admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-28 01:30:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-11-21T19:00:12.516198+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-11-21 19:04:03 +00:00
1 parent f9051c150e
commit 20835cbf0a
41 files changed
+1354 -414
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2023/CVE-2023-307xx/CVE-2023-30797.json
+2 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2023-30797",
"sourceIdentifier": "[email protected]",
"published": "2023-04-19T20:15:12.377",
"lastModified": "2025-02-05T15:15:19.940",
"lastModified": "2025-11-21T17:15:47.947",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "\n\nNetflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur.\n\n\n"
"value": "Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur."
}
],
"metrics": {
CVE-2023/CVE-2023-307xx/CVE-2023-30799.json
+2 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2023-30799",
"sourceIdentifier": "[email protected]",
"published": "2023-07-19T15:15:10.477",
"lastModified": "2024-11-21T08:00:55.520",
"lastModified": "2025-11-21T17:15:49.077",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system.\n\n"
"value": "MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system."
}
],
"metrics": {
CVE-2023/CVE-2023-308xx/CVE-2023-30800.json
+2 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2023-30800",
"sourceIdentifier": "[email protected]",
"published": "2023-09-07T16:15:07.670",
"lastModified": "2024-11-21T08:00:55.653",
"lastModified": "2025-11-21T17:15:49.593",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immediately restarted. The issue was fixed in RouterOS 6.49.10 stable. RouterOS version 7 is not affected.\n"
"value": "The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immediately restarted. The issue was fixed in RouterOS 6.49.10 stable. RouterOS version 7 is not affected."
},
{
"lang": "es",
CVE-2023/CVE-2023-73xx/CVE-2023-7304.json
+2 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2023-7304",
"sourceIdentifier": "[email protected]",
"published": "2025-10-15T02:15:31.830",
"lastModified": "2025-10-16T15:29:11.563",
"lastModified": "2025-11-21T17:15:49.873",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Ruijie RG-UAC Application Management Gateway contains a command injection vulnerability via the 'nmc_sync.php' interface.\u00a0An unauthenticated attacker able to reach the affected endpoint can inject shell commands via crafted request data, causing the application to execute arbitrary commands on the host. Successful exploitation can yield full control of the application process and may lead to system-level access depending on the service privileges. VulnCheck has observed this vulnerability being targeted by the RondoDox botnet campaign."
"value": "Ruijie RG-UAC Application Management Gateway contains a command injection vulnerability via the 'nmc_sync.php' interface. An unauthenticated attacker able to reach the affected endpoint can inject shell commands via crafted request data, causing the application to execute arbitrary commands on the host. Successful exploitation can yield full control of the application process and may lead to system-level access depending on the service privileges. VulnCheck has observed this vulnerability being targeted by the RondoDox botnet campaign."
}
],
"metrics": {
CVE-2025/CVE-2025-112xx/CVE-2025-11243.json
+6 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-11243",
"sourceIdentifier": "[email protected]",
"published": "2025-11-19T07:15:46.453",
"lastModified": "2025-11-19T19:14:59.327",
"lastModified": "2025-11-21T18:15:48.097",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -60,7 +60,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -70,6 +70,10 @@
}
],
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-02",
"source": "[email protected]"
},
{
"url": "https://www.nozominetworks.com/blog/shelly-pro-4pm-vulnerabilities",
"source": "[email protected]"
CVE-2025/CVE-2025-120xx/CVE-2025-12056.json
+6 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-12056",
"sourceIdentifier": "[email protected]",
"published": "2025-11-19T07:15:49.520",
"lastModified": "2025-11-19T19:14:59.327",
"lastModified": "2025-11-21T18:15:48.643",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -60,7 +60,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -70,6 +70,10 @@
}
],
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-03",
"source": "[email protected]"
},
{
"url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-12056",
"source": "[email protected]"
CVE-2025/CVE-2025-127xx/CVE-2025-12747.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-12747",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T17:15:50.053",
"lastModified": "2025-11-21T17:15:50.053",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Tainacan plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.0 via uploaded files marked as private being exposed in wp-content without adequate protection. This makes it possible for unauthenticated attackers to extract potentially sensitive information from files that have been marked as private."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-552"
}
]
}
],
"references": [
{
"url": "https://github.com/tainacan/tainacan/blob/2491612ee9d5b14baa70862ba2308ee925de0938/src/classes/class-tainacan-private-files.php",
"source": "[email protected]"
},
{
"url": "https://github.com/tainacan/tainacan/compare/1.0.0...1.0.1",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c64869f0-a4dd-4135-8ed8-a6ff82a48e1f?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-129xx/CVE-2025-12973.json
+72
View File
@@ -0,0 +1,72 @@
{
"id": "CVE-2025-12973",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T17:15:50.267",
"lastModified": "2025-11-21T17:15:50.267",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The S2B AI Assistant \u2013 ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeFile() function in all versions up to, and including, 1.7.8. This makes it possible for authenticated attackers, with Editor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"references": [
{
"url": "https://github.com/d0n601/CVE-2025-12973",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/s2b-ai-assistant/trunk/lib/helpers/Utils.php",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3399267%40s2b-ai-assistant&new=3399267%40s2b-ai-assistant&sfp_email=&sfph_mail=",
"source": "[email protected]"
},
{
"url": "https://ryankozak.com/posts/cve-2025-12973/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ac9d2b64-aff6-418a-bfe7-ec91b177ad6b?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-131xx/CVE-2025-13132.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-13132",
"sourceIdentifier": "59469e6c-7ea7-446f-8e43-06aa32c115e8",
"published": "2025-11-21T18:15:48.813",
"lastModified": "2025-11-21T18:15:48.813",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "This vulnerability allowed a site to enter fullscreen, after a user click, without a full-screen notification (toast) appearing. Without this notification, users could potentially be misled about what site they were on if a malicious site renders a fake UI (like a fake address bar.)"
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "59469e6c-7ea7-446f-8e43-06aa32c115e8",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 4.0
}
]
},
"weaknesses": [
{
"source": "59469e6c-7ea7-446f-8e43-06aa32c115e8",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1021"
}
]
}
],
"references": [
{
"url": "https://www.diabrowser.com/security/bulletins#CVE-2025-13132",
"source": "59469e6c-7ea7-446f-8e43-06aa32c115e8"
}
]
}
CVE-2025/CVE-2025-132xx/CVE-2025-13223.json
+14 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-13223",
"sourceIdentifier": "[email protected]",
"published": "2025-11-17T23:15:45.140",
"lastModified": "2025-11-20T15:17:23.773",
"vulnStatus": "Modified",
"lastModified": "2025-11-21T18:28:01.260",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -39,6 +39,18 @@
"cisaActionDue": "2025-12-10",
"cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
"cisaVulnerabilityName": "Google Chromium V8 Type Confusion Vulnerability",
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-843"
}
]
}
],
"configurations": [
{
"operator": "AND",
CVE-2025/CVE-2025-134xx/CVE-2025-13470.json
+128
View File
@@ -0,0 +1,128 @@
{
"id": "CVE-2025-13470",
"sourceIdentifier": "6504adb2-f5e9-4c9b-9eda-5e19c93bd9b3",
"published": "2025-11-21T17:15:50.473",
"lastModified": "2025-11-21T18:15:49.010",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In RNP version 0.18.0 a refactoring regression causes the symmetric \nsession key used for Public-Key Encrypted Session Key (PKESK) packets to\n be left uninitialized except for zeroing, resulting in it always being \nan all-zero byte array.\n\nAny data encrypted using public-key encryption \nin this release can be decrypted trivially by supplying an all-zero \nsession key, fully compromising confidentiality.\n\nThe vulnerability affects only public key encryption (PKESK packets).\u00a0 Passphrase-based encryption (SKESK packets) is not affected.\n\nRoot cause: Vulnerable session key buffer used in PKESK packet generation.\n\n\n\nThe defect was introduced in commit `7bd9a8dc356aae756b40755be76d36205b6b161a` where initialization \nlogic inside `encrypted_build_skesk()` only randomized the key for the \nSKESK path and omitted it for the PKESK path."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "6504adb2-f5e9-4c9b-9eda-5e19c93bd9b3",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:H/U:Red",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "YES",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "HIGH",
"providerUrgency": "RED"
}
}
],
"cvssMetricV31": [
{
"source": "6504adb2-f5e9-4c9b-9eda-5e19c93bd9b3",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "6504adb2-f5e9-4c9b-9eda-5e19c93bd9b3",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-330"
}
]
}
],
"references": [
{
"url": "https://access.redhat.com/security/cve/cve-2025-13402",
"source": "6504adb2-f5e9-4c9b-9eda-5e19c93bd9b3"
},
{
"url": "https://aur.archlinux.org/packages/rnp",
"source": "6504adb2-f5e9-4c9b-9eda-5e19c93bd9b3"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415863",
"source": "6504adb2-f5e9-4c9b-9eda-5e19c93bd9b3"
},
{
"url": "https://github.com/rnpgp/rnp/commit/7bd9a8dc356aae756b40755be76d36205b6b161a",
"source": "6504adb2-f5e9-4c9b-9eda-5e19c93bd9b3"
},
{
"url": "https://github.com/rnpgp/rnp/releases/tag/v0.18.1",
"source": "6504adb2-f5e9-4c9b-9eda-5e19c93bd9b3"
},
{
"url": "https://launchpad.net/ubuntu/+source/rnp",
"source": "6504adb2-f5e9-4c9b-9eda-5e19c93bd9b3"
},
{
"url": "https://open.ribose.com/advisories/ra-2025-11-20/",
"source": "6504adb2-f5e9-4c9b-9eda-5e19c93bd9b3"
},
{
"url": "https://packages.gentoo.org/packages/dev-util/librnp",
"source": "6504adb2-f5e9-4c9b-9eda-5e19c93bd9b3"
}
]
}
CVE-2025/CVE-2025-303xx/CVE-2025-30360.json
+6 -6
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-30360",
"sourceIdentifier": "[email protected]",
"published": "2025-06-03T18:15:25.410",
"lastModified": "2025-10-03T01:10:31.017",
"lastModified": "2025-11-21T18:26:18.640",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
@@ -42,19 +42,19 @@
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
CVE-2025/CVE-2025-56xx/CVE-2025-5601.json
+6 -6
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-5601",
"sourceIdentifier": "[email protected]",
"published": "2025-06-04T11:15:22.110",
"lastModified": "2025-08-13T15:28:56.650",
"lastModified": "2025-11-21T18:26:35.127",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
@@ -42,19 +42,19 @@
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
CVE-2025/CVE-2025-580xx/CVE-2025-58034.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58034",
"sourceIdentifier": "[email protected]",
"published": "2025-11-18T17:16:05.057",
"lastModified": "2025-11-20T18:15:50.680",
"vulnStatus": "Modified",
"lastModified": "2025-11-21T18:27:43.280",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-607xx/CVE-2025-60796.json
+38 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-60796",
"sourceIdentifier": "[email protected]",
"published": "2025-11-20T15:17:38.100",
"lastModified": "2025-11-21T15:13:13.800",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-21T17:15:50.787",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -11,7 +11,42 @@
"value": "phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting (XSS) vulnerabilities across various components. User-supplied input from $_REQUEST parameters is reflected in HTML output without proper encoding or sanitization in multiple locations including sequences.php, indexes.php, admin.php, and other unspecified files. An attacker can exploit these vulnerabilities to execute arbitrary JavaScript in victims' browsers, potentially leading to session hijacking, credential theft, or other malicious actions."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/phppgadmin/phppgadmin/blob/master/admin.php#L35",
CVE-2025/CVE-2025-627xx/CVE-2025-62709.json
+7 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-62709",
"sourceIdentifier": "[email protected]",
"published": "2025-11-20T17:15:51.087",
"lastModified": "2025-11-21T15:13:13.800",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-21T17:15:51.017",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -38,7 +38,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -55,6 +55,10 @@
{
"url": "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-xhhf-mpqr-2cq5",
"source": "[email protected]"
},
{
"url": "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-xhhf-mpqr-2cq5",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-628xx/CVE-2025-62875.json
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62875",
"sourceIdentifier": "[email protected]",
"published": "2025-11-20T16:16:00.540",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-11-21T17:15:51.300",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -81,6 +81,10 @@
{
"url": "http://www.openwall.com/lists/oss-security/2025/10/31/3",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://security.opensuse.org/2025/10/31/opensmtpd-local-DoS.html#reproducer",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-644xx/CVE-2025-64428.json
+7 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-64428",
"sourceIdentifier": "[email protected]",
"published": "2025-11-20T17:15:53.197",
"lastModified": "2025-11-21T15:13:13.800",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-21T17:15:51.493",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -60,7 +60,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -81,6 +81,10 @@
{
"url": "https://github.com/dataease/dataease/security/advisories/GHSA-88ph-3236-2m2h",
"source": "[email protected]"
},
{
"url": "https://github.com/dataease/dataease/security/advisories/GHSA-88ph-3236-2m2h",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-644xx/CVE-2025-64446.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-64446",
"sourceIdentifier": "[email protected]",
"published": "2025-11-14T16:15:58.567",
"lastModified": "2025-11-20T22:16:03.870",
"vulnStatus": "Modified",
"lastModified": "2025-11-21T18:27:33.730",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-644xx/CVE-2025-64483.json
+78
View File
@@ -0,0 +1,78 @@
{
"id": "CVE-2025-64483",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T18:15:49.157",
"lastModified": "2025-11-21T18:15:49.157",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Wazuh is a security detection, visibility, and compliance open source project. From version 4.9.0 to before 4.13.0, the Wazuh API \u2013 Agent Configuration in certain configurations allows authenticated users with read-only API roles to retrieve agent enrollment credentials through the /utils/configuration endpoint. These credentials can be used to register new agents within the same Wazuh tenant without requiring elevated permissions through the UI. This issue has been patched in version 4.13.0."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"references": [
{
"url": "https://github.com/wazuh/wazuh-dashboard-plugins/security/advisories/GHSA-gwf3-8gm3-qrmj",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-645xx/CVE-2025-64524.json
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-64524",
"sourceIdentifier": "[email protected]",
"published": "2025-11-20T18:15:51.250",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-11-21T17:15:51.643",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -59,6 +59,10 @@
{
"url": "http://www.openwall.com/lists/oss-security/2025/11/20/1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-rq44-2q5p-x3hv",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-652xx/CVE-2025-65220.json
+36 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-65220",
"sourceIdentifier": "[email protected]",
"published": "2025-11-20T15:17:40.010",
"lastModified": "2025-11-21T15:13:13.800",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-21T17:26:01.583",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,43 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:tenda:ac21_firmware:16.03.08.16:*:*:*:*:*:*:*",
"matchCriteriaId": "089AC516-5475-4725-B348-832A00ED0CC3"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:tenda:ac21:-:*:*:*:*:*:*:*",
"matchCriteriaId": "05B05222-6E83-487C-A083-CED82D803330"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN1.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-652xx/CVE-2025-65221.json
+36 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-65221",
"sourceIdentifier": "[email protected]",
"published": "2025-11-20T15:17:40.160",
"lastModified": "2025-11-21T15:13:13.800",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-21T17:25:39.963",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,43 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:tenda:ac21_firmware:16.03.08.16:*:*:*:*:*:*:*",
"matchCriteriaId": "089AC516-5475-4725-B348-832A00ED0CC3"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:tenda:ac21:-:*:*:*:*:*:*:*",
"matchCriteriaId": "05B05222-6E83-487C-A083-CED82D803330"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN2.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-652xx/CVE-2025-65222.json
+36 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-65222",
"sourceIdentifier": "[email protected]",
"published": "2025-11-20T15:17:40.297",
"lastModified": "2025-11-21T15:13:13.800",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-21T17:25:23.817",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,43 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:tenda:ac21_firmware:16.03.08.16:*:*:*:*:*:*:*",
"matchCriteriaId": "089AC516-5475-4725-B348-832A00ED0CC3"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:tenda:ac21:-:*:*:*:*:*:*:*",
"matchCriteriaId": "05B05222-6E83-487C-A083-CED82D803330"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN3.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-652xx/CVE-2025-65223.json
+36 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-65223",
"sourceIdentifier": "[email protected]",
"published": "2025-11-20T15:17:40.440",
"lastModified": "2025-11-21T15:13:13.800",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-21T17:25:10.917",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,43 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:tenda:ac21_firmware:16.03.08.16:*:*:*:*:*:*:*",
"matchCriteriaId": "089AC516-5475-4725-B348-832A00ED0CC3"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:tenda:ac21:-:*:*:*:*:*:*:*",
"matchCriteriaId": "05B05222-6E83-487C-A083-CED82D803330"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN4.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-652xx/CVE-2025-65226.json
+36 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-65226",
"sourceIdentifier": "[email protected]",
"published": "2025-11-20T15:17:40.577",
"lastModified": "2025-11-21T15:13:13.800",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-21T17:24:54.497",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,43 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:tenda:ac21_firmware:16.03.08.16:*:*:*:*:*:*:*",
"matchCriteriaId": "089AC516-5475-4725-B348-832A00ED0CC3"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:tenda:ac21:-:*:*:*:*:*:*:*",
"matchCriteriaId": "05B05222-6E83-487C-A083-CED82D803330"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN5.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-660xx/CVE-2025-66061.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-66061",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T13:15:46.920",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-11-21T17:15:51.783",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Cross-Site Request Forgery (CSRF) vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Cross Site Request Forgery.This issue affects Seriously Simple Podcasting: from n/a through <= 3.13.0."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-660xx/CVE-2025-66062.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-66062",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T13:15:47.050",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-11-21T17:15:51.983",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Frank Goossens WP YouTube Lyte wp-youtube-lyte allows Phishing.This issue affects WP YouTube Lyte: from n/a through <= 1.7.28."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.2,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-660xx/CVE-2025-66063.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-66063",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T13:15:47.197",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-11-21T17:15:52.183",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Google Review Slider: from n/a through <= 17.4."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-660xx/CVE-2025-66069.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-66069",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T13:15:47.943",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-11-21T17:15:52.410",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in Themeisle PPOM for WooCommerce woocommerce-product-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PPOM for WooCommerce: from n/a through <= 33.0.16."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 0.9,
"impactScore": 3.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-660xx/CVE-2025-66075.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-66075",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T13:15:48.523",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-11-21T17:15:52.630",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through <= 4.0.3."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.6,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-660xx/CVE-2025-66081.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-66081",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T13:15:48.977",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-11-21T17:15:52.847",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Head Meta Data head-meta-data allows Stored XSS.This issue affects Head Meta Data: from n/a through <= 20250327."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-660xx/CVE-2025-66089.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-66089",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T13:15:50.060",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-11-21T17:15:53.070",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Feed for WooCommerce: from n/a through <= 2.3.1."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 0.9,
"impactScore": 3.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-660xx/CVE-2025-66090.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-66090",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T13:15:50.223",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-11-21T17:15:53.280",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Skill Bar skt-skill-bar allows DOM-Based XSS.This issue affects SKT Skill Bar: from n/a through <= 2.5."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-660xx/CVE-2025-66091.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-66091",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T13:15:50.400",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-11-21T18:15:49.320",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows DOM-Based XSS.This issue affects Stylish Cost Calculator: from n/a through <= 8.1.5."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-660xx/CVE-2025-66097.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-66097",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T13:15:51.180",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-11-21T17:15:53.507",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Cross-Site Request Forgery (CSRF) vulnerability in Igor Jerosimi\u0107 I Order Terms i-order-terms allows Cross Site Request Forgery.This issue affects I Order Terms: from n/a through <= 1.5.0."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 0.9,
"impactScore": 3.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-660xx/CVE-2025-66098.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-66098",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T13:15:51.350",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-11-21T17:15:53.720",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Camille V Travelers' Map travelers-map allows Stored XSS.This issue affects Travelers' Map: from n/a through <= 2.3.2."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-660xx/CVE-2025-66099.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-66099",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T13:15:51.510",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-11-21T17:15:53.947",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in ThemeAtelier Chat Help chat-help allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chat Help: from n/a through <= 3.1.3."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-661xx/CVE-2025-66112.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-66112",
"sourceIdentifier": "[email protected]",
"published": "2025-11-21T13:15:52.987",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-11-21T18:15:49.480",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in WebToffee Accessibility Toolkit by WebYes accessibility-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Toolkit by WebYes: from n/a through <= 2.0.4."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
README.md
+35 -33
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-11-21T17:00:12.068407+00:00
2025-11-21T19:00:12.516198+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-11-21T16:40:42.397000+00:00
2025-11-21T18:28:01.260000+00:00
```
### Last Data Feed Release
@@ -33,47 +33,49 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
319059
319064
```
### CVEs added in the last Commit
Recently added CVEs: `3`
Recently added CVEs: `5`
- [CVE-2025-13357](CVE-2025/CVE-2025-133xx/CVE-2025-13357.json) (`2025-11-21T15:15:51.313`)
- [CVE-2025-13432](CVE-2025/CVE-2025-134xx/CVE-2025-13432.json) (`2025-11-21T15:15:51.660`)
- [CVE-2025-41115](CVE-2025/CVE-2025-411xx/CVE-2025-41115.json) (`2025-11-21T15:15:52.283`)
- [CVE-2025-12747](CVE-2025/CVE-2025-127xx/CVE-2025-12747.json) (`2025-11-21T17:15:50.053`)
- [CVE-2025-12973](CVE-2025/CVE-2025-129xx/CVE-2025-12973.json) (`2025-11-21T17:15:50.267`)
- [CVE-2025-13132](CVE-2025/CVE-2025-131xx/CVE-2025-13132.json) (`2025-11-21T18:15:48.813`)
- [CVE-2025-13470](CVE-2025/CVE-2025-134xx/CVE-2025-13470.json) (`2025-11-21T17:15:50.473`)
- [CVE-2025-64483](CVE-2025/CVE-2025-644xx/CVE-2025-64483.json) (`2025-11-21T18:15:49.157`)
### CVEs modified in the last Commit
Recently modified CVEs: `272`
Recently modified CVEs: `34`
- [CVE-2025-66085](CVE-2025/CVE-2025-660xx/CVE-2025-66085.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66086](CVE-2025/CVE-2025-660xx/CVE-2025-66086.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66087](CVE-2025/CVE-2025-660xx/CVE-2025-66087.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66089](CVE-2025/CVE-2025-660xx/CVE-2025-66089.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66090](CVE-2025/CVE-2025-660xx/CVE-2025-66090.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66091](CVE-2025/CVE-2025-660xx/CVE-2025-66091.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66092](CVE-2025/CVE-2025-660xx/CVE-2025-66092.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66093](CVE-2025/CVE-2025-660xx/CVE-2025-66093.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66095](CVE-2025/CVE-2025-660xx/CVE-2025-66095.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66096](CVE-2025/CVE-2025-660xx/CVE-2025-66096.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66097](CVE-2025/CVE-2025-660xx/CVE-2025-66097.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66098](CVE-2025/CVE-2025-660xx/CVE-2025-66098.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66099](CVE-2025/CVE-2025-660xx/CVE-2025-66099.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66101](CVE-2025/CVE-2025-661xx/CVE-2025-66101.json) (`2025-11-21T16:16:16.250`)
- [CVE-2025-66106](CVE-2025/CVE-2025-661xx/CVE-2025-66106.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66107](CVE-2025/CVE-2025-661xx/CVE-2025-66107.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66108](CVE-2025/CVE-2025-661xx/CVE-2025-66108.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66109](CVE-2025/CVE-2025-661xx/CVE-2025-66109.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66110](CVE-2025/CVE-2025-661xx/CVE-2025-66110.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66111](CVE-2025/CVE-2025-661xx/CVE-2025-66111.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66112](CVE-2025/CVE-2025-661xx/CVE-2025-66112.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66113](CVE-2025/CVE-2025-661xx/CVE-2025-66113.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66114](CVE-2025/CVE-2025-661xx/CVE-2025-66114.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-66115](CVE-2025/CVE-2025-661xx/CVE-2025-66115.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-9825](CVE-2025/CVE-2025-98xx/CVE-2025-9825.json) (`2025-11-21T15:13:13.800`)
- [CVE-2025-58034](CVE-2025/CVE-2025-580xx/CVE-2025-58034.json) (`2025-11-21T18:27:43.280`)
- [CVE-2025-60796](CVE-2025/CVE-2025-607xx/CVE-2025-60796.json) (`2025-11-21T17:15:50.787`)
- [CVE-2025-62709](CVE-2025/CVE-2025-627xx/CVE-2025-62709.json) (`2025-11-21T17:15:51.017`)
- [CVE-2025-62875](CVE-2025/CVE-2025-628xx/CVE-2025-62875.json) (`2025-11-21T17:15:51.300`)
- [CVE-2025-64428](CVE-2025/CVE-2025-644xx/CVE-2025-64428.json) (`2025-11-21T17:15:51.493`)
- [CVE-2025-64446](CVE-2025/CVE-2025-644xx/CVE-2025-64446.json) (`2025-11-21T18:27:33.730`)
- [CVE-2025-64524](CVE-2025/CVE-2025-645xx/CVE-2025-64524.json) (`2025-11-21T17:15:51.643`)
- [CVE-2025-65220](CVE-2025/CVE-2025-652xx/CVE-2025-65220.json) (`2025-11-21T17:26:01.583`)
- [CVE-2025-65221](CVE-2025/CVE-2025-652xx/CVE-2025-65221.json) (`2025-11-21T17:25:39.963`)
- [CVE-2025-65222](CVE-2025/CVE-2025-652xx/CVE-2025-65222.json) (`2025-11-21T17:25:23.817`)
- [CVE-2025-65223](CVE-2025/CVE-2025-652xx/CVE-2025-65223.json) (`2025-11-21T17:25:10.917`)
- [CVE-2025-65226](CVE-2025/CVE-2025-652xx/CVE-2025-65226.json) (`2025-11-21T17:24:54.497`)
- [CVE-2025-66061](CVE-2025/CVE-2025-660xx/CVE-2025-66061.json) (`2025-11-21T17:15:51.783`)
- [CVE-2025-66062](CVE-2025/CVE-2025-660xx/CVE-2025-66062.json) (`2025-11-21T17:15:51.983`)
- [CVE-2025-66063](CVE-2025/CVE-2025-660xx/CVE-2025-66063.json) (`2025-11-21T17:15:52.183`)
- [CVE-2025-66069](CVE-2025/CVE-2025-660xx/CVE-2025-66069.json) (`2025-11-21T17:15:52.410`)
- [CVE-2025-66075](CVE-2025/CVE-2025-660xx/CVE-2025-66075.json) (`2025-11-21T17:15:52.630`)
- [CVE-2025-66081](CVE-2025/CVE-2025-660xx/CVE-2025-66081.json) (`2025-11-21T17:15:52.847`)
- [CVE-2025-66089](CVE-2025/CVE-2025-660xx/CVE-2025-66089.json) (`2025-11-21T17:15:53.070`)
- [CVE-2025-66090](CVE-2025/CVE-2025-660xx/CVE-2025-66090.json) (`2025-11-21T17:15:53.280`)
- [CVE-2025-66091](CVE-2025/CVE-2025-660xx/CVE-2025-66091.json) (`2025-11-21T18:15:49.320`)
- [CVE-2025-66097](CVE-2025/CVE-2025-660xx/CVE-2025-66097.json) (`2025-11-21T17:15:53.507`)
- [CVE-2025-66098](CVE-2025/CVE-2025-660xx/CVE-2025-66098.json) (`2025-11-21T17:15:53.720`)
- [CVE-2025-66099](CVE-2025/CVE-2025-660xx/CVE-2025-66099.json) (`2025-11-21T17:15:53.947`)
- [CVE-2025-66112](CVE-2025/CVE-2025-661xx/CVE-2025-66112.json) (`2025-11-21T18:15:49.480`)
## Download and Usage
_state.csv
+291 -286
View File
File diff suppressed because it is too large. Load diff