce7add017481d28441575024209ac160ecb0",
"source": "[email protected]"
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:coder:coder:*:*:*:*:*:go:*:*",
"versionEndExcluding": "2.6.1",
"matchCriteriaId": "52C0398B-DC42-42FE-BDE5-D3AA1896525A"
},
{
"url": "https://github.com/coder/coder/commit/2ba84911f8b02605e5958d5e4a2fe3979ec50b31",
"source": "[email protected]"
"vulnerable": true,
"criteria": "cpe:2.3:a:coder:coder:*:*:*:*:*:go:*:*",
"versionStartIncluding": "2.7.0",
"versionEndExcluding": "2.7.3",
"matchCriteriaId": "67B6872B-3D0F-42CF-A0F7-34C040456810"
},
{
"url": "https://github.com/coder/coder/commit/2d37eb42e7db656e343fe1f36de5ab1a1a62f4fb",
"source": "[email protected]"
},
{
"url": "https://github.com/coder/coder/commit/4439a920e454a82565e445e4376c669e3b89591c",
"source": "[email protected]"
},
{
"url": "https://github.com/coder/coder/security/advisories/GHSA-7cc2-r658-7xpf",
"source": "[email protected]"
},
{
"url": "https://github.com/coder/coder/commit/1171ce7add017481d28441575024209ac160ecb0",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/coder/coder/commit/2ba84911f8b02605e5958d5e4a2fe3979ec50b31",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/coder/coder/commit/2d37eb42e7db656e343fe1f36de5ab1a1a62f4fb",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/coder/coder/commit/4439a920e454a82565e445e4376c669e3b89591c",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/coder/coder/security/advisories/GHSA-7cc2-r658-7xpf",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"vulnerable": true,
"criteria": "cpe:2.3:a:coder:coder:*:*:*:*:*:go:*:*",
"versionStartIncluding": "2.8.0",
"versionEndExcluding": "2.8.4",
"matchCriteriaId": "CFBD652C-3761-45CD-82AF-7E07C1D98097"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/coder/coder/commit/1171ce7add017481d28441575024209ac160ecb0",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/coder/coder/commit/2ba84911f8b02605e5958d5e4a2fe3979ec50b31",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/coder/coder/commit/2d37eb42e7db656e343fe1f36de5ab1a1a62f4fb",
"source": "security-advisories@github.com",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/coder/coder/commit/4439a920e454a82565e445e4376c669e3b89591c",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/coder/coder/security/advisories/GHSA-7cc2-r658-7xpf",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/coder/coder/commit/1171ce7add017481d28441575024209ac160ecb0",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/coder/coder/commit/2ba84911f8b02605e5958d5e4a2fe3979ec50b31",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/coder/coder/commit/2d37eb42e7db656e343fe1f36de5ab1a1a62f4fb",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/coder/coder/commit/4439a920e454a82565e445e4376c669e3b89591c",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/coder/coder/security/advisories/GHSA-7cc2-r658-7xpf",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-279xx/CVE-2024-27926.json
+46 -15
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-27926",
"sourceIdentifier": "[email protected]",
"published": "2024-03-21T02:52:21.500",
"lastModified": "2024-11-21T09:05:26.097",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-04T19:27:41.320",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,53 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/DIYgod/RSSHub/commit/4d3e5d79c1c17837e931b4cd253d2013b487aa87",
"source": "[email protected]"
},
"nodes": [
{
"url": "https://github.com/DIYgod/RSSHub/security/advisories/GHSA-2wqw-hr4f-xrhh",
"source": "[email protected]"
},
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"url": "https://github.com/DIYgod/RSSHub/commit/4d3e5d79c1c17837e931b4cd253d2013b487aa87",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/DIYgod/RSSHub/security/advisories/GHSA-2wqw-hr4f-xrhh",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"vulnerable": true,
"criteria": "cpe:2.3:a:rsshub:rsshub:*:*:*:*:*:node.js:*:*",
"versionStartIncluding": "1.0.0-master.cbbd829",
"versionEndExcluding": "1.0.0-master.d8ca915",
"matchCriteriaId": "81175DEE-CA7E-4A5B-ACF1-EBCF86E056F4"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/DIYgod/RSSHub/commit/4d3e5d79c1c17837e931b4cd253d2013b487aa87",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/DIYgod/RSSHub/security/advisories/GHSA-2wqw-hr4f-xrhh",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/DIYgod/RSSHub/commit/4d3e5d79c1c17837e931b4cd253d2013b487aa87",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/DIYgod/RSSHub/security/advisories/GHSA-2wqw-hr4f-xrhh",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-279xx/CVE-2024-27927.json
+103 -47
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-27927",
"sourceIdentifier": "[email protected]",
"published": "2024-03-21T02:52:21.703",
"lastModified": "2024-11-21T09:05:26.230",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-04T19:27:29.433",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,54 +51,110 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/DIYgod/RSSHub/blob/172f6cfd2b69ea6affdbdedf61e6dde1671f3796/lib/routes/m4/index.js#L10-L14",
"source": "[email protected]"
},
"nodes": [
{
"url": "https://github.com/DIYgod/RSSHub/blob/172f6cfd2b69ea6affdbdedf61e6dde1671f3796/lib/routes/zjol/paper.js#L7-L13",
"source": "[email protected]"
},
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"url": "https://github.com/DIYgod/RSSHub/blob/5928c5db2472e101c2f5c3bafed77a2f72edd40a/lib/routes/mastodon/acct.js#L4-L7",
"source": "[email protected]"
},
{
"url": "https://github.com/DIYgod/RSSHub/blob/5928c5db2472e101c2f5c3bafed77a2f72edd40a/lib/routes/mastodon/utils.js#L85-L105",
"source": "[email protected]"
},
{
"url": "https://github.com/DIYgod/RSSHub/commit/a42947231104a9ec3436fc52cedb31740c9a7069",
"source": "[email protected]"
},
{
"url": "https://github.com/DIYgod/RSSHub/security/advisories/GHSA-3p3p-cgj7-vgw3",
"source": "[email protected]"
},
{
"url": "https://github.com/DIYgod/RSSHub/blob/172f6cfd2b69ea6affdbdedf61e6dde1671f3796/lib/routes/m4/index.js#L10-L14",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/DIYgod/RSSHub/blob/172f6cfd2b69ea6affdbdedf61e6dde1671f3796/lib/routes/zjol/paper.js#L7-L13",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/DIYgod/RSSHub/blob/5928c5db2472e101c2f5c3bafed77a2f72edd40a/lib/routes/mastodon/acct.js#L4-L7",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/DIYgod/RSSHub/blob/5928c5db2472e101c2f5c3bafed77a2f72edd40a/lib/routes/mastodon/utils.js#L85-L105",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/DIYgod/RSSHub/commit/a42947231104a9ec3436fc52cedb31740c9a7069",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/DIYgod/RSSHub/security/advisories/GHSA-3p3p-cgj7-vgw3",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"vulnerable": true,
"criteria": "cpe:2.3:a:rsshub:rsshub:*:*:*:*:*:node.js:*:*",
"versionEndExcluding": "1.0.0-master.a429472",
"matchCriteriaId": "808BF0E1-4D9B-415E-A039-6B1469918B6F"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/DIYgod/RSSHub/blob/172f6cfd2b69ea6affdbdedf61e6dde1671f3796/lib/routes/m4/index.js#L10-L14",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/DIYgod/RSSHub/blob/172f6cfd2b69ea6affdbdedf61e6dde1671f3796/lib/routes/zjol/paper.js#L7-L13",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/DIYgod/RSSHub/blob/5928c5db2472e101c2f5c3bafed77a2f72edd40a/lib/routes/mastodon/acct.js#L4-L7",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/DIYgod/RSSHub/blob/5928c5db2472e101c2f5c3bafed77a2f72edd40a/lib/routes/mastodon/utils.js#L85-L105",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/DIYgod/RSSHub/commit/a42947231104a9ec3436fc52cedb31740c9a7069",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/DIYgod/RSSHub/security/advisories/GHSA-3p3p-cgj7-vgw3",
"source": "[email protected]",
"tags": [
"Exploit",
"Vendor Advisory"
]
},
{
"url": "https://github.com/DIYgod/RSSHub/blob/172f6cfd2b69ea6affdbdedf61e6dde1671f3796/lib/routes/m4/index.js#L10-L14",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/DIYgod/RSSHub/blob/172f6cfd2b69ea6affdbdedf61e6dde1671f3796/lib/routes/zjol/paper.js#L7-L13",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/DIYgod/RSSHub/blob/5928c5db2472e101c2f5c3bafed77a2f72edd40a/lib/routes/mastodon/acct.js#L4-L7",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/DIYgod/RSSHub/blob/5928c5db2472e101c2f5c3bafed77a2f72edd40a/lib/routes/mastodon/utils.js#L85-L105",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/DIYgod/RSSHub/commit/a42947231104a9ec3436fc52cedb31740c9a7069",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/DIYgod/RSSHub/security/advisories/GHSA-3p3p-cgj7-vgw3",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-281xx/CVE-2024-28110.json
+59 -23
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-28110",
"sourceIdentifier": "[email protected]",
"published": "2024-03-06T22:15:57.550",
"lastModified": "2024-11-21T09:05:50.160",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-04T20:57:21.163",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,30 +51,66 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/cloudevents/sdk-go/blob/67e389964131d55d65cd14b4eb32d57a47312695/v2/protocol/http/protocol.go#L104-L110",
"source": "[email protected]"
},
"nodes": [
{
"url": "https://github.com/cloudevents/sdk-go/commit/de2f28370b0d2a0f64f92c0c6139fa4b8a7c3851",
"source": "[email protected]"
},
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"url": "https://github.com/cloudevents/sdk-go/security/advisories/GHSA-5pf6-2qwx-pxm2",
"source": "[email protected]"
},
{
"url": "https://github.com/cloudevents/sdk-go/blob/67e389964131d55d65cd14b4eb32d57a47312695/v2/protocol/http/protocol.go#L104-L110",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/cloudevents/sdk-go/commit/de2f28370b0d2a0f64f92c0c6139fa4b8a7c3851",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/cloudevents/sdk-go/security/advisories/GHSA-5pf6-2qwx-pxm2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"vulnerable": true,
"criteria": "cpe:2.3:a:cloudevents:go_sdk:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.15.1",
"matchCriteriaId": "0583C6C8-2F72-482C-AA79-4F36A0B10B4A"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/cloudevents/sdk-go/blob/67e389964131d55d65cd14b4eb32d57a47312695/v2/protocol/http/protocol.go#L104-L110",
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/cloudevents/sdk-go/commit/de2f28370b0d2a0f64f92c0c6139fa4b8a7c3851",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/cloudevents/sdk-go/security/advisories/GHSA-5pf6-2qwx-pxm2",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/cloudevents/sdk-go/blob/67e389964131d55d65cd14b4eb32d57a47312695/v2/protocol/http/protocol.go#L104-L110",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Product"
]
},
{
"url": "https://github.com/cloudevents/sdk-go/commit/de2f28370b0d2a0f64f92c0c6139fa4b8a7c3851",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/cloudevents/sdk-go/security/advisories/GHSA-5pf6-2qwx-pxm2",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-38xx/CVE-2024-3884.json
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-3884",
"sourceIdentifier": "[email protected]",
"published": "2025-12-03T19:15:54.767",
"lastModified": "2025-12-04T17:15:08.283",
"lastModified": "2025-12-04T19:16:01.033",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -48,6 +48,10 @@
}
],
"references": [
{
"url": "https://access.redhat.com/errata/RHSA-2025:22773",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:22777",
"source": "[email protected]"
CVE-2025/CVE-2025-116xx/CVE-2025-11625.json
+48 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11625",
"sourceIdentifier": "[email protected]",
"published": "2025-10-21T14:15:46.997",
"lastModified": "2025-10-21T19:31:25.450",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T20:43:02.470",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "RED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,10 +91,31 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/wolfSSL/wolfssh/pull/840",
"source": "[email protected]"
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:wolfssh:wolfssh:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.4.20",
"matchCriteriaId": "A41BD0CF-B12E-46A5-BB36-6CE244516A98"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/wolfSSL/wolfssh/pull/840",
"source": "[email protected]",
"tags": [
"Issue Tracking"
]
}
]
}
CVE-2025/CVE-2025-120xx/CVE-2025-12097.json
+100
View File
@@ -0,0 +1,100 @@
{
"id": "CVE-2025-12097",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T20:16:16.853",
"lastModified": "2025-12-04T20:16:16.853",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "There is a relative path traversal vulnerability in the NI System Web Server that may result in information disclosure. \u00a0Successful exploitation requires an attacker to send a specially crafted request to the NI System Web Server, allowing the attacker to read arbitrary files. \u00a0This vulnerability existed in the NI System Web Server 2012 and prior versions. \u00a0It was fixed in 2013."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-23"
}
]
}
],
"references": [
{
"url": "https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/relative-path-traversal-vulnerability-in-ni-system-web-server.html",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-129xx/CVE-2025-12994.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-12994",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T20:16:17.037",
"lastModified": "2025-12-04T20:16:17.037",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Medtronic CareLink Network allows an unauthenticated remote attacker to initiate a request for security questions to an API endpoint that could be used to determine a valid user account. This issue affects CareLink Network: before December 4, 2025."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-204"
}
]
}
],
"references": [
{
"url": "https://www.medtronic.com/en-us/e/product-security/security-bulletins/carelink-network-vulnerabilities.html",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-129xx/CVE-2025-12995.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-12995",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T20:16:17.197",
"lastModified": "2025-12-04T20:16:17.197",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Medtronic CareLink Network allows an unauthenticated remote attacker to perform a brute force attack on an API endpoint that could be used to determine a valid password under certain circumstances. This issue affects CareLink Network: before December 4, 2025."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-307"
}
]
}
],
"references": [
{
"url": "https://www.medtronic.com/en-us/e/product-security/security-bulletins/carelink-network-vulnerabilities.html",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-129xx/CVE-2025-12996.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-12996",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T20:16:17.340",
"lastModified": "2025-12-04T20:16:17.340",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from errors logged under certain circumstances. This issue affects CareLink Network: before December 4, 2025."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.5,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-532"
}
]
}
],
"references": [
{
"url": "https://www.medtronic.com/en-us/e/product-security/security-bulletins/carelink-network-vulnerabilities.html",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-129xx/CVE-2025-12997.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-12997",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T20:16:17.480",
"lastModified": "2025-12-04T20:16:17.480",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Insecure Direct Object Reference vulnerability in Medtronic CareLink Network which allows an authenticated attacker with access to specific device and user information to submit web requests to an API endpoint that would expose sensitive user information. This issue affects CareLink Network: before December 4, 2025."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 2.2,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.7,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-639"
}
]
}
],
"references": [
{
"url": "https://www.medtronic.com/en-us/e/product-security/security-bulletins/carelink-network-vulnerabilities.html",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-134xx/CVE-2025-13488.json
+82
View File
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-13488",
"sourceIdentifier": "103e4ec9-0a87-450b-af77-479448ddef11",
"published": "2025-12-04T19:16:01.937",
"lastModified": "2025-12-04T19:16:01.937",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Due to a regression introduced in version 3.83.0, a security header is no longer applied to certain user-uploaded content served from repositories. This may allow an authenticated attacker with repository upload privileges to exploit a stored cross-site scripting (XSS) vulnerability with user context."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "103e4ec9-0a87-450b-af77-479448ddef11",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "103e4ec9-0a87-450b-af77-479448ddef11",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-87-0-release-notes.html",
"source": "103e4ec9-0a87-450b-af77-479448ddef11"
},
{
"url": "https://support.sonatype.com/hc/en-us/articles/46896142768019",
"source": "103e4ec9-0a87-450b-af77-479448ddef11"
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13630.json
+78 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13630",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T19:15:46.710",
"lastModified": "2025-12-04T17:15:25.860",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T19:59:59.043",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,85 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]"
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"url": "https://issues.chromium.org/issues/456547591",
"source": "[email protected]"
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://issues.chromium.org/issues/456547591",
"source": "[email protected]",
"tags": [
"Issue Tracking",
"Permissions Required"
]
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13631.json
+91 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13631",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T19:15:47.663",
"lastModified": "2025-12-04T17:15:25.860",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T19:59:37.260",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -35,14 +35,97 @@
}
]
},
"references": [
"weaknesses": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]"
},
"source": "[email protected]",
"type": "Primary",
"description": [
{
"url": "https://issues.chromium.org/issues/448113221",
"source": "[email protected]"
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://issues.chromium.org/issues/448113221",
"source": "[email protected]",
"tags": [
"Issue Tracking",
"Permissions Required"
]
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13632.json
+78 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13632",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T19:15:47.780",
"lastModified": "2025-12-04T17:15:25.860",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T19:55:24.710",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,85 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]"
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"url": "https://issues.chromium.org/issues/439058242",
"source": "[email protected]"
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://issues.chromium.org/issues/439058242",
"source": "[email protected]",
"tags": [
"Issue Tracking",
"Permissions Required"
]
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13633.json
+78 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13633",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T19:15:47.890",
"lastModified": "2025-12-04T17:15:25.860",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T19:54:44.883",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,85 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]"
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"url": "https://issues.chromium.org/issues/458082926",
"source": "[email protected]"
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://issues.chromium.org/issues/458082926",
"source": "[email protected]",
"tags": [
"Issue Tracking",
"Permissions Required"
]
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13634.json
+78 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13634",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T19:15:48.030",
"lastModified": "2025-12-04T17:15:25.860",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T19:53:52.827",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,85 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]"
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"url": "https://issues.chromium.org/issues/429140219",
"source": "[email protected]"
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://issues.chromium.org/issues/429140219",
"source": "[email protected]",
"tags": [
"Issue Tracking",
"Permissions Required"
]
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13635.json
+78 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13635",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T19:15:48.140",
"lastModified": "2025-12-04T17:15:25.860",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T19:50:39.720",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,85 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]"
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"url": "https://issues.chromium.org/issues/405727341",
"source": "[email protected]"
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://issues.chromium.org/issues/405727341",
"source": "[email protected]",
"tags": [
"Issue Tracking",
"Permissions Required"
]
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13636.json
+78 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13636",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T19:15:48.260",
"lastModified": "2025-12-04T17:15:25.860",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T19:42:35.750",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,85 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]"
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"url": "https://issues.chromium.org/issues/446181124",
"source": "[email protected]"
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://issues.chromium.org/issues/446181124",
"source": "[email protected]",
"tags": [
"Issue Tracking",
"Permissions Required"
]
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13637.json
+78 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13637",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T19:15:48.367",
"lastModified": "2025-12-04T17:15:25.860",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T19:39:11.720",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,85 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]"
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"url": "https://issues.chromium.org/issues/392375329",
"source": "[email protected]"
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://issues.chromium.org/issues/392375329",
"source": "[email protected]",
"tags": [
"Issue Tracking",
"Permissions Required"
]
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13638.json
+78 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13638",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T19:15:48.480",
"lastModified": "2025-12-04T17:15:25.860",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T19:20:42.487",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,85 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]"
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"url": "https://issues.chromium.org/issues/448046109",
"source": "[email protected]"
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://issues.chromium.org/issues/448046109",
"source": "[email protected]",
"tags": [
"Issue Tracking",
"Permissions Required"
]
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13639.json
+114 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13639",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T19:15:48.623",
"lastModified": "2025-12-04T17:15:25.860",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T19:16:17.007",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,121 @@
"value": "Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Low)"
}
],
"metrics": {},
"references": [
"metrics": {
"cvssMetricV31": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]"
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"url": "https://issues.chromium.org/issues/448408148",
"source": "[email protected]"
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"versionEndExcluding": "143.0.7499.40",
"matchCriteriaId": "28874374-C1B5-4638-BCCD-0AC4F1DAA6EC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://issues.chromium.org/issues/448408148",
"source": "[email protected]",
"tags": [
"Issue Tracking",
"Permissions Required"
]
}
]
}
CVE-2025/CVE-2025-137xx/CVE-2025-13790.json
+77 -20
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13790",
"sourceIdentifier": "[email protected]",
"published": "2025-11-30T15:15:46.003",
"lastModified": "2025-12-01T15:39:33.110",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T20:27:39.500",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,26 +140,63 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-CSRF-1/report.md",
"source": "[email protected]"
},
"nodes": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-CSRF-1/report.md#proof-of-concept",
"source": "[email protected]"
},
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"url": "https://vuldb.com/?ctiid.333794",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.333794",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.690871",
"source": "[email protected]"
"vulnerable": true,
"criteria": "cpe:2.3:a:scada-lts:scada-lts:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.7.8.1",
"matchCriteriaId": "E420F2FD-D264-4284-A5BE-F62F0227AA2B"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-CSRF-1/report.md",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-CSRF-1/report.md#proof-of-concept",
"source": "[email protected]",
"tags": [
"Exploit"
]
},
{
"url": "https://vuldb.com/?ctiid.333794",
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.333794",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.690871",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-137xx/CVE-2025-13791.json
+77 -20
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13791",
"sourceIdentifier": "[email protected]",
"published": "2025-11-30T16:15:46.277",
"lastModified": "2025-12-01T15:39:33.110",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T20:26:55.733",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
],
"cvssMetricV2": [
@@ -116,26 +136,63 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-ZipSlip-1/report.md",
"source": "[email protected]"
},
"nodes": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-ZipSlip-1/report.md#proof-of-concept",
"source": "[email protected]"
},
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"url": "https://vuldb.com/?ctiid.333795",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.333795",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.690873",
"source": "[email protected]"
"vulnerable": true,
"criteria": "cpe:2.3:a:scada-lts:scada-lts:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.7.8.1",
"matchCriteriaId": "E420F2FD-D264-4284-A5BE-F62F0227AA2B"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-ZipSlip-1/report.md",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-ZipSlip-1/report.md#proof-of-concept",
"source": "[email protected]",
"tags": [
"Exploit"
]
},
{
"url": "https://vuldb.com/?ctiid.333795",
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.333795",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.690873",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13807.json
+91 -27
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13807",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T05:16:02.987",
"lastModified": "2025-12-01T15:39:33.110",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T20:24:06.027",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"cvssMetricV2": [
@@ -120,34 +140,78 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-information-disclosure-1/report.md",
"source": "[email protected]"
},
"nodes": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-information-disclosure-1/report.md#proof-of-concept",
"source": "[email protected]"
},
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"url": "https://vuldb.com/?ctiid.333817",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.333817",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.692066",
"source": "[email protected]"
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-information-disclosure-1/report.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-information-disclosure-1/report.md#proof-of-concept",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"vulnerable": true,
"criteria": "cpe:2.3:a:orionsec:orion-ops:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2025-08-01",
"matchCriteriaId": "2ADBBFE9-A763-4A3E-AC7C-AE357B1D94AB"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-information-disclosure-1/report.md",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-information-disclosure-1/report.md#proof-of-concept",
"source": "[email protected]",
"tags": [
"Exploit"
]
},
{
"url": "https://vuldb.com/?ctiid.333817",
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.333817",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.692066",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-information-disclosure-1/report.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-information-disclosure-1/report.md#proof-of-concept",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit"
]
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13808.json
+91 -27
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13808",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T05:16:04.070",
"lastModified": "2025-12-01T15:39:33.110",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T20:21:36.230",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,34 +140,78 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md",
"source": "[email protected]"
},
"nodes": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md#proof-of-concept",
"source": "[email protected]"
},
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"url": "https://vuldb.com/?ctiid.333818",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.333818",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.692068",
"source": "[email protected]"
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md#proof-of-concept",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"vulnerable": true,
"criteria": "cpe:2.3:a:orionsec:orion-ops:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2025-08-01",
"matchCriteriaId": "2ADBBFE9-A763-4A3E-AC7C-AE357B1D94AB"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md#proof-of-concept",
"source": "[email protected]",
"tags": [
"Exploit"
]
},
{
"url": "https://vuldb.com/?ctiid.333818",
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.333818",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.692068",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md#proof-of-concept",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit"
]
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13809.json
+91 -27
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13809",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T06:15:58.280",
"lastModified": "2025-12-01T15:39:33.110",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T20:15:31.293",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
],
"cvssMetricV2": [
@@ -116,34 +136,78 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-ssrf-1/report.md",
"source": "[email protected]"
},
"nodes": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-ssrf-1/report.md#proof-of-concept",
"source": "[email protected]"
},
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"url": "https://vuldb.com/?ctiid.333819",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.333819",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.692069",
"source": "[email protected]"
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-ssrf-1/report.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-ssrf-1/report.md#proof-of-concept",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"vulnerable": true,
"criteria": "cpe:2.3:a:orionsec:orion-ops:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2025-08-01",
"matchCriteriaId": "2ADBBFE9-A763-4A3E-AC7C-AE357B1D94AB"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-ssrf-1/report.md",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-ssrf-1/report.md#proof-of-concept",
"source": "[email protected]",
"tags": [
"Exploit"
]
},
{
"url": "https://vuldb.com/?ctiid.333819",
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.333819",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.692069",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-ssrf-1/report.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-ssrf-1/report.md#proof-of-concept",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit"
]
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13810.json
+77 -20
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13810",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T07:16:00.690",
"lastModified": "2025-12-01T15:39:33.110",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T20:09:16.240",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
],
"cvssMetricV2": [
@@ -116,26 +136,63 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/WebStack-Guns-PathTraversal-1/report.md",
"source": "[email protected]"
},
"nodes": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/WebStack-Guns-PathTraversal-1/report.md#proof-of-concept",
"source": "[email protected]"
},
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"url": "https://vuldb.com/?ctiid.333820",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.333820",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.692080",
"source": "[email protected]"
"vulnerable": true,
"criteria": "cpe:2.3:a:jsnjfz:webstack-guns:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B5343FB1-B8E7-4BE6-8E0A-28682D45F00B"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/WebStack-Guns-PathTraversal-1/report.md",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/WebStack-Guns-PathTraversal-1/report.md#proof-of-concept",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.333820",
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.333820",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.692080",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13811.json
+75 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13811",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T07:16:01.203",
"lastModified": "2025-12-01T15:39:33.110",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T20:03:32.363",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -118,28 +138,75 @@
"value": "CWE-89"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:jsnjfz:webstack-guns:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B5343FB1-B8E7-4BE6-8E0A-28682D45F00B"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/WebStack-Guns-SQLInjection-1/report.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/WebStack-Guns-SQLInjection-1/report.md#proof-of-concept",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.333821",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.333821",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.692084",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-140xx/CVE-2025-14013.json
+141
View File
@@ -0,0 +1,141 @@
{
"id": "CVE-2025-14013",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T19:16:02.643",
"lastModified": "2025-12-04T19:16:02.643",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of the file /index.php/admins/Comment/addcomment.html of the component Comment Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 2.4,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.9,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:M/C:N/I:P/A:N",
"baseScore": 3.3,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "MULTIPLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE"
},
"baseSeverity": "LOW",
"exploitabilityScore": 6.4,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
},
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://github.com/24-2021/vul2/blob/main/jizhicms%3DV2.5.5-Commentaddcomment.html-bodyparameter-Storage%20XSS/jizhicms%3DV2.5.5-Commentaddcomment.html-bodyparameter-Storage%20XSS.md",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.334254",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.334254",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.694649",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-140xx/CVE-2025-14015.json
+141
View File
@@ -0,0 +1,141 @@
{
"id": "CVE-2025-14015",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T19:16:03.130",
"lastModified": "2025-12-04T19:16:03.130",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"baseScore": 9.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 8.0,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-119"
},
{
"lang": "en",
"value": "CWE-120"
}
]
}
],
"references": [
{
"url": "https://github.com/HungryGoogle/log_attack/blob/main/index2/2.md",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.334256",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.334256",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.694755",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-140xx/CVE-2025-14016.json
+141
View File
@@ -0,0 +1,141 @@
{
"id": "CVE-2025-14016",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T19:16:03.530",
"lastModified": "2025-12-04T19:16:03.530",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in macrozheng mall-swarm up to 1.0.3. Affected is the function delete of the file /member/readHistory/delete. Such manipulation of the argument ids leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:P",
"baseScore": 5.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 4.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-266"
},
{
"lang": "en",
"value": "CWE-285"
}
]
}
],
"references": [
{
"url": "https://github.com/Hwwg/cve/issues/17",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.334257",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.334257",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.694797",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-292xx/CVE-2025-29268.json
+29
View File
@@ -0,0 +1,29 @@
{
"id": "CVE-2025-29268",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T20:16:17.683",
"lastModified": "2025-12-04T20:16:17.683",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library."
}
],
"metrics": {},
"references": [
{
"url": "http://all-rut22gw.com",
"source": "[email protected]"
},
{
"url": "http://allnet.com",
"source": "[email protected]"
},
{
"url": "https://blog.byteray.co.uk/critical-vulnerabilities-in-rut22gw-industrial-lte-cellular-routers-f4eb8768feb7?gi=f74ff4eb9f22",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-292xx/CVE-2025-29269.json
+29
View File
@@ -0,0 +1,29 @@
{
"id": "CVE-2025-29269",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T20:16:17.930",
"lastModified": "2025-12-04T20:16:17.930",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint."
}
],
"metrics": {},
"references": [
{
"url": "http://all-rut22gw.com",
"source": "[email protected]"
},
{
"url": "http://allnet.com",
"source": "[email protected]"
},
{
"url": "https://blog.byteray.co.uk/critical-vulnerabilities-in-rut22gw-industrial-lte-cellular-routers-f4eb8768feb7?gi=f74ff4eb9f22",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-329xx/CVE-2025-32916.json
+519 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-32916",
"sourceIdentifier": "[email protected]",
"published": "2025-10-09T15:16:05.503",
"lastModified": "2025-10-09T15:50:04.013",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-04T20:44:21.820",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
@@ -69,10 +91,502 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://checkmk.com/werk/17105",
"source": "[email protected]"
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.1.0",
"versionEndExcluding": "2.2.0",
"matchCriteriaId": "4491352C-E13B-45DF-AC48-50B27AE037BD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:-:*:*:*:*:*:*",
"matchCriteriaId": "C66704F1-0B5E-4B43-8748-987022F378F8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p1:*:*:*:*:*:*",
"matchCriteriaId": "3FB7221E-BE9F-4529-8E07-8AD547FA3208"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p10:*:*:*:*:*:*",
"matchCriteriaId": "30A074AD-9499-46E3-AB67-D6CEE3AA01C3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p11:*:*:*:*:*:*",
"matchCriteriaId": "A8BD0240-A22B-4273-BD47-C35A8C12E127"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p12:*:*:*:*:*:*",
"matchCriteriaId": "DAA5680F-1DD0-48AA-BB7F-15B27365F0FA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p13:*:*:*:*:*:*",
"matchCriteriaId": "BC2F31CA-D4EB-44E6-9A09-5255D33F4A88"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p14:*:*:*:*:*:*",
"matchCriteriaId": "CD80BD69-20C6-4E17-B165-98689179A5A1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p16:*:*:*:*:*:*",
"matchCriteriaId": "7DE79896-EBE5-42F2-A126-2A871BBA1071"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p17:*:*:*:*:*:*",
"matchCriteriaId": "51A44E69-EEA1-4B01-B7B3-5BF7B39819E3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p18:*:*:*:*:*:*",
"matchCriteriaId": "BCB65AEB-CF52-410B-92B1-2DCFB914FFA4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p19:*:*:*:*:*:*",
"matchCriteriaId": "B7E17FA6-9011-489C-9FA9-368CA2D86FAE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p21:*:*:*:*:*:*",
"matchCriteriaId": "8735357F-16A7-4408-9DDD-1C6796BADBE9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p22:*:*:*:*:*:*",
"matchCriteriaId": "4505098C-0A2B-481E-A3DF-D6DF8EFA4DE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p23:*:*:*:*:*:*",
"matchCriteriaId": "C12AFCCF-014E-4EEB-8F04-F1ACE182BA98"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p24:*:*:*:*:*:*",
"matchCriteriaId": "66B85557-D5EC-4AF4-B97A-D2B80A58B3B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p25:*:*:*:*:*:*",
"matchCriteriaId": "233ECD21-FA72-43AF-8E4C-DAC27CC18F3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p26:*:*:*:*:*:*",
"matchCriteriaId": "8B4DB8EE-C10A-4097-8E66-2932BAEB732E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p27:*:*:*:*:*:*",
"matchCriteriaId": "8653402A-C5AA-4CB1-8742-A12CCBE59373"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p28:*:*:*:*:*:*",
"matchCriteriaId": "77047A82-E6D5-4E84-9BEC-ACD2FDA91FAE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p29:*:*:*:*:*:*",
"matchCriteriaId": "2E44AE62-1746-410F-A28E-F8292E1F8D68"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p3:*:*:*:*:*:*",
"matchCriteriaId": "E2342E2D-58B0-43E7-8C01-DF4678520F39"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p30:*:*:*:*:*:*",
"matchCriteriaId": "B6C1AC39-5AE0-4FC8-93FF-966400B074F0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p31:*:*:*:*:*:*",
"matchCriteriaId": "68455233-52CD-44B8-8B02-D94BA84DA6A8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p32:*:*:*:*:*:*",
"matchCriteriaId": "1C95A313-7665-4877-B421-0D20E3D3D54D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p33:*:*:*:*:*:*",
"matchCriteriaId": "0AEF278D-D782-4A2B-B1B8-19A21D151AA2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p34:*:*:*:*:*:*",
"matchCriteriaId": "B027FE8B-1802-4449-A0CB-6D15F9634559"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p35:*:*:*:*:*:*",
"matchCriteriaId": "9B2BC55F-17AE-4BC4-824D-06BE9B15516C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p36:*:*:*:*:*:*",
"matchCriteriaId": "1393F094-2D75-44CC-8783-4FDC7450D38E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p37:*:*:*:*:*:*",
"matchCriteriaId": "C1294EAE-5CB5-422F-B4C6-3A81B06DE49A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p38:*:*:*:*:*:*",
"matchCriteriaId": "2A347A18-7C59-40F5-8CBA-9F9A18B1E105"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p39:*:*:*:*:*:*",
"matchCriteriaId": "442780BC-F984-47A3-9F5F-9A5049531C34"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p4:*:*:*:*:*:*",
"matchCriteriaId": "1871B646-CA69-477F-B113-B901AC7B3934"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p40:*:*:*:*:*:*",
"matchCriteriaId": "768541E6-C94D-4B32-9144-18D81A1AE047"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p41:*:*:*:*:*:*",
"matchCriteriaId": "00793C7E-5C20-4696-B829-804CFA8690B5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p42:*:*:*:*:*:*",
"matchCriteriaId": "C03BBDDF-F96F-4A36-A7F5-7102A31EC606"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p43:*:*:*:*:*:*",
"matchCriteriaId": "92088ED6-F6A8-400A-B015-4F4E02D55ABC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p44:*:*:*:*:*:*",
"matchCriteriaId": "AE5F4DD6-9473-4581-BD0E-1D916A7FEF85"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p45:*:*:*:*:*:*",
"matchCriteriaId": "6541E323-356B-4B9F-B646-950400122EB3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p5:*:*:*:*:*:*",
"matchCriteriaId": "EEC65A72-CAE1-4E28-83EF-7ECAFE921BB6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p6:*:*:*:*:*:*",
"matchCriteriaId": "D8FDECBC-8213-495F-A932-C4310F7C1F87"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p7:*:*:*:*:*:*",
"matchCriteriaId": "CB49BC95-6AA8-4F53-A3D6-E199BF756AAF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p8:*:*:*:*:*:*",
"matchCriteriaId": "050B6617-8FD4-47A6-BE4A-A52503A65812"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p9:*:*:*:*:*:*",
"matchCriteriaId": "4CA0FEC5-7036-47AF-A341-873B6C324B58"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:-:*:*:*:*:*:*",
"matchCriteriaId": "83202950-840A-4CB7-AD96-CE62E84FABD8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p1:*:*:*:*:*:*",
"matchCriteriaId": "310A2FA2-633A-48FB-A5C2-9A9A922E72E2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p10:*:*:*:*:*:*",
"matchCriteriaId": "3C0F1DC8-D9DF-4A7A-80DC-618FAB091375"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p11:*:*:*:*:*:*",
"matchCriteriaId": "9B0A1E3E-1B5A-4346-95BC-DE6FF6EE14CA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p12:*:*:*:*:*:*",
"matchCriteriaId": "EB52B2A7-BDC1-4A4F-ABAF-69C1BA8E83C2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p13:*:*:*:*:*:*",
"matchCriteriaId": "9F89225F-6969-4D89-B889-9CB09972825B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p14:*:*:*:*:*:*",
"matchCriteriaId": "2A1B23EA-4571-4E4E-80BC-FD76FFD83FFB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p15:*:*:*:*:*:*",
"matchCriteriaId": "625A6998-5DAE-4538-9760-20523CCE501F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p16:*:*:*:*:*:*",
"matchCriteriaId": "6EFD4461-2C37-418F-90AD-3A956B2D91C7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p17:*:*:*:*:*:*",
"matchCriteriaId": "88523633-844C-41FE-ADF1-74D6AA2BCE6C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p18:*:*:*:*:*:*",
"matchCriteriaId": "5DA03E01-06D1-4E18-9C7B-CB6E49E5954B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p19:*:*:*:*:*:*",
"matchCriteriaId": "91F171B6-7F9A-4B9B-B53D-277FE74124F9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p2:*:*:*:*:*:*",
"matchCriteriaId": "7D1993E3-C4F9-4D78-BD02-A0B22D93BF1F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p20:*:*:*:*:*:*",
"matchCriteriaId": "34FF7D09-2129-4266-BF71-5424DC9E18B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p21:*:*:*:*:*:*",
"matchCriteriaId": "246F0BA5-F927-4204-97F3-51870072599F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p22:*:*:*:*:*:*",
"matchCriteriaId": "86ED47B6-58FB-4BAC-9C87-F7BC08AB3870"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p23:*:*:*:*:*:*",
"matchCriteriaId": "2CFF173A-373B-4948-BD22-86C031B58E6B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p24:*:*:*:*:*:*",
"matchCriteriaId": "90648825-55F7-472A-944E-7E5C787FAFB4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p25:*:*:*:*:*:*",
"matchCriteriaId": "6EE2BA6D-737A-4EEB-B8A2-91E9C61B70C1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p26:*:*:*:*:*:*",
"matchCriteriaId": "94FA8F05-267D-4B24-9AA3-A77FAD259310"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p27:*:*:*:*:*:*",
"matchCriteriaId": "085B463B-633A-447A-B61C-99DD78B49A00"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p28:*:*:*:*:*:*",
"matchCriteriaId": "F5DB112B-EE65-4BAB-AED8-716E618FD89C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p29:*:*:*:*:*:*",
"matchCriteriaId": "CD9EDBC8-A6A7-4348-8446-1D1DDDACDC51"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p3:*:*:*:*:*:*",
"matchCriteriaId": "B28A0C9D-072A-413C-8587-CD57CB918190"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p30:*:*:*:*:*:*",
"matchCriteriaId": "CB0E10D1-2497-4CAE-ABA5-9F861C6A65DF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p31:*:*:*:*:*:*",
"matchCriteriaId": "9E64A46A-A1E2-4272-A7B8-36140AF2B889"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p32:*:*:*:*:*:*",
"matchCriteriaId": "28568D2A-CA5B-42C2-8A32-FF783CB7A06F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p33:*:*:*:*:*:*",
"matchCriteriaId": "F82F8827-B7B2-4C10-A42A-77781BC7B24B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p34:*:*:*:*:*:*",
"matchCriteriaId": "F641BB83-8A0D-42D0-AB3E-7314918FDC9F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p35:*:*:*:*:*:*",
"matchCriteriaId": "FCCE61D4-00B1-4D83-8FAE-8F2FA8F48E2F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p36:*:*:*:*:*:*",
"matchCriteriaId": "FDB9628A-5A72-4DD5-9D4A-CBE13B0CFDF4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p37:*:*:*:*:*:*",
"matchCriteriaId": "E34FEBB1-0935-4363-B4FE-45901BFC9A5D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p4:*:*:*:*:*:*",
"matchCriteriaId": "DF22D0A7-82B1-4598-B8C5-BDFE523D07F2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p5:*:*:*:*:*:*",
"matchCriteriaId": "20035AFB-75B4-4164-9833-A2FCAE24B577"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p6:*:*:*:*:*:*",
"matchCriteriaId": "8BCBACEB-7130-455D-B4BE-243053C116DC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p7:*:*:*:*:*:*",
"matchCriteriaId": "156384E2-E04B-4153-A91F-3F307C9FEAE8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p8:*:*:*:*:*:*",
"matchCriteriaId": "EEC0ED95-F43B-46D7-9AA0-A0FB1C32EF1D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p9:*:*:*:*:*:*",
"matchCriteriaId": "91C194C1-5292-4E2A-BB71-9C5CD3CE6194"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:-:*:*:*:*:*:*",
"matchCriteriaId": "022C075A-4B04-4141-A7D7-F93C9A7CE0FD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p1:*:*:*:*:*:*",
"matchCriteriaId": "1CFE68AB-1F57-497C-9229-29ED3A73D87F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p10:*:*:*:*:*:*",
"matchCriteriaId": "577F9F72-2FDA-4F87-A840-05158F2368B8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p11:*:*:*:*:*:*",
"matchCriteriaId": "6F3AD894-660B-41FC-B910-899A764A00B6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p12:*:*:*:*:*:*",
"matchCriteriaId": "21853BB4-1BB5-40E3-82E2-253899D898ED"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p2:*:*:*:*:*:*",
"matchCriteriaId": "B11306B4-1092-470C-BA87-DBD02A18A74B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p3:*:*:*:*:*:*",
"matchCriteriaId": "74F78C48-030A-48A1-B69E-04C4EA5CCC12"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p4:*:*:*:*:*:*",
"matchCriteriaId": "8701A914-774B-4E3B-A651-4A9FD19A187A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p5:*:*:*:*:*:*",
"matchCriteriaId": "19E40054-C44D-4C4C-B077-0333D8201E5B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p6:*:*:*:*:*:*",
"matchCriteriaId": "0E2D2F49-32B2-42AA-B99E-7C39403CF104"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p7:*:*:*:*:*:*",
"matchCriteriaId": "ACE440F8-EBF5-4DBB-A215-57D770C66219"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p8:*:*:*:*:*:*",
"matchCriteriaId": "1A94395D-DDCE-4977-89CA-46F71C3CA2B8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p9:*:*:*:*:*:*",
"matchCriteriaId": "9513876C-8DF0-4A59-864F-8401BAA43376"
}
]
}
]
}
],
"references": [
{
"url": "https://checkmk.com/werk/17105",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-329xx/CVE-2025-32919.json
+532 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-32919",
"sourceIdentifier": "[email protected]",
"published": "2025-10-09T15:16:06.057",
"lastModified": "2025-11-03T18:15:54.513",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-04T20:39:36.420",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,18 +91,519 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://checkmk.com/werk/18207",
"source": "[email protected]"
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.1.0",
"versionEndExcluding": "2.2.0",
"matchCriteriaId": "4491352C-E13B-45DF-AC48-50B27AE037BD"
},
{
"url": "https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20250724-01_Checkmk_Agent_Privilege_Escalation_via_Insecure_Temporary_Files",
"source": "[email protected]"
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:-:*:*:*:*:*:*",
"matchCriteriaId": "C66704F1-0B5E-4B43-8748-987022F378F8"
},
{
"url": "http://seclists.org/fulldisclosure/2025/Oct/6",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p1:*:*:*:*:*:*",
"matchCriteriaId": "3FB7221E-BE9F-4529-8E07-8AD547FA3208"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p10:*:*:*:*:*:*",
"matchCriteriaId": "30A074AD-9499-46E3-AB67-D6CEE3AA01C3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p11:*:*:*:*:*:*",
"matchCriteriaId": "A8BD0240-A22B-4273-BD47-C35A8C12E127"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p12:*:*:*:*:*:*",
"matchCriteriaId": "DAA5680F-1DD0-48AA-BB7F-15B27365F0FA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p13:*:*:*:*:*:*",
"matchCriteriaId": "BC2F31CA-D4EB-44E6-9A09-5255D33F4A88"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p14:*:*:*:*:*:*",
"matchCriteriaId": "CD80BD69-20C6-4E17-B165-98689179A5A1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p16:*:*:*:*:*:*",
"matchCriteriaId": "7DE79896-EBE5-42F2-A126-2A871BBA1071"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p17:*:*:*:*:*:*",
"matchCriteriaId": "51A44E69-EEA1-4B01-B7B3-5BF7B39819E3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p18:*:*:*:*:*:*",
"matchCriteriaId": "BCB65AEB-CF52-410B-92B1-2DCFB914FFA4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p19:*:*:*:*:*:*",
"matchCriteriaId": "B7E17FA6-9011-489C-9FA9-368CA2D86FAE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p21:*:*:*:*:*:*",
"matchCriteriaId": "8735357F-16A7-4408-9DDD-1C6796BADBE9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p22:*:*:*:*:*:*",
"matchCriteriaId": "4505098C-0A2B-481E-A3DF-D6DF8EFA4DE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p23:*:*:*:*:*:*",
"matchCriteriaId": "C12AFCCF-014E-4EEB-8F04-F1ACE182BA98"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p24:*:*:*:*:*:*",
"matchCriteriaId": "66B85557-D5EC-4AF4-B97A-D2B80A58B3B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p25:*:*:*:*:*:*",
"matchCriteriaId": "233ECD21-FA72-43AF-8E4C-DAC27CC18F3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p26:*:*:*:*:*:*",
"matchCriteriaId": "8B4DB8EE-C10A-4097-8E66-2932BAEB732E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p27:*:*:*:*:*:*",
"matchCriteriaId": "8653402A-C5AA-4CB1-8742-A12CCBE59373"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p28:*:*:*:*:*:*",
"matchCriteriaId": "77047A82-E6D5-4E84-9BEC-ACD2FDA91FAE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p29:*:*:*:*:*:*",
"matchCriteriaId": "2E44AE62-1746-410F-A28E-F8292E1F8D68"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p3:*:*:*:*:*:*",
"matchCriteriaId": "E2342E2D-58B0-43E7-8C01-DF4678520F39"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p30:*:*:*:*:*:*",
"matchCriteriaId": "B6C1AC39-5AE0-4FC8-93FF-966400B074F0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p31:*:*:*:*:*:*",
"matchCriteriaId": "68455233-52CD-44B8-8B02-D94BA84DA6A8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p32:*:*:*:*:*:*",
"matchCriteriaId": "1C95A313-7665-4877-B421-0D20E3D3D54D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p33:*:*:*:*:*:*",
"matchCriteriaId": "0AEF278D-D782-4A2B-B1B8-19A21D151AA2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p34:*:*:*:*:*:*",
"matchCriteriaId": "B027FE8B-1802-4449-A0CB-6D15F9634559"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p35:*:*:*:*:*:*",
"matchCriteriaId": "9B2BC55F-17AE-4BC4-824D-06BE9B15516C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p36:*:*:*:*:*:*",
"matchCriteriaId": "1393F094-2D75-44CC-8783-4FDC7450D38E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p37:*:*:*:*:*:*",
"matchCriteriaId": "C1294EAE-5CB5-422F-B4C6-3A81B06DE49A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p38:*:*:*:*:*:*",
"matchCriteriaId": "2A347A18-7C59-40F5-8CBA-9F9A18B1E105"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p39:*:*:*:*:*:*",
"matchCriteriaId": "442780BC-F984-47A3-9F5F-9A5049531C34"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p4:*:*:*:*:*:*",
"matchCriteriaId": "1871B646-CA69-477F-B113-B901AC7B3934"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p40:*:*:*:*:*:*",
"matchCriteriaId": "768541E6-C94D-4B32-9144-18D81A1AE047"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p41:*:*:*:*:*:*",
"matchCriteriaId": "00793C7E-5C20-4696-B829-804CFA8690B5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p42:*:*:*:*:*:*",
"matchCriteriaId": "C03BBDDF-F96F-4A36-A7F5-7102A31EC606"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p43:*:*:*:*:*:*",
"matchCriteriaId": "92088ED6-F6A8-400A-B015-4F4E02D55ABC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p44:*:*:*:*:*:*",
"matchCriteriaId": "AE5F4DD6-9473-4581-BD0E-1D916A7FEF85"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p45:*:*:*:*:*:*",
"matchCriteriaId": "6541E323-356B-4B9F-B646-950400122EB3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p5:*:*:*:*:*:*",
"matchCriteriaId": "EEC65A72-CAE1-4E28-83EF-7ECAFE921BB6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p6:*:*:*:*:*:*",
"matchCriteriaId": "D8FDECBC-8213-495F-A932-C4310F7C1F87"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p7:*:*:*:*:*:*",
"matchCriteriaId": "CB49BC95-6AA8-4F53-A3D6-E199BF756AAF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p8:*:*:*:*:*:*",
"matchCriteriaId": "050B6617-8FD4-47A6-BE4A-A52503A65812"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p9:*:*:*:*:*:*",
"matchCriteriaId": "4CA0FEC5-7036-47AF-A341-873B6C324B58"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:-:*:*:*:*:*:*",
"matchCriteriaId": "83202950-840A-4CB7-AD96-CE62E84FABD8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p1:*:*:*:*:*:*",
"matchCriteriaId": "310A2FA2-633A-48FB-A5C2-9A9A922E72E2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p10:*:*:*:*:*:*",
"matchCriteriaId": "3C0F1DC8-D9DF-4A7A-80DC-618FAB091375"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p11:*:*:*:*:*:*",
"matchCriteriaId": "9B0A1E3E-1B5A-4346-95BC-DE6FF6EE14CA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p12:*:*:*:*:*:*",
"matchCriteriaId": "EB52B2A7-BDC1-4A4F-ABAF-69C1BA8E83C2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p13:*:*:*:*:*:*",
"matchCriteriaId": "9F89225F-6969-4D89-B889-9CB09972825B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p14:*:*:*:*:*:*",
"matchCriteriaId": "2A1B23EA-4571-4E4E-80BC-FD76FFD83FFB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p15:*:*:*:*:*:*",
"matchCriteriaId": "625A6998-5DAE-4538-9760-20523CCE501F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p16:*:*:*:*:*:*",
"matchCriteriaId": "6EFD4461-2C37-418F-90AD-3A956B2D91C7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p17:*:*:*:*:*:*",
"matchCriteriaId": "88523633-844C-41FE-ADF1-74D6AA2BCE6C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p18:*:*:*:*:*:*",
"matchCriteriaId": "5DA03E01-06D1-4E18-9C7B-CB6E49E5954B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p19:*:*:*:*:*:*",
"matchCriteriaId": "91F171B6-7F9A-4B9B-B53D-277FE74124F9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p2:*:*:*:*:*:*",
"matchCriteriaId": "7D1993E3-C4F9-4D78-BD02-A0B22D93BF1F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p20:*:*:*:*:*:*",
"matchCriteriaId": "34FF7D09-2129-4266-BF71-5424DC9E18B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p21:*:*:*:*:*:*",
"matchCriteriaId": "246F0BA5-F927-4204-97F3-51870072599F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p22:*:*:*:*:*:*",
"matchCriteriaId": "86ED47B6-58FB-4BAC-9C87-F7BC08AB3870"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p23:*:*:*:*:*:*",
"matchCriteriaId": "2CFF173A-373B-4948-BD22-86C031B58E6B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p24:*:*:*:*:*:*",
"matchCriteriaId": "90648825-55F7-472A-944E-7E5C787FAFB4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p25:*:*:*:*:*:*",
"matchCriteriaId": "6EE2BA6D-737A-4EEB-B8A2-91E9C61B70C1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p26:*:*:*:*:*:*",
"matchCriteriaId": "94FA8F05-267D-4B24-9AA3-A77FAD259310"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p27:*:*:*:*:*:*",
"matchCriteriaId": "085B463B-633A-447A-B61C-99DD78B49A00"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p28:*:*:*:*:*:*",
"matchCriteriaId": "F5DB112B-EE65-4BAB-AED8-716E618FD89C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p29:*:*:*:*:*:*",
"matchCriteriaId": "CD9EDBC8-A6A7-4348-8446-1D1DDDACDC51"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p3:*:*:*:*:*:*",
"matchCriteriaId": "B28A0C9D-072A-413C-8587-CD57CB918190"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p30:*:*:*:*:*:*",
"matchCriteriaId": "CB0E10D1-2497-4CAE-ABA5-9F861C6A65DF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p31:*:*:*:*:*:*",
"matchCriteriaId": "9E64A46A-A1E2-4272-A7B8-36140AF2B889"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p32:*:*:*:*:*:*",
"matchCriteriaId": "28568D2A-CA5B-42C2-8A32-FF783CB7A06F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p33:*:*:*:*:*:*",
"matchCriteriaId": "F82F8827-B7B2-4C10-A42A-77781BC7B24B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p34:*:*:*:*:*:*",
"matchCriteriaId": "F641BB83-8A0D-42D0-AB3E-7314918FDC9F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p35:*:*:*:*:*:*",
"matchCriteriaId": "FCCE61D4-00B1-4D83-8FAE-8F2FA8F48E2F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p36:*:*:*:*:*:*",
"matchCriteriaId": "FDB9628A-5A72-4DD5-9D4A-CBE13B0CFDF4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p37:*:*:*:*:*:*",
"matchCriteriaId": "E34FEBB1-0935-4363-B4FE-45901BFC9A5D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p4:*:*:*:*:*:*",
"matchCriteriaId": "DF22D0A7-82B1-4598-B8C5-BDFE523D07F2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p5:*:*:*:*:*:*",
"matchCriteriaId": "20035AFB-75B4-4164-9833-A2FCAE24B577"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p6:*:*:*:*:*:*",
"matchCriteriaId": "8BCBACEB-7130-455D-B4BE-243053C116DC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p7:*:*:*:*:*:*",
"matchCriteriaId": "156384E2-E04B-4153-A91F-3F307C9FEAE8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p8:*:*:*:*:*:*",
"matchCriteriaId": "EEC0ED95-F43B-46D7-9AA0-A0FB1C32EF1D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p9:*:*:*:*:*:*",
"matchCriteriaId": "91C194C1-5292-4E2A-BB71-9C5CD3CE6194"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:-:*:*:*:*:*:*",
"matchCriteriaId": "022C075A-4B04-4141-A7D7-F93C9A7CE0FD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p1:*:*:*:*:*:*",
"matchCriteriaId": "1CFE68AB-1F57-497C-9229-29ED3A73D87F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p10:*:*:*:*:*:*",
"matchCriteriaId": "577F9F72-2FDA-4F87-A840-05158F2368B8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p11:*:*:*:*:*:*",
"matchCriteriaId": "6F3AD894-660B-41FC-B910-899A764A00B6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p12:*:*:*:*:*:*",
"matchCriteriaId": "21853BB4-1BB5-40E3-82E2-253899D898ED"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p2:*:*:*:*:*:*",
"matchCriteriaId": "B11306B4-1092-470C-BA87-DBD02A18A74B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p3:*:*:*:*:*:*",
"matchCriteriaId": "74F78C48-030A-48A1-B69E-04C4EA5CCC12"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p4:*:*:*:*:*:*",
"matchCriteriaId": "8701A914-774B-4E3B-A651-4A9FD19A187A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p5:*:*:*:*:*:*",
"matchCriteriaId": "19E40054-C44D-4C4C-B077-0333D8201E5B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p6:*:*:*:*:*:*",
"matchCriteriaId": "0E2D2F49-32B2-42AA-B99E-7C39403CF104"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p7:*:*:*:*:*:*",
"matchCriteriaId": "ACE440F8-EBF5-4DBB-A215-57D770C66219"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p8:*:*:*:*:*:*",
"matchCriteriaId": "1A94395D-DDCE-4977-89CA-46F71C3CA2B8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p9:*:*:*:*:*:*",
"matchCriteriaId": "9513876C-8DF0-4A59-864F-8401BAA43376"
}
]
}
]
}
],
"references": [
{
"url": "https://checkmk.com/werk/18207",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20250724-01_Checkmk_Agent_Privilege_Escalation_via_Insecure_Temporary_Files",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "http://seclists.org/fulldisclosure/2025/Oct/6",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-396xx/CVE-2025-39664.json
+527 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-39664",
"sourceIdentifier": "[email protected]",
"published": "2025-10-09T15:16:06.363",
"lastModified": "2025-11-03T18:16:38.477",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-04T20:37:25.413",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
@@ -69,18 +91,514 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://checkmk.com/werk/17984",
"source": "[email protected]"
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.1.0",
"versionEndExcluding": "2.2.0",
"matchCriteriaId": "4491352C-E13B-45DF-AC48-50B27AE037BD"
},
{
"url": "https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20250730-01_Checkmk_Path_Traversal",
"source": "[email protected]"
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p1:*:*:*:*:*:*",
"matchCriteriaId": "3FB7221E-BE9F-4529-8E07-8AD547FA3208"
},
{
"url": "http://seclists.org/fulldisclosure/2025/Oct/7",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p10:*:*:*:*:*:*",
"matchCriteriaId": "30A074AD-9499-46E3-AB67-D6CEE3AA01C3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p11:*:*:*:*:*:*",
"matchCriteriaId": "A8BD0240-A22B-4273-BD47-C35A8C12E127"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p12:*:*:*:*:*:*",
"matchCriteriaId": "DAA5680F-1DD0-48AA-BB7F-15B27365F0FA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p13:*:*:*:*:*:*",
"matchCriteriaId": "BC2F31CA-D4EB-44E6-9A09-5255D33F4A88"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p14:*:*:*:*:*:*",
"matchCriteriaId": "CD80BD69-20C6-4E17-B165-98689179A5A1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p16:*:*:*:*:*:*",
"matchCriteriaId": "7DE79896-EBE5-42F2-A126-2A871BBA1071"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p17:*:*:*:*:*:*",
"matchCriteriaId": "51A44E69-EEA1-4B01-B7B3-5BF7B39819E3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p18:*:*:*:*:*:*",
"matchCriteriaId": "BCB65AEB-CF52-410B-92B1-2DCFB914FFA4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p19:*:*:*:*:*:*",
"matchCriteriaId": "B7E17FA6-9011-489C-9FA9-368CA2D86FAE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p21:*:*:*:*:*:*",
"matchCriteriaId": "8735357F-16A7-4408-9DDD-1C6796BADBE9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p22:*:*:*:*:*:*",
"matchCriteriaId": "4505098C-0A2B-481E-A3DF-D6DF8EFA4DE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p23:*:*:*:*:*:*",
"matchCriteriaId": "C12AFCCF-014E-4EEB-8F04-F1ACE182BA98"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p24:*:*:*:*:*:*",
"matchCriteriaId": "66B85557-D5EC-4AF4-B97A-D2B80A58B3B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p25:*:*:*:*:*:*",
"matchCriteriaId": "233ECD21-FA72-43AF-8E4C-DAC27CC18F3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p26:*:*:*:*:*:*",
"matchCriteriaId": "8B4DB8EE-C10A-4097-8E66-2932BAEB732E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p27:*:*:*:*:*:*",
"matchCriteriaId": "8653402A-C5AA-4CB1-8742-A12CCBE59373"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p28:*:*:*:*:*:*",
"matchCriteriaId": "77047A82-E6D5-4E84-9BEC-ACD2FDA91FAE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p29:*:*:*:*:*:*",
"matchCriteriaId": "2E44AE62-1746-410F-A28E-F8292E1F8D68"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p3:*:*:*:*:*:*",
"matchCriteriaId": "E2342E2D-58B0-43E7-8C01-DF4678520F39"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p30:*:*:*:*:*:*",
"matchCriteriaId": "B6C1AC39-5AE0-4FC8-93FF-966400B074F0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p31:*:*:*:*:*:*",
"matchCriteriaId": "68455233-52CD-44B8-8B02-D94BA84DA6A8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p32:*:*:*:*:*:*",
"matchCriteriaId": "1C95A313-7665-4877-B421-0D20E3D3D54D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p33:*:*:*:*:*:*",
"matchCriteriaId": "0AEF278D-D782-4A2B-B1B8-19A21D151AA2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p34:*:*:*:*:*:*",
"matchCriteriaId": "B027FE8B-1802-4449-A0CB-6D15F9634559"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p35:*:*:*:*:*:*",
"matchCriteriaId": "9B2BC55F-17AE-4BC4-824D-06BE9B15516C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p36:*:*:*:*:*:*",
"matchCriteriaId": "1393F094-2D75-44CC-8783-4FDC7450D38E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p37:*:*:*:*:*:*",
"matchCriteriaId": "C1294EAE-5CB5-422F-B4C6-3A81B06DE49A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p38:*:*:*:*:*:*",
"matchCriteriaId": "2A347A18-7C59-40F5-8CBA-9F9A18B1E105"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p39:*:*:*:*:*:*",
"matchCriteriaId": "442780BC-F984-47A3-9F5F-9A5049531C34"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p4:*:*:*:*:*:*",
"matchCriteriaId": "1871B646-CA69-477F-B113-B901AC7B3934"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p40:*:*:*:*:*:*",
"matchCriteriaId": "768541E6-C94D-4B32-9144-18D81A1AE047"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p41:*:*:*:*:*:*",
"matchCriteriaId": "00793C7E-5C20-4696-B829-804CFA8690B5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p42:*:*:*:*:*:*",
"matchCriteriaId": "C03BBDDF-F96F-4A36-A7F5-7102A31EC606"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p43:*:*:*:*:*:*",
"matchCriteriaId": "92088ED6-F6A8-400A-B015-4F4E02D55ABC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p44:*:*:*:*:*:*",
"matchCriteriaId": "AE5F4DD6-9473-4581-BD0E-1D916A7FEF85"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p45:*:*:*:*:*:*",
"matchCriteriaId": "6541E323-356B-4B9F-B646-950400122EB3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p5:*:*:*:*:*:*",
"matchCriteriaId": "EEC65A72-CAE1-4E28-83EF-7ECAFE921BB6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p6:*:*:*:*:*:*",
"matchCriteriaId": "D8FDECBC-8213-495F-A932-C4310F7C1F87"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p7:*:*:*:*:*:*",
"matchCriteriaId": "CB49BC95-6AA8-4F53-A3D6-E199BF756AAF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p8:*:*:*:*:*:*",
"matchCriteriaId": "050B6617-8FD4-47A6-BE4A-A52503A65812"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.2.0:p9:*:*:*:*:*:*",
"matchCriteriaId": "4CA0FEC5-7036-47AF-A341-873B6C324B58"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:-:*:*:*:*:*:*",
"matchCriteriaId": "83202950-840A-4CB7-AD96-CE62E84FABD8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p1:*:*:*:*:*:*",
"matchCriteriaId": "310A2FA2-633A-48FB-A5C2-9A9A922E72E2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p10:*:*:*:*:*:*",
"matchCriteriaId": "3C0F1DC8-D9DF-4A7A-80DC-618FAB091375"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p11:*:*:*:*:*:*",
"matchCriteriaId": "9B0A1E3E-1B5A-4346-95BC-DE6FF6EE14CA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p12:*:*:*:*:*:*",
"matchCriteriaId": "EB52B2A7-BDC1-4A4F-ABAF-69C1BA8E83C2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p13:*:*:*:*:*:*",
"matchCriteriaId": "9F89225F-6969-4D89-B889-9CB09972825B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p14:*:*:*:*:*:*",
"matchCriteriaId": "2A1B23EA-4571-4E4E-80BC-FD76FFD83FFB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p15:*:*:*:*:*:*",
"matchCriteriaId": "625A6998-5DAE-4538-9760-20523CCE501F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p16:*:*:*:*:*:*",
"matchCriteriaId": "6EFD4461-2C37-418F-90AD-3A956B2D91C7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p17:*:*:*:*:*:*",
"matchCriteriaId": "88523633-844C-41FE-ADF1-74D6AA2BCE6C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p18:*:*:*:*:*:*",
"matchCriteriaId": "5DA03E01-06D1-4E18-9C7B-CB6E49E5954B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p19:*:*:*:*:*:*",
"matchCriteriaId": "91F171B6-7F9A-4B9B-B53D-277FE74124F9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p2:*:*:*:*:*:*",
"matchCriteriaId": "7D1993E3-C4F9-4D78-BD02-A0B22D93BF1F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p20:*:*:*:*:*:*",
"matchCriteriaId": "34FF7D09-2129-4266-BF71-5424DC9E18B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p21:*:*:*:*:*:*",
"matchCriteriaId": "246F0BA5-F927-4204-97F3-51870072599F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p22:*:*:*:*:*:*",
"matchCriteriaId": "86ED47B6-58FB-4BAC-9C87-F7BC08AB3870"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p23:*:*:*:*:*:*",
"matchCriteriaId": "2CFF173A-373B-4948-BD22-86C031B58E6B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p24:*:*:*:*:*:*",
"matchCriteriaId": "90648825-55F7-472A-944E-7E5C787FAFB4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p25:*:*:*:*:*:*",
"matchCriteriaId": "6EE2BA6D-737A-4EEB-B8A2-91E9C61B70C1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p26:*:*:*:*:*:*",
"matchCriteriaId": "94FA8F05-267D-4B24-9AA3-A77FAD259310"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p27:*:*:*:*:*:*",
"matchCriteriaId": "085B463B-633A-447A-B61C-99DD78B49A00"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p28:*:*:*:*:*:*",
"matchCriteriaId": "F5DB112B-EE65-4BAB-AED8-716E618FD89C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p29:*:*:*:*:*:*",
"matchCriteriaId": "CD9EDBC8-A6A7-4348-8446-1D1DDDACDC51"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p3:*:*:*:*:*:*",
"matchCriteriaId": "B28A0C9D-072A-413C-8587-CD57CB918190"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p30:*:*:*:*:*:*",
"matchCriteriaId": "CB0E10D1-2497-4CAE-ABA5-9F861C6A65DF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p31:*:*:*:*:*:*",
"matchCriteriaId": "9E64A46A-A1E2-4272-A7B8-36140AF2B889"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p32:*:*:*:*:*:*",
"matchCriteriaId": "28568D2A-CA5B-42C2-8A32-FF783CB7A06F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p33:*:*:*:*:*:*",
"matchCriteriaId": "F82F8827-B7B2-4C10-A42A-77781BC7B24B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p34:*:*:*:*:*:*",
"matchCriteriaId": "F641BB83-8A0D-42D0-AB3E-7314918FDC9F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p35:*:*:*:*:*:*",
"matchCriteriaId": "FCCE61D4-00B1-4D83-8FAE-8F2FA8F48E2F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p36:*:*:*:*:*:*",
"matchCriteriaId": "FDB9628A-5A72-4DD5-9D4A-CBE13B0CFDF4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p37:*:*:*:*:*:*",
"matchCriteriaId": "E34FEBB1-0935-4363-B4FE-45901BFC9A5D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p4:*:*:*:*:*:*",
"matchCriteriaId": "DF22D0A7-82B1-4598-B8C5-BDFE523D07F2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p5:*:*:*:*:*:*",
"matchCriteriaId": "20035AFB-75B4-4164-9833-A2FCAE24B577"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p6:*:*:*:*:*:*",
"matchCriteriaId": "8BCBACEB-7130-455D-B4BE-243053C116DC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p7:*:*:*:*:*:*",
"matchCriteriaId": "156384E2-E04B-4153-A91F-3F307C9FEAE8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p8:*:*:*:*:*:*",
"matchCriteriaId": "EEC0ED95-F43B-46D7-9AA0-A0FB1C32EF1D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.3.0:p9:*:*:*:*:*:*",
"matchCriteriaId": "91C194C1-5292-4E2A-BB71-9C5CD3CE6194"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:-:*:*:*:*:*:*",
"matchCriteriaId": "022C075A-4B04-4141-A7D7-F93C9A7CE0FD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p1:*:*:*:*:*:*",
"matchCriteriaId": "1CFE68AB-1F57-497C-9229-29ED3A73D87F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p10:*:*:*:*:*:*",
"matchCriteriaId": "577F9F72-2FDA-4F87-A840-05158F2368B8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p11:*:*:*:*:*:*",
"matchCriteriaId": "6F3AD894-660B-41FC-B910-899A764A00B6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p12:*:*:*:*:*:*",
"matchCriteriaId": "21853BB4-1BB5-40E3-82E2-253899D898ED"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p2:*:*:*:*:*:*",
"matchCriteriaId": "B11306B4-1092-470C-BA87-DBD02A18A74B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p3:*:*:*:*:*:*",
"matchCriteriaId": "74F78C48-030A-48A1-B69E-04C4EA5CCC12"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p4:*:*:*:*:*:*",
"matchCriteriaId": "8701A914-774B-4E3B-A651-4A9FD19A187A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p5:*:*:*:*:*:*",
"matchCriteriaId": "19E40054-C44D-4C4C-B077-0333D8201E5B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p6:*:*:*:*:*:*",
"matchCriteriaId": "0E2D2F49-32B2-42AA-B99E-7C39403CF104"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p7:*:*:*:*:*:*",
"matchCriteriaId": "ACE440F8-EBF5-4DBB-A215-57D770C66219"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p8:*:*:*:*:*:*",
"matchCriteriaId": "1A94395D-DDCE-4977-89CA-46F71C3CA2B8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:checkmk:checkmk:2.4.0:p9:*:*:*:*:*:*",
"matchCriteriaId": "9513876C-8DF0-4A59-864F-8401BAA43376"
}
]
}
]
}
],
"references": [
{
"url": "https://checkmk.com/werk/17984",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20250730-01_Checkmk_Path_Traversal",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "http://seclists.org/fulldisclosure/2025/Oct/7",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-461xx/CVE-2025-46174.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-46174",
"sourceIdentifier": "[email protected]",
"published": "2025-11-26T16:15:47.813",
"lastModified": "2025-12-03T19:51:49.723",
"vulnStatus": "Analyzed",
"lastModified": "2025-12-04T19:16:03.973",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-862"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"configurations": [
CVE-2025/CVE-2025-503xx/CVE-2025-50399.json
+41 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-50399",
"sourceIdentifier": "[email protected]",
"published": "2025-11-26T16:15:47.947",
"lastModified": "2025-12-01T15:39:53.100",
"lastModified": "2025-12-04T20:16:18.433",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,50 @@
"value": "FAST FAC1200R F400_FAC1200R_Q is vulnerable to Buffer Overflow in the function sub_80435780 via the parameter password."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-120"
}
]
}
],
"references": [
{
"url": "https://github.com/sezangel/IOT-vul/tree/main/FAST/FAC1200R/1",
"source": "[email protected]"
},
{
"url": "https://github.com/sezangel/IOT-vul/tree/main/FAST/FAC1200R/1",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-504xx/CVE-2025-50402.json
+41 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-50402",
"sourceIdentifier": "[email protected]",
"published": "2025-11-26T16:15:48.070",
"lastModified": "2025-12-01T15:39:53.100",
"lastModified": "2025-12-04T20:16:18.687",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,50 @@
"value": "FAST FAC1200R F400_FAC1200R_Q is vulnerable to Buffer Overflow in the function sub_80435780 via the parameter string fac_password."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-120"
}
]
}
],
"references": [
{
"url": "https://github.com/sezangel/IOT-vul/tree/main/FAST/FAC1200R/2",
"source": "[email protected]"
},
{
"url": "https://github.com/sezangel/IOT-vul/tree/main/FAST/FAC1200R/2",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-563xx/CVE-2025-56396.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-56396",
"sourceIdentifier": "[email protected]",
"published": "2025-11-26T16:15:48.183",
"lastModified": "2025-12-03T19:58:58.833",
"vulnStatus": "Analyzed",
"lastModified": "2025-12-04T20:16:19.103",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "NVD-CWE-noinfo"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"configurations": [
CVE-2025/CVE-2025-597xx/CVE-2025-59788.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-59788",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T19:16:04.380",
"lastModified": "2025-12-04T19:16:04.380",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in a reachable files_pdfviewer example directory in Nextcloud with versions before 22.2.10.33, 23.0.12.29, 24.0.12.28, 25.0.13.23, 26.0.13.20, 27.1.11.20, 28.0.14.11, 29.0.16.8, 30.0.17, 31.0.10, and 32.0.1 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted PDF file to viewer.html. This issue is related to CVE-2024-4367, but the root cause of this Nextcloud issue is that the product exposes executable example code on a same-origin basis."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-749"
}
]
}
],
"references": [
{
"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-24wp-p865-7j4r",
"source": "[email protected]"
},
{
"url": "https://nextcloud.com",
"source": "[email protected]"
},
{
"url": "https://www.redteam-pentesting.de/en/advisories/rt-sa-2025-003/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-625xx/CVE-2025-62509.json
+38 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-62509",
"sourceIdentifier": "[email protected]",
"published": "2025-10-20T18:15:40.050",
"lastModified": "2025-10-21T19:31:25.450",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-04T19:13:01.170",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,18 +51,45 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/error311/FileRise/commit/25ce6a76beb60950359c0304765ad91a8aff8ad8",
"source": "[email protected]"
},
"nodes": [
{
"url": "https://github.com/error311/FileRise/issues/53",
"source": "[email protected]"
},
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"url": "https://github.com/error311/FileRise/security/advisories/GHSA-6p87-q9rh-95wh",
"source": "[email protected]"
"vulnerable": true,
"criteria": "cpe:2.3:a:filerise:filerise:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.4.0",
"matchCriteriaId": "EED17D45-FE5D-43CE-ACC5-9DB2CD983F08"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/error311/FileRise/commit/25ce6a76beb60950359c0304765ad91a8aff8ad8",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/error311/FileRise/issues/53",
"source": "[email protected]",
"tags": [
"Issue Tracking"
]
},
{
"url": "https://github.com/error311/FileRise/security/advisories/GHSA-6p87-q9rh-95wh",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-625xx/CVE-2025-62510.json
+38 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-62510",
"sourceIdentifier": "[email protected]",
"published": "2025-10-20T18:15:40.207",
"lastModified": "2025-10-21T19:31:25.450",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-04T19:12:57.490",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,18 +51,45 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/error311/FileRise/commit/b6d86b78967baa2f5a1e191903fc4df13998d87f",
"source": "[email protected]"
},
"nodes": [
{
"url": "https://github.com/error311/FileRise/issues/55",
"source": "[email protected]"
},
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"url": "https://github.com/error311/FileRise/security/advisories/GHSA-jm96-2w52-5qjj",
"source": "[email protected]"
"vulnerable": true,
"criteria": "cpe:2.3:a:filerise:filerise:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.5.0",
"matchCriteriaId": "B088301A-54CD-46E2-89CA-83CCFB6640EA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/error311/FileRise/commit/b6d86b78967baa2f5a1e191903fc4df13998d87f",
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/error311/FileRise/issues/55",
"source": "[email protected]",
"tags": [
"Issue Tracking"
]
},
{
"url": "https://github.com/error311/FileRise/security/advisories/GHSA-jm96-2w52-5qjj",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-633xx/CVE-2025-63361.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-63361",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T19:16:04.757",
"lastModified": "2025-12-04T19:16:04.757",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to render the Administrator password in plaintext."
}
],
"metrics": {},
"references": [
{
"url": "https://drive.google.com/file/d/1AGv9KWMTB71NJfIOncuNO6FyK0UAqxmL/view?usp=sharing",
"source": "[email protected]"
},
{
"url": "https://otsecverse.github.io/OTSecVerse/posts/Post-1/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-633xx/CVE-2025-63362.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-63362",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T19:16:04.973",
"lastModified": "2025-12-04T19:16:04.973",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the Administrator password and username as blank values, allowing attackers to bypass authentication."
}
],
"metrics": {},
"references": [
{
"url": "https://drive.google.com/file/d/1AGv9KWMTB71NJfIOncuNO6FyK0UAqxmL/view?usp=sharing",
"source": "[email protected]"
},
{
"url": "https://otsecverse.github.io/OTSecVerse/posts/Post-2/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-634xx/CVE-2025-63499.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-63499",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T20:16:19.363",
"lastModified": "2025-12-04T20:16:19.363",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter."
}
],
"metrics": {},
"references": [
{
"url": "https://email.victim.com/SOGo/so/[email protected]/Mail/view?theme=%27%3CScRiPt%20%3Ealert%289998%29%3C%2FScRiPt%3E",
"source": "[email protected]"
},
{
"url": "https://github.com/poblaguev-tot/CVE-2025-63499",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-647xx/CVE-2025-64715.json
+85 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-64715",
"sourceIdentifier": "[email protected]",
"published": "2025-11-29T01:16:01.427",
"lastModified": "2025-12-01T15:39:33.110",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-04T20:38:45.300",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,28 +65,86 @@
"value": "CWE-284"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.16.17",
"matchCriteriaId": "4A7D5E2F-7DF6-4EBE-8E0C-63C0C39D8D29"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.17.0",
"versionEndExcluding": "1.17.10",
"matchCriteriaId": "BD15500F-5958-45C4-BF78-9756FEB4CB2F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.18.0",
"versionEndExcluding": "1.18.4",
"matchCriteriaId": "C2C4B9B4-3CB3-47A3-ACF9-195E77B2FE2B"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/cilium/cilium/commit/a385856b59c8289cc7273fa3a3062bbf0ef96c97",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/cilium/cilium/releases/tag/v1.16.17",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://github.com/cilium/cilium/releases/tag/v1.17.10",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://github.com/cilium/cilium/releases/tag/v1.18.4",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://github.com/cilium/cilium/security/advisories/GHSA-38pp-6gcp-rqvm",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch",
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-653xx/CVE-2025-65379.json
+31 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-65379",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T20:15:53.117",
"lastModified": "2025-12-04T17:15:08.283",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T19:13:34.923",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,37 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/dewcode91/security-research/blob/main/CVE-2025-65379.md",
"source": "[email protected]"
},
"nodes": [
{
"url": "https://phpgurukul.com/billing-system-using-php-and-mysql/",
"source": "[email protected]"
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:phpgurukul:billing_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "BFD3FF09-4311-4BE3-B90D-52C2018E5136"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/dewcode91/security-research/blob/main/CVE-2025-65379.md",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://phpgurukul.com/billing-system-using-php-and-mysql/",
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-653xx/CVE-2025-65380.json
+31 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-65380",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T21:15:52.947",
"lastModified": "2025-12-04T17:15:08.283",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-04T19:01:55.517",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,37 @@
]
}
],
"references": [
"configurations": [
{
"url": "https://github.com/dewcode91/security-research/blob/main/CVE-2025-65380.md",
"source": "[email protected]"
},
"nodes": [
{
"url": "https://phpgurukul.com/billing-system-using-php-and-mysql",
"source": "[email protected]"
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:phpgurukul:billing_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "BFD3FF09-4311-4BE3-B90D-52C2018E5136"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/dewcode91/security-research/blob/main/CVE-2025-65380.md",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://phpgurukul.com/billing-system-using-php-and-mysql",
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-656xx/CVE-2025-65637.json
+49
View File
@@ -0,0 +1,49 @@
{
"id": "CVE-2025-65637",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T19:16:05.223",
"lastModified": "2025-12-04T19:16:05.223",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with \"token too long\" and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions < 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/mjuanxd/logrus-dos-poc",
"source": "[email protected]"
},
{
"url": "https://github.com/mjuanxd/logrus-dos-poc/blob/main/README.md",
"source": "[email protected]"
},
{
"url": "https://github.com/sirupsen/logrus/issues/1370",
"source": "[email protected]"
},
{
"url": "https://github.com/sirupsen/logrus/pull/1376",
"source": "[email protected]"
},
{
"url": "https://github.com/sirupsen/logrus/releases/tag/v1.8.3",
"source": "[email protected]"
},
{
"url": "https://github.com/sirupsen/logrus/releases/tag/v1.9.1",
"source": "[email protected]"
},
{
"url": "https://github.com/sirupsen/logrus/releases/tag/v1.9.3",
"source": "[email protected]"
},
{
"url": "https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMSIRUPSENLOGRUS-5564391",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-658xx/CVE-2025-65806.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-65806",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T20:16:19.563",
"lastModified": "2025-12-04T20:16:19.563",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The E-POINT CMS eagle.gsam-1169.1 file upload feature improperly handles nested archive files. An attacker can upload a nested ZIP (a ZIP containing another ZIP) where the inner archive contains an executable file (e.g. webshell.php). When the application extracts the uploaded archives, the executable may be extracted into a web-accessible directory. This can lead to remote code execution (RCE), data disclosure, account compromise, or further system compromise depending on the web server/process privileges. The issue arises from insufficient validation of archive contents and inadequate restrictions on extraction targets."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/Bidon47/CVE-2025-65806/blob/main/CVE-2025-65806.md",
"source": "[email protected]"
},
{
"url": "https://www.e-point.pl/produkty/e-point-cms",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-658xx/CVE-2025-65883.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-65883",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T20:16:19.770",
"lastModified": "2025-12-04T20:16:19.770",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in Genexis Platinum P4410 router (Firmware P4410-V2\u20131.41) that allows a local network attacker to achieve Remote Code Execution (RCE) with root privileges. The issue occurs due to improper session invalidation after administrator logout. When an administrator logs out, the session token remains valid. An attacker on the local network can reuse this stale token to send crafted requests via the router\u2019s diagnostic endpoint, resulting in command execution as root."
}
],
"metrics": {},
"references": [
{
"url": "https://0xw41th.medium.com/my-first-cve-cve-2025-65883-remote-code-execution-in-a-genexis-router-0c35749a99bd",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-659xx/CVE-2025-65945.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-65945",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T19:16:05.550",
"lastModified": "2025-12-04T19:16:05.550",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "auth0/node-jws is a JSON Web Signature implementation for Node.js. In versions 3.2.2 and earlier and version 4.0.0, auth0/node-jws has an improper signature verification vulnerability when using the HS256 algorithm under specific conditions. Applications are affected when they use the jws.createVerify() function for HMAC algorithms and use user-provided data from the JSON Web Signature protected header or payload in HMAC secret lookup routines, which can allow attackers to bypass signature verification. This issue has been patched in versions 3.2.3 and 4.0.1."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-347"
}
]
}
],
"references": [
{
"url": "https://github.com/auth0/node-jws/commit/34c45b2c04434f925b638de6a061de9339c0ea2e",
"source": "[email protected]"
},
{
"url": "https://github.com/auth0/node-jws/security/advisories/GHSA-869p-cjfg-cm3x",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-659xx/CVE-2025-65958.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-65958",
"sourceIdentifier": "[email protected]",
"published": "2025-12-04T20:16:19.973",
"lastModified": "2025-12-04T20:16:19.973",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Server-Side Request Forgery (SSRF) vulnerability in Open WebUI allows any authenticated user to force the server to make HTTP requests to arbitrary URLs. This can be exploited to access cloud metadata endpoints (AWS/GCP/Azure), scan internal networks, access internal services behind firewalls, and exfiltrate sensitive information. No special permissions beyond basic authentication are required. This vulnerability is fixed in 0.6.37."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 4.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"references": [
{
"url": "https://github.com/open-webui/open-webui/commit/02238d3113e966c353fce18f1b65117380896774",
"source": "[email protected]"
},
{
"url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-c6xv-rcvw-v685",
"source": "[email protected]"
}
]
}
README.md
+50 -38
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-12-04T19:00:11.882972+00:00
2025-12-04T21:00:12.081908+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-12-04T18:58:57.267000+00:00
2025-12-04T20:57:21.163000+00:00
```
### Last Data Feed Release
@@ -33,52 +33,64 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
320155
320175
```
### CVEs added in the last Commit
Recently added CVEs: `8`
Recently added CVEs: `20`
- [CVE-2025-14011](CVE-2025/CVE-2025-140xx/CVE-2025-14011.json) (`2025-12-04T18:15:50.330`)
- [CVE-2025-14012](CVE-2025/CVE-2025-140xx/CVE-2025-14012.json) (`2025-12-04T18:15:50.570`)
- [CVE-2025-63363](CVE-2025/CVE-2025-633xx/CVE-2025-63363.json) (`2025-12-04T18:15:51.123`)
- [CVE-2025-63364](CVE-2025/CVE-2025-633xx/CVE-2025-63364.json) (`2025-12-04T17:15:56.380`)
- [CVE-2025-66287](CVE-2025/CVE-2025-662xx/CVE-2025-66287.json) (`2025-12-04T17:15:56.647`)
- [CVE-2025-66373](CVE-2025/CVE-2025-663xx/CVE-2025-66373.json) (`2025-12-04T17:15:56.867`)
- [CVE-2025-66516](CVE-2025/CVE-2025-665xx/CVE-2025-66516.json) (`2025-12-04T17:15:57.120`)
- [CVE-2025-9127](CVE-2025/CVE-2025-91xx/CVE-2025-9127.json) (`2025-12-04T18:15:51.603`)
- [CVE-2025-12097](CVE-2025/CVE-2025-120xx/CVE-2025-12097.json) (`2025-12-04T20:16:16.853`)
- [CVE-2025-12994](CVE-2025/CVE-2025-129xx/CVE-2025-12994.json) (`2025-12-04T20:16:17.037`)
- [CVE-2025-12995](CVE-2025/CVE-2025-129xx/CVE-2025-12995.json) (`2025-12-04T20:16:17.197`)
- [CVE-2025-12996](CVE-2025/CVE-2025-129xx/CVE-2025-12996.json) (`2025-12-04T20:16:17.340`)
- [CVE-2025-12997](CVE-2025/CVE-2025-129xx/CVE-2025-12997.json) (`2025-12-04T20:16:17.480`)
- [CVE-2025-13488](CVE-2025/CVE-2025-134xx/CVE-2025-13488.json) (`2025-12-04T19:16:01.937`)
- [CVE-2025-14013](CVE-2025/CVE-2025-140xx/CVE-2025-14013.json) (`2025-12-04T19:16:02.643`)
- [CVE-2025-14015](CVE-2025/CVE-2025-140xx/CVE-2025-14015.json) (`2025-12-04T19:16:03.130`)
- [CVE-2025-14016](CVE-2025/CVE-2025-140xx/CVE-2025-14016.json) (`2025-12-04T19:16:03.530`)
- [CVE-2025-29268](CVE-2025/CVE-2025-292xx/CVE-2025-29268.json) (`2025-12-04T20:16:17.683`)
- [CVE-2025-29269](CVE-2025/CVE-2025-292xx/CVE-2025-29269.json) (`2025-12-04T20:16:17.930`)
- [CVE-2025-59788](CVE-2025/CVE-2025-597xx/CVE-2025-59788.json) (`2025-12-04T19:16:04.380`)
- [CVE-2025-63361](CVE-2025/CVE-2025-633xx/CVE-2025-63361.json) (`2025-12-04T19:16:04.757`)
- [CVE-2025-63362](CVE-2025/CVE-2025-633xx/CVE-2025-63362.json) (`2025-12-04T19:16:04.973`)
- [CVE-2025-63499](CVE-2025/CVE-2025-634xx/CVE-2025-63499.json) (`2025-12-04T20:16:19.363`)
- [CVE-2025-65637](CVE-2025/CVE-2025-656xx/CVE-2025-65637.json) (`2025-12-04T19:16:05.223`)
- [CVE-2025-65806](CVE-2025/CVE-2025-658xx/CVE-2025-65806.json) (`2025-12-04T20:16:19.563`)
- [CVE-2025-65883](CVE-2025/CVE-2025-658xx/CVE-2025-65883.json) (`2025-12-04T20:16:19.770`)
- [CVE-2025-65945](CVE-2025/CVE-2025-659xx/CVE-2025-65945.json) (`2025-12-04T19:16:05.550`)
- [CVE-2025-65958](CVE-2025/CVE-2025-659xx/CVE-2025-65958.json) (`2025-12-04T20:16:19.973`)
### CVEs modified in the last Commit
Recently modified CVEs: `311`
Recently modified CVEs: `37`
- [CVE-2025-66222](CVE-2025/CVE-2025-662xx/CVE-2025-66222.json) (`2025-12-04T17:15:08.283`)
- [CVE-2025-66293](CVE-2025/CVE-2025-662xx/CVE-2025-66293.json) (`2025-12-04T17:15:08.283`)
- [CVE-2025-66294](CVE-2025/CVE-2025-662xx/CVE-2025-66294.json) (`2025-12-04T18:36:15.490`)
- [CVE-2025-66295](CVE-2025/CVE-2025-662xx/CVE-2025-66295.json) (`2025-12-04T18:34:22.470`)
- [CVE-2025-66296](CVE-2025/CVE-2025-662xx/CVE-2025-66296.json) (`2025-12-04T18:33:10.217`)
- [CVE-2025-66399](CVE-2025/CVE-2025-663xx/CVE-2025-66399.json) (`2025-12-04T17:15:25.860`)
- [CVE-2025-66404](CVE-2025/CVE-2025-664xx/CVE-2025-66404.json) (`2025-12-04T17:15:08.283`)
- [CVE-2025-66406](CVE-2025/CVE-2025-664xx/CVE-2025-66406.json) (`2025-12-04T17:15:08.283`)
- [CVE-2025-66409](CVE-2025/CVE-2025-664xx/CVE-2025-66409.json) (`2025-12-04T17:15:25.860`)
- [CVE-2025-66411](CVE-2025/CVE-2025-664xx/CVE-2025-66411.json) (`2025-12-04T17:15:08.283`)
- [CVE-2025-66414](CVE-2025/CVE-2025-664xx/CVE-2025-66414.json) (`2025-12-04T17:15:25.860`)
- [CVE-2025-66416](CVE-2025/CVE-2025-664xx/CVE-2025-66416.json) (`2025-12-04T17:15:25.860`)
- [CVE-2025-66422](CVE-2025/CVE-2025-664xx/CVE-2025-66422.json) (`2025-12-04T17:11:09.173`)
- [CVE-2025-66423](CVE-2025/CVE-2025-664xx/CVE-2025-66423.json) (`2025-12-04T17:10:35.000`)
- [CVE-2025-66431](CVE-2025/CVE-2025-664xx/CVE-2025-66431.json) (`2025-12-04T17:15:08.283`)
- [CVE-2025-66453](CVE-2025/CVE-2025-664xx/CVE-2025-66453.json) (`2025-12-04T17:15:08.283`)
- [CVE-2025-66454](CVE-2025/CVE-2025-664xx/CVE-2025-66454.json) (`2025-12-04T17:15:25.860`)
- [CVE-2025-66458](CVE-2025/CVE-2025-664xx/CVE-2025-66458.json) (`2025-12-04T17:15:25.860`)
- [CVE-2025-66459](CVE-2025/CVE-2025-664xx/CVE-2025-66459.json) (`2025-12-04T17:15:25.860`)
- [CVE-2025-66460](CVE-2025/CVE-2025-664xx/CVE-2025-66460.json) (`2025-12-04T17:15:25.860`)
- [CVE-2025-66468](CVE-2025/CVE-2025-664xx/CVE-2025-66468.json) (`2025-12-04T17:15:25.860`)
- [CVE-2025-66476](CVE-2025/CVE-2025-664xx/CVE-2025-66476.json) (`2025-12-04T17:15:08.283`)
- [CVE-2025-66489](CVE-2025/CVE-2025-664xx/CVE-2025-66489.json) (`2025-12-04T17:15:08.283`)
- [CVE-2025-7044](CVE-2025/CVE-2025-70xx/CVE-2025-7044.json) (`2025-12-04T17:15:08.283`)
- [CVE-2025-8074](CVE-2025/CVE-2025-80xx/CVE-2025-8074.json) (`2025-12-04T17:15:08.283`)
- [CVE-2025-13634](CVE-2025/CVE-2025-136xx/CVE-2025-13634.json) (`2025-12-04T19:53:52.827`)
- [CVE-2025-13635](CVE-2025/CVE-2025-136xx/CVE-2025-13635.json) (`2025-12-04T19:50:39.720`)
- [CVE-2025-13636](CVE-2025/CVE-2025-136xx/CVE-2025-13636.json) (`2025-12-04T19:42:35.750`)
- [CVE-2025-13637](CVE-2025/CVE-2025-136xx/CVE-2025-13637.json) (`2025-12-04T19:39:11.720`)
- [CVE-2025-13638](CVE-2025/CVE-2025-136xx/CVE-2025-13638.json) (`2025-12-04T19:20:42.487`)
- [CVE-2025-13639](CVE-2025/CVE-2025-136xx/CVE-2025-13639.json) (`2025-12-04T19:16:17.007`)
- [CVE-2025-13790](CVE-2025/CVE-2025-137xx/CVE-2025-13790.json) (`2025-12-04T20:27:39.500`)
- [CVE-2025-13791](CVE-2025/CVE-2025-137xx/CVE-2025-13791.json) (`2025-12-04T20:26:55.733`)
- [CVE-2025-13807](CVE-2025/CVE-2025-138xx/CVE-2025-13807.json) (`2025-12-04T20:24:06.027`)
- [CVE-2025-13808](CVE-2025/CVE-2025-138xx/CVE-2025-13808.json) (`2025-12-04T20:21:36.230`)
- [CVE-2025-13809](CVE-2025/CVE-2025-138xx/CVE-2025-13809.json) (`2025-12-04T20:15:31.293`)
- [CVE-2025-13810](CVE-2025/CVE-2025-138xx/CVE-2025-13810.json) (`2025-12-04T20:09:16.240`)
- [CVE-2025-13811](CVE-2025/CVE-2025-138xx/CVE-2025-13811.json) (`2025-12-04T20:03:32.363`)
- [CVE-2025-32916](CVE-2025/CVE-2025-329xx/CVE-2025-32916.json) (`2025-12-04T20:44:21.820`)
- [CVE-2025-32919](CVE-2025/CVE-2025-329xx/CVE-2025-32919.json) (`2025-12-04T20:39:36.420`)
- [CVE-2025-39664](CVE-2025/CVE-2025-396xx/CVE-2025-39664.json) (`2025-12-04T20:37:25.413`)
- [CVE-2025-46174](CVE-2025/CVE-2025-461xx/CVE-2025-46174.json) (`2025-12-04T19:16:03.973`)
- [CVE-2025-50399](CVE-2025/CVE-2025-503xx/CVE-2025-50399.json) (`2025-12-04T20:16:18.433`)
- [CVE-2025-50402](CVE-2025/CVE-2025-504xx/CVE-2025-50402.json) (`2025-12-04T20:16:18.687`)
- [CVE-2025-56396](CVE-2025/CVE-2025-563xx/CVE-2025-56396.json) (`2025-12-04T20:16:19.103`)
- [CVE-2025-62509](CVE-2025/CVE-2025-625xx/CVE-2025-62509.json) (`2025-12-04T19:13:01.170`)
- [CVE-2025-62510](CVE-2025/CVE-2025-625xx/CVE-2025-62510.json) (`2025-12-04T19:12:57.490`)
- [CVE-2025-64715](CVE-2025/CVE-2025-647xx/CVE-2025-64715.json) (`2025-12-04T20:38:45.300`)
- [CVE-2025-65379](CVE-2025/CVE-2025-653xx/CVE-2025-65379.json) (`2025-12-04T19:13:34.923`)
- [CVE-2025-65380](CVE-2025/CVE-2025-653xx/CVE-2025-65380.json) (`2025-12-04T19:01:55.517`)
## Download and Usage
_state.csv
+363 -343
View File
File diff suppressed because it is too large. Load diff