admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 01:50:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-08-29T18:00:11.369272+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-08-29 18:03:55 +00:00
1 parent 41832dc3d8
commit 1f4973253d
509 files changed
+4443 -1493
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2018/CVE-2018-251xx/CVE-2018-25115.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2018-25115",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T22:15:31.370",
"lastModified": "2025-08-28T20:15:31.707",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [
{
"sourceIdentifier": "[email protected]",
CVE-2020/CVE-2020-243xx/CVE-2020-24363.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2020-24363",
"sourceIdentifier": "[email protected]",
"published": "2020-08-31T16:15:15.380",
"lastModified": "2024-11-21T05:14:40.043",
"lastModified": "2025-08-29T17:15:31.950",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -74,6 +94,16 @@
"value": "CWE-306"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"configurations": [
CVE-2021/CVE-2021-44xx/CVE-2021-4459.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2021-4459",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T08:15:31.937",
"lastModified": "2025-08-27T08:15:31.937",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An authorized remote attacker can access files and directories outside the intended web root, potentially exposing sensitive system information of the affected Sunny Boy devices."
},
{
"lang": "es",
"value": "Un atacante remoto autorizado puede acceder a archivos y directorios fuera del root web previsto, exponiendo potencialmente informaci\u00f3n confidencial del sistema de los dispositivos Sunny Boy afectados."
}
],
"metrics": {
CVE-2023/CVE-2023-211xx/CVE-2023-21125.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-21125",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:30.233",
"lastModified": "2025-08-27T15:15:35.160",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2023/CVE-2023-73xx/CVE-2023-7307.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-7307",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T22:15:32.533",
"lastModified": "2025-08-28T20:15:31.937",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2023/CVE-2023-73xx/CVE-2023-7308.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-7308",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T22:15:32.733",
"lastModified": "2025-08-28T20:15:32.070",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2023/CVE-2023-73xx/CVE-2023-7309.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-7309",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T22:15:32.897",
"lastModified": "2025-08-28T20:15:32.203",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [
{
"sourceIdentifier": "[email protected]",
CVE-2024/CVE-2024-129xx/CVE-2024-12923.json
+78
View File
@@ -0,0 +1,78 @@
{
"id": "CVE-2024-12923",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T17:15:33.530",
"lastModified": "2025-08-29T17:15:33.530",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data.\n\nWe have already fixed the vulnerability in the following version:\nPhoto Station 6.4.5 ( 2025/01/02 ) and later"
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 2.0,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"privilegesRequired": "LOW",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "LOW",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://www.qnap.com/en/security-advisory/qsa-25-24",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-133xx/CVE-2024-13342.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13342",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T11:15:30.710",
"lastModified": "2025-08-29T11:15:30.710",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:29.730",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-135xx/CVE-2024-13574.json
+3 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-13574",
"sourceIdentifier": "[email protected]",
"published": "2025-03-11T06:15:25.680",
"lastModified": "2025-05-06T16:12:52.380",
"lastModified": "2025-08-29T16:39:10.223",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
@@ -60,9 +60,9 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:xavi.ivars:xv_random_quotes:*:*:*:*:*:wordpress:*:*",
"criteria": "cpe:2.3:a:xavivars:xv_random_quotes:*:*:*:*:*:wordpress:*:*",
"versionEndIncluding": "1.40",
"matchCriteriaId": "FBA5C82C-3266-407E-85A5-4B6BF9813EBE"
"matchCriteriaId": "68B2C5F2-A33C-4413-9CC4-737A29300170"
}
]
}
CVE-2024/CVE-2024-135xx/CVE-2024-13580.json
+3 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-13580",
"sourceIdentifier": "[email protected]",
"published": "2025-03-11T06:15:25.813",
"lastModified": "2025-05-06T16:11:42.753",
"lastModified": "2025-08-29T16:39:17.303",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
@@ -60,9 +60,9 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:xavi.ivars:xv_random_quotes:*:*:*:*:*:wordpress:*:*",
"criteria": "cpe:2.3:a:xavivars:xv_random_quotes:*:*:*:*:*:wordpress:*:*",
"versionEndIncluding": "1.40",
"matchCriteriaId": "FBA5C82C-3266-407E-85A5-4B6BF9813EBE"
"matchCriteriaId": "68B2C5F2-A33C-4413-9CC4-737A29300170"
}
]
}
CVE-2024/CVE-2024-138xx/CVE-2024-13807.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2024-13807",
"sourceIdentifier": "[email protected]",
"published": "2025-08-28T06:15:29.420",
"lastModified": "2025-08-28T06:15:29.420",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Xagio SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.1.0.5 via the backup functionality due to weak filename structure and lack of protection in the directory. This makes it possible for unauthenticated attackers to extract sensitive data from backups which can include the entire database and site's files."
},
{
"lang": "es",
"value": "El complemento Xagio SEO para WordPress es vulnerable a la exposici\u00f3n de informaci\u00f3n confidencial en todas las versiones hasta la 7.1.0.5 incluida, a trav\u00e9s de la funci\u00f3n de copia de seguridad, debido a la d\u00e9bil estructura de nombres de archivo y la falta de protecci\u00f3n en el directorio. Esto permite que atacantes no autenticados extraigan informaci\u00f3n confidencial de las copias de seguridad, que puede incluir la base de datos completa y los archivos del sitio."
}
],
"metrics": {
CVE-2024/CVE-2024-139xx/CVE-2024-13979.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13979",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T22:15:33.070",
"lastModified": "2025-08-28T20:15:32.347",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-139xx/CVE-2024-13980.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13980",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T22:15:33.250",
"lastModified": "2025-08-28T20:15:32.503",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-139xx/CVE-2024-13981.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13981",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T22:15:33.423",
"lastModified": "2025-08-28T20:15:32.640",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-139xx/CVE-2024-13982.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13982",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T22:15:33.610",
"lastModified": "2025-08-27T22:15:33.610",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-139xx/CVE-2024-13984.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13984",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T22:15:33.777",
"lastModified": "2025-08-28T20:15:32.773",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-139xx/CVE-2024-13985.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13985",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T22:15:33.960",
"lastModified": "2025-08-28T20:15:32.903",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [
{
"sourceIdentifier": "[email protected]",
CVE-2024/CVE-2024-139xx/CVE-2024-13986.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13986",
"sourceIdentifier": "[email protected]",
"published": "2025-08-28T16:15:32.883",
"lastModified": "2025-08-28T19:15:31.230",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:29.730",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-139xx/CVE-2024-13987.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13987",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T08:15:31.050",
"lastModified": "2025-08-29T08:15:31.050",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:29.730",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-352xx/CVE-2024-35203.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-35203",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T21:15:47.060",
"lastModified": "2025-08-27T14:15:42.137",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-377xx/CVE-2024-37777.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2024-37777",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T20:15:31.557",
"lastModified": "2025-08-27T20:15:31.557",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "O2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the mainOutput() function."
},
{
"lang": "es",
"value": "Se descubri\u00f3 que O2OA v9.0.3 contiene una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo (RCE) a trav\u00e9s de la funci\u00f3n mainOutput()."
}
],
"metrics": {
CVE-2024/CVE-2024-393xx/CVE-2024-39335.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-39335",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T15:15:40.167",
"lastModified": "2025-08-27T15:15:35.377",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-442xx/CVE-2024-44271.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-44271",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T01:15:33.460",
"lastModified": "2025-08-29T14:15:44.227",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:29.730",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-457xx/CVE-2024-45753.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2024-45753",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T14:15:34.867",
"lastModified": "2025-08-26T16:15:31.977",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:19:52.540",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value for the link attribute."
},
{
"lang": "es",
"value": "En Mahara 23.04.8 y 24.04.4, el bloqueo de la fuente RSS externa puede provocar XSS si el XML de la fuente externa tiene un valor malicioso para el atributo de enlace."
}
],
"metrics": {
CVE-2024/CVE-2024-469xx/CVE-2024-46916.json
+29
View File
@@ -0,0 +1,29 @@
{
"id": "CVE-2024-46916",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T16:15:34.847",
"lastModified": "2025-08-29T16:24:29.730",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the filesystem is properly mounted (e.g., leveraging a delete call in /etc/rc.d/init.d/mountfs to remove the /etc/fstab file). This can allow code execution and, in some versions, enable recovery of TPM Disk Encryption keys and decryption of the Windows system partition."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/emptynebuli",
"source": "[email protected]"
},
{
"url": "https://www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057",
"source": "[email protected]"
},
{
"url": "https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-469xx/CVE-2024-46917.json
+29
View File
@@ -0,0 +1,29 @@
{
"id": "CVE-2024-46917",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T16:15:35.750",
"lastModified": "2025-08-29T16:24:29.730",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation. This allows code execution, recovery of TPM Disk Encryption keys, decryption of the Windows system partition, and full control of the Windows OS, e.g., through ~/.profile changes."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/emptynebuli",
"source": "[email protected]"
},
{
"url": "https://www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057",
"source": "[email protected]"
},
{
"url": "https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-471xx/CVE-2024-47192.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-47192",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T21:15:47.217",
"lastModified": "2025-08-27T17:15:34.010",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-478xx/CVE-2024-47853.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2024-47853",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T14:15:35.037",
"lastModified": "2025-08-26T14:15:35.037",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in Mahara 23.04.8 and 24.04.4. Attackers may utilize escalation of privileges in certain cases when logging into Mahara with Learning Tools Interoperability (LTI)."
},
{
"lang": "es",
"value": "Se detect\u00f3 un problema en Mahara 23.04.8 y 24.04.4. Los atacantes podr\u00edan usar la escalada de privilegios en ciertos casos al iniciar sesi\u00f3n en Mahara con Learning Tools Interoperability (LTI)."
}
],
"metrics": {},
CVE-2024/CVE-2024-489xx/CVE-2024-48908.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-48908",
"sourceIdentifier": "[email protected]",
"published": "2025-08-28T15:15:42.390",
"lastModified": "2025-08-28T15:15:42.390",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:29.730",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-497xx/CVE-2024-49740.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-49740",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:31.963",
"lastModified": "2025-08-27T14:15:42.580",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-497xx/CVE-2024-49790.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-49790",
"sourceIdentifier": "[email protected]",
"published": "2025-08-28T14:15:43.257",
"lastModified": "2025-08-28T14:15:43.257",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:29.730",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-545xx/CVE-2024-54554.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-54554",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T01:15:34.313",
"lastModified": "2025-08-29T14:15:45.027",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:29.730",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-545xx/CVE-2024-54568.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-54568",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T01:15:34.437",
"lastModified": "2025-08-29T14:15:45.223",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:29.730",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-582xx/CVE-2024-58240.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-58240",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-08-28T10:15:31.780",
"lastModified": "2025-08-28T15:15:43.640",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-96xx/CVE-2024-9648.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-9648",
"sourceIdentifier": "[email protected]",
"published": "2025-08-28T04:15:41.240",
"lastModified": "2025-08-28T04:15:41.240",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-00xx/CVE-2025-0074.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0074",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:32.093",
"lastModified": "2025-08-27T15:15:35.587",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-00xx/CVE-2025-0075.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0075",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:32.217",
"lastModified": "2025-08-27T15:15:35.750",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-00xx/CVE-2025-0078.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0078",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:32.337",
"lastModified": "2025-08-27T14:15:45.000",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-00xx/CVE-2025-0079.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0079",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:32.460",
"lastModified": "2025-08-27T14:15:45.183",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-00xx/CVE-2025-0080.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0080",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:32.583",
"lastModified": "2025-08-27T14:15:45.353",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-00xx/CVE-2025-0081.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0081",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:32.720",
"lastModified": "2025-08-27T15:15:35.930",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-00xx/CVE-2025-0082.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0082",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:32.847",
"lastModified": "2025-08-27T15:15:36.103",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-00xx/CVE-2025-0083.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0083",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:32.970",
"lastModified": "2025-08-27T14:15:45.710",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-00xx/CVE-2025-0084.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0084",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:33.087",
"lastModified": "2025-08-27T15:15:36.280",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-00xx/CVE-2025-0086.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0086",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:33.207",
"lastModified": "2025-08-27T14:15:45.903",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-00xx/CVE-2025-0092.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0092",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:33.323",
"lastModified": "2025-08-27T14:15:46.083",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-00xx/CVE-2025-0093.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0093",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:33.447",
"lastModified": "2025-08-27T14:15:46.277",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-09xx/CVE-2025-0951.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0951",
"sourceIdentifier": "[email protected]",
"published": "2025-08-28T04:15:56.903",
"lastModified": "2025-08-28T04:15:56.903",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-14xx/CVE-2025-1494.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-1494",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T17:15:36.587",
"lastModified": "2025-08-26T17:15:36.587",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim."
},
{
"lang": "es",
"value": "IBM Cognos Command Center 10.2.4.1 y 10.2.5 podr\u00eda permitir que un atacante remoto secuestre la acci\u00f3n de clic de la v\u00edctima. Al persuadir a la v\u00edctima a visitar un sitio web malicioso, un atacante remoto podr\u00eda explotar esta vulnerabilidad para secuestrar sus acciones de clic y posiblemente lanzar nuevos ataques contra ella."
}
],
"metrics": {
CVE-2025/CVE-2025-19xx/CVE-2025-1994.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-1994",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T17:15:36.827",
"lastModified": "2025-08-26T17:15:36.827",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM Cognos Command Center 10.2.4.1 and 10.2.5 \n\n\n\ncould allow a local user to execute arbitrary code on the system due to the use of unsafe use of the BinaryFormatter function."
},
{
"lang": "es",
"value": "IBM Cognos Command Center 10.2.4.1 y 10.2.5 podr\u00edan permitir que un usuario local ejecute c\u00f3digo arbitrario en el sistema debido al uso inseguro de la funci\u00f3n BinaryFormatter."
}
],
"metrics": {
CVE-2025/CVE-2025-202xx/CVE-2025-20241.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-20241",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T17:15:34.650",
"lastModified": "2025-08-27T17:15:34.650",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to unexpectedly restart, which could cause an affected device to reload.\r\n\r\nThis vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this vulnerability by sending a crafted IS-IS packet to an affected device. A successful exploit could allow the attacker to cause the unexpected restart of the IS-IS process, which could cause the affected device to reload, resulting in a denial of service (DoS) condition.\r\nNote: The IS-IS protocol is a routing protocol. To exploit this vulnerability, an attacker must be Layer 2-adjacent to the affected device."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la funci\u00f3n de sistema intermedio a sistema intermedio (IS-IS) del software Cisco NX-OS para los switches Cisco Nexus de las series 3000 y 9000 en modo NX-OS independiente podr\u00eda permitir que un atacante adyacente no autenticado provoque el reinicio inesperado del proceso IS-IS, lo que podr\u00eda provocar la recarga del dispositivo afectado. Esta vulnerabilidad se debe a una validaci\u00f3n de entrada insuficiente al analizar un paquete IS-IS de entrada. Un atacante podr\u00eda explotar esta vulnerabilidad enviando un paquete IS-IS manipulado a un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante provocar el reinicio inesperado del proceso IS-IS, lo que podr\u00eda provocar la recarga del dispositivo afectado y provocar una denegaci\u00f3n de servicio (DoS). Nota: El protocolo IS-IS es un protocolo de enrutamiento. Para explotar esta vulnerabilidad, un atacante debe estar adyacente a la capa 2 del dispositivo afectado."
}
],
"metrics": {
CVE-2025/CVE-2025-202xx/CVE-2025-20262.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-20262",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T17:15:34.873",
"lastModified": "2025-08-27T17:15:34.873",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, low-privileged, remote attacker to trigger a crash of the PIM6 process, resulting in a denial of service (DoS) condition.\r\n\r\nThis vulnerability is due to improper processing of PIM6 ephemeral data queries. An attacker could exploit this vulnerability by sending a crafted ephemeral query to an affected device through one of the following methods: NX-API REST, NETCONF, RESTConf, gRPC, or Model Driven Telemetry. A successful exploit could allow the attacker to cause the PIM6 process to crash and restart, causing potential adjacency flaps and resulting in a DoS of the PIM6 and ephemeral query processes."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la funci\u00f3n Protocol Independent Multicast Version 6 (PIM6) de los switches Cisco Nexus de las series 3000 y 9000 en modo NX-OS independiente podr\u00eda permitir que un atacante remoto autenticado y con pocos privilegios provoque un bloqueo del proceso PIM6, lo que resulta en una denegaci\u00f3n de servicio (DoS). Esta vulnerabilidad se debe al procesamiento incorrecto de las consultas de datos ef\u00edmeros de PIM6. Un atacante podr\u00eda explotar esta vulnerabilidad enviando una consulta ef\u00edmera manipulada a un dispositivo afectado mediante uno de los siguientes m\u00e9todos: NX-API REST, NETCONF, RESTConf, gRPC o telemetr\u00eda basada en modelos. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante provocar el bloqueo y reinicio del proceso PIM6, lo que podr\u00eda causar fluctuaciones de adyacencia y una denegaci\u00f3n de servicio (DoS) de PIM6 y los procesos de consulta ef\u00edmera."
}
],
"metrics": {
CVE-2025/CVE-2025-202xx/CVE-2025-20290.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-20290",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T17:15:35.083",
"lastModified": "2025-08-27T17:15:35.083",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the logging feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches, Cisco Nexus 9000 Series Switches in standalone NX-OS mode, Cisco UCS 6400 Fabric Interconnects, Cisco UCS 6500 Series Fabric Interconnects, and Cisco UCS 9108 100G Fabric Interconnects could allow an authenticated, local attacker access to sensitive information.\r\n\r\nThis vulnerability is due to improper logging of sensitive information. An attacker could exploit this vulnerability by accessing log files on the file system where they are stored. A successful exploit could allow the attacker to access sensitive information, such as stored credentials."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la funci\u00f3n de registro del software Cisco NX-OS para los switches Cisco Nexus de la serie 3000, los switches Cisco Nexus de la serie 9000 en modo NX-OS independiente, las interconexiones de red Cisco UCS 6400, Cisco UCS 6500 y Cisco UCS 9108 de 100 G podr\u00eda permitir que un atacante local autenticado acceda a informaci\u00f3n confidencial. Esta vulnerabilidad se debe al registro incorrecto de informaci\u00f3n confidencial. Un atacante podr\u00eda explotar esta vulnerabilidad accediendo a los archivos de registro en el sistema de archivos donde se almacenan. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante acceder a informaci\u00f3n confidencial, como las credenciales almacenadas."
}
],
"metrics": {
CVE-2025/CVE-2025-202xx/CVE-2025-20292.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-20292",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T17:15:35.303",
"lastModified": "2025-08-27T17:15:35.303",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted input as the argument of an affected CLI command. A successful exploit could allow the attacker to read and write files on the underlying operating system with the privileges of a non-root user account. File system access is limited to the permissions that are granted to that non-root user account."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la CLI del software Cisco NX-OS podr\u00eda permitir que un atacante local autenticado ejecute un ataque de inyecci\u00f3n de comandos en el sistema operativo subyacente de un dispositivo afectado. Para explotar esta vulnerabilidad, el atacante debe tener credenciales de usuario v\u00e1lidas en el dispositivo afectado. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente de la entrada proporcionada por el usuario. Un atacante podr\u00eda aprovechar esta vulnerabilidad introduciendo una entrada manipulada como argumento de un comando CLI afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante leer y escribir archivos en el sistema operativo subyacente con los privilegios de una cuenta de usuario no root. El acceso al sistema de archivos est\u00e1 limitado a los permisos otorgados a dicha cuenta."
}
],
"metrics": {
CVE-2025/CVE-2025-202xx/CVE-2025-20294.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-20294",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T17:15:35.540",
"lastModified": "2025-08-27T17:15:35.540",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple vulnerabilities in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with administrative privileges to perform command injection attacks on an affected system and elevate privileges to root.\r\n \r\nThese vulnerabilities are due to insufficient input validation of command arguments supplied by the user. An attacker could exploit these vulnerabilities by authenticating to a device and submitting crafted input to the affected commands. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of the affected device with root-level privileges."
},
{
"lang": "es",
"value": "Varias vulnerabilidades en la CLI y la interfaz de administraci\u00f3n web del software Cisco UCS Manager podr\u00edan permitir que un atacante remoto autenticado con privilegios administrativos realice ataques de inyecci\u00f3n de comandos en un sistema afectado y ascienda a privilegios de root. Estas vulnerabilidades se deben a una validaci\u00f3n insuficiente de los argumentos de los comandos proporcionados por el usuario. Un atacante podr\u00eda explotar estas vulnerabilidades autentic\u00e1ndose en un dispositivo y enviando una entrada manipulada a los comandos afectados. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante ejecutar comandos arbitrarios en el sistema operativo subyacente del dispositivo afectado con privilegios de root."
}
],
"metrics": {
CVE-2025/CVE-2025-202xx/CVE-2025-20295.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-20295",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T17:15:35.750",
"lastModified": "2025-08-27T17:15:35.750",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any file on the file system of the underlying operating system of an affected device, including system files.\r\n \r\nThis vulnerability is due to insufficient input validation of command arguments supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to read or create a file or overwrite any file on the file system of the underlying operating system of the affected device, including system files. To exploit this vulnerability, the attacker must have valid administrative credentials on the affected device."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la CLI del software Cisco UCS Manager podr\u00eda permitir que un atacante local autenticado con privilegios administrativos lea o cree un archivo, o sobrescriba cualquier archivo, del sistema operativo subyacente de un dispositivo afectado, incluyendo archivos de sistema. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente de los argumentos de comando proporcionados por el usuario. Un atacante podr\u00eda explotar esta vulnerabilidad autentic\u00e1ndose en un dispositivo y enviando una entrada manipulada al comando afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante leer o crear un archivo, o sobrescribir cualquier archivo, del sistema operativo subyacente del dispositivo afectado, incluyendo archivos de sistema. Para explotar esta vulnerabilidad, el atacante debe tener credenciales administrativas v\u00e1lidas en el dispositivo afectado."
}
],
"metrics": {
CVE-2025/CVE-2025-202xx/CVE-2025-20296.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-20296",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T17:15:35.957",
"lastModified": "2025-08-27T17:15:35.957",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious data into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must be a member of the Administrator or AAA Administrator role."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la interfaz de administraci\u00f3n web del software Cisco UCS Manager podr\u00eda permitir que un atacante remoto autenticado realice un ataque de cross-site scripting (XSS) almacenado contra un usuario de la interfaz. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente de la informaci\u00f3n proporcionada por el usuario por la interfaz de administraci\u00f3n web de un sistema afectado. Un atacante podr\u00eda explotar esta vulnerabilidad inyectando datos maliciosos en p\u00e1ginas espec\u00edficas de la interfaz. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante ejecutar c\u00f3digo de script arbitrario en el contexto de la interfaz afectada o acceder a informaci\u00f3n confidencial del navegador. Para explotar esta vulnerabilidad, el atacante debe ser miembro del rol de Administrador o Administrador AAA."
}
],
"metrics": {
CVE-2025/CVE-2025-203xx/CVE-2025-20317.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-20317",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T17:15:36.140",
"lastModified": "2025-08-27T17:15:36.140",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to redirect a user to a malicious website.\r\n\r\nThis vulnerability is due to insufficient verification of vKVM endpoints. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious webpage and potentially capture user credentials.\r\nNote: The affected vKVM client is also included in Cisco UCS Manager."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la gesti\u00f3n de la conexi\u00f3n de Virtual Keyboard Video Monitor (vKVM) de Cisco Integrated Management Controller (IMC) podr\u00eda permitir que un atacante remoto no autenticado redirija a un usuario a un sitio web malicioso. Esta vulnerabilidad se debe a una verificaci\u00f3n insuficiente de los endpoints vKVM. Un atacante podr\u00eda explotar esta vulnerabilidad persuadiendo al usuario a hacer clic en un enlace manipulado. Una explotaci\u00f3n exitosa podr\u00eda permitirle redirigir a un usuario a una p\u00e1gina web maliciosa y, potencialmente, obtener sus credenciales. Nota: El cliente vKVM afectado tambi\u00e9n est\u00e1 incluido en Cisco UCS Manager."
}
],
"metrics": {
CVE-2025/CVE-2025-203xx/CVE-2025-20342.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-20342",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T17:15:36.380",
"lastModified": "2025-08-27T17:15:36.380",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting (XSS) attack against a user of the interface.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into a specific data field in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid user credentials with privileges that allow for vKVM access on the affected device.\r\nNote: The affected vKVM client is also included in Cisco UCS Manager."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la gesti\u00f3n de la conexi\u00f3n de Virtual Keyboard Video Monitor (vKVM) de Cisco Integrated Management Controller (IMC) podr\u00eda permitir que un atacante remoto autenticado con privilegios bajos realice un ataque de cross-site scripting (XSS) almacenado contra un usuario de la interfaz. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente de la entrada proporcionada por el usuario por la interfaz de administraci\u00f3n web de un sistema afectado. Un atacante podr\u00eda explotar esta vulnerabilidad inyectando c\u00f3digo malicioso en un campo de datos espec\u00edfico de la interfaz. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante ejecutar c\u00f3digo de script arbitrario en el contexto de la interfaz afectada o acceder a informaci\u00f3n confidencial del navegador. Para explotar esta vulnerabilidad, el atacante debe tener credenciales de usuario v\u00e1lidas con privilegios que permitan el acceso a vKVM en el dispositivo afectado. Nota: El cliente vKVM afectado tambi\u00e9n est\u00e1 incluido en Cisco UCS Manager."
}
],
"metrics": {
CVE-2025/CVE-2025-203xx/CVE-2025-20344.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-20344",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T17:15:36.603",
"lastModified": "2025-08-27T17:15:36.603",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the backup restore functionality of Cisco Nexus Dashboard could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of the contents of a backup file. An attacker with valid Administrator credentials could exploit this vulnerability by restoring a crafted backup file to an affected device. A successful exploit could allow the attacker to gain root privileges on the underlying shell on the affected device."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la funci\u00f3n de restauraci\u00f3n de copias de seguridad de Cisco Nexus Dashboard podr\u00eda permitir que un atacante remoto autenticado realice un ataque de path traversal en un dispositivo afectado. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente del contenido de un archivo de copia de seguridad. Un atacante con credenciales de administrador v\u00e1lidas podr\u00eda explotar esta vulnerabilidad restaurando un archivo de copia de seguridad manipulado en un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante obtener privilegios de root en el shell subyacente del dispositivo afectado."
}
],
"metrics": {
CVE-2025/CVE-2025-203xx/CVE-2025-20347.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-20347",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T17:15:36.843",
"lastModified": "2025-08-27T17:15:36.843",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device.\r\n\r\nThis vulnerability exists because of missing authorization controls on some REST API endpoints. An attacker could exploit th vulnerability by sending crafted API requests to an affected endpoint. A successful exploit could allow the attacker to perform limited Administrator functions, such as accessing sensitive information regarding HTTP Proxy and NTP configurations, uploading images, and damaging image files on an affected device."
},
{
"lang": "es",
"value": "Una vulnerabilidad en los endpoints de la API REST de Cisco Nexus Dashboard y Cisco Nexus Dashboard Fabric Controller (NDFC) podr\u00eda permitir que un atacante remoto autenticado y con pocos privilegios acceda a informaci\u00f3n confidencial o cargue y modifique archivos en un dispositivo afectado. Esta vulnerabilidad se debe a la falta de controles de autorizaci\u00f3n en algunos endpoints de la API REST. Un atacante podr\u00eda explotar esta vulnerabilidad enviando solicitudes de API manipuladas a un endpoint afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante realizar funciones limitadas de administrador, como acceder a informaci\u00f3n confidencial sobre las configuraciones de proxy HTTP y NTP, cargar im\u00e1genes y da\u00f1ar archivos de imagen en un dispositivo afectado."
}
],
"metrics": {
CVE-2025/CVE-2025-203xx/CVE-2025-20348.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-20348",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T17:15:37.147",
"lastModified": "2025-08-27T17:15:37.147",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device.\r\n\r\nThis vulnerability exists because of missing authorization controls on some REST API endpoints. An attacker could exploit th vulnerability by sending crafted API requests to an affected endpoint. A successful exploit could allow the attacker to perform limited Administrator functions, such as accessing sensitive information regarding HTTP Proxy and NTP configurations, uploading images, and damaging image files on an affected device."
},
{
"lang": "es",
"value": "Una vulnerabilidad en los endpoints de la API REST de Cisco Nexus Dashboard y Cisco Nexus Dashboard Fabric Controller (NDFC) podr\u00eda permitir que un atacante remoto autenticado y con pocos privilegios acceda a informaci\u00f3n confidencial o cargue y modifique archivos en un dispositivo afectado. Esta vulnerabilidad se debe a la falta de controles de autorizaci\u00f3n en algunos endpoints de la API REST. Un atacante podr\u00eda explotar esta vulnerabilidad enviando solicitudes de API manipuladas a un endpoint afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante realizar funciones limitadas de administrador, como acceder a informaci\u00f3n confidencial sobre las configuraciones de proxy HTTP y NTP, cargar im\u00e1genes y da\u00f1ar archivos de imagen en un dispositivo afectado."
}
],
"metrics": {
CVE-2025/CVE-2025-224xx/CVE-2025-22403.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-22403",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:33.560",
"lastModified": "2025-08-27T14:15:46.757",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-224xx/CVE-2025-22404.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-22404",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:33.697",
"lastModified": "2025-08-27T14:15:46.930",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-224xx/CVE-2025-22405.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-22405",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:33.820",
"lastModified": "2025-08-27T14:15:47.097",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-224xx/CVE-2025-22406.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-22406",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:33.940",
"lastModified": "2025-08-27T14:15:47.280",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-224xx/CVE-2025-22407.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-22407",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:34.060",
"lastModified": "2025-08-27T14:15:47.460",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-224xx/CVE-2025-22408.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-22408",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:34.180",
"lastModified": "2025-08-27T14:15:47.637",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-224xx/CVE-2025-22409.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-22409",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:34.310",
"lastModified": "2025-08-27T14:15:47.810",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-224xx/CVE-2025-22410.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-22410",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:34.423",
"lastModified": "2025-08-27T14:15:47.980",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-224xx/CVE-2025-22411.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-22411",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:34.540",
"lastModified": "2025-08-27T14:15:48.163",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-224xx/CVE-2025-22412.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-22412",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:34.650",
"lastModified": "2025-08-27T15:15:36.450",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-224xx/CVE-2025-22413.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-22413",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:34.787",
"lastModified": "2025-08-27T15:15:36.633",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-224xx/CVE-2025-22483.json
+78
View File
@@ -0,0 +1,78 @@
{
"id": "CVE-2025-22483",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T17:15:33.877",
"lastModified": "2025-08-29T17:15:33.877",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data.\n\nWe have already fixed the vulnerability in the following versions:\nLicense Center 1.8.51 and later\nLicense Center 1.9.51 and later"
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://www.qnap.com/en/security-advisory/qsa-25-27",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-22xx/CVE-2025-2246.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-2246",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T20:15:31.877",
"lastModified": "2025-08-27T20:15:31.877",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have allowed unauthenticated users to access sensitive manual CI/CD variables by querying the GraphQL API."
},
{
"lang": "es",
"value": "Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones anteriores a la 18.1.5, 18.2 anteriores a la 18.2.5 y 18.3 anteriores a la 18.3.1 que podr\u00eda haber permitido a usuarios no autenticados acceder a variables manuales confidenciales de CI/CD consultando la API GraphQL."
}
],
"metrics": {
CVE-2025/CVE-2025-233xx/CVE-2025-23307.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-23307",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T19:15:38.397",
"lastModified": "2025-08-26T19:15:38.397",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering."
},
{
"lang": "es",
"value": "NVIDIA NeMo Curator para todas las plataformas contiene una vulnerabilidad que permite la inyecci\u00f3n de c\u00f3digo mediante un archivo malicioso creado por un atacante. Una explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda provocar la ejecuci\u00f3n de c\u00f3digo, la escalada de privilegios, la divulgaci\u00f3n de informaci\u00f3n y la manipulaci\u00f3n de datos."
}
],
"metrics": {
CVE-2025/CVE-2025-233xx/CVE-2025-23312.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-23312",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T19:15:38.610",
"lastModified": "2025-08-26T19:15:38.610",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering."
},
{
"lang": "es",
"value": "NVIDIA NeMo Framework para todas las plataformas contiene una vulnerabilidad en el componente de servicios de recuperaci\u00f3n, donde datos maliciosos creados por un atacante podr\u00edan provocar una inyecci\u00f3n de c\u00f3digo. Una explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda provocar la ejecuci\u00f3n de c\u00f3digo, la escalada de privilegios, la divulgaci\u00f3n de informaci\u00f3n y la manipulaci\u00f3n de datos."
}
],
"metrics": {
CVE-2025/CVE-2025-233xx/CVE-2025-23313.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-23313",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T19:15:38.810",
"lastModified": "2025-08-26T19:15:38.810",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering."
},
{
"lang": "es",
"value": "NVIDIA NeMo Framework para todas las plataformas contiene una vulnerabilidad en el componente NLP, donde datos maliciosos creados por un atacante podr\u00edan causar un problema de inyecci\u00f3n de c\u00f3digo. Una explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda provocar la ejecuci\u00f3n de c\u00f3digo, la escalada de privilegios, la divulgaci\u00f3n de informaci\u00f3n y la manipulaci\u00f3n de datos."
}
],
"metrics": {
CVE-2025/CVE-2025-233xx/CVE-2025-23314.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-23314",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T19:15:38.990",
"lastModified": "2025-08-26T19:15:38.990",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering."
},
{
"lang": "es",
"value": "NVIDIA NeMo Framework para todas las plataformas contiene una vulnerabilidad en el componente NLP, donde datos maliciosos creados por un atacante podr\u00edan causar un problema de inyecci\u00f3n de c\u00f3digo. Una explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda provocar la ejecuci\u00f3n de c\u00f3digo, la escalada de privilegios, la divulgaci\u00f3n de informaci\u00f3n y la manipulaci\u00f3n de datos."
}
],
"metrics": {
CVE-2025/CVE-2025-233xx/CVE-2025-23315.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-23315",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T19:15:39.190",
"lastModified": "2025-08-26T19:15:39.190",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering."
},
{
"lang": "es",
"value": "NVIDIA NeMo Framework para todas las plataformas contiene una vulnerabilidad en el componente de exportaci\u00f3n e implementaci\u00f3n, donde los datos maliciosos creados por un atacante podr\u00edan causar un problema de inyecci\u00f3n de c\u00f3digo. Una explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda provocar la ejecuci\u00f3n de c\u00f3digo, la escalada de privilegios, la divulgaci\u00f3n de informaci\u00f3n y la manipulaci\u00f3n de datos."
}
],
"metrics": {
CVE-2025/CVE-2025-23xx/CVE-2025-2313.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-2313",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T11:15:30.563",
"lastModified": "2025-08-27T11:15:30.563",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Print.pl service, the \"uhcPrintServerPrint\" function allows execution of arbitrary code via the \"CopyCounter\" parameter."
},
{
"lang": "es",
"value": "En el servicio Print.pl, la funci\u00f3n \"uhcPrintServerPrint\" permite la ejecuci\u00f3n de c\u00f3digo arbitrario a trav\u00e9s del par\u00e1metro \"CopyCounter\"."
}
],
"metrics": {
CVE-2025/CVE-2025-250xx/CVE-2025-25010.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-25010",
"sourceIdentifier": "[email protected]",
"published": "2025-08-28T16:15:34.460",
"lastModified": "2025-08-28T16:15:34.460",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:29.730",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-257xx/CVE-2025-25732.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-25732",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T15:15:42.080",
"lastModified": "2025-08-26T16:15:33.150",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows attackers to replace password hashes stored in the EEPROM with hashes of their own, leading to the escalation of privileges to root."
},
{
"lang": "es",
"value": "Un control de acceso incorrecto en el componente EEPROM de Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, y v4.6.0.1211.28 permite a los atacantes reemplazar los hashes de contrase\u00f1as almacenados en la EEPROM con sus propios hashes, lo que lleva a la escalada de privilegios a root."
}
],
"metrics": {
CVE-2025/CVE-2025-257xx/CVE-2025-25733.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-25733",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T15:15:42.270",
"lastModified": "2025-08-26T17:15:37.060",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows physically proximate attackers to arbitrarily modify SPI flash regions, leading to a degradation of the security posture of the device."
},
{
"lang": "es",
"value": "El control de acceso incorrecto en SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, y v4.6.0.1211.28 permite que atacantes f\u00edsicamente pr\u00f3ximos modifiquen arbitrariamente las regiones flash SPI, lo que lleva a una degradaci\u00f3n de la postura de seguridad del dispositivo."
}
],
"metrics": {
CVE-2025/CVE-2025-257xx/CVE-2025-25734.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-25734",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T15:15:42.453",
"lastModified": "2025-08-27T15:15:36.807",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-257xx/CVE-2025-25735.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-25735",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T15:15:42.617",
"lastModified": "2025-08-27T14:15:48.553",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-257xx/CVE-2025-25736.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-25736",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T15:15:42.793",
"lastModified": "2025-08-27T14:15:49.343",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-257xx/CVE-2025-25737.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-25737",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T15:15:43.107",
"lastModified": "2025-08-27T15:15:37.003",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-264xx/CVE-2025-26417.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-26417",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T23:15:34.907",
"lastModified": "2025-08-27T15:15:37.220",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-26xx/CVE-2025-2697.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-2697",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T17:15:37.320",
"lastModified": "2025-08-26T17:15:37.320",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM Cognos Command Center 10.2.4.1 and 10.2.5 \n\ncould allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim."
},
{
"lang": "es",
"value": "IBM Cognos Command Center 10.2.4.1 y 10.2.5 podr\u00eda permitir que un atacante remoto realice ataques de phishing mediante un ataque de redirecci\u00f3n abierta. Al persuadir a la v\u00edctima para que visite un sitio web especialmente manipulado, un atacante remoto podr\u00eda explotar esta vulnerabilidad para falsificar la URL mostrada y redirigir al usuario a un sitio web malicioso aparentemente confiable. Esto podr\u00eda permitir al atacante obtener informaci\u00f3n altamente sensible o realizar nuevos ataques contra la v\u00edctima."
}
],
"metrics": {
CVE-2025/CVE-2025-293xx/CVE-2025-29364.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-29364",
"sourceIdentifier": "[email protected]",
"published": "2025-08-28T16:15:34.643",
"lastModified": "2025-08-28T20:15:33.723",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:29.730",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-298xx/CVE-2025-29874.json
+78
View File
@@ -0,0 +1,78 @@
{
"id": "CVE-2025-29874",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T17:15:34.123",
"lastModified": "2025-08-29T17:15:34.123",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.4907 and later"
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"references": [
{
"url": "https://www.qnap.com/en/security-advisory/qsa-25-19",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-298xx/CVE-2025-29875.json
+78
View File
@@ -0,0 +1,78 @@
{
"id": "CVE-2025-29875",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T17:15:34.313",
"lastModified": "2025-08-29T17:15:34.313",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.4907 and later"
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"references": [
{
"url": "https://www.qnap.com/en/security-advisory/qsa-25-19",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-298xx/CVE-2025-29878.json
+78
View File
@@ -0,0 +1,78 @@
{
"id": "CVE-2025-29878",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T17:15:34.543",
"lastModified": "2025-08-29T17:15:34.543",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.4907 and later"
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"references": [
{
"url": "https://www.qnap.com/en/security-advisory/qsa-25-19",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-298xx/CVE-2025-29879.json
+78
View File
@@ -0,0 +1,78 @@
{
"id": "CVE-2025-29879",
"sourceIdentifier": "[email protected]",
"published": "2025-08-29T17:15:34.757",
"lastModified": "2025-08-29T17:15:34.757",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.4907 and later"
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"references": [
{
"url": "https://www.qnap.com/en/security-advisory/qsa-25-19",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-299xx/CVE-2025-29992.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-29992",
"sourceIdentifier": "[email protected]",
"published": "2025-08-26T14:15:37.583",
"lastModified": "2025-08-27T15:15:37.393",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:22:31.970",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-300xx/CVE-2025-30036.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-30036",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T11:15:32.353",
"lastModified": "2025-08-27T11:15:32.353",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Stored XSS vulnerability exists in the \"Oddzia\u0142\" (Ward) module, in the death diagnosis description field, and allows the execution of arbitrary JavaScript code. This can lead to session hijacking of other users and potentially to privilege escalation up to full administrative rights."
},
{
"lang": "es",
"value": "Existe una vulnerabilidad XSS almacenado en el m\u00f3dulo \"Oddzia?\" (Sala), en el campo de descripci\u00f3n del diagn\u00f3stico de fallecimiento, que permite la ejecuci\u00f3n de c\u00f3digo JavaScript arbitrario. Esto puede provocar el secuestro de sesiones de otros usuarios y, potencialmente, la escalada de privilegios hasta alcanzar derechos administrativos completos."
}
],
"metrics": {
CVE-2025/CVE-2025-300xx/CVE-2025-30037.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-30037",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T11:15:32.927",
"lastModified": "2025-08-27T11:15:32.927",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The system exposes several endpoints, typically including \"/int/\" in their path, that should be restricted to internal services, but are instead publicly accessible without authentication to any host able to reach the application server on port 443/tcp."
},
{
"lang": "es",
"value": "El sistema expone varios endpoints, que generalmente incluyen \"/int/\" en su ruta, que deber\u00edan estar restringidos a servicios internos, pero en cambio son accesibles p\u00fablicamente sin autenticaci\u00f3n para cualquier host capaz de llegar al servidor de aplicaciones en el puerto 443/tcp."
}
],
"metrics": {
CVE-2025/CVE-2025-300xx/CVE-2025-30038.json
+6 -2
View File
@@ -2,13 +2,17 @@
"id": "CVE-2025-30038",
"sourceIdentifier": "[email protected]",
"published": "2025-08-27T11:15:33.660",
"lastModified": "2025-08-27T11:15:33.660",
"vulnStatus": "Received",
"lastModified": "2025-08-29T16:24:09.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET. The identifier is exposed through a built-in Windows security feature that stores additional metadata in an NTFS alternate data stream (ADS) for all files downloaded from potentially untrusted sources."
},
{
"lang": "es",
"value": "La vulnerabilidad consiste en una fuga del ID de sesi\u00f3n al guardar un archivo descargado de CGM CLININET. El identificador se expone mediante una funci\u00f3n de seguridad integrada de Windows que almacena metadatos adicionales en un flujo de datos alternativo (ADS) NTFS para todos los archivos descargados de fuentes potencialmente no confiables."
}
],
"metrics": {
Loaded 100 of 509 files, more files were not shown because too many files have changed in this diff. Show more