Auto-Update: 2025-09-30T16:00:11.842104+00:00

This commit is contained in:
cad-safe-bot committed 2025-09-30 16:03:57 +00:00
1 parent 18256d8d22
commit 239f945e65
107 files changed
+2689 -448

No files matched your search

+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2019-6833",
"sourceIdentifier": "[email protected]",
"published": "2019-09-17T20:15:12.467",
"lastModified": "2024-11-21T04:47:14.600",
"lastModified": "2025-09-30T15:15:39.103",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
],
"cvssMetricV2": [
+11 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2020-11904",
"sourceIdentifier": "[email protected]",
"published": "2020-06-17T11:15:10.587",
"lastModified": "2024-11-21T04:58:52.100",
"lastModified": "2025-09-30T15:15:43.650",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -78,6 +78,16 @@
"value": "CWE-787"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-190"
}
]
}
],
"configurations": [
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2020-11910",
"sourceIdentifier": "[email protected]",
"published": "2020-06-17T11:15:11.023",
"lastModified": "2024-11-21T04:58:52.967",
"lastModified": "2025-09-30T15:15:44.997",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
],
"cvssMetricV2": [
@@ -74,6 +94,16 @@
"value": "CWE-125"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
+11 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2020-27336",
"sourceIdentifier": "[email protected]",
"published": "2020-12-22T22:15:13.927",
"lastModified": "2024-11-21T05:21:01.450",
"lastModified": "2025-09-30T15:15:45.907",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -98,6 +98,16 @@
"value": "CWE-125"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
+8 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-39810",
"sourceIdentifier": "[email protected]",
"published": "2023-10-30T17:15:47.503",
"lastModified": "2025-09-04T19:15:32.130",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:45:57.777",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -90,14 +90,8 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0",
"matchCriteriaId": "530F3220-8957-4F6C-9790-2D4A4CC4122B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
}
]
}
@@ -107,7 +101,10 @@
"references": [
{
"url": "https://source.android.com/security/bulletin/2025-09-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://source.android.com/docs/security/bulletin/android-14",
+8 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-0917",
"sourceIdentifier": "[email protected]",
"published": "2023-02-19T09:15:11.197",
"lastModified": "2025-06-27T19:05:16.527",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:12:30.213",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -123,15 +123,15 @@
"source": "[email protected]",
"tags": [
"Permissions Required",
"Third Party Advisory"
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.221493",
"source": "[email protected]",
"tags": [
"Permissions Required",
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
@@ -147,15 +147,15 @@
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.221493",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
}
]
+10 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-2094",
"sourceIdentifier": "[email protected]",
"published": "2023-04-15T11:15:06.843",
"lastModified": "2025-02-06T16:15:35.797",
"vulnStatus": "Modified",
"lastModified": "2025-09-30T14:07:13.837",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -131,8 +131,8 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:vehicle_service_management_system_project:vehicle_service_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B71872FF-70AC-422D-9FA4-3EB30246660F"
"criteria": "cpe:2.3:a:oretnom23:vehicle_service_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "49085F69-097C-4C7A-A470-9B946EBE8123"
}
]
}
@@ -152,14 +152,15 @@
"source": "[email protected]",
"tags": [
"Permissions Required",
"Third Party Advisory"
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.226102",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
@@ -174,14 +175,15 @@
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.226102",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
}
]
+12 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-21342",
"sourceIdentifier": "[email protected]",
"published": "2023-10-30T17:15:50.147",
"lastModified": "2025-09-04T18:15:32.453",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:41:54.473",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -80,9 +80,8 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0",
"matchCriteriaId": "530F3220-8957-4F6C-9790-2D4A4CC4122B"
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
}
]
}
@@ -92,11 +91,17 @@
"references": [
{
"url": "https://android.googlesource.com/platform/frameworks/base/+/03bb6b20a8eaa7c565401597294ea9e3aee6d4ab",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://source.android.com/security/bulletin/2025-05-01",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://source.android.com/docs/security/bulletin/android-14",
+16 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-2826",
"sourceIdentifier": "[email protected]",
"published": "2023-05-21T08:15:08.643",
"lastModified": "2025-02-12T17:15:20.110",
"vulnStatus": "Modified",
"lastModified": "2025-09-30T14:23:21.070",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -115,21 +115,24 @@
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
"Third Party Advisory",
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.229612",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.229612",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
@@ -137,21 +140,24 @@
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
"Third Party Advisory",
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.229612",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.229612",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
@@ -159,7 +165,8 @@
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
"Third Party Advisory",
"Broken Link"
]
}
]
+8 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-3143",
"sourceIdentifier": "[email protected]",
"published": "2023-06-07T15:15:09.617",
"lastModified": "2025-04-22T14:51:37.563",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T14:51:12.203",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -122,14 +122,15 @@
"source": "[email protected]",
"tags": [
"Permissions Required",
"Third Party Advisory"
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231012",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
@@ -144,14 +145,15 @@
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231012",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
}
]
+12 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-3144",
"sourceIdentifier": "[email protected]",
"published": "2023-06-07T15:15:09.710",
"lastModified": "2025-04-22T14:51:37.563",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T14:53:08.853",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -114,7 +114,8 @@
"url": "https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#10xss-vulnerability-in-adminpostsmanage_postphptitle",
"source": "[email protected]",
"tags": [
"Exploit"
"Exploit",
"Third Party Advisory"
]
},
{
@@ -122,21 +123,23 @@
"source": "[email protected]",
"tags": [
"Permissions Required",
"Third Party Advisory"
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231013",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#10xss-vulnerability-in-adminpostsmanage_postphptitle",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
"Exploit",
"Third Party Advisory"
]
},
{
@@ -144,14 +147,15 @@
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231013",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
}
]
+12 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-3145",
"sourceIdentifier": "[email protected]",
"published": "2023-06-07T15:15:09.793",
"lastModified": "2025-04-22T14:51:37.563",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T14:58:20.370",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -124,7 +124,8 @@
"url": "https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#9sql-injection-vulnerability-in-classesusersphppost",
"source": "[email protected]",
"tags": [
"Exploit"
"Exploit",
"Third Party Advisory"
]
},
{
@@ -132,21 +133,23 @@
"source": "[email protected]",
"tags": [
"Permissions Required",
"Third Party Advisory"
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231014",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#9sql-injection-vulnerability-in-classesusersphppost",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
"Exploit",
"Third Party Advisory"
]
},
{
@@ -154,14 +157,15 @@
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231014",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
}
]
+8 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-3146",
"sourceIdentifier": "[email protected]",
"published": "2023-06-07T16:15:09.523",
"lastModified": "2025-04-22T14:51:37.563",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:09:06.097",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -122,14 +122,15 @@
"source": "[email protected]",
"tags": [
"Permissions Required",
"Third Party Advisory"
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231015",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
@@ -144,14 +145,15 @@
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231015",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
}
]
+12 -10
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-3147",
"sourceIdentifier": "[email protected]",
"published": "2023-06-07T16:15:09.630",
"lastModified": "2025-04-22T14:51:37.563",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:51:38.790",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -114,7 +114,8 @@
"url": "https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#7sql-injection-vulnerability-in-admincategoriesview_categoryphp",
"source": "[email protected]",
"tags": [
"Exploit"
"Exploit",
"Third Party Advisory"
]
},
{
@@ -122,22 +123,23 @@
"source": "[email protected]",
"tags": [
"Permissions Required",
"Third Party Advisory"
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231016",
"source": "[email protected]",
"tags": [
"Permissions Required",
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#7sql-injection-vulnerability-in-admincategoriesview_categoryphp",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit"
"Exploit",
"Third Party Advisory"
]
},
{
@@ -145,15 +147,15 @@
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231016",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
}
]
+10 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-3148",
"sourceIdentifier": "[email protected]",
"published": "2023-06-07T17:15:10.397",
"lastModified": "2025-04-22T14:51:37.563",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:55:22.373",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -122,14 +122,16 @@
"url": "https://vuldb.com/?ctiid.231017",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231017",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
@@ -144,14 +146,16 @@
"url": "https://vuldb.com/?ctiid.231017",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231017",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
}
]
+10 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-3149",
"sourceIdentifier": "[email protected]",
"published": "2023-06-07T17:15:10.483",
"lastModified": "2025-04-22T14:51:37.563",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:56:27.690",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -122,14 +122,16 @@
"url": "https://vuldb.com/?ctiid.231018",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231018",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
@@ -144,14 +146,16 @@
"url": "https://vuldb.com/?ctiid.231018",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231018",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
}
]
+10 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-3150",
"sourceIdentifier": "[email protected]",
"published": "2023-06-07T18:15:10.050",
"lastModified": "2025-04-22T14:51:37.563",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:57:04.837",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -121,14 +121,16 @@
"url": "https://vuldb.com/?ctiid.231019",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231019",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
@@ -142,14 +144,16 @@
"url": "https://vuldb.com/?ctiid.231019",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.231019",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
}
]
+2 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-3986",
"sourceIdentifier": "[email protected]",
"published": "2023-07-28T05:15:11.407",
"lastModified": "2025-02-11T15:25:36.557",
"vulnStatus": "Modified",
"lastModified": "2025-09-30T14:10:50.333",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -123,7 +123,6 @@
"source": "[email protected]",
"tags": [
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
]
},
@@ -148,7 +147,6 @@
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
]
},
+2 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-3987",
"sourceIdentifier": "[email protected]",
"published": "2023-07-28T06:15:11.113",
"lastModified": "2025-02-11T15:25:36.557",
"vulnStatus": "Modified",
"lastModified": "2025-09-30T14:10:00.917",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -123,7 +123,6 @@
"source": "[email protected]",
"tags": [
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
]
},
@@ -148,7 +147,6 @@
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
]
},
+2 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-5270",
"sourceIdentifier": "[email protected]",
"published": "2023-09-29T16:15:10.777",
"lastModified": "2024-12-23T15:18:44.853",
"vulnStatus": "Modified",
"lastModified": "2025-09-30T13:59:59.333",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -127,7 +127,6 @@
"source": "[email protected]",
"tags": [
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
]
},
@@ -135,7 +134,6 @@
"url": "https://vuldb.com/?id.240883",
"source": "[email protected]",
"tags": [
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
]
@@ -153,7 +151,6 @@
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
]
},
@@ -161,7 +158,6 @@
"url": "https://vuldb.com/?id.240883",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
]
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-10969",
"sourceIdentifier": "[email protected]",
"published": "2024-11-07T20:15:15.930",
"lastModified": "2025-05-15T07:15:50.080",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T14:40:07.217",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -174,7 +174,10 @@
"references": [
{
"url": "https://1000projects.org/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/ppp-src/CVE/issues/31",
+8 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-11078",
"sourceIdentifier": "[email protected]",
"published": "2024-11-11T20:15:17.400",
"lastModified": "2025-02-14T07:15:31.900",
"vulnStatus": "Modified",
"lastModified": "2025-09-30T14:26:00.933",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -191,21 +191,24 @@
"url": "https://vuldb.com/?ctiid.283873",
"source": "[email protected]",
"tags": [
"Permissions Required"
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.283873",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.441187",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
}
]
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-11826",
"sourceIdentifier": "[email protected]",
"published": "2025-01-07T12:15:23.200",
"lastModified": "2025-08-26T20:15:32.410",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:29:15.737",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
+7 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13080",
"sourceIdentifier": "[email protected]",
"published": "2024-12-31T20:15:28.157",
"lastModified": "2025-04-30T19:15:53.600",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T14:46:28.430",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -184,21 +184,23 @@
"source": "[email protected]",
"tags": [
"Permissions Required",
"Third Party Advisory"
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.289833",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.472190",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Third Party Advisory",
"VDB Entry"
]
}
]
+16 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-2769",
"sourceIdentifier": "[email protected]",
"published": "2024-03-21T22:15:12.943",
"lastModified": "2025-09-21T17:15:47.320",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:11:27.080",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -187,15 +187,26 @@
},
{
"url": "https://vuldb.com/?submit.302366",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654386",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.campcodes.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Beauty%20Parlor%20Management%20System/Complete%20Online%20Beauty%20Parlor%20Management%20System%20-%20vuln%205.pdf",
+11 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-2777",
"sourceIdentifier": "[email protected]",
"published": "2024-03-22T00:15:08.090",
"lastModified": "2025-04-30T19:15:53.853",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T14:45:13.603",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -181,13 +181,17 @@
"url": "https://vuldb.com/?id.257611",
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
"VDB Entry",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?submit.302430",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Marriage%20Registration%20System/Complete%20Online%20Marriage%20Registration%20System%20-%20vuln%202.pdf",
@@ -208,8 +212,8 @@
"url": "https://vuldb.com/?id.257611",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"VDB Entry"
"VDB Entry",
"Third Party Advisory"
]
}
]
+63 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-31859",
"sourceIdentifier": "[email protected]",
"published": "2024-05-26T14:15:08.907",
"lastModified": "2024-11-21T09:14:02.070",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:20:13.333",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
]
},
@@ -51,14 +71,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.1.0",
"versionEndExcluding": "8.1.13",
"matchCriteriaId": "47448305-8E05-4AEE-9E7B-D52AC86C7370"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.5.0",
"versionEndExcluding": "9.5.4",
"matchCriteriaId": "73F3450F-7A4F-450D-BC68-E726D347636F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.6.0",
"versionEndExcluding": "9.6.2",
"matchCriteriaId": "B3E36367-4F29-45EE-BCF6-CDAA8E599E85"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://mattermost.com/security-updates",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
+53 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-32045",
"sourceIdentifier": "[email protected]",
"published": "2024-05-26T14:15:09.137",
"lastModified": "2024-11-21T09:14:22.920",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-30T15:24:46.110",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -49,16 +49,65 @@
"value": "CWE-284"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-639"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.1.0",
"versionEndExcluding": "8.1.13",
"matchCriteriaId": "47448305-8E05-4AEE-9E7B-D52AC86C7370"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.5.0",
"versionEndExcluding": "9.5.4",
"matchCriteriaId": "73F3450F-7A4F-450D-BC68-E726D347636F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.6.0",
"versionEndExcluding": "9.6.2",
"matchCriteriaId": "B3E36367-4F29-45EE-BCF6-CDAA8E599E85"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://mattermost.com/security-updates",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
+38 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-32964",
"sourceIdentifier": "[email protected]",
"published": "2024-05-14T15:37:18.180",
"lastModified": "2024-11-21T09:16:07.637",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T14:35:10.233",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,54 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:lobehub:lobe_chat:*:*:*:*:*:*:*:*",
"versionEndExcluding": "0.150.6",
"matchCriteriaId": "F535CACD-58A3-47EB-980A-B200CEE751E9"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/lobehub/lobe-chat/commit/465665a735556669ee30446c7ea9049a20cc7c37",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-mxhq-xw3g-rphc",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Vendor Advisory"
]
},
{
"url": "https://github.com/lobehub/lobe-chat/commit/465665a735556669ee30446c7ea9049a20cc7c37",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-mxhq-xw3g-rphc",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Vendor Advisory"
]
}
]
}
+2 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2024-34010",
"sourceIdentifier": "[email protected]",
"published": "2024-04-29T16:15:35.187",
"lastModified": "2024-11-21T09:17:54.360",
"lastModified": "2025-09-30T15:15:47.140",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690."
"value": "Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690, Acronis True Image (Windows) before build 42386."
},
{
"lang": "es",
+43 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-34029",
"sourceIdentifier": "[email protected]",
"published": "2024-05-26T14:15:09.367",
"lastModified": "2024-11-21T09:17:56.890",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:26:42.900",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.1.0",
"versionEndExcluding": "8.1.13",
"matchCriteriaId": "47448305-8E05-4AEE-9E7B-D52AC86C7370"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.5.0",
"versionEndExcluding": "9.5.4",
"matchCriteriaId": "73F3450F-7A4F-450D-BC68-E726D347636F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.7.0",
"versionEndExcluding": "9.7.2",
"matchCriteriaId": "44A14BC6-9CCB-4D0B-9C07-79767507C4D2"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://mattermost.com/security-updates",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
+43 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-34152",
"sourceIdentifier": "[email protected]",
"published": "2024-05-26T14:15:09.607",
"lastModified": "2024-11-21T09:18:12.370",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:27:40.547",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.1.0",
"versionEndExcluding": "8.1.13",
"matchCriteriaId": "47448305-8E05-4AEE-9E7B-D52AC86C7370"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.5.0",
"versionEndExcluding": "9.5.4",
"matchCriteriaId": "73F3450F-7A4F-450D-BC68-E726D347636F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.6.0",
"versionEndExcluding": "9.6.2",
"matchCriteriaId": "B3E36367-4F29-45EE-BCF6-CDAA8E599E85"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://mattermost.com/security-updates",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
+63 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-36241",
"sourceIdentifier": "[email protected]",
"published": "2024-05-26T14:15:09.830",
"lastModified": "2024-11-21T09:21:55.540",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:28:53.153",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.6,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
@@ -51,14 +71,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.1.0",
"versionEndExcluding": "8.1.13",
"matchCriteriaId": "47448305-8E05-4AEE-9E7B-D52AC86C7370"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.5.0",
"versionEndExcluding": "9.5.4",
"matchCriteriaId": "73F3450F-7A4F-450D-BC68-E726D347636F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.6.0",
"versionEndExcluding": "9.6.2",
"matchCriteriaId": "B3E36367-4F29-45EE-BCF6-CDAA8E599E85"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://mattermost.com/security-updates",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
+43 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-36255",
"sourceIdentifier": "[email protected]",
"published": "2024-05-26T14:15:10.060",
"lastModified": "2024-11-21T09:21:56.730",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-30T15:29:54.477",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.1.0",
"versionEndExcluding": "8.1.13",
"matchCriteriaId": "47448305-8E05-4AEE-9E7B-D52AC86C7370"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.5.0",
"versionEndExcluding": "9.5.4",
"matchCriteriaId": "73F3450F-7A4F-450D-BC68-E726D347636F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.6.0",
"versionEndExcluding": "9.6.2",
"matchCriteriaId": "B3E36367-4F29-45EE-BCF6-CDAA8E599E85"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://mattermost.com/security-updates",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
+50 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-5270",
"sourceIdentifier": "[email protected]",
"published": "2024-05-26T14:15:10.303",
"lastModified": "2024-11-21T09:47:19.160",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:47:34.487",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,60 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.1.0",
"versionEndExcluding": "8.1.13",
"matchCriteriaId": "47448305-8E05-4AEE-9E7B-D52AC86C7370"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.5.0",
"versionEndExcluding": "9.5.4",
"matchCriteriaId": "73F3450F-7A4F-450D-BC68-E726D347636F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.6.0",
"versionEndExcluding": "9.6.2",
"matchCriteriaId": "B3E36367-4F29-45EE-BCF6-CDAA8E599E85"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.7.0",
"versionEndExcluding": "9.7.2",
"matchCriteriaId": "44A14BC6-9CCB-4D0B-9C07-79767507C4D2"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://mattermost.com/security-updates",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
+43 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-5272",
"sourceIdentifier": "[email protected]",
"published": "2024-05-26T14:15:10.537",
"lastModified": "2024-11-21T09:47:19.460",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:48:21.680",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.1.0",
"versionEndExcluding": "8.1.13",
"matchCriteriaId": "47448305-8E05-4AEE-9E7B-D52AC86C7370"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.5.0",
"versionEndExcluding": "9.5.4",
"matchCriteriaId": "73F3450F-7A4F-450D-BC68-E726D347636F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.6.0",
"versionEndExcluding": "9.6.2",
"matchCriteriaId": "B3E36367-4F29-45EE-BCF6-CDAA8E599E85"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://mattermost.com/security-updates",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
+46 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-54083",
"sourceIdentifier": "[email protected]",
"published": "2024-12-16T08:15:05.317",
"lastModified": "2024-12-16T08:15:05.317",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:49:33.440",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.5.0",
"versionEndExcluding": "9.5.13",
"matchCriteriaId": "EF2505C7-3CBB-4905-9C0D-46E199A052A8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.11.0",
"versionEndExcluding": "9.11.5",
"matchCriteriaId": "992DBA77-028D-4913-B98B-1AC0FEFEAFBF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.0.0",
"versionEndExcluding": "10.0.3",
"matchCriteriaId": "3898CB89-EE8C-4463-B9CB-BDB2E2B1C9A8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.1.0",
"versionEndExcluding": "10.1.3",
"matchCriteriaId": "EF51BACA-F34A-40EC-8402-F71005556EE3"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
+66 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-54682",
"sourceIdentifier": "[email protected]",
"published": "2024-12-16T08:15:05.513",
"lastModified": "2024-12-16T08:15:05.513",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:50:38.853",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
]
},
@@ -51,10 +71,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.5.0",
"versionEndExcluding": "9.5.13",
"matchCriteriaId": "EF2505C7-3CBB-4905-9C0D-46E199A052A8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.11.0",
"versionEndExcluding": "9.11.5",
"matchCriteriaId": "992DBA77-028D-4913-B98B-1AC0FEFEAFBF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.0.0",
"versionEndExcluding": "10.0.3",
"matchCriteriaId": "3898CB89-EE8C-4463-B9CB-BDB2E2B1C9A8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.1.0",
"versionEndExcluding": "10.1.3",
"matchCriteriaId": "EF51BACA-F34A-40EC-8402-F71005556EE3"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
+25 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-58040",
"sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"published": "2025-09-30T11:37:36.600",
"lastModified": "2025-09-30T11:37:36.600",
"lastModified": "2025-09-30T14:15:37.240",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,30 @@
"value": "Crypt::RandomEncryption for Perl version 0.01 uses insecure rand() function during encryption."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0297",
"sourceIdentifier": "[email protected]",
"published": "2025-01-07T16:15:39.887",
"lastModified": "2025-08-26T20:15:34.410",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:29:02.527",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0985",
"sourceIdentifier": "[email protected]",
"published": "2025-02-28T17:15:15.937",
"lastModified": "2025-08-26T20:15:34.760",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:26:28.207",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
+31 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10035",
"sourceIdentifier": "df4dee71-de3a-4139-9588-11b62fe6c0ff",
"published": "2025-09-18T22:15:41.857",
"lastModified": "2025-09-30T01:00:06.043",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-30T14:26:14.983",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,10 +55,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortra:goanywhere_managed_file_transfer:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.6.3",
"matchCriteriaId": "CF143971-7546-4C90-B0D0-A3E08536BF4F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fortra:goanywhere_managed_file_transfer:*:*:*:*:*:*:*:*",
"versionStartIncluding": "7.7.0",
"versionEndExcluding": "7.8.4",
"matchCriteriaId": "479CA63D-4C41-4CA1-9655-A8BD43311CEA"
}
]
}
]
}
],
"references": [
{
"url": "https://www.fortra.com/security/advisories/product-security/fi-2025-012",
"source": "df4dee71-de3a-4139-9588-11b62fe6c0ff"
"source": "df4dee71-de3a-4139-9588-11b62fe6c0ff",
"tags": [
"Vendor Advisory"
]
}
]
}
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10688",
"sourceIdentifier": "[email protected]",
"published": "2025-09-18T20:15:38.283",
"lastModified": "2025-09-21T10:15:46.690",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:11:56.390",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-10859",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T13:15:48.550",
"lastModified": "2025-09-30T13:15:48.550",
"lastModified": "2025-09-30T14:15:37.667",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed all tabs This vulnerability affects Firefox for iOS < 143.1."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.5,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-359"
}
]
}
],
"references": [
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1684624",
+13 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-10991",
"sourceIdentifier": "f23511db-6c3e-4e32-a477-6aa17d310630",
"published": "2025-09-30T11:37:38.757",
"lastModified": "2025-09-30T11:37:38.757",
"lastModified": "2025-09-30T14:15:37.810",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -57,6 +57,18 @@
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"references": [
{
"url": "https://www.tp-link.com/en/support/faq/4693/",
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-11178",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T15:15:47.863",
"lastModified": "2025-09-30T15:15:47.863",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42386."
}
],
"metrics": {
"cvssMetricV30": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.3,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-427"
}
]
}
],
"references": [
{
"url": "https://security-advisory.acronis.com/advisories/SEC-7078",
"source": "[email protected]"
}
]
}
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-1403",
"sourceIdentifier": "[email protected]",
"published": "2025-02-21T17:15:13.437",
"lastModified": "2025-08-26T20:15:35.430",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:25:51.423",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
+79 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-1723",
"sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02",
"published": "2025-03-03T08:15:15.717",
"lastModified": "2025-03-03T08:15:15.717",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-30T15:01:26.980",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,86 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.5",
"matchCriteriaId": "39DC8AD8-D6CC-4B7A-AE11-9351D5A3D3C7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6500:*:*:*:*:*:*",
"matchCriteriaId": "320659C3-0C56-43D5-A29F-64FDC62B91FC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6501:*:*:*:*:*:*",
"matchCriteriaId": "A4713150-31DF-46BB-9F91-11DE18ACCA85"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6502:*:*:*:*:*:*",
"matchCriteriaId": "044111C4-C12B-4389-AEA5-78362C997183"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6503:*:*:*:*:*:*",
"matchCriteriaId": "F6883E07-C47E-47CA-B013-96A7853E6CDD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6504:*:*:*:*:*:*",
"matchCriteriaId": "3B9EEE99-EDF2-4521-947F-D0DC903C4773"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6505:*:*:*:*:*:*",
"matchCriteriaId": "FFE2422E-71AC-40E6-BFC6-5030A427A3C7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6506:*:*:*:*:*:*",
"matchCriteriaId": "2652A735-7EB8-4143-9847-07C35CC7DA05"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6507:*:*:*:*:*:*",
"matchCriteriaId": "FDA211A5-74C6-4F04-B2A3-F616DF322308"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6508:*:*:*:*:*:*",
"matchCriteriaId": "7770CE61-3B0D-42E0-952D-660D518CEB12"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6509:*:*:*:*:*:*",
"matchCriteriaId": "8FC73F1B-75C0-4D0B-94E4-EAE04390E1FD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6510:*:*:*:*:*:*",
"matchCriteriaId": "F1096C37-0401-4377-822F-51E16A062FAF"
}
]
}
]
}
],
"references": [
{
"url": "https://www.manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html",
"source": "0fc0942c-577d-436f-ae8e-945763c79b02"
"source": "0fc0942c-577d-436f-ae8e-945763c79b02",
"tags": [
"Vendor Advisory"
]
}
]
}
+44 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-20086",
"sourceIdentifier": "[email protected]",
"published": "2025-01-15T17:15:19.107",
"lastModified": "2025-01-15T17:15:19.107",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:51:23.113",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,51 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.11.0",
"versionEndExcluding": "9.11.6",
"matchCriteriaId": "61B308B7-C55B-4250-BAA0-BF949DF9EA63"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.0.0",
"versionEndExcluding": "10.0.4",
"matchCriteriaId": "6470CB79-F54D-4FC3-ACF4-E38A5CD15782"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.1.0",
"versionEndExcluding": "10.1.4",
"matchCriteriaId": "C9D87A5B-2D40-446B-B9FB-4376B846432F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:10.2.0:-:*:*:*:*:*:*",
"matchCriteriaId": "DE143AEE-7950-4B0B-ABAE-4C3D29866F25"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
+64 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-21088",
"sourceIdentifier": "[email protected]",
"published": "2025-01-15T16:15:32.413",
"lastModified": "2025-01-15T16:15:32.413",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:52:59.580",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
@@ -51,10 +71,51 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.11.0",
"versionEndExcluding": "9.11.6",
"matchCriteriaId": "61B308B7-C55B-4250-BAA0-BF949DF9EA63"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.0.0",
"versionEndExcluding": "10.0.4",
"matchCriteriaId": "6470CB79-F54D-4FC3-ACF4-E38A5CD15782"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.1.0",
"versionEndExcluding": "10.1.4",
"matchCriteriaId": "C9D87A5B-2D40-446B-B9FB-4376B846432F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:10.2.0:-:*:*:*:*:*:*",
"matchCriteriaId": "DE143AEE-7950-4B0B-ABAE-4C3D29866F25"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-21614",
"sourceIdentifier": "[email protected]",
"published": "2025-01-06T17:15:47.310",
"lastModified": "2025-08-26T20:15:36.507",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:24:48.423",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-22531",
"sourceIdentifier": "[email protected]",
"published": "2025-01-07T16:15:48.520",
"lastModified": "2025-08-26T20:15:36.763",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:16:47.787",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
+74 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-27930",
"sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02",
"published": "2025-07-23T11:15:33.113",
"lastModified": "2025-07-25T15:29:44.523",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-30T15:03:30.800",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.2,
"impactScore": 5.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
@@ -51,10 +71,61 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.6",
"matchCriteriaId": "9849F40C-2B7F-4A4E-A520-FB0291FD8CC4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:-:*:*:*:*:*:*",
"matchCriteriaId": "78456091-5D65-4C1A-AF64-0EDABCCB31ED"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:build176100:*:*:*:*:*:*",
"matchCriteriaId": "A7C5FE53-9616-403C-89ED-E055C627188E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:build176200:*:*:*:*:*:*",
"matchCriteriaId": "FFCE0A93-9D70-44DB-BF90-85BCD7B80E37"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:build176300:*:*:*:*:*:*",
"matchCriteriaId": "18C855DE-A54A-4FD1-B803-D6F4E3FF4FCB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:build176500:*:*:*:*:*:*",
"matchCriteriaId": "81D273F6-5610-400A-BCEE-2477AF229840"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:build176600:*:*:*:*:*:*",
"matchCriteriaId": "397E6A6F-FEFF-420C-B0D4-098AA9C03B43"
}
]
}
]
}
],
"references": [
{
"url": "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2025-27930.html",
"source": "0fc0942c-577d-436f-ae8e-945763c79b02"
"source": "0fc0942c-577d-436f-ae8e-945763c79b02",
"tags": [
"Vendor Advisory"
]
}
]
}
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-28016",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T15:15:48.950",
"lastModified": "2025-09-30T15:15:48.950",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A Reflected Cross-Site Scripting (XSS) vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the fname, lname, and contact parameters."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/User%20Registration%20&%20Login%20and%20User%20Management%20System%20With%20admin%20panel/XSS%20njection%20-%20edit-profile.md",
"source": "[email protected]"
}
]
}
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-34207",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T21:15:34.147",
"lastModified": "2025-09-29T21:15:34.147",
"lastModified": "2025-09-30T14:15:37.927",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -89,6 +89,10 @@
{
"url": "https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-ssh-client-config",
"source": "[email protected]"
},
{
"url": "https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-ssh-config",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-34209",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T21:15:34.447",
"lastModified": "2025-09-29T21:15:34.447",
"lastModified": "2025-09-30T14:15:38.077",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -85,6 +85,10 @@
{
"url": "https://www.vulncheck.com/advisories/vasion-print-printerlogic-hardcoded-gpg-private-key",
"source": "[email protected]"
},
{
"url": "https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-private-gpg-key",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-34211",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T21:15:34.787",
"lastModified": "2025-09-29T21:15:34.787",
"lastModified": "2025-09-30T14:15:38.180",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -85,6 +85,10 @@
{
"url": "https://www.vulncheck.com/advisories/vasion-print-printerlogic-hardcoded-ssl-certificate-and-private-keys",
"source": "[email protected]"
},
{
"url": "https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-hardcoded-ssl-private-key",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-34212",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T21:15:34.967",
"lastModified": "2025-09-29T21:15:34.967",
"lastModified": "2025-09-30T14:15:38.310",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -89,6 +89,10 @@
{
"url": "https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-build-pipeline",
"source": "[email protected]"
},
{
"url": "https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-supply-chain-build-system",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-34216",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T21:15:35.280",
"lastModified": "2025-09-29T21:15:35.280",
"lastModified": "2025-09-30T14:15:38.427",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -89,6 +89,10 @@
{
"url": "https://www.vulncheck.com/advisories/vasion-print-printerlogic-rce-and-password-leaks-via-api",
"source": "[email protected]"
},
{
"url": "https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-rce-03",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
@@ -0,0 +1,94 @@
{
"id": "CVE-2025-34217",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T14:15:38.543",
"lastModified": "2025-09-30T14:15:38.543",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) contain an undocumented 'printerlogic' user with a hardcoded SSH public key in '~/.ssh/authorized_keys' and a sudoers rule granting the printerlogic_ssh group 'NOPASSWD: ALL'. Possession of the matching private key gives an attacker root access to the appliance."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-321"
}
]
}
],
"references": [
{
"url": "https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm",
"source": "[email protected]"
},
{
"url": "https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm",
"source": "[email protected]"
},
{
"url": "https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-undocumented-hardcoded-ssh-key",
"source": "[email protected]"
},
{
"url": "https://www.vulncheck.com/advisories/vasion-print-printerlogic-incorrect-encryption-algorithms-used-to-store-passwords",
"source": "[email protected]"
},
{
"url": "https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-undocumented-hardcoded-ssh-key",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-34218",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T21:15:35.450",
"lastModified": "2025-09-29T21:15:35.450",
"lastModified": "2025-09-30T14:15:38.693",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -85,6 +85,10 @@
{
"url": "https://www.vulncheck.com/advisories/vasion-print-printerlogic-exposed-internal-docker-instance",
"source": "[email protected]"
},
{
"url": "https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-exposed-docker-instances",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-34223",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T21:15:36.030",
"lastModified": "2025-09-29T21:15:36.030",
"lastModified": "2025-09-30T14:15:38.810",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -89,6 +89,10 @@
{
"url": "https://www.vulncheck.com/advisories/vasion-print-printerlogic-insecure-installation-credentials",
"source": "[email protected]"
},
{
"url": "https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-insecure-credentials-installation",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-34225",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T21:15:36.330",
"lastModified": "2025-09-29T21:15:36.330",
"lastModified": "2025-09-30T14:15:38.927",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -89,6 +89,10 @@
{
"url": "https://www.vulncheck.com/advisories/vasion-print-printerlogic-ssrf-via-console-release-directory",
"source": "[email protected]"
},
{
"url": "https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-ssrf-03",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-34231",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T21:15:36.960",
"lastModified": "2025-09-29T21:15:36.960",
"lastModified": "2025-09-30T14:15:39.050",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -89,6 +89,10 @@
{
"url": "https://www.vulncheck.com/advisories/vasion-print-printerlogic-ssrf-via-hp-badgesetup-php-script",
"source": "[email protected]"
},
{
"url": "https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-ssrf-07",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-34232",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T21:15:37.110",
"lastModified": "2025-09-29T21:15:37.110",
"lastModified": "2025-09-30T14:15:39.163",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -89,6 +89,10 @@
{
"url": "https://www.vulncheck.com/advisories/vasion-print-printerlogic-blind-ssrf-via-lexmark-dellcheck-php-script",
"source": "[email protected]"
},
{
"url": "https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-ssrf-08",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-34234",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T21:15:37.470",
"lastModified": "2025-09-29T21:15:37.470",
"lastModified": "2025-09-30T14:15:39.280",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -85,6 +85,10 @@
{
"url": "https://www.vulncheck.com/advisories/vasion-print-printerlogic-hardcoded-encryption-private-keys",
"source": "[email protected]"
},
{
"url": "https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-hardcoded-key",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-34235",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T21:15:37.620",
"lastModified": "2025-09-29T21:15:37.620",
"lastModified": "2025-09-30T15:15:49.737",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -85,6 +85,10 @@
{
"url": "https://www.vulncheck.com/advisories/vasion-print-printerlogic-weak-ssl-tls-certificate-validation-rce",
"source": "[email protected]"
},
{
"url": "https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#win-lpe-04",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+94 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-3833",
"sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02",
"published": "2025-05-14T11:16:30.527",
"lastModified": "2025-05-16T14:43:56.797",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-30T15:05:27.270",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,101 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.5",
"matchCriteriaId": "39DC8AD8-D6CC-4B7A-AE11-9351D5A3D3C7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6500:*:*:*:*:*:*",
"matchCriteriaId": "320659C3-0C56-43D5-A29F-64FDC62B91FC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6501:*:*:*:*:*:*",
"matchCriteriaId": "A4713150-31DF-46BB-9F91-11DE18ACCA85"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6502:*:*:*:*:*:*",
"matchCriteriaId": "044111C4-C12B-4389-AEA5-78362C997183"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6503:*:*:*:*:*:*",
"matchCriteriaId": "F6883E07-C47E-47CA-B013-96A7853E6CDD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6504:*:*:*:*:*:*",
"matchCriteriaId": "3B9EEE99-EDF2-4521-947F-D0DC903C4773"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6505:*:*:*:*:*:*",
"matchCriteriaId": "FFE2422E-71AC-40E6-BFC6-5030A427A3C7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6506:*:*:*:*:*:*",
"matchCriteriaId": "2652A735-7EB8-4143-9847-07C35CC7DA05"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6507:*:*:*:*:*:*",
"matchCriteriaId": "FDA211A5-74C6-4F04-B2A3-F616DF322308"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6508:*:*:*:*:*:*",
"matchCriteriaId": "7770CE61-3B0D-42E0-952D-660D518CEB12"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6509:*:*:*:*:*:*",
"matchCriteriaId": "8FC73F1B-75C0-4D0B-94E4-EAE04390E1FD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6510:*:*:*:*:*:*",
"matchCriteriaId": "F1096C37-0401-4377-822F-51E16A062FAF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6511:*:*:*:*:*:*",
"matchCriteriaId": "70A1BD2E-FC72-4B59-8249-15F1992145C0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6512:*:*:*:*:*:*",
"matchCriteriaId": "80520B90-93FC-4843-AEE8-45A32E99B761"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6513:*:*:*:*:*:*",
"matchCriteriaId": "16736D98-8484-4498-BE7F-FE328285544A"
}
]
}
]
}
],
"references": [
{
"url": "https://www.manageengine.com/products/self-service-password/advisory/CVE-2025-3833.html",
"source": "0fc0942c-577d-436f-ae8e-945763c79b02"
"source": "0fc0942c-577d-436f-ae8e-945763c79b02",
"tags": [
"Vendor Advisory"
]
}
]
}
+4 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-4026",
"sourceIdentifier": "[email protected]",
"published": "2025-04-28T16:15:35.950",
"lastModified": "2025-05-05T13:15:49.440",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:50:41.097",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -192,7 +192,8 @@
"url": "https://vuldb.com/?ctiid.306389",
"source": "[email protected]",
"tags": [
"Permissions Required"
"Permissions Required",
"VDB Entry"
]
},
{
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-43294",
"sourceIdentifier": "[email protected]",
"published": "2025-09-15T23:15:32.580",
"lastModified": "2025-09-17T16:15:34.950",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:35:03.680",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-43308",
"sourceIdentifier": "[email protected]",
"published": "2025-09-15T23:15:33.980",
"lastModified": "2025-09-17T16:15:35.123",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:33:56.770",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-43328",
"sourceIdentifier": "[email protected]",
"published": "2025-09-15T23:15:35.513",
"lastModified": "2025-09-17T16:15:35.307",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:31:32.710",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-43332",
"sourceIdentifier": "[email protected]",
"published": "2025-09-15T23:15:35.950",
"lastModified": "2025-09-17T16:15:35.480",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:30:19.943",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-43372",
"sourceIdentifier": "[email protected]",
"published": "2025-09-15T23:15:38.883",
"lastModified": "2025-09-17T14:15:38.980",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:35:23.230",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
+23 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-4332",
"sourceIdentifier": "[email protected]",
"published": "2025-05-06T08:15:17.990",
"lastModified": "2025-06-05T06:15:26.503",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T14:34:22.443",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -177,7 +177,8 @@
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
"Third Party Advisory",
"Issue Tracking"
]
},
{
@@ -191,7 +192,8 @@
"url": "https://vuldb.com/?ctiid.307436",
"source": "[email protected]",
"tags": [
"Permissions Required"
"Permissions Required",
"VDB Entry"
]
},
{
@@ -212,22 +214,35 @@
},
{
"url": "https://vuldb.com/?submit.564729",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.568338",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.590559",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://github.com/Pjwww13447/pjwww/issues/1",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
"Third Party Advisory",
"Issue Tracking"
]
}
]
+8 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-4358",
"sourceIdentifier": "[email protected]",
"published": "2025-05-06T14:15:42.463",
"lastModified": "2025-05-15T07:15:50.917",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:49:52.807",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -177,7 +177,8 @@
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
"Third Party Advisory",
"Issue Tracking"
]
},
{
@@ -191,7 +192,8 @@
"url": "https://vuldb.com/?ctiid.307476",
"source": "[email protected]",
"tags": [
"Permissions Required"
"Permissions Required",
"VDB Entry"
]
},
{
@@ -215,7 +217,8 @@
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
"Third Party Advisory",
"Issue Tracking"
]
}
]
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-4467",
"sourceIdentifier": "[email protected]",
"published": "2025-05-09T07:16:10.917",
"lastModified": "2025-05-15T07:15:51.397",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T14:38:42.777",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-52043",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T14:15:39.537",
"lastModified": "2025-09-30T14:15:39.537",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In Frappe ERPNext v15.57.5, the function import_coa() at erpnext/accounts/doctype/chart_of_accounts_importer/chart_of_accounts_importer.py is vulnerable to SQL injection, which allows an attacker to extract all information from databases by injecting a SQL query into the company parameter."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/blob/main/2025/Frappe%20Framework%20-%20Multiple%20SQL%20Injection.md",
"source": "[email protected]"
},
{
"url": "https://github.com/frappe/erpnext/pull/49192/commits/7fa4ed6139dfb737995fe297e40f4f5440c748c3",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-52047",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T14:15:39.660",
"lastModified": "2025-09-30T14:15:39.660",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In Frappe ErpNext v15.57.5, the function get_income_account() at erpnext/controllers/queries.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the filters.disabled parameter."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/blob/main/2025/Frappe%20Framework%20-%20Multiple%20SQL%20Injection.md",
"source": "[email protected]"
},
{
"url": "https://github.com/frappe/erpnext/pull/49192/commits/6320f7290f93a5278ffdfaa790af70427c20a1c8",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-52049",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T14:15:39.780",
"lastModified": "2025-09-30T14:15:39.780",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In Frappe ErpNext v15.57.5, the function get_timesheet_detail_rate() at erpnext/projects/doctype/timesheet/timesheet.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query into the timelog parameter."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/blob/main/2025/Frappe%20Framework%20-%20Multiple%20SQL%20Injection.md",
"source": "[email protected]"
},
{
"url": "https://github.com/frappe/erpnext/pull/49192/commits/e563ed0c75fd20135a6ad288e957e75eac7d3b8d",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-52050",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T14:15:39.893",
"lastModified": "2025-09-30T14:15:39.893",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In Frappe ERPNext 15.57.5, the function get_loyalty_program_details_with_points() at erpnext/accounts/doctype/loyalty_program/loyalty_program.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the expiry_date parameter."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/blob/main/2025/Frappe%20Framework%20-%20Multiple%20SQL%20Injection.md",
"source": "[email protected]"
},
{
"url": "https://github.com/frappe/erpnext/pull/49192/commits/8696ba2f5d9e99c799d4aef577f72f2fae5678e7",
"source": "[email protected]"
}
]
}
+6 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-54591",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T21:15:37.990",
"lastModified": "2025-09-29T21:15:37.990",
"lastModified": "2025-09-30T15:15:51.023",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -38,7 +38,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -59,6 +59,10 @@
{
"url": "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-jf4v-f8p2-8xvq",
"source": "[email protected]"
},
{
"url": "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-jf4v-f8p2-8xvq",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+6 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-54592",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T22:15:36.160",
"lastModified": "2025-09-29T22:15:36.160",
"lastModified": "2025-09-30T14:15:40.023",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -60,7 +60,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -81,6 +81,10 @@
{
"url": "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-42v4-65f8-5wgr",
"source": "[email protected]"
},
{
"url": "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-42v4-65f8-5wgr",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+6 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-54875",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T22:15:36.307",
"lastModified": "2025-09-29T22:15:36.307",
"lastModified": "2025-09-30T15:15:51.567",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -38,7 +38,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -59,6 +59,10 @@
{
"url": "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-h625-ghr3-jppq",
"source": "[email protected]"
},
{
"url": "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-h625-ghr3-jppq",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
@@ -0,0 +1,37 @@
{
"id": "CVE-2025-56301",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T15:15:52.040",
"lastModified": "2025-09-30T15:15:52.040",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in Chipsalliance Rocket-Chip commit f517abbf41abb65cea37421d3559f9739efd00a9 (2025-01-29) allowing attackers to corrupt exception handling and privilege state transitions via a flawed interaction between exception handling and MRET return mechanisms in the CSR logic when an exception is triggered during MRET execution. The Control and Status Register (CSR) logic has a flawed interaction between exception handling and exception return (MRET) mechanisms which can cause faulty trap behavior. When the MRET instruction is executed in machine mode without being in an exception state, an Instruction Access Fault may be triggered. This results in both the exception handling logic and the exception return logic activating simultaneously, leading to conflicting updates to the control and status registers."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/chipsalliance/rocket-chip",
"source": "[email protected]"
},
{
"url": "https://github.com/chipsalliance/rocket-chip/blob/f517abbf41abb65cea37421d3559f9739efd00a9/src/main/scala/rocket/CSR.scala",
"source": "[email protected]"
},
{
"url": "https://github.com/chipsalliance/rocket-chip/blob/master/src/main/scala/rocket/CSR.scala",
"source": "[email protected]"
},
{
"url": "https://github.com/heyfenny/Vulnerability_disclosure/blob/main/RISCV/Rocket-chip/CVE-2025-56301/details.md",
"source": "[email protected]"
},
{
"url": "https://lf-riscv.atlassian.net/wiki/spaces/HOME/pages/16154769/RISC-V+Technical+Specifications#ISA-Specifications",
"source": "[email protected]"
}
]
}
+2 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2025-56795",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T17:15:31.960",
"lastModified": "2025-09-29T20:15:33.887",
"lastModified": "2025-09-30T15:15:52.573",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mealie 3.0.1 and earlier is vulnerable to Cross-Site Scripting (XSS) in the recipe creation functionality. Unsanitized user input in the \"note\" and \"text\" fields of the \"/api/recipes/{recipe_name}\" endpoint is rendered in the frontend without proper escaping leading to persistent XSS."
"value": "Mealie 3.0.1 and earlier is vulnerable to Stored Cross-Site Scripting (XSS) in the recipe creation functionality. Unsanitized user input in the \"note\" and \"text\" fields of the \"/api/recipes/{recipe_name}\" endpoint is rendered in the frontend without proper escaping leading to persistent XSS."
}
],
"metrics": {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-57730",
"sourceIdentifier": "[email protected]",
"published": "2025-08-20T10:15:30.777",
"lastModified": "2025-08-21T15:14:41.540",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-30T15:29:38.607",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
+6 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-57769",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T22:15:36.463",
"lastModified": "2025-09-29T22:15:36.463",
"lastModified": "2025-09-30T15:15:53.313",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -60,7 +60,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -85,6 +85,10 @@
{
"url": "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-wm5p-7pr7-c8rw",
"source": "[email protected]"
},
{
"url": "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-wm5p-7pr7-c8rw",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-57852",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T15:15:53.720",
"lastModified": "2025-09-30T15:15:53.720",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 0.5,
"impactScore": 4.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-276"
}
]
}
],
"references": [
{
"url": "https://access.redhat.com/security/cve/CVE-2025-57852",
"source": "[email protected]"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2391105",
"source": "[email protected]"
}
]
}
+64 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-59689",
"sourceIdentifier": "[email protected]",
"published": "2025-09-19T20:15:40.340",
"lastModified": "2025-09-30T01:00:06.060",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-30T14:31:53.087",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,74 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:libraesva:email_security_gateway:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.5",
"versionEndExcluding": "5.0.31",
"matchCriteriaId": "C7388039-AE70-47F1-A389-EF05FCB34E61"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:libraesva:email_security_gateway:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.1.0",
"versionEndExcluding": "5.1.20",
"matchCriteriaId": "A280A808-E1F6-4B0A-B44F-47E5C9152B36"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:libraesva:email_security_gateway:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.2.0",
"versionEndExcluding": "5.2.31",
"matchCriteriaId": "62A71B25-7262-43CC-94E8-C92CC5932D86"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:libraesva:email_security_gateway:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.3.0",
"versionEndExcluding": "5.3.16",
"matchCriteriaId": "EDC45835-D39B-47A1-BE61-42CD7ACD6988"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:libraesva:email_security_gateway:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.4.0",
"versionEndExcluding": "5.4.8",
"matchCriteriaId": "C2D53E14-0C5F-4DE0-8785-F59A85107D9C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:libraesva:email_security_gateway:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5.0",
"versionEndExcluding": "5.5.7",
"matchCriteriaId": "7CF82183-A726-4FEE-95FA-4062C5F7FEEB"
}
]
}
]
}
],
"references": [
{
"url": "https://docs.libraesva.com/knowledgebase/security-advisory-command-injection-vulnerability-cve-2025-59689/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.libraesva.com/security-blog/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
+6 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-59937",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T23:15:31.807",
"lastModified": "2025-09-29T23:15:31.807",
"lastModified": "2025-09-30T15:15:55.073",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -60,7 +60,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -85,6 +85,10 @@
{
"url": "https://github.com/wneessen/go-mail/security/advisories/GHSA-wpwj-69cm-q9c5",
"source": "[email protected]"
},
{
"url": "https://github.com/wneessen/go-mail/issues/495",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+6 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-59948",
"sourceIdentifier": "[email protected]",
"published": "2025-09-29T23:15:32.467",
"lastModified": "2025-09-29T23:15:32.467",
"lastModified": "2025-09-30T14:15:40.250",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -38,7 +38,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -59,6 +59,10 @@
{
"url": "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-rwhf-vjjx-gmm9",
"source": "[email protected]"
},
{
"url": "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-rwhf-vjjx-gmm9",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+6 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-59950",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T04:43:45.933",
"lastModified": "2025-09-30T04:43:45.933",
"lastModified": "2025-09-30T15:15:56.000",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -38,7 +38,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -59,6 +59,10 @@
{
"url": "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-j66v-hvqx-5vh3",
"source": "[email protected]"
},
{
"url": "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-j66v-hvqx-5vh3",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+6 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-59954",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T11:37:41.560",
"lastModified": "2025-09-30T11:37:41.560",
"lastModified": "2025-09-30T15:15:56.607",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -60,7 +60,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -77,6 +77,10 @@
{
"url": "https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-96cv-75hg-xrgq",
"source": "[email protected]"
},
{
"url": "https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-96cv-75hg-xrgq",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+6 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-59956",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T11:37:41.743",
"lastModified": "2025-09-30T11:37:41.743",
"lastModified": "2025-09-30T15:15:57.250",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -38,7 +38,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -71,6 +71,10 @@
{
"url": "https://mcpsec.dev/advisories/2025-09-19-coder-chat-exfiltration",
"source": "[email protected]"
},
{
"url": "https://mcpsec.dev/advisories/2025-09-19-coder-chat-exfiltration/",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+6 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-61586",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T04:44:53.067",
"lastModified": "2025-09-30T04:44:53.067",
"lastModified": "2025-09-30T15:15:57.683",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -60,7 +60,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -81,6 +81,10 @@
{
"url": "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-w35p-p867-qr4f",
"source": "[email protected]"
},
{
"url": "https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-w35p-p867-qr4f",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+314 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-6763",
"sourceIdentifier": "[email protected]",
"published": "2025-06-27T12:15:45.500",
"lastModified": "2025-06-30T18:38:48.477",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-30T14:20:34.180",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -122,32 +122,338 @@
"value": "CWE-306"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cometsystem:t7611_firmware:1-5-7-5.1252:*:*:*:*:*:*:*",
"matchCriteriaId": "272FDF4F-ACCE-423D-88C3-F7220D14B23E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:cometsystem:t7611:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E24B0044-2E20-41DA-B242-0C3AAC703A65"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cometsystem:t4511_firmware:1-5-7-5.1252:*:*:*:*:*:*:*",
"matchCriteriaId": "B61E8D58-AD3A-42EC-8B6B-18C3BDD52C82"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:cometsystem:t4511:-:*:*:*:*:*:*:*",
"matchCriteriaId": "07792F16-7C5A-4558-A50F-142D31B54D24"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cometsystem:t0510_firmware:1-5-7-5.1252:*:*:*:*:*:*:*",
"matchCriteriaId": "BFDD3541-F891-47FA-8D8E-E600EDFC0897"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:cometsystem:t0510:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B9DBB818-2882-4B1E-B117-5B831C6B0FF5"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cometsystem:t6640_firmware:1-5-7-5.1252:*:*:*:*:*:*:*",
"matchCriteriaId": "52D54316-F4A8-42EC-A246-980639D7807E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:cometsystem:t6640:-:*:*:*:*:*:*:*",
"matchCriteriaId": "08EF6EFF-459D-4648-B5D8-15AB6A48DE78"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cometsystem:t3510_firmware:1-5-7-5.1252:*:*:*:*:*:*:*",
"matchCriteriaId": "ECFFCF0D-1043-4741-95F5-663A181F0D4A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:cometsystem:t3510:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8BF78295-5285-41DE-9631-ECA896438895"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cometsystem:t7511_firmware:1-5-7-5.1251:*:*:*:*:*:*:*",
"matchCriteriaId": "B2A8D6A7-73FE-406A-865B-38DCFFC7E676"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:cometsystem:t7511:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DC9CB6AD-807F-4DBA-B3DA-49A1B7979DBE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cometsystem:t3511_firmware:1-5-7-2.1151:*:*:*:*:*:*:*",
"matchCriteriaId": "14D9389E-39A2-4129-A54A-E38C2D3EDB05"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:cometsystem:t3511:-:*:*:*:*:*:*:*",
"matchCriteriaId": "67FD46C9-2984-410E-9C7E-31E5BA77D49D"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cometsystem:p8510_firmware:4-5-8-0.3488:*:*:*:*:*:*:*",
"matchCriteriaId": "7D0335ED-EA2E-4F74-B400-8FC756C738CE"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:cometsystem:p8510:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2AD06CD9-C7C0-4268-92BF-B9C348DBFA2B"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cometsystem:p8552_firmware:4-5-8-1.3502:*:*:*:*:*:*:*",
"matchCriteriaId": "00A8789F-B60F-4E2A-90DC-FAEA3DE7A3E5"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:cometsystem:p8552:-:*:*:*:*:*:*:*",
"matchCriteriaId": "31660C64-26B9-45ED-97BF-5627B0A67F57"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cometsystem:h3531_firmware:9-5-0-1.1327:*:*:*:*:*:*:*",
"matchCriteriaId": "3A3F1702-D397-488C-A417-F94087D6FAAB"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:cometsystem:h3531:-:*:*:*:*:*:*:*",
"matchCriteriaId": "138B7062-5C0D-4ACF-8EE0-3BB9B44F105B"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/zeke2997/CVE_request_comet_system",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/zeke2997/CVE_request_comet_system#poc",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.314074",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.314074",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.599848",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://github.com/zeke2997/CVE_request_comet_system",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-7493",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T15:15:58.243",
"lastModified": "2025-09-30T15:15:58.243",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.3,
"impactScore": 6.0
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-1220"
}
]
}
],
"references": [
{
"url": "https://access.redhat.com/security/cve/CVE-2025-7493",
"source": "[email protected]"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2389448",
"source": "[email protected]"
}
]
}
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-7779",
"sourceIdentifier": "[email protected]",
"published": "2025-09-30T15:15:59.247",
"lastModified": "2025-09-30T15:15:59.247",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Local privilege escalation due to insecure XPC service configuration. The following products are affected: Acronis True Image (macOS) before build 42389, Acronis True Image for SanDisk (macOS) before build 42198, Acronis True Image for Western Digital (macOS) before build 42197."
}
],
"metrics": {
"cvssMetricV30": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.0,
"impactScore": 6.0
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-269"
}
]
}
],
"references": [
{
"url": "https://security-advisory.acronis.com/advisories/SEC-8193",
"source": "[email protected]"
}
]
}
+24 -8
View File
@@ -2,17 +2,37 @@
"id": "CVE-2025-8276",
"sourceIdentifier": "[email protected]",
"published": "2025-09-16T14:15:56.490",
"lastModified": "2025-09-22T16:15:46.223",
"lastModified": "2025-09-30T14:15:40.577",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Improper Neutralization of Argument Delimiters in a Command ('Argument Injection'), Improper Control of Generation of Code ('Code Injection') vulnerability in Patika Global Technologies HumanSuite allows Input Data Manipulation, Format String Injection, Reflection Injection, Code Injection.This issue affects HumanSuite: before 53.21.0."
"value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Patika Global Technologies HumanSuite allows Cross-Site Scripting (XSS), Phishing.This issue affects HumanSuite: before 53.21.0."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
@@ -38,7 +58,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"type": "Primary",
"description": [
{
"lang": "en",
@@ -46,11 +66,7 @@
},
{
"lang": "en",
"value": "CWE-88"
},
{
"lang": "en",
"value": "CWE-94"
"value": "CWE-79"
},
{
"lang": "en",
Loaded 100 of 107 files, more files were not shown because too many files have changed in this diff. Show more