From 27bc388a528ff89dfaa3438c015b29c8027f2ae6 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Fri, 28 Nov 2025 00:59:02 +0000 Subject: [PATCH] Auto-Update: 2025-11-28T00:55:11.219450+00:00 --- CVE-2025/CVE-2025-133xx/CVE-2025-13338.json | 16 +++++ CVE-2025/CVE-2025-663xx/CVE-2025-66359.json | 56 +++++++++++++++ CVE-2025/CVE-2025-663xx/CVE-2025-66360.json | 78 +++++++++++++++++++++ CVE-2025/CVE-2025-663xx/CVE-2025-66361.json | 78 +++++++++++++++++++++ README.md | 19 +++-- _state.csv | 14 ++-- 6 files changed, 246 insertions(+), 15 deletions(-) create mode 100644 CVE-2025/CVE-2025-133xx/CVE-2025-13338.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66359.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66360.json create mode 100644 CVE-2025/CVE-2025-663xx/CVE-2025-66361.json diff --git a/CVE-2025/CVE-2025-133xx/CVE-2025-13338.json b/CVE-2025/CVE-2025-133xx/CVE-2025-13338.json new file mode 100644 index 00000000000..40d99fd1e72 --- /dev/null +++ b/CVE-2025/CVE-2025-133xx/CVE-2025-13338.json @@ -0,0 +1,16 @@ +{ + "id": "CVE-2025-13338", + "sourceIdentifier": "cve@gitlab.com", + "published": "2025-11-27T23:15:50.550", + "lastModified": "2025-11-27T23:15:50.550", + "vulnStatus": "Rejected", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority." + } + ], + "metrics": {}, + "references": [] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66359.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66359.json new file mode 100644 index 00000000000..d1a69a487f4 --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66359.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-66359", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-28T00:15:46.003", + "lastModified": "2025-11-28T00:15:46.003", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue was discovered in Logpoint before 7.7.0. Insufficient input validation and a lack of output escaping in multiple components leads to a cross-site scripting (XSS) vulnerability." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@mitre.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "cve@mitre.org", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://servicedesk.logpoint.com/hc/en-us/articles/29158899698333-XSS-Vulnerability-due-to-insufficient-input-validation", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66360.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66360.json new file mode 100644 index 00000000000..c4a68d512ae --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66360.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-66360", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-28T00:15:46.253", + "lastModified": "2025-11-28T00:15:46.253", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service (Redis) information to li-admin users. This can lead to privilege escalation." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve@mitre.org", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve@mitre.org", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://servicedesk.logpoint.com/hc/en-us/articles/29160917867549-Redis-communication-exposed-for-internal-communication", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-663xx/CVE-2025-66361.json b/CVE-2025/CVE-2025-663xx/CVE-2025-66361.json new file mode 100644 index 00000000000..14e58e27c78 --- /dev/null +++ b/CVE-2025/CVE-2025-663xx/CVE-2025-66361.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-66361", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-28T00:15:46.430", + "lastModified": "2025-11-28T00:15:46.430", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue was discovered in Logpoint before 7.7.0. Sensitive information is exposed in System Processes for an extended period during high CPU load." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve@mitre.org", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve@mitre.org", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-1336" + } + ] + } + ], + "references": [ + { + "url": "https://servicedesk.logpoint.com/hc/en-us/articles/29160993806749-Process-Data-Exposure-Under-High-Load", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index d6efeaab41c..f367b2ebe73 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-27T19:00:11.158146+00:00 +2025-11-28T00:55:11.219450+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-27T18:15:46.597000+00:00 +2025-11-28T00:15:46.430000+00:00 ``` ### Last Data Feed Release @@ -33,24 +33,23 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -319539 +319543 ``` ### CVEs added in the last Commit -Recently added CVEs: `3` +Recently added CVEs: `4` -- [CVE-2025-12421](CVE-2025/CVE-2025-124xx/CVE-2025-12421.json) (`2025-11-27T18:15:46.223`) -- [CVE-2025-12559](CVE-2025/CVE-2025-125xx/CVE-2025-12559.json) (`2025-11-27T17:15:46.530`) -- [CVE-2025-3261](CVE-2025/CVE-2025-32xx/CVE-2025-3261.json) (`2025-11-27T18:15:46.403`) +- [CVE-2025-13338](CVE-2025/CVE-2025-133xx/CVE-2025-13338.json) (`2025-11-27T23:15:50.550`) +- [CVE-2025-66359](CVE-2025/CVE-2025-663xx/CVE-2025-66359.json) (`2025-11-28T00:15:46.003`) +- [CVE-2025-66360](CVE-2025/CVE-2025-663xx/CVE-2025-66360.json) (`2025-11-28T00:15:46.253`) +- [CVE-2025-66361](CVE-2025/CVE-2025-663xx/CVE-2025-66361.json) (`2025-11-28T00:15:46.430`) ### CVEs modified in the last Commit -Recently modified CVEs: `2` +Recently modified CVEs: `0` -- [CVE-2025-12419](CVE-2025/CVE-2025-124xx/CVE-2025-12419.json) (`2025-11-27T18:15:45.890`) -- [CVE-2025-5318](CVE-2025/CVE-2025-53xx/CVE-2025-5318.json) (`2025-11-27T18:15:46.597`) ## Download and Usage diff --git a/_state.csv b/_state.csv index dcf473679c9..a8ea95c1857 100644 --- a/_state.csv +++ b/_state.csv @@ -287755,8 +287755,8 @@ CVE-2025-12414,0,0,8dabb6354a884c1b0b603a9f195da7b4cd96d3b73b3b45f7ee435e57ee17b CVE-2025-12415,0,0,81c866442fb9fd46706f21c98259794a7fcc8b091f645ddfb160f6da0ea0b137,2025-11-04T15:40:45.533000 CVE-2025-12416,0,0,ec35b538eb8dc521ad393c983756c4acf2a7d587acce4aede1c3f6348a585ec8,2025-11-04T15:40:45.533000 CVE-2025-12418,0,0,a1a3e7ea14eefbd5d5678a02f92ecd8b22ddabc6222cd4b305997e821ca32c95,2025-11-12T16:20:22.257000 -CVE-2025-12419,0,1,a1377eb7c4d7a3d5ebf7597f4896c39774b811baa436e1c49b45df36d9b882ad,2025-11-27T18:15:45.890000 -CVE-2025-12421,1,1,b0bd5b52eafce2498b846d1c6dca2b0c165211317c152ea8113ad23cb4ec32b2,2025-11-27T18:15:46.223000 +CVE-2025-12419,0,0,a1377eb7c4d7a3d5ebf7597f4896c39774b811baa436e1c49b45df36d9b882ad,2025-11-27T18:15:45.890000 +CVE-2025-12421,0,0,b0bd5b52eafce2498b846d1c6dca2b0c165211317c152ea8113ad23cb4ec32b2,2025-11-27T18:15:46.223000 CVE-2025-12422,0,0,c197f0fdb3e6b11f38ef90be4db88b71f39618450fda8bfc8f97063dbbe72561,2025-11-07T14:55:47.233000 CVE-2025-12423,0,0,04a15ea262d7c2854c3c856f4a7f1a5f874bc79c8e1c595fa69c870dc5f849ac,2025-11-07T14:52:25.637000 CVE-2025-12424,0,0,613cb5b6f521f743a1b8f2c197dbda50cc1c23974cf9bce65db85ece67adf490,2025-11-07T14:45:20.907000 @@ -287855,7 +287855,7 @@ CVE-2025-12552,0,0,1c24c8558597a77dbbbc084df221b889c7e896069707ae1145b2ad32ccb45 CVE-2025-12553,0,0,3815c784d9b16b9ad7150148367b04033a019132a966e0eb8e3ee76014b83c76,2025-11-10T14:48:31.427000 CVE-2025-12554,0,0,e089cc2157f5e7e12b257471030c28ead62687914c6e7296ccf11018afbbd1f0,2025-11-10T14:48:02.390000 CVE-2025-12556,0,0,c5b074647108f97a9c4d96cd633a49d026e902a1bedb75738b91b05b5390f15d,2025-11-06T19:45:09.883000 -CVE-2025-12559,1,1,f3d435c5fa21fa2625ab64680fcb1afd1d1f4bcbb0b2f2c8c0625c53e4cafced,2025-11-27T17:15:46.530000 +CVE-2025-12559,0,0,f3d435c5fa21fa2625ab64680fcb1afd1d1f4bcbb0b2f2c8c0625c53e4cafced,2025-11-27T17:15:46.530000 CVE-2025-1256,0,0,83056c3a87e9ccc659ae421f3d741ad8fa830a26a579fb9e0beb5aa4feaa59ef,2025-11-14T23:15:44.070000 CVE-2025-12560,0,0,e4b23946fe69b89f3bc62aaaf06572146512b5f96fc1ae25b2a2bca734f6be34,2025-11-06T19:45:09.883000 CVE-2025-12561,0,0,62a4a32158cfadd84f90fb904e5196a7c7a31f7e6642dc460d8432dc51d12b3d,2025-11-22T23:15:44.953000 @@ -288380,6 +288380,7 @@ CVE-2025-13322,0,0,476409fab015cbddbe03b59192a6064fa964f42acfe028aadb98bcd216d63 CVE-2025-13323,0,0,f377c9caad5408ea8d9263efa1cebdb1c7fa5cd0ba3b8c9ea9709f8723f7294a,2025-11-19T13:01:28.870000 CVE-2025-13325,0,0,8132f3150334db848fbcb0739a3007d8aaf101b67d21b73ea799b28bfa0aa42d,2025-11-19T13:01:50.210000 CVE-2025-1333,0,0,4ee465b51a4a069cb257fed9914f5e7ef1c93ab3d9ee351936b316e7a69cce78,2025-08-25T17:27:30.640000 +CVE-2025-13338,1,1,fa53a3b97e795ebaf12ce0701a5370fe217042680f52c2f03966f7e591dde82b,2025-11-27T23:15:50.550000 CVE-2025-1334,0,0,68abe056ab92b6fe06d69183ba7a4c9642dbc3d5cbc6dfff5a401743920f909c,2025-08-12T20:06:55.380000 CVE-2025-13343,0,0,257ccc4d9002f967215d17864322963c23820d21fd59f1edfe642ea0ac7837dd,2025-11-20T15:54:27.593000 CVE-2025-13344,0,0,70c139b03e9acbb3f364fddef7ae604e6463cfa5ad3c6732cb261f99bfe276eb,2025-11-19T13:02:08.330000 @@ -299322,7 +299323,7 @@ CVE-2025-32606,0,0,102f2115c20e683f894ad16b60fd658c0335b2509302e397234daa0c641a9 CVE-2025-32607,0,0,38265bc8bf31e950ce0d9eddaae6c331e6d40d95828b1da783164822fca5392c,2025-04-11T15:39:52.920000 CVE-2025-32608,0,0,1ede76e7f96f83db14d84a23a082710253b42ae060e6c4804c3fdbecd3ceef9f,2025-04-17T20:21:05.203000 CVE-2025-32609,0,0,821ebc32984add689055aeedc6c31e34783fc6044e936e4f70933fd80b7d0458,2025-04-17T20:21:05.203000 -CVE-2025-3261,1,1,580bdcd775da2ff48187788440c226d6d2ffbc6d69d820e2d4d730eb70f6fcbd,2025-11-27T18:15:46.403000 +CVE-2025-3261,0,0,580bdcd775da2ff48187788440c226d6d2ffbc6d69d820e2d4d730eb70f6fcbd,2025-11-27T18:15:46.403000 CVE-2025-32610,0,0,a25ad45796b5f5acd8ab3402331ea34b381a9f321b1c6d3cdae0171ab188d6c3,2025-04-09T20:02:41.860000 CVE-2025-32611,0,0,b2d699f7f4fad9acf828d34da8e4ca9587006829f4f3b01ec8641bb7c0e31e75,2025-04-17T20:21:05.203000 CVE-2025-32612,0,0,efa99a2dabb352d1a38ccde079a19aeda5059b5f0692fc1193c5fbb5935c1e14,2025-04-09T20:02:41.860000 @@ -309612,7 +309613,7 @@ CVE-2025-53176,0,0,d0007733595b5945fa414a854e602440e82442e74645c7488b9632b608831 CVE-2025-53177,0,0,b0be5d3bb33d219362f1f2fbeaa231f93668aaa0777efb34716d487d74e895a2,2025-08-12T14:39:19.227000 CVE-2025-53178,0,0,a0d7e67b0d2b525aa757acae538d17c5621a24c604f3024638a6a69c53ff5cf9,2025-08-12T14:39:35.227000 CVE-2025-53179,0,0,687550ad8868a1d17476346a82b7d07d767503d8b07be2e2e798efa81dc28f70,2025-07-09T19:14:21.773000 -CVE-2025-5318,0,1,33b5546825657e4503299039c78c2270c395c7eab59b0eddb7ec6db577f68381,2025-11-27T18:15:46.597000 +CVE-2025-5318,0,0,33b5546825657e4503299039c78c2270c395c7eab59b0eddb7ec6db577f68381,2025-11-27T18:15:46.597000 CVE-2025-53180,0,0,c9f05a94231e52dc6d3774f4bdc50538c22337601fe5b488c5b0a8c351c6fd84,2025-07-09T19:14:10.030000 CVE-2025-53181,0,0,2419fc3291eb2772102bc14c08da3d83c4e96505d343985f7f9ecf527f541e8f,2025-07-09T19:14:42.683000 CVE-2025-53182,0,0,da92e9428b462ef529e392e5f35d7f75e9329521d5a7c414dac29903a8aa72a7,2025-07-09T19:15:01.380000 @@ -316575,7 +316576,10 @@ CVE-2025-6632,0,0,cf1833c672776077eac82d60a035053b6b782e938aa8071d8feff5ffe959ee CVE-2025-6633,0,0,117eeffdf2f8f6e2fed9dd7c3a57930753c8f6f12ea2d2e4f36e69d3e6dfc33d,2025-11-13T20:04:14.093000 CVE-2025-6634,0,0,d0e17accee751053930ea32f5831b4c1cf973e7515d9fa786db7c4ebb41cf8e6,2025-11-13T20:03:24.913000 CVE-2025-6635,0,0,f366fa96759f6376391e9870168cb12b706be770a2e52913524a29ed4df7212b,2025-08-19T14:15:42.380000 +CVE-2025-66359,1,1,18fcc3602346d0b5b891b520429ffc86fe26fb3573ff96d151c001e2eaa5df0a,2025-11-28T00:15:46.003000 CVE-2025-6636,0,0,39816d956bf54791c2eee53a1d1d6c81f3a514d7d1ff595f2855fbf5a5fe97cd,2025-08-19T14:15:42.533000 +CVE-2025-66360,1,1,01111919efe254d42bad1e03c845fa482d4814783ec36457502d2062318087dd,2025-11-28T00:15:46.253000 +CVE-2025-66361,1,1,334b0818111dd124b3cc7eba01e63a2a76199d4ed61915aa771d6e1aaaae86d6,2025-11-28T00:15:46.430000 CVE-2025-6637,0,0,05438cb660d8aac893260bfc33f610909c7a9ff382b07300c5450bd50e8e1904,2025-08-19T14:15:42.677000 CVE-2025-6638,0,0,7b290d2c6cf51b22ca25b2ccfda0df81519233d8f14ee89bd331c26187b40165,2025-10-21T13:33:08.580000 CVE-2025-6639,0,0,48c7e125e98227249348579c9617d818291519570444fd944ba73c0b82bcfd78,2025-10-27T13:20:15.637000