diff --git a/CVE-2025/CVE-2025-111xx/CVE-2025-11131.json b/CVE-2025/CVE-2025-111xx/CVE-2025-11131.json new file mode 100644 index 00000000000..688b381fcd2 --- /dev/null +++ b/CVE-2025/CVE-2025-111xx/CVE-2025-11131.json @@ -0,0 +1,44 @@ +{ + "id": "CVE-2025-11131", + "sourceIdentifier": "security@unisoc.com", + "published": "2025-12-01T08:15:46.033", + "lastModified": "2025-12-01T08:15:46.033", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@unisoc.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.unisoc.com/en/support/announcement/1995394837938163714", + "source": "security@unisoc.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-111xx/CVE-2025-11132.json b/CVE-2025/CVE-2025-111xx/CVE-2025-11132.json new file mode 100644 index 00000000000..01716765bdd --- /dev/null +++ b/CVE-2025/CVE-2025-111xx/CVE-2025-11132.json @@ -0,0 +1,44 @@ +{ + "id": "CVE-2025-11132", + "sourceIdentifier": "security@unisoc.com", + "published": "2025-12-01T08:15:47.350", + "lastModified": "2025-12-01T08:15:47.350", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@unisoc.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.unisoc.com/en/support/announcement/1995394837938163714", + "source": "security@unisoc.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-111xx/CVE-2025-11133.json b/CVE-2025/CVE-2025-111xx/CVE-2025-11133.json new file mode 100644 index 00000000000..4de9f173082 --- /dev/null +++ b/CVE-2025/CVE-2025-111xx/CVE-2025-11133.json @@ -0,0 +1,44 @@ +{ + "id": "CVE-2025-11133", + "sourceIdentifier": "security@unisoc.com", + "published": "2025-12-01T08:15:47.510", + "lastModified": "2025-12-01T08:15:47.510", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@unisoc.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.unisoc.com/en/support/announcement/1995394837938163714", + "source": "security@unisoc.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-138xx/CVE-2025-13810.json b/CVE-2025/CVE-2025-138xx/CVE-2025-13810.json new file mode 100644 index 00000000000..005a56749dc --- /dev/null +++ b/CVE-2025/CVE-2025-138xx/CVE-2025-13810.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-13810", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-12-01T07:16:00.690", + "lastModified": "2025-12-01T07:16:00.690", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in jsnjfz WebStack-Guns 1.0. This affects the function renderPicture of the file src/main/java/com/jsnjfz/manage/modular/system/controller/KaptchaController.java. Performing manipulation results in path traversal. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", + "baseScore": 5.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 10.0, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Xzzz111/exps/blob/main/archives/WebStack-Guns-PathTraversal-1/report.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/Xzzz111/exps/blob/main/archives/WebStack-Guns-PathTraversal-1/report.md#proof-of-concept", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.333820", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.333820", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.692080", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-138xx/CVE-2025-13811.json b/CVE-2025/CVE-2025-138xx/CVE-2025-13811.json new file mode 100644 index 00000000000..c7a6187d3d6 --- /dev/null +++ b/CVE-2025/CVE-2025-138xx/CVE-2025-13811.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-13811", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-12-01T07:16:01.203", + "lastModified": "2025-12-01T07:16:01.203", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was determined in jsnjfz WebStack-Guns 1.0. This vulnerability affects unknown code of the file src/main/java/com/jsnjfz/manage/core/common/constant/factory/PageFactory.java. Executing manipulation of the argument sort can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Xzzz111/exps/blob/main/archives/WebStack-Guns-SQLInjection-1/report.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/Xzzz111/exps/blob/main/archives/WebStack-Guns-SQLInjection-1/report.md#proof-of-concept", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.333821", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.333821", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.692084", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-138xx/CVE-2025-13813.json b/CVE-2025/CVE-2025-138xx/CVE-2025-13813.json new file mode 100644 index 00000000000..125dfe7bff6 --- /dev/null +++ b/CVE-2025/CVE-2025-138xx/CVE-2025-13813.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-13813", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-12-01T07:16:01.493", + "lastModified": "2025-12-01T07:16:01.493", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was identified in moxi159753 Mogu Blog v2 up to 5.2. This issue affects some unknown processing of the file /storage/ of the component Storage Management Endpoint. The manipulation leads to missing authorization. The attack can be initiated remotely. The attack's complexity is rated as high. The exploitability is assessed as difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 5.6, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.2, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", + "baseScore": 5.1, + "accessVector": "NETWORK", + "accessComplexity": "HIGH", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 4.9, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + }, + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Xzzz111/exps/blob/main/archives/mogu_blog_v2-broken_access_control-1/report.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/Xzzz111/exps/blob/main/archives/mogu_blog_v2-broken_access_control-1/report.md#proof-of-concept", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.333822", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.333822", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.692104", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-138xx/CVE-2025-13814.json b/CVE-2025/CVE-2025-138xx/CVE-2025-13814.json new file mode 100644 index 00000000000..44a0f89292d --- /dev/null +++ b/CVE-2025/CVE-2025-138xx/CVE-2025-13814.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-13814", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-12-01T08:15:47.640", + "lastModified": "2025-12-01T08:15:47.640", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A security flaw has been discovered in moxi159753 Mogu Blog v2 up to 5.2. Impacted is the function LocalFileServiceImpl.uploadPictureByUrl of the file /file/uploadPicsByUrl. The manipulation results in server-side request forgery. The attack can be launched remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Xzzz111/exps/blob/main/archives/mogu_blog_v2-ssrf-1/report.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/Xzzz111/exps/blob/main/archives/mogu_blog_v2-ssrf-1/report.md#proof-of-concept", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.333823", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.333823", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.692105", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-30xx/CVE-2025-3012.json b/CVE-2025/CVE-2025-30xx/CVE-2025-3012.json new file mode 100644 index 00000000000..ad4f8cf6e50 --- /dev/null +++ b/CVE-2025/CVE-2025-30xx/CVE-2025-3012.json @@ -0,0 +1,44 @@ +{ + "id": "CVE-2025-3012", + "sourceIdentifier": "security@unisoc.com", + "published": "2025-12-01T08:15:47.970", + "lastModified": "2025-12-01T08:15:47.970", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In dpc modem, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@unisoc.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.unisoc.com/en/support/announcement/1995394837938163714", + "source": "security@unisoc.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-324xx/CVE-2025-32434.json b/CVE-2025/CVE-2025-324xx/CVE-2025-32434.json index 1ab1069582d..c9602883500 100644 --- a/CVE-2025/CVE-2025-324xx/CVE-2025-32434.json +++ b/CVE-2025/CVE-2025-324xx/CVE-2025-32434.json @@ -2,8 +2,8 @@ "id": "CVE-2025-32434", "sourceIdentifier": "security-advisories@github.com", "published": "2025-04-18T16:15:23.183", - "lastModified": "2025-05-28T13:14:20.750", - "vulnStatus": "Analyzed", + "lastModified": "2025-12-01T07:16:01.807", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -86,7 +86,7 @@ "weaknesses": [ { "source": "security-advisories@github.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -120,6 +120,10 @@ "tags": [ "Vendor Advisory" ] + }, + { + "url": "https://lists.debian.org/debian-lts-announce/2025/12/msg00000.html", + "source": "af854a3a-2127-422b-91ae-364da2661108" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-60xx/CVE-2025-6035.json b/CVE-2025/CVE-2025-60xx/CVE-2025-6035.json index f84bacfe284..a65c25c9088 100644 --- a/CVE-2025/CVE-2025-60xx/CVE-2025-6035.json +++ b/CVE-2025/CVE-2025-60xx/CVE-2025-6035.json @@ -2,7 +2,7 @@ "id": "CVE-2025-6035", "sourceIdentifier": "secalert@redhat.com", "published": "2025-06-13T16:15:28.067", - "lastModified": "2025-11-03T18:17:02.127", + "lastModified": "2025-12-01T08:15:49.150", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -19,27 +19,27 @@ "cvssMetricV31": [ { "source": "secalert@redhat.com", - "type": "Secondary", + "type": "Primary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", - "baseScore": 6.6, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H", + "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", - "attackComplexity": "LOW", + "attackComplexity": "HIGH", "privilegesRequired": "LOW", - "userInteraction": "NONE", + "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "HIGH" }, - "exploitabilityScore": 1.8, + "exploitabilityScore": 0.8, "impactScore": 4.7 }, { "source": "nvd@nist.gov", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", diff --git a/CVE-2025/CVE-2025-616xx/CVE-2025-61607.json b/CVE-2025/CVE-2025-616xx/CVE-2025-61607.json new file mode 100644 index 00000000000..5792c016b74 --- /dev/null +++ b/CVE-2025/CVE-2025-616xx/CVE-2025-61607.json @@ -0,0 +1,44 @@ +{ + "id": "CVE-2025-61607", + "sourceIdentifier": "security@unisoc.com", + "published": "2025-12-01T08:15:48.140", + "lastModified": "2025-12-01T08:15:48.140", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@unisoc.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.unisoc.com/en/support/announcement/1995394837938163714", + "source": "security@unisoc.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-616xx/CVE-2025-61608.json b/CVE-2025/CVE-2025-616xx/CVE-2025-61608.json new file mode 100644 index 00000000000..f151da930a6 --- /dev/null +++ b/CVE-2025/CVE-2025-616xx/CVE-2025-61608.json @@ -0,0 +1,44 @@ +{ + "id": "CVE-2025-61608", + "sourceIdentifier": "security@unisoc.com", + "published": "2025-12-01T08:15:48.290", + "lastModified": "2025-12-01T08:15:48.290", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@unisoc.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.unisoc.com/en/support/announcement/1995394837938163714", + "source": "security@unisoc.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-616xx/CVE-2025-61609.json b/CVE-2025/CVE-2025-616xx/CVE-2025-61609.json new file mode 100644 index 00000000000..531a36832ab --- /dev/null +++ b/CVE-2025/CVE-2025-616xx/CVE-2025-61609.json @@ -0,0 +1,44 @@ +{ + "id": "CVE-2025-61609", + "sourceIdentifier": "security@unisoc.com", + "published": "2025-12-01T08:15:48.437", + "lastModified": "2025-12-01T08:15:48.437", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@unisoc.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.unisoc.com/en/support/announcement/1995394837938163714", + "source": "security@unisoc.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-616xx/CVE-2025-61610.json b/CVE-2025/CVE-2025-616xx/CVE-2025-61610.json new file mode 100644 index 00000000000..930cc70da7a --- /dev/null +++ b/CVE-2025/CVE-2025-616xx/CVE-2025-61610.json @@ -0,0 +1,44 @@ +{ + "id": "CVE-2025-61610", + "sourceIdentifier": "security@unisoc.com", + "published": "2025-12-01T08:15:48.597", + "lastModified": "2025-12-01T08:15:48.597", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@unisoc.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.unisoc.com/en/support/announcement/1995394837938163714", + "source": "security@unisoc.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-616xx/CVE-2025-61617.json b/CVE-2025/CVE-2025-616xx/CVE-2025-61617.json new file mode 100644 index 00000000000..78c6b0beb49 --- /dev/null +++ b/CVE-2025/CVE-2025-616xx/CVE-2025-61617.json @@ -0,0 +1,44 @@ +{ + "id": "CVE-2025-61617", + "sourceIdentifier": "security@unisoc.com", + "published": "2025-12-01T08:15:48.740", + "lastModified": "2025-12-01T08:15:48.740", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@unisoc.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.unisoc.com/en/support/announcement/1995394837938163714", + "source": "security@unisoc.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-616xx/CVE-2025-61618.json b/CVE-2025/CVE-2025-616xx/CVE-2025-61618.json new file mode 100644 index 00000000000..ced4c7ac4cb --- /dev/null +++ b/CVE-2025/CVE-2025-616xx/CVE-2025-61618.json @@ -0,0 +1,44 @@ +{ + "id": "CVE-2025-61618", + "sourceIdentifier": "security@unisoc.com", + "published": "2025-12-01T08:15:48.867", + "lastModified": "2025-12-01T08:15:48.867", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@unisoc.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.unisoc.com/en/support/announcement/1995394837938163714", + "source": "security@unisoc.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-616xx/CVE-2025-61619.json b/CVE-2025/CVE-2025-616xx/CVE-2025-61619.json new file mode 100644 index 00000000000..5e405a58ac1 --- /dev/null +++ b/CVE-2025/CVE-2025-616xx/CVE-2025-61619.json @@ -0,0 +1,44 @@ +{ + "id": "CVE-2025-61619", + "sourceIdentifier": "security@unisoc.com", + "published": "2025-12-01T08:15:49.010", + "lastModified": "2025-12-01T08:15:49.010", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@unisoc.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.unisoc.com/en/support/announcement/1995394837938163714", + "source": "security@unisoc.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62229.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62229.json index 25d32935720..718a4a65f07 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62229.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62229.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62229", "sourceIdentifier": "secalert@redhat.com", "published": "2025-10-30T06:15:45.300", - "lastModified": "2025-11-26T08:15:45.520", + "lastModified": "2025-12-01T07:16:52.310", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -128,6 +128,14 @@ "url": "https://access.redhat.com/errata/RHSA-2025:22167", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:22364", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:22365", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-62229", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62230.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62230.json index b708583d8a9..637c22bf35e 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62230.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62230.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62230", "sourceIdentifier": "secalert@redhat.com", "published": "2025-10-30T06:15:45.593", - "lastModified": "2025-11-26T08:15:46.563", + "lastModified": "2025-12-01T07:16:52.717", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -128,6 +128,14 @@ "url": "https://access.redhat.com/errata/RHSA-2025:22167", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:22364", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:22365", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-62230", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62231.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62231.json index 915d85a2e33..ac463445374 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62231.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62231.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62231", "sourceIdentifier": "secalert@redhat.com", "published": "2025-10-30T05:15:39.120", - "lastModified": "2025-11-26T08:15:46.750", + "lastModified": "2025-12-01T07:16:52.913", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -128,6 +128,14 @@ "url": "https://access.redhat.com/errata/RHSA-2025:22167", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:22364", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:22365", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-62231", "source": "secalert@redhat.com" diff --git a/README.md b/README.md index e7974d0c805..e47fc9d0b4a 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-12-01T07:00:11.296597+00:00 +2025-12-01T09:00:13.599597+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-12-01T06:15:58.280000+00:00 +2025-12-01T08:15:49.150000+00:00 ``` ### Last Data Feed Release @@ -33,24 +33,39 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -319648 +319663 ``` ### CVEs added in the last Commit -Recently added CVEs: `4` +Recently added CVEs: `15` -- [CVE-2025-13806](CVE-2025/CVE-2025-138xx/CVE-2025-13806.json) (`2025-12-01T05:16:00.013`) -- [CVE-2025-13807](CVE-2025/CVE-2025-138xx/CVE-2025-13807.json) (`2025-12-01T05:16:02.987`) -- [CVE-2025-13808](CVE-2025/CVE-2025-138xx/CVE-2025-13808.json) (`2025-12-01T05:16:04.070`) -- [CVE-2025-13809](CVE-2025/CVE-2025-138xx/CVE-2025-13809.json) (`2025-12-01T06:15:58.280`) +- [CVE-2025-11131](CVE-2025/CVE-2025-111xx/CVE-2025-11131.json) (`2025-12-01T08:15:46.033`) +- [CVE-2025-11132](CVE-2025/CVE-2025-111xx/CVE-2025-11132.json) (`2025-12-01T08:15:47.350`) +- [CVE-2025-11133](CVE-2025/CVE-2025-111xx/CVE-2025-11133.json) (`2025-12-01T08:15:47.510`) +- [CVE-2025-13810](CVE-2025/CVE-2025-138xx/CVE-2025-13810.json) (`2025-12-01T07:16:00.690`) +- [CVE-2025-13811](CVE-2025/CVE-2025-138xx/CVE-2025-13811.json) (`2025-12-01T07:16:01.203`) +- [CVE-2025-13813](CVE-2025/CVE-2025-138xx/CVE-2025-13813.json) (`2025-12-01T07:16:01.493`) +- [CVE-2025-13814](CVE-2025/CVE-2025-138xx/CVE-2025-13814.json) (`2025-12-01T08:15:47.640`) +- [CVE-2025-3012](CVE-2025/CVE-2025-30xx/CVE-2025-3012.json) (`2025-12-01T08:15:47.970`) +- [CVE-2025-61607](CVE-2025/CVE-2025-616xx/CVE-2025-61607.json) (`2025-12-01T08:15:48.140`) +- [CVE-2025-61608](CVE-2025/CVE-2025-616xx/CVE-2025-61608.json) (`2025-12-01T08:15:48.290`) +- [CVE-2025-61609](CVE-2025/CVE-2025-616xx/CVE-2025-61609.json) (`2025-12-01T08:15:48.437`) +- [CVE-2025-61610](CVE-2025/CVE-2025-616xx/CVE-2025-61610.json) (`2025-12-01T08:15:48.597`) +- [CVE-2025-61617](CVE-2025/CVE-2025-616xx/CVE-2025-61617.json) (`2025-12-01T08:15:48.740`) +- [CVE-2025-61618](CVE-2025/CVE-2025-616xx/CVE-2025-61618.json) (`2025-12-01T08:15:48.867`) +- [CVE-2025-61619](CVE-2025/CVE-2025-616xx/CVE-2025-61619.json) (`2025-12-01T08:15:49.010`) ### CVEs modified in the last Commit -Recently modified CVEs: `1` +Recently modified CVEs: `5` -- [CVE-2025-45778](CVE-2025/CVE-2025-457xx/CVE-2025-45778.json) (`2025-12-01T05:16:04.523`) +- [CVE-2025-32434](CVE-2025/CVE-2025-324xx/CVE-2025-32434.json) (`2025-12-01T07:16:01.807`) +- [CVE-2025-6035](CVE-2025/CVE-2025-60xx/CVE-2025-6035.json) (`2025-12-01T08:15:49.150`) +- [CVE-2025-62229](CVE-2025/CVE-2025-622xx/CVE-2025-62229.json) (`2025-12-01T07:16:52.310`) +- [CVE-2025-62230](CVE-2025/CVE-2025-622xx/CVE-2025-62230.json) (`2025-12-01T07:16:52.717`) +- [CVE-2025-62231](CVE-2025/CVE-2025-622xx/CVE-2025-62231.json) (`2025-12-01T07:16:52.913`) ## Download and Usage diff --git a/_state.csv b/_state.csv index d37336273be..d470a7d34ec 100644 --- a/_state.csv +++ b/_state.csv @@ -286639,6 +286639,9 @@ CVE-2025-11128,0,0,bcfebada1a666cbf69243dcde7af147b2dc34fb1a812138c60550ed8740ab CVE-2025-11129,0,0,3fd77e483a6bbabc9c1af5b1ceea836e641a8aa08d8d0131bebc0c12f62e8eae,2025-11-12T16:19:59.103000 CVE-2025-1113,0,0,e5f8c788cf368398c9beeca18f9ddf681684f5123ecd1fcada0a1cd88526889e,2025-08-21T20:29:15.170000 CVE-2025-11130,0,0,e4fb16b8132c378b40de8c68972d189abf355a56419494e7964e70955aa3840f,2025-09-29T19:34:10.030000 +CVE-2025-11131,1,1,f3f73c12fbde98c27f20841e1de2b7eb9d82390f1cc5be9e8cc2a141e6939ac0,2025-12-01T08:15:46.033000 +CVE-2025-11132,1,1,b2b329ff93289176b9ba2ea9cee7644b309bb9378b1461974399f444a7541e41,2025-12-01T08:15:47.350000 +CVE-2025-11133,1,1,fff1a2a9f0574e7bdcb165745dc49516ce7a47dcf55b0ac9ef469ed51d035a8c,2025-12-01T08:15:47.510000 CVE-2025-11134,0,0,2029f9216d643e10ceb0c2c08f1276fcc04d82872d6d19b3d6748aa627636d9e,2025-09-29T19:34:10.030000 CVE-2025-11135,0,0,3e02ebbf5e7c49440fcc136f17d768f685f0141769eb6be548f5962bb9ed4cb2,2025-09-29T19:34:10.030000 CVE-2025-11136,0,0,1e2907bcef08e008a9cd63f5e22ca435bc162a55cb28bca3cfcf14616c61076e,2025-09-29T19:34:10.030000 @@ -288586,11 +288589,15 @@ CVE-2025-13802,0,0,93a1f5e9cc8fd23d4b3bdd818264614c454a6ae099bfdc392844974caf60e CVE-2025-13803,0,0,d6a041755fce91f94d48965096f987bd328cb24eabdf6d449949d4ae0d33bd05,2025-12-01T03:15:46.390000 CVE-2025-13804,0,0,b1ed6a5497375512df166fcf31b38e7645a10d597722b6f909164e06379865ab,2025-12-01T04:16:05.393000 CVE-2025-13805,0,0,61d1d3eac5306ed8262232880ac68575c7493956d3856df626e6389ab0b1a85f,2025-12-01T04:16:05.643000 -CVE-2025-13806,1,1,01d4e9b3144e36fe98404205c11cfd64ad5f5b468e4aded9407a12772d164eca,2025-12-01T05:16:00.013000 -CVE-2025-13807,1,1,11477b64d8456f72bceb75882ff282a23b67615e357405d2aaccb36c82513c90,2025-12-01T05:16:02.987000 -CVE-2025-13808,1,1,89fa87607852f00f38310cad3eadfcf5477e366200d0b86da4196ce160c42826,2025-12-01T05:16:04.070000 -CVE-2025-13809,1,1,e3d4850084a93410818b22d62d25e0fc612c94f076d6b0a72b4f49bf5903c736,2025-12-01T06:15:58.280000 +CVE-2025-13806,0,0,01d4e9b3144e36fe98404205c11cfd64ad5f5b468e4aded9407a12772d164eca,2025-12-01T05:16:00.013000 +CVE-2025-13807,0,0,11477b64d8456f72bceb75882ff282a23b67615e357405d2aaccb36c82513c90,2025-12-01T05:16:02.987000 +CVE-2025-13808,0,0,89fa87607852f00f38310cad3eadfcf5477e366200d0b86da4196ce160c42826,2025-12-01T05:16:04.070000 +CVE-2025-13809,0,0,e3d4850084a93410818b22d62d25e0fc612c94f076d6b0a72b4f49bf5903c736,2025-12-01T06:15:58.280000 CVE-2025-1381,0,0,0527ab2734ccec4269c70fb2d0d40ea59b49fa3f3723a4356fee1835e38fef1a,2025-04-11T18:38:03.400000 +CVE-2025-13810,1,1,6e6065b71c32f72a5c64322e91e1d32f779bb02ce948b42953cb6b3cdedd4c0b,2025-12-01T07:16:00.690000 +CVE-2025-13811,1,1,121f17416f62a1246ea5be9a3be6185142dba00ff38c11b5c414cbc114161138,2025-12-01T07:16:01.203000 +CVE-2025-13813,1,1,797c5bd4a3a30b6046f9375ea8e3636b697460c0aeb5ad2d11b8b91babac042e,2025-12-01T07:16:01.493000 +CVE-2025-13814,1,1,84a03e9643e2ac1a2e3d100d9ab0da1707019cafd544fe9af2e7e9248130c094,2025-12-01T08:15:47.640000 CVE-2025-1382,0,0,87b39febd022dc5be9950aee3332d7f65d611ba2ccabe27600ad34ce4d1074c8,2025-05-21T16:54:27.347000 CVE-2025-1383,0,0,c9fb1a308be655ba73427b329ae1663f0ab56dcb4706e7cabab9a87230c6ae97,2025-03-19T20:47:28.020000 CVE-2025-1384,0,0,59bca0f320dfac1819c25ed5547684a8bde0292ecdbc52eb5c51c8189c4ff6a8,2025-07-15T13:14:24.053000 @@ -296999,6 +297006,7 @@ CVE-2025-30115,0,0,0f691f4b68a78fc99727d3e9fd853837e57c0cd46778592bb292de19d57d7 CVE-2025-30116,0,0,a7c7c3488f71c89af8f49a57726a34836b9be9fb72fde72e4420ec1ab7e8f536,2025-05-22T19:43:13.603000 CVE-2025-30117,0,0,70eef3da4ffe0f747a7a98e75f182b7db28c478ffbf6e1889a03431ee684e679,2025-05-22T19:40:48.057000 CVE-2025-30118,0,0,63bb6fe6df661494db5327da07bd867838234c34a82e4f268cbe5bdf2fffb41d,2025-03-27T16:45:46.410000 +CVE-2025-3012,1,1,8044ce3c390b0a2a0fb8c62b3326bd73e96c4179f3d4ecfbd0181face781febc,2025-12-01T08:15:47.970000 CVE-2025-30122,0,0,c1d95302660e92c024ec5fc6b6a580530031934f019c4b2b9b52ef0f1377e16a,2025-03-21T14:15:17.523000 CVE-2025-30123,0,0,2971729320ad92fd03f998696461ed7cc92e08495aa1f702cd91222eaa49f43d,2025-03-21T18:15:39.737000 CVE-2025-30124,0,0,91abf1f19b8b2199504cb67b9fd5043db0d8c06ad766d89ca804cb48473965d5,2025-07-30T16:15:26.430000 @@ -299178,7 +299186,7 @@ CVE-2025-32430,0,0,4af8cf06ddfcf68d9e15a4f6926eff79931c0fb15ffb6bfc243cea2162831 CVE-2025-32431,0,0,adc1232f2878b7cf6c603002e52b0c514cf7e6f3d197ef2fd856ea1ece7e22f4,2025-11-25T15:13:09.177000 CVE-2025-32432,0,0,431fc0fbedd754e521baa62824583ff2e21564f5b0b8bca365cd2f1af03e8472,2025-04-28T20:57:06.397000 CVE-2025-32433,0,0,160ccb9da063d47551f11366840a0ac568dbb1a2ab9f4ea20502ab5408d61637,2025-11-04T14:49:05.177000 -CVE-2025-32434,0,0,fdb96b52967a7fc43923938e661ad69461f69a5d08690c104a9b172e74ac945f,2025-05-28T13:14:20.750000 +CVE-2025-32434,0,1,22bd6dbe9ba35181f04d461832b54f645c69144fb17abcca8b94eaa58c401f87,2025-12-01T07:16:01.807000 CVE-2025-32435,0,0,60d20d6b9790b07da64b0e0c4ef4450da94d1e2a58820609306eee9c4d17b921,2025-09-22T14:56:23.283000 CVE-2025-32438,0,0,296774c27c9f9d6fea06d7416f18b1b6b989b53f8f837fb0990eec395e66a9b8,2025-04-16T13:25:59.640000 CVE-2025-32439,0,0,bc2ffe14216b9cfe29b31e6fc5be13f4870b9bbc8f43f42b1dd5fa85872b2005,2025-04-16T13:25:59.640000 @@ -305040,7 +305048,7 @@ CVE-2025-45769,0,0,378700634184fb1d28ba2d0f246229684453dc52efbbb2dc152246b221f1f CVE-2025-4577,0,0,a15e014e7d8c6b5ac9aa03c9310d452f4c26df549bd11271ab7cf6021bf5af94,2025-07-16T16:18:13.583000 CVE-2025-45770,0,0,13ac1821b90daa1f5e2e7659154c9e7a5724e5ad3a6f9fca5b91f461fb93e97c,2025-08-17T04:15:40.680000 CVE-2025-45777,0,0,84708407132fea7db35354ac76671d1afd06248a73b0228aba25bb4c0f4593d5,2025-10-10T21:42:45.687000 -CVE-2025-45778,0,1,14aa9b7b63ef3a8c31b0bf331e5dd6a8256ed1a636c540129ede3da34d083939,2025-12-01T05:16:04.523000 +CVE-2025-45778,0,0,14aa9b7b63ef3a8c31b0bf331e5dd6a8256ed1a636c540129ede3da34d083939,2025-12-01T05:16:04.523000 CVE-2025-45779,0,0,7069f589f242601716458d7b26f08f6a87931010ba7c496f215f47c502ef806f,2025-06-13T13:40:52.883000 CVE-2025-4578,0,0,8451b1c03045c8ad3abf8c71774c6b63bc79023720225fdd15b30152793b6197,2025-06-04T20:07:45.857000 CVE-2025-45784,0,0,301db0bb8b68957fca7af60ca5fbeb54d0dee602f22177cb4fab650344178bf8,2025-07-22T14:24:59.443000 @@ -314259,7 +314267,7 @@ CVE-2025-60342,0,0,c94fce5a86e47515fa3644c2ca4a73aa8ac5cd7128a1a205be05ff1cd3310 CVE-2025-60343,0,0,de14e420b660673ac72e861c394e4f6b40931c2f807410aeca4613ca2c2718ad,2025-10-24T13:21:06.800000 CVE-2025-60344,0,0,99f5b799651478f723ceb704c6cad3634cd4b699187a17351497655d4ec34fb1,2025-10-21T21:15:39.050000 CVE-2025-60349,0,0,be54f1a6f2e3a8b1ce744d2cc6e606227b0e086feb8c7cbd0fb5edfa8dc3135a,2025-10-30T15:05:32.197000 -CVE-2025-6035,0,0,97dbedb41fbf6e422e6140022ad5b7a6c84336e1bed78790ceee857a2d7d72b6,2025-11-03T18:17:02.127000 +CVE-2025-6035,0,1,098d072992a42166281579f43cf3975f5419440e50ae4e01082deb708067daad,2025-12-01T08:15:49.150000 CVE-2025-60354,0,0,58b98353720f8656a42886f6821ea99adf451ba11bbd5135b76dc7c2d817bd36,2025-10-30T15:05:32.197000 CVE-2025-60355,0,0,807b237514ce715949decdded8ea31b65a35586c2d2d61ca41257fbeb1ba97a6,2025-10-30T15:05:32.197000 CVE-2025-60358,0,0,1902b076898c41e064f58bd61bc01dcd2cfc257b44956b6826674d2dc65abdae,2025-10-23T12:31:42.327000 @@ -314684,7 +314692,14 @@ CVE-2025-61603,0,0,fd6b7c5f29f8e999bfcbd2d96cf9afdcf58a42a54fc619f997ee716e55887 CVE-2025-61604,0,0,050deedfde6db6cbf6a7f8d9d28e05830fcb77179cd15d37eab0d82215bc9acd,2025-10-07T15:42:57.003000 CVE-2025-61605,0,0,7eaf040d1c8e19943690a59a7a1ae3f34f8129ccb5d39ac08a3347e8c82a3b19,2025-10-07T15:42:02.167000 CVE-2025-61606,0,0,1044f0e741f8562d6898f6c6ce98f5fb85aaef0fbea6a5314d5031d146ea121a,2025-10-07T15:41:49.630000 +CVE-2025-61607,1,1,f1d9411c25164f0e2b47a4660d2e4c014214a0dd81522e65ee78fce3f90e8d4c,2025-12-01T08:15:48.140000 +CVE-2025-61608,1,1,6b8b799ecb123826edc8142540acab34e769d37fa74ef8389713f2e8ba349dff,2025-12-01T08:15:48.290000 +CVE-2025-61609,1,1,079e5655ee1e83ffdf3c90245c4ffa1200f9bf16cfeb0c1a41bd95bf53f5471a,2025-12-01T08:15:48.437000 CVE-2025-6161,0,0,3b5b0293126f56bad8c11cec7f09add92eba5f598363017bb2ec13d80dcc257b,2025-10-23T20:06:00.793000 +CVE-2025-61610,1,1,0294f9d7338757a5275aa9f64f6a7e50a6e2a1b8311924cfeae376d1c90113be,2025-12-01T08:15:48.597000 +CVE-2025-61617,1,1,d36dc679812982bf6a85db29bedb6a2cd234bfa0fd74363ada0eca21e532f2dc,2025-12-01T08:15:48.740000 +CVE-2025-61618,1,1,38ea83ae9577e7860246a88993aae719bee83ea940a1090e65a4c7264b5354e3,2025-12-01T08:15:48.867000 +CVE-2025-61619,1,1,9a678ccde9351f32935d3dc36e4094ba65883fa8afe3526290f23c96d73716c3,2025-12-01T08:15:49.010000 CVE-2025-6162,0,0,e84675b06fecb8413603d644d7dc1a9c194bceeff6262adb1f964a4383ba4305,2025-06-23T19:20:50.197000 CVE-2025-61622,0,0,902ea1ce2d413d60237a89a3c7f860889082f40af086c54b10fa166fa2af6255,2025-11-04T22:16:36.280000 CVE-2025-61623,0,0,9c87dec882985de7e038648448b385a2ead4775984b1eeca89ad1f5606605490,2025-11-13T15:04:42.673000 @@ -315071,9 +315086,9 @@ CVE-2025-62220,0,0,13db24cb242ebeed0c1f4737a706504c9ba1a5992e04dbd74728bd9c8ea2a CVE-2025-62222,0,0,b32955abddda902773d9d62b850849311cb72f231f33ab235a1d71b83f6486a6,2025-11-14T15:47:58.830000 CVE-2025-62225,0,0,5e5e30dce2450e8af243865130c21e5e1681c40fd91622536f84becd571ed600,2025-11-06T19:45:30.990000 CVE-2025-62228,0,0,1a490ac65040f8d755fd150fc0c76449bb433560cae986c3b003ae901c9f36fc,2025-11-04T22:16:37.680000 -CVE-2025-62229,0,0,a09aa440c690c6c3b255b098da2128b46ef54efe27295898bf770af4dff851bc,2025-11-26T08:15:45.520000 -CVE-2025-62230,0,0,7c863921729b52a6a93982c5b273943c69661ba54bb2d53ebccd5ae98c35dbb1,2025-11-26T08:15:46.563000 -CVE-2025-62231,0,0,49ffcb01f98cd1d794bfe5b20d99f05cba18ad399fc36fedd0a9039254b0f4ef,2025-11-26T08:15:46.750000 +CVE-2025-62229,0,1,2555b671abfbd2e1e2c647c898d166b1ee224285bb3ecc20410f774a84e4e721,2025-12-01T07:16:52.310000 +CVE-2025-62230,0,1,c67244231e44b249502160e2d35158fdcfbf23ccf453f941a8efbfae50a86872,2025-12-01T07:16:52.717000 +CVE-2025-62231,0,1,507dbd3b5e62335ade96383c8faf712657de68dd5a4efde8fa1f8b71de8a6559,2025-12-01T07:16:52.913000 CVE-2025-62232,0,0,7bbe8ad5bb9f8c5afbfe7cd16ff850ade62800436ec5824e91f788252db0e3dd,2025-11-05T14:44:13.057000 CVE-2025-62236,0,0,15a5caffd14cf9ee2af6ac6cf3031f9d0466adcdd94376f42fd22604d4f0e595,2025-10-27T13:20:15.637000 CVE-2025-62237,0,0,50afe9cde633923a8104d90291ee98bd713fe21b8178eff2dd59e01bb75e841c,2025-10-14T19:36:59.730000