admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 03:10:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-11-06T17:00:12.023817+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-11-06 17:01:39 +00:00
1 parent 907ab52e57
commit 2bcdb05e8e
237 files changed
+10909 -457
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2011/CVE-2011-100xx/CVE-2011-10040.json
+95 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2011-10040",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:35.773",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T15:08:55.503",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
@@ -69,14 +91,83 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2009",
"matchCriteriaId": "F5A0F705-A92D-4A44-820E-AA95C185FD0A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1:*:*:*:*:*:*",
"matchCriteriaId": "B2FB1221-7B2A-4C1F-877B-87A85C5F67F3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "B8A58F77-B01F-43E5-8AB8-9BBC7AFB8EA6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "930BA0E1-526F-444D-B55C-0F3986B28204"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.3:*:*:*:*:*:*",
"matchCriteriaId": "12F74EFA-B2E0-4DC6-8ECE-8CBD474B5F30"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.4:*:*:*:*:*:*",
"matchCriteriaId": "21AB904E-BE1B-420E-AA2E-BC45DF8BC745"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.5:*:*:*:*:*:*",
"matchCriteriaId": "4664377B-70C1-403A-9A61-F1CECCBC5CEF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.6:*:*:*:*:*:*",
"matchCriteriaId": "29011240-37E3-499A-AAF1-7B0F722F16A3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.7:*:*:*:*:*:*",
"matchCriteriaId": "E0E3B832-C219-475D-A433-6914973DCA3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2011:r1.8:*:*:*:*:*:*",
"matchCriteriaId": "5B5DD634-765B-44D0-A1D1-27DC326A3477"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-xss-via-status-report-page-link-functions",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2012/CVE-2012-100xx/CVE-2012-10063.json
+65 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2012-10063",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:35.913",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T15:09:58.743",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,14 +91,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2011",
"matchCriteriaId": "80293C30-1993-40B8-9495-6D0D9AA3E921"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.0:*:*:*:*:*:*",
"matchCriteriaId": "63DC3A03-8CB1-489F-86D2-13F271C2C48D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "653ED130-C4EC-4EC1-AE81-99BA7F888B33"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "B28B0CDB-0E18-4702-B498-C89431095C0D"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-authenticated-sqli-in-legacy-ccm",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2013/CVE-2013-100xx/CVE-2013-10071.json
+80 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2013-10071",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:36.057",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T15:16:09.650",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
@@ -69,14 +91,68 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2011",
"matchCriteriaId": "80293C30-1993-40B8-9495-6D0D9AA3E921"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.0:*:*:*:*:*:*",
"matchCriteriaId": "63DC3A03-8CB1-489F-86D2-13F271C2C48D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "653ED130-C4EC-4EC1-AE81-99BA7F888B33"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "B28B0CDB-0E18-4702-B498-C89431095C0D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.3:*:*:*:*:*:*",
"matchCriteriaId": "14CF14F0-7115-4AB6-B35F-BDBE298420CF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.4:*:*:*:*:*:*",
"matchCriteriaId": "5B3E6044-06C2-46B2-92AD-C79C287A0018"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.5:*:*:*:*:*:*",
"matchCriteriaId": "DAED5B87-54DB-4AB2-AB0E-1D75EF1F8C7F"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-reflected-xss-via-dashlet-ajax-load-functionality",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2013/CVE-2013-100xx/CVE-2013-10072.json
+80 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2013-10072",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:36.203",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T15:17:13.803",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
@@ -69,14 +91,68 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2011",
"matchCriteriaId": "80293C30-1993-40B8-9495-6D0D9AA3E921"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.0:*:*:*:*:*:*",
"matchCriteriaId": "63DC3A03-8CB1-489F-86D2-13F271C2C48D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "653ED130-C4EC-4EC1-AE81-99BA7F888B33"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "B28B0CDB-0E18-4702-B498-C89431095C0D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.3:*:*:*:*:*:*",
"matchCriteriaId": "14CF14F0-7115-4AB6-B35F-BDBE298420CF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.4:*:*:*:*:*:*",
"matchCriteriaId": "5B3E6044-06C2-46B2-92AD-C79C287A0018"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.5:*:*:*:*:*:*",
"matchCriteriaId": "DAED5B87-54DB-4AB2-AB0E-1D75EF1F8C7F"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-auto-discovery-missing-authorization",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2013/CVE-2013-100xx/CVE-2013-10073.json
+80 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2013-10073",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:36.367",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:24:10.723",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,14 +91,68 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2012",
"matchCriteriaId": "80AE04CF-7CBB-40D9-816E-A481096AA647"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.0:*:*:*:*:*:*",
"matchCriteriaId": "63DC3A03-8CB1-489F-86D2-13F271C2C48D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "653ED130-C4EC-4EC1-AE81-99BA7F888B33"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "B28B0CDB-0E18-4702-B498-C89431095C0D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.3:*:*:*:*:*:*",
"matchCriteriaId": "14CF14F0-7115-4AB6-B35F-BDBE298420CF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.4:*:*:*:*:*:*",
"matchCriteriaId": "5B3E6044-06C2-46B2-92AD-C79C287A0018"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.5:*:*:*:*:*:*",
"matchCriteriaId": "DAED5B87-54DB-4AB2-AB0E-1D75EF1F8C7F"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-auto-discovery-shell-command-injection",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2013/CVE-2013-100xx/CVE-2013-10074.json
+135 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2013-10074",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:36.507",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:23:26.760",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
@@ -69,14 +91,123 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2012",
"matchCriteriaId": "80AE04CF-7CBB-40D9-816E-A481096AA647"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.0:*:*:*:*:*:*",
"matchCriteriaId": "63DC3A03-8CB1-489F-86D2-13F271C2C48D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "653ED130-C4EC-4EC1-AE81-99BA7F888B33"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "B28B0CDB-0E18-4702-B498-C89431095C0D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.3:*:*:*:*:*:*",
"matchCriteriaId": "14CF14F0-7115-4AB6-B35F-BDBE298420CF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.4:*:*:*:*:*:*",
"matchCriteriaId": "5B3E6044-06C2-46B2-92AD-C79C287A0018"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012:r1.5:*:*:*:*:*:*",
"matchCriteriaId": "DAED5B87-54DB-4AB2-AB0E-1D75EF1F8C7F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012r1.6:*:*:*:*:*:*:*",
"matchCriteriaId": "09685D17-FE3A-4572-BA07-3A223BE1E489"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012r1.7:*:*:*:*:*:*:*",
"matchCriteriaId": "68187520-9D07-4F42-8FB9-DA8E5C939F58"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012r1.8:*:*:*:*:*:*:*",
"matchCriteriaId": "CBDB6D28-F9D2-41FB-92B2-4FDC32A8BC88"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012r1.9:*:*:*:*:*:*:*",
"matchCriteriaId": "DA473BE3-4FA0-48F7-88BC-11B4F1AFBF0C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012r2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D34178BE-D99F-4EFE-890E-19030F635D15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012r2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "AB7CAE8E-43FA-4762-B8C1-9A476F088655"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012r2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "910F1485-12D0-4A48-9AED-94CAA56D6FF4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012r2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "844CF55A-BBC5-4C31-85A3-5D5E7FEAF1A5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012r2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "7868FC0F-A302-43D5-80D1-9EDD091057C2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012r2.4:b:*:*:*:*:*:*",
"matchCriteriaId": "BEBFBA42-C832-4094-BF5A-9C196625443F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2012r2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "E7424428-1FB1-49A7-9CFF-25843433660D"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-xss-via-tools-menu",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2018/CVE-2018-92xx/CVE-2018-9276.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2018-9276",
"sourceIdentifier": "[email protected]",
"published": "2018-07-02T16:29:00.600",
"lastModified": "2025-10-22T00:16:28.870",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:51:52.337",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -212,7 +212,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-9276",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2019/CVE-2019-100xx/CVE-2019-10068.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-10068",
"sourceIdentifier": "[email protected]",
"published": "2019-03-26T18:29:00.403",
"lastModified": "2025-10-22T00:16:32.503",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:51:41.367",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -187,7 +187,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-10068",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2019/CVE-2019-110xx/CVE-2019-11001.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-11001",
"sourceIdentifier": "[email protected]",
"published": "2019-04-08T17:29:00.590",
"lastModified": "2025-10-22T00:16:32.957",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:51:36.630",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -289,7 +289,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11001",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2019/CVE-2019-115xx/CVE-2019-11510.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-11510",
"sourceIdentifier": "[email protected]",
"published": "2019-05-08T17:29:00.630",
"lastModified": "2025-10-22T00:16:33.303",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:51:32.237",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -488,7 +488,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11510",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2019/CVE-2019-115xx/CVE-2019-11539.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-11539",
"sourceIdentifier": "[email protected]",
"published": "2019-04-26T02:29:00.300",
"lastModified": "2025-10-22T00:16:33.470",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:51:27.347",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -963,7 +963,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11539",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2019/CVE-2019-116xx/CVE-2019-11634.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-11634",
"sourceIdentifier": "[email protected]",
"published": "2019-05-22T17:29:00.227",
"lastModified": "2025-10-22T00:16:33.920",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:51:22.557",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -164,7 +164,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11634",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2019/CVE-2019-129xx/CVE-2019-12989.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-12989",
"sourceIdentifier": "[email protected]",
"published": "2019-07-16T18:15:12.930",
"lastModified": "2025-10-22T00:16:34.427",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:51:18.340",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -205,7 +205,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-12989",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2019/CVE-2019-129xx/CVE-2019-12991.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-12991",
"sourceIdentifier": "[email protected]",
"published": "2019-07-16T18:15:13.117",
"lastModified": "2025-10-22T00:16:34.603",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:51:13.703",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -205,7 +205,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-12991",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2019/CVE-2019-132xx/CVE-2019-13272.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-13272",
"sourceIdentifier": "[email protected]",
"published": "2019-07-17T13:15:10.687",
"lastModified": "2025-10-22T00:16:34.753",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:51:07.910",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -903,7 +903,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-13272",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2019/CVE-2019-136xx/CVE-2019-13608.json
+8 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-13608",
"sourceIdentifier": "[email protected]",
"published": "2019-08-29T19:15:13.227",
"lastModified": "2025-10-22T00:16:35.063",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:02:33.673",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -120,8 +120,9 @@
{
"vulnerable": true,
"criteria": "cpe:2.3:a:citrix:storefront_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1811",
"versionEndExcluding": "1903",
"matchCriteriaId": "457E9FE5-5C77-4FDF-8411-EB64E59E3781"
"matchCriteriaId": "4374C2B7-DDD8-4246-99D0-9AEC5712604F"
}
]
}
@@ -179,7 +180,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-13608",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2019/CVE-2019-151xx/CVE-2019-15107.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-15107",
"sourceIdentifier": "[email protected]",
"published": "2019-08-16T03:15:11.387",
"lastModified": "2025-10-22T00:16:35.370",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:50:47.130",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -263,7 +263,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-15107",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2019/CVE-2019-157xx/CVE-2019-15752.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-15752",
"sourceIdentifier": "[email protected]",
"published": "2019-08-28T21:15:10.880",
"lastModified": "2025-10-22T00:16:35.723",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:29:29.853",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -206,7 +206,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-15752",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2019/CVE-2019-159xx/CVE-2019-15949.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-15949",
"sourceIdentifier": "[email protected]",
"published": "2019-09-05T17:15:12.327",
"lastModified": "2025-10-22T00:16:35.887",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:27:50.293",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -183,7 +183,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-15949",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2019/CVE-2019-160xx/CVE-2019-16057.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-16057",
"sourceIdentifier": "[email protected]",
"published": "2019-09-16T12:15:10.910",
"lastModified": "2025-10-22T00:16:36.043",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:18:38.843",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -175,7 +175,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-16057",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2019/CVE-2019-72xx/CVE-2019-7238.json
+9 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-7238",
"sourceIdentifier": "[email protected]",
"published": "2019-03-21T17:29:01.180",
"lastModified": "2025-10-22T00:16:45.503",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:57:54.323",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -109,9 +109,10 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sonatype:nexus:*:*:*:*:*:*:*:*",
"criteria": "cpe:2.3:a:sonatype:nexus_repository_manager_3:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.0.0",
"versionEndExcluding": "3.15.0",
"matchCriteriaId": "04D8C400-CE34-44E6-9DE4-7748D263FA39"
"matchCriteriaId": "BACB2CB2-2429-44B0-AAAD-B1E71BD22DC9"
}
]
}
@@ -135,7 +136,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7238",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2019/CVE-2019-72xx/CVE-2019-7256.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-7256",
"sourceIdentifier": "[email protected]",
"published": "2019-07-02T19:15:11.147",
"lastModified": "2025-10-22T00:16:45.720",
"vulnStatus": "Modified",
"lastModified": "2025-11-06T16:52:01.123",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -271,7 +271,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7256",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2022/CVE-2022-478xx/CVE-2022-47878.json
+2 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2022-47878",
"sourceIdentifier": "[email protected]",
"published": "2023-05-02T20:15:10.647",
"lastModified": "2025-11-05T21:15:33.253",
"lastModified": "2025-11-06T15:15:44.323",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify the location as Webroot directory. Consecutive file uploads can lead to the execution of arbitrary code. NOTE: The vendor states that this vulnerability affects on-premises deployments only and that it does not impact cloud-hosted or SaaS environments."
"value": "Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify the location as Webroot directory. Consecutive file uploads can lead to the execution of arbitrary code. NOTE: The vendor states that the vulnerability affects installations running version 22.2 or earlier. The issue was resolved with the version 22.3 and later versions are not affected. Additionally, the vendor states that this vulnerability affects on-premises deployments only and that it does not impact cloud-hosted or SaaS environments."
}
],
"metrics": {
CVE-2022/CVE-2022-478xx/CVE-2022-47879.json
+2 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2022-47879",
"sourceIdentifier": "[email protected]",
"published": "2023-05-12T14:15:09.567",
"lastModified": "2025-11-05T21:15:33.910",
"lastModified": "2025-11-06T15:15:45.500",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods."
"value": "A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods. NOTE: The vendor states that the vulnerability affects installations running version 22.5 or earlier. The issue was resolved with version 23.2 and later versions are not affected."
}
],
"metrics": {
CVE-2023/CVE-2023-73xx/CVE-2023-7316.json
+54 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-7316",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:43.493",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:22:59.143",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
@@ -69,18 +91,45 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-xss-via-graph-explorer-2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2023/CVE-2023-73xx/CVE-2023-7317.json
+54 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-7317",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:43.630",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:22:37.800",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,18 +91,45 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-web-ssh-terminal-missing-access-control",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2023/CVE-2023-73xx/CVE-2023-7318.json
+64 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-7318",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:43.773",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:21:11.310",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
@@ -69,18 +91,55 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/2024r1-0-2/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-xss-via-core-command-expansion",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2023/CVE-2023-73xx/CVE-2023-7322.json
+50 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-7322",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:44.200",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:20:51.270",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 5.2
}
]
},
"weaknesses": [
@@ -69,14 +91,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-log-server-2024r1/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-log-server-incorrect-authorization-granting-full-api-access",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2023/CVE-2023-73xx/CVE-2023-7323.json
+50 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-7323",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:44.340",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:20:27.460",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
@@ -69,14 +91,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-log-server-2024r1/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-log-server-xss-via-create-user-function",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-139xx/CVE-2024-13993.json
+74 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13993",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:44.623",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:18:50.893",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
@@ -69,18 +91,65 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-reflected-xss-via-login-page-on-older-browsers",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-139xx/CVE-2024-13994.json
+79 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13994",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:44.767",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:18:33.013",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,18 +91,70 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-allow-insecure-logins-missing-authorization",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-139xx/CVE-2024-13995.json
+79 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13995",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:44.903",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:17:59.713",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,18 +91,70 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-api-keys-and-hashed-password-authenticated-information-disclosure",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-139xx/CVE-2024-13996.json
+84 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13996",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:45.043",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:17:23.587",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,18 +91,75 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*",
"matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-session-not-invalidated-after-password-change",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-139xx/CVE-2024-13997.json
+84 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13997",
"sourceIdentifier": "[email protected]",
"published": "2025-11-03T22:16:39.910",
"lastModified": "2025-11-04T15:41:31.450",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:24:49.683",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,18 +91,75 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*",
"matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-privilege-escalation-via-migrate-server-feature-to-root-on-host",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-139xx/CVE-2024-13998.json
+84 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13998",
"sourceIdentifier": "[email protected]",
"published": "2025-11-03T22:16:40.043",
"lastModified": "2025-11-04T15:41:31.450",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:25:49.750",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
@@ -69,18 +91,75 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*",
"matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-api-keys-and-hashed-password-authenticated-information-disclosure-2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-139xx/CVE-2024-13999.json
+84 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-13999",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:45.180",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:15:10.237",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,18 +91,75 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*",
"matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-ad-ldap-token-authenticated-information-disclosure",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-140xx/CVE-2024-14000.json
+84 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-14000",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:45.330",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:12:35.853",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
@@ -69,18 +91,75 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*",
"matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-xss-via-capacity-planning-report",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-140xx/CVE-2024-14001.json
+84 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-14001",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:45.463",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:10:43.787",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
@@ -69,18 +91,75 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*",
"matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-xss-via-executive-summary-report",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-140xx/CVE-2024-14002.json
+89 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-14002",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:45.600",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:23:37.760",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
@@ -69,18 +91,80 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*",
"matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.3:*:*:*:*:*:*",
"matchCriteriaId": "9E055065-35A7-458A-A2DB-26634B97EE7C"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-authenticated-local-file-inclusion-via-nagvis",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-140xx/CVE-2024-14003.json
+99 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-14003",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:45.737",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:09:37.150",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,18 +91,90 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*",
"matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.3:*:*:*:*:*:*",
"matchCriteriaId": "9E055065-35A7-458A-A2DB-26634B97EE7C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.4:*:*:*:*:*:*",
"matchCriteriaId": "76946B2D-093C-4981-8465-5ADBB98C0676"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.5:*:*:*:*:*:*",
"matchCriteriaId": "E9112876-7C61-4A72-8F91-023378E82E6D"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-rce-via-nrdp-server-plugins",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-140xx/CVE-2024-14004.json
+99 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-14004",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:45.877",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:08:49.227",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,18 +91,90 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*",
"matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.3:*:*:*:*:*:*",
"matchCriteriaId": "9E055065-35A7-458A-A2DB-26634B97EE7C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.4:*:*:*:*:*:*",
"matchCriteriaId": "76946B2D-093C-4981-8465-5ADBB98C0676"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.5:*:*:*:*:*:*",
"matchCriteriaId": "E9112876-7C61-4A72-8F91-023378E82E6D"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-privilege-escalation-via-nagvis-configuration",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-140xx/CVE-2024-14005.json
+99 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-14005",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:46.013",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:36:47.133",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,18 +91,90 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*",
"matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.3:*:*:*:*:*:*",
"matchCriteriaId": "9E055065-35A7-458A-A2DB-26634B97EE7C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.4:*:*:*:*:*:*",
"matchCriteriaId": "76946B2D-093C-4981-8465-5ADBB98C0676"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.5:*:*:*:*:*:*",
"matchCriteriaId": "E9112876-7C61-4A72-8F91-023378E82E6D"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-command-injection-via-docker-wizard",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-140xx/CVE-2024-14006.json
+109 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-14006",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:46.153",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:35:11.600",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
@@ -69,18 +91,100 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "62CF7BF4-6AAA-443E-93B4-B2F080091C13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "85F1764D-1DD8-44B0-BF5A-2420CB519A3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "C1FE1A0B-78D1-4626-A4CD-21B843DA596E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "CCAB888E-F030-4640-9A18-9E423E553308"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "C648B0A4-053C-4884-8A37-4AF03053ED1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "893EEA99-0096-4C9F-BA8A-246A3E3F6C15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.2:*:*:*:*:*:*",
"matchCriteriaId": "A1FDA3F3-DF79-4807-9451-F04B2DB9A2B6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.3:*:*:*:*:*:*",
"matchCriteriaId": "9E055065-35A7-458A-A2DB-26634B97EE7C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.4:*:*:*:*:*:*",
"matchCriteriaId": "76946B2D-093C-4981-8465-5ADBB98C0676"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.1.5:*:*:*:*:*:*",
"matchCriteriaId": "E9112876-7C61-4A72-8F91-023378E82E6D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "1443759F-EBD7-4366-A5D3-9FB15CE15B40"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:nagios_xi:2024:r1.2.1:*:*:*:*:*:*",
"matchCriteriaId": "F85D8CA4-F1AC-4538-925C-1AD00FF7B9C1"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-xi/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-host-header-injection",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-407xx/CVE-2024-40763.json
+148 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-40763",
"sourceIdentifier": "[email protected]",
"published": "2024-12-05T14:15:20.850",
"lastModified": "2024-12-05T17:15:11.720",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:43:04.740",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,155 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.2.1.14-75sv",
"matchCriteriaId": "7F9F8CFF-F9A3-40EF-A630-62A2AC4681FA"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0B190266-AD6F-401B-9B2E-061CDD539236"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.2.1.14-75sv",
"matchCriteriaId": "013150EC-D511-4219-8668-805B6E6EA43F"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*",
"matchCriteriaId": "51587338-4A5F-41FC-9497-743F061947C2"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.2.1.14-75sv",
"matchCriteriaId": "E74E33FD-25F4-443D-B20E-E5BE67310365"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9D728332-10C9-4508-B720-569D44E99543"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.2.1.14-75sv",
"matchCriteriaId": "E76E31C1-0DFA-4F7C-A7E9-9C9846AE6ED2"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.2.1.14-75sv",
"matchCriteriaId": "5E49B94A-119E-4C1D-81CD-3792F62AFE00"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"
}
]
}
]
}
],
"references": [
{
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-582xx/CVE-2024-58272.json
+54 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-58272",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:46.597",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:34:16.403",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
@@ -69,18 +91,45 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/#log-server-2024R1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#log-server",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-log-server-stored-xss-via-username",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-582xx/CVE-2024-58273.json
+64 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-58273",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:46.737",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:34:35.273",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,18 +91,55 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/#log-server-2024R1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#log-server",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-log-server-lpe-from-apache-backend-shell-user-to-root",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-109xx/CVE-2025-10955.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-10955",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T15:15:45.717",
"lastModified": "2025-11-06T15:15:45.717",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Netcad Software Inc. Netigma allows XSS Through HTTP Query Strings.This issue affects Netigma: through 28102025."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://www.usom.gov.tr/bildirim/tr-25-0378",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-119xx/CVE-2025-11956.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-11956",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T15:15:46.093",
"lastModified": "2025-11-06T15:15:46.093",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd. Co. OBS (Student Affairs Information System) allows Stored XSS.This issue affects OBS (Student Affairs Information System): before 25.0401."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L",
"baseScore": 8.9,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 6.0
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://www.usom.gov.tr/bildirim/tr-25-0379",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-125xx/CVE-2025-12556.json
+100
View File
@@ -0,0 +1,100 @@
{
"id": "CVE-2025-12556",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:48.910",
"lastModified": "2025-11-06T16:15:48.910",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An argument injection vulnerability exists in the affected product that could allow an attacker to execute arbitrary code within the context of the host machine."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-88"
}
]
}
],
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-05",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-126xx/CVE-2025-12610.json
+74 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12610",
"sourceIdentifier": "[email protected]",
"published": "2025-11-03T02:15:41.930",
"lastModified": "2025-11-04T15:41:31.450",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:24:24.470",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 1.2,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -118,28 +138,74 @@
"value": "CWE-89"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codeastro:gym_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "4BDAFA95-39E9-4D93-9228-7D9B51DE6A3F"
}
]
}
]
}
],
"references": [
{
"url": "https://codeastro.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/danz0424/loudong/issues/1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.330905",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.330905",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.678450",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-222xx/CVE-2025-22288.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-22288",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:49.647",
"lastModified": "2025-11-06T16:15:49.647",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through <= 3.17.0."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-35"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-smushit/vulnerability/wordpress-smush-image-compression-and-optimization-plugin-3-17-0-directory-traversal-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-231xx/CVE-2025-23149.json
+115 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-23149",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-05-01T13:15:50.780",
"lastModified": "2025-05-02T13:53:20.943",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:28:43.317",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,134 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tpm: no iniciar el chip mientras est\u00e1 suspendido. Comprobar TPM_CHIP_FLAG_SUSPENDED despu\u00e9s de la llamada a tpm_find_get_ops() puede provocar una llamada falsa a tpm_chip_start(): [35985.503771] i2c i2c-1: Transferencia mientras est\u00e1 suspendido [35985.503796] ADVERTENCIA: CPU: 0 PID: 74 en drivers/i2c/i2c-core.h:56 __i2c_transfer+0xbe/0x810 [35985.503802] M\u00f3dulos vinculados en: [35985.503808] CPU: 0 UID: 0 PID: 74 Comm: hwrng Tainted: GW 6.13.0-next-20250203-00005-gfa0cb5642941 #19 9c3d7f78192f2d38e32010ac9c90fdc71109ef6f [35985.503814] Contaminado: [W]=WARN [35985.503817] Nombre del hardware: Google Morphius/Morphius, BIOS Google_Morphius.13434.858.0 26/10/2023 [35985.503819] RIP: 0010:__i2c_transfer+0xbe/0x810 [35985.503825] C\u00f3digo: 30 01 00 00 4c 89 f7 e8 40 fe d8 ff 48 8b 93 80 01 00 00 48 85 d2 75 03 49 8b 16 48 c7 c7 0a fb 7c a7 48 89 c6 e8 32 ad b0 fe &lt;0f&gt; 0b b8 94 ff ff ff e9 33 04 00 00 be 02 00 00 00 83 fd 02 0f 5 [35985.503828] RSP: 0018:ffffa106c0333d30 EFLAGS: 00010246 [35985.503833] RAX: 074ba64aa20f7000 RBX: ffff8aa4c1167120 RCX: 0000000000000000 [35985.503836] RDX: 0000000000000000 RSI: ffffffffa77ab0e4 RDI: 0000000000000001 [35985.503838] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [35985.503841] R10: 0000000000000004 R11: 00000001000313d5 R12: ffff8aa4c10f1820 [35985.503843] R13: ffff8aa4c0e243c0 R14: ffff8aa4c1167250 R15: ffff8aa4c1167120 [35985.503846] FS: 0000000000000000(0000) GS:ffff8aa4eae00000(0000) knlGS:0000000000000000 [35985.503849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [35985.503852] CR2: 00007fab0aaf1000 CR3: 0000000105328000 CR4: 00000000003506f0 [35985.503855] Rastreo de llamadas: [35985.503859] [35985.503863] ? __warn+0xd4/0x260 [35985.503868] ? __i2c_transfer+0xbe/0x810 [35985.503874] ? report_bug+0xf3/0x210 [35985.503882] ? handle_bug+0x63/0xb0 [35985.503887] ? exc_invalid_op+0x16/0x50 [35985.503892] ? asm_exc_invalid_op+0x16/0x20 [35985.503904] ? __i2c_transfer+0xbe/0x810 [35985.503913] tpm_cr50_i2c_transfer_message+0x24/0xf0 [35985.503920] tpm_cr50_i2c_read+0x8e/0x120 [35985.503928] tpm_cr50_request_locality+0x75/0x170 [35985.503935] tpm_chip_start+0x116/0x160 [35985.503942] tpm_try_get_ops+0x57/0x90 [35985.503948] tpm_find_get_ops+0x26/0xd0 [35985.503955] tpm_get_random+0x2d/0x80 No avance con tpm_chip_start() dentro de tpm_try_get_ops(), a menos que TPM_CHIP_FLAG_SUSPENDED no est\u00e9 configurado. tpm_find_get_ops() devolver\u00e1 NULL en tal caso de falla."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.6.64",
"versionEndExcluding": "6.6.88",
"matchCriteriaId": "4CB536A1-1B8E-43D5-A165-2178BC9EF682"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.11.8",
"versionEndExcluding": "6.12",
"matchCriteriaId": "C9D2BD2C-A19D-4E5F-828D-0CEED87118B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.12.1",
"versionEndExcluding": "6.12.24",
"matchCriteriaId": "6CEE36FD-E463-4E92-A4DA-4CCBCF31A19F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.13",
"versionEndExcluding": "6.13.12",
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.14",
"versionEndExcluding": "6.14.3",
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.12:-:*:*:*:*:*:*",
"matchCriteriaId": "0E698080-7669-4132-8817-4C674EEBCE54"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc7:*:*:*:*:*:*",
"matchCriteriaId": "1EF8CD82-1EAE-4254-9545-F85AB94CF90F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/1404dff1e11bf927b70ac25e1de97bed9742ede4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/17d253af4c2c8a2acf84bb55a0c2045f150b7dfd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e74e2394eed90aff5c3a08c1f51f476d4de71d02",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f1044e995b64d70ef90ef6f2b89955b127497702",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f3cb81cb96d587f9f235a11789d1ec0992643078",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2025/CVE-2025-231xx/CVE-2025-23152.json
+65 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-23152",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-05-01T13:15:51.110",
"lastModified": "2025-05-02T13:53:20.943",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:26:53.277",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,75 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: arm64/crc-t10dif: se corrige el uso de una matriz fuera de alcance en crc_t10dif_arch() Se corrige un error tonto en el que se usaba una matriz fuera de su alcance."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.14",
"versionEndExcluding": "6.14.3",
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/bd9e1a03e579a01dfa66dbaa53d0219c33cbc463",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d48b663f410f8b35b8ba9bd597bafaa00f53293b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2025/CVE-2025-289xx/CVE-2025-28953.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-28953",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:49.830",
"lastModified": "2025-11-06T16:15:49.830",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axiomthemes smart SEO smartSEO allows SQL Injection.This issue affects smart SEO: from n/a through <= 4.0."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/smartSEO/vulnerability/wordpress-smart-seo-4-0-sql-injection-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-306xx/CVE-2025-30663.json
+166 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-30663",
"sourceIdentifier": "[email protected]",
"published": "2025-05-14T18:15:30.030",
"lastModified": "2025-05-16T14:43:56.797",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-06T15:34:11.713",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.0,
"impactScore": 6.0
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
]
},
@@ -51,10 +71,153 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "244E6149-E1D7-4ECF-8EC3-0CFB0BE4DEC3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:iphone_os:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "977E2C51-6E2F-425F-A0E6-0422861DBC3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:linux:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "87CD2A9F-6C3A-43DC-A8EE-B84C778E82C0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "7FC7DC88-93AB-42D8-8400-CF639E6BB496"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "A3D5AD71-8BC5-4346-B8B2-1166AD0415FF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:android:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "F654DF44-2DB2-4E97-AEEC-CCC8E92AFE70"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "126DBD94-CB68-4D41-8A85-AF3C9BE8C9DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "F41F961A-2FC2-47B6-BC6C-706DE37F2B95"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "390D202B-A60A-411E-8A57-0AF1C2BB0497"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "D3E40A28-D25D-4C71-B3A9-0FCAA094BC35"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:linux:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "3D4B9352-3583-4B7E-972F-F3C617AE6166"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:macos:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "412247BC-50D3-41B1-B85E-58E14824F5E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "A117F0E2-8079-41C5-B619-D9059A3120E4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "CBBCF724-FA51-4804-81C5-921FE0C1AB7E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "4A201362-6C04-49BB-B46A-1202269F52FF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "908A4DA7-2E18-4966-A4A7-D7400A334D15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "16784ACE-52EB-4BC8-A3F8-329B76E3BB12"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "63C6EF40-B762-4FE8-83AA-D9D4600A5C92"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*",
"versionEndExcluding": "6.1.17",
"matchCriteriaId": "B4CF0315-8092-424B-9254-05FF6DDDA029"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*",
"versionStartIncluding": "6.1.18",
"versionEndExcluding": "6.2.13",
"matchCriteriaId": "71A0CC0D-D415-46DB-B566-DB7C41A6E277"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*",
"versionStartIncluding": "6.2.14",
"versionEndExcluding": "6.3.10",
"matchCriteriaId": "D2276405-3395-4252-A140-06C9A9BDBCDB"
}
]
}
]
}
],
"references": [
{
"url": "https://www.zoom.com/en/trust/security-bulletin/zsb-25016",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-306xx/CVE-2025-30664.json
+152 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-30664",
"sourceIdentifier": "[email protected]",
"published": "2025-05-14T18:15:30.180",
"lastModified": "2025-10-02T21:16:00.287",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-06T15:39:58.980",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.3,
"impactScore": 5.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.5,
"impactScore": 6.0
}
]
},
@@ -51,10 +71,139 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "244E6149-E1D7-4ECF-8EC3-0CFB0BE4DEC3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:iphone_os:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "977E2C51-6E2F-425F-A0E6-0422861DBC3C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:linux:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "87CD2A9F-6C3A-43DC-A8EE-B84C778E82C0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "7FC7DC88-93AB-42D8-8400-CF639E6BB496"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "A3D5AD71-8BC5-4346-B8B2-1166AD0415FF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:android:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "F654DF44-2DB2-4E97-AEEC-CCC8E92AFE70"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "126DBD94-CB68-4D41-8A85-AF3C9BE8C9DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "F41F961A-2FC2-47B6-BC6C-706DE37F2B95"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "390D202B-A60A-411E-8A57-0AF1C2BB0497"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "D3E40A28-D25D-4C71-B3A9-0FCAA094BC35"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:linux:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "3D4B9352-3583-4B7E-972F-F3C617AE6166"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:macos:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "412247BC-50D3-41B1-B85E-58E14824F5E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "A117F0E2-8079-41C5-B619-D9059A3120E4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "CBBCF724-FA51-4804-81C5-921FE0C1AB7E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "4A201362-6C04-49BB-B46A-1202269F52FF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "908A4DA7-2E18-4966-A4A7-D7400A334D15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "16784ACE-52EB-4BC8-A3F8-329B76E3BB12"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*",
"versionEndExcluding": "6.4.0",
"matchCriteriaId": "63C6EF40-B762-4FE8-83AA-D9D4600A5C92"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*",
"versionEndExcluding": "6.3.10",
"matchCriteriaId": "25FAE8C9-B54A-407E-8180-96889F37D684"
}
]
}
]
}
],
"references": [
{
"url": "https://www.zoom.com/en/trust/security-bulletin/zsb-25017",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-310xx/CVE-2025-31029.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-31029",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:50.067",
"lastModified": "2025-11-06T16:15:50.067",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bingu replyMail replymail allows Stored XSS.This issue affects replyMail: from n/a through <= 1.2.0."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/replymail/vulnerability/wordpress-replymail-plugin-1-2-0-cross-site-request-forgery-csrf-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-322xx/CVE-2025-32222.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-32222",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:50.237",
"lastModified": "2025-11-06T16:15:50.237",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Control of Generation of Code ('Code Injection') vulnerability in Widgetlogic.org Widget Logic widget-logic allows Code Injection.This issue affects Widget Logic: from n/a through <= 6.0.5."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/widget-logic/vulnerability/wordpress-widget-logic-6-0-5-remote-code-execution-rce-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-342xx/CVE-2025-34249.json
+94 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-34249",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:47.260",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:33:32.100",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,18 +91,85 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:*:*:*:*:*:*:*:*",
"versionEndIncluding": "4.2.0",
"matchCriteriaId": "130FB889-F99F-472E-B49E-CAF86347E2D1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "BBB1F2CB-5591-4633-B9B4-1C12A2AE109C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "99FA450B-2265-43D4-A709-86979F935375"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "2A1C29E4-ED0C-4C07-A6AC-714613C4C62C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r1.0.3:*:*:*:*:*:*",
"matchCriteriaId": "1E5E9BA5-5FCF-4A1D-BB71-67C4E591F5AE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "1F53524F-35C4-42CE-8147-4D4E7FE7860A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "509CC76A-E968-41A1-B358-96481366CE5C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "665DAD59-DB98-46D9-B7BF-64C812356108"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r2:*:*:*:*:*:*",
"matchCriteriaId": "A8543938-C567-42CA-B500-EB10D3BE92A5"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-fusion/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://www.nagios.com/products/security/#nagios-xi",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-fusion-2fa-brute-force-bypass",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-342xx/CVE-2025-34269.json
+94 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-34269",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:47.393",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:33:22.433",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 5.2
}
]
},
"weaknesses": [
@@ -69,18 +91,85 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:*:*:*:*:*:*:*:*",
"versionEndIncluding": "4.2.0",
"matchCriteriaId": "130FB889-F99F-472E-B49E-CAF86347E2D1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "BBB1F2CB-5591-4633-B9B4-1C12A2AE109C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "99FA450B-2265-43D4-A709-86979F935375"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "2A1C29E4-ED0C-4C07-A6AC-714613C4C62C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r1.0.3:*:*:*:*:*:*",
"matchCriteriaId": "1E5E9BA5-5FCF-4A1D-BB71-67C4E591F5AE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "1F53524F-35C4-42CE-8147-4D4E7FE7860A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r1.1.1:*:*:*:*:*:*",
"matchCriteriaId": "509CC76A-E968-41A1-B358-96481366CE5C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "665DAD59-DB98-46D9-B7BF-64C812356108"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:fusion:2024:r2:*:*:*:*:*:*",
"matchCriteriaId": "A8543938-C567-42CA-B500-EB10D3BE92A5"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-fusion/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://www.nagios.com/products/security/#fusion",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-fusion-2fa-lack-of-reauthentication-or-session-rotation",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-342xx/CVE-2025-34270.json
+123 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-34270",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:47.533",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:31:27.530",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
]
},
"weaknesses": [
@@ -73,22 +95,117 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*",
"matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*",
"matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.2:*:*:*:*:*:*",
"matchCriteriaId": "DB7A3A2A-DF36-4495-A5FE-826085120997"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.3:*:*:*:*:*:*",
"matchCriteriaId": "0AC10FEF-5606-4949-9E5E-E44FE1CE418D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.4:*:*:*:*:*:*",
"matchCriteriaId": "EC2BBD0F-12FE-4A8F-894E-ABAEEE081E10"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.5:*:*:*:*:*:*",
"matchCriteriaId": "16861134-A375-4918-8171-77C14A3351EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r2:*:*:*:*:*:*",
"matchCriteriaId": "6AAEC3D7-AD80-4647-9130-F42CE4785906"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.1:*:*:*:*:*:*",
"matchCriteriaId": "DB3DFA03-0D49-4E43-9041-D7C30615B3D5"
}
]
}
]
}
],
"references": [
{
"url": "https://support.nagios.com/kb/article/authenticating-and-importing-users-with-ad-and-ldap-995.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Not Applicable"
]
},
{
"url": "https://www.nagios.com/changelog/#log-server",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#log-server-2024R2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-log-server-ad-ldap-import-password-not-obfuscated",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-342xx/CVE-2025-34271.json
+119 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-34271",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:47.673",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:29:46.200",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,18 +91,110 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*",
"matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*",
"matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.2:*:*:*:*:*:*",
"matchCriteriaId": "DB7A3A2A-DF36-4495-A5FE-826085120997"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.3:*:*:*:*:*:*",
"matchCriteriaId": "0AC10FEF-5606-4949-9E5E-E44FE1CE418D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.4:*:*:*:*:*:*",
"matchCriteriaId": "EC2BBD0F-12FE-4A8F-894E-ABAEEE081E10"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.5:*:*:*:*:*:*",
"matchCriteriaId": "16861134-A375-4918-8171-77C14A3351EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r2:*:*:*:*:*:*",
"matchCriteriaId": "6AAEC3D7-AD80-4647-9130-F42CE4785906"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.1:*:*:*:*:*:*",
"matchCriteriaId": "DB3DFA03-0D49-4E43-9041-D7C30615B3D5"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/#log-server",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#log-server-2024R2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-log-server-cluster-manager-credential-requests-sent-over-plaintext",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-342xx/CVE-2025-34272.json
+124 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-34272",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:47.810",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:29:24.517",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
@@ -69,18 +91,115 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*",
"matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*",
"matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.2:*:*:*:*:*:*",
"matchCriteriaId": "DB7A3A2A-DF36-4495-A5FE-826085120997"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.3:*:*:*:*:*:*",
"matchCriteriaId": "0AC10FEF-5606-4949-9E5E-E44FE1CE418D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.4:*:*:*:*:*:*",
"matchCriteriaId": "EC2BBD0F-12FE-4A8F-894E-ABAEEE081E10"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.5:*:*:*:*:*:*",
"matchCriteriaId": "16861134-A375-4918-8171-77C14A3351EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r2:*:*:*:*:*:*",
"matchCriteriaId": "6AAEC3D7-AD80-4647-9130-F42CE4785906"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.1:*:*:*:*:*:*",
"matchCriteriaId": "DB3DFA03-0D49-4E43-9041-D7C30615B3D5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.2:*:*:*:*:*:*",
"matchCriteriaId": "2333DBDE-6F1F-4286-B58C-74ABE18B9469"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/#log-server",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#log-server-2024R2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-log-server-non-empty-default-dashboard-fallback",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-342xx/CVE-2025-34273.json
+124 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-34273",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:47.953",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:28:38.233",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
@@ -69,18 +91,115 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*",
"matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*",
"matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.2:*:*:*:*:*:*",
"matchCriteriaId": "DB7A3A2A-DF36-4495-A5FE-826085120997"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.3:*:*:*:*:*:*",
"matchCriteriaId": "0AC10FEF-5606-4949-9E5E-E44FE1CE418D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.4:*:*:*:*:*:*",
"matchCriteriaId": "EC2BBD0F-12FE-4A8F-894E-ABAEEE081E10"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.5:*:*:*:*:*:*",
"matchCriteriaId": "16861134-A375-4918-8171-77C14A3351EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r2:*:*:*:*:*:*",
"matchCriteriaId": "6AAEC3D7-AD80-4647-9130-F42CE4785906"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.1:*:*:*:*:*:*",
"matchCriteriaId": "DB3DFA03-0D49-4E43-9041-D7C30615B3D5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.2:*:*:*:*:*:*",
"matchCriteriaId": "2333DBDE-6F1F-4286-B58C-74ABE18B9469"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/#log-server",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#log-server-2024R2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-log-server-non-admin-dashboard-deletion",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-342xx/CVE-2025-34274.json
+124 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-34274",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:48.090",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:27:58.503",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,18 +91,115 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*",
"matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*",
"matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.2:*:*:*:*:*:*",
"matchCriteriaId": "DB7A3A2A-DF36-4495-A5FE-826085120997"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.3:*:*:*:*:*:*",
"matchCriteriaId": "0AC10FEF-5606-4949-9E5E-E44FE1CE418D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.4:*:*:*:*:*:*",
"matchCriteriaId": "EC2BBD0F-12FE-4A8F-894E-ABAEEE081E10"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.5:*:*:*:*:*:*",
"matchCriteriaId": "16861134-A375-4918-8171-77C14A3351EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r2:*:*:*:*:*:*",
"matchCriteriaId": "6AAEC3D7-AD80-4647-9130-F42CE4785906"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.1:*:*:*:*:*:*",
"matchCriteriaId": "DB3DFA03-0D49-4E43-9041-D7C30615B3D5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r2.0.2:*:*:*:*:*:*",
"matchCriteriaId": "2333DBDE-6F1F-4286-B58C-74ABE18B9469"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/#log-server",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#log-server-2024R2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-log-server-logstash-process-root-privileges",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-342xx/CVE-2025-34277.json
+84 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-34277",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:48.227",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:27:31.010",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,18 +91,75 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*",
"matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/#log-server-2024R1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.nagios.com/products/security/#log-server",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-log-server-rce-via-malformed-dashboard-id",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-342xx/CVE-2025-34298.json
+85 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-34298",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:49.257",
"lastModified": "2025-11-04T15:41:56.843",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:27:12.660",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,14 +91,73 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*",
"matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*",
"matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C"
}
]
}
]
}
],
"references": [
{
"url": "https://www.nagios.com/changelog/nagios-log-server-2024r1/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.vulncheck.com/advisories/nagios-log-server-set-email-privilege-escalation",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-360xx/CVE-2025-36054.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-36054",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T15:15:46.363",
"lastModified": "2025-11-06T15:15:46.363",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM Business Automation Workflow containers 24.0.0 through 24.0.0-IF006, 24.0.1 through 24.0.1-IF004, 25.0.0 through 25.0.0-IF001 and IBM Business Automation Workflow traditional with Process Federation Server 24.0.0 through 24.0.1 and 25.0.0 are vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7250261",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-377xx/CVE-2025-37735.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-37735",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T15:15:46.640",
"lastModified": "2025-11-06T15:15:46.640",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being deleted by the Defend service running as SYSTEM. In some cases, this could result in local privilege escalation."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-281"
}
]
}
],
"references": [
{
"url": "https://discuss.elastic.co/t/elastic-defend-8-19-6-9-1-6-and-9-2-0-security-update-esa-2025-23/383272",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-382xx/CVE-2025-38240.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-38240",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-04-18T07:15:43.510",
"lastModified": "2025-04-21T14:23:45.950",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:22:49.323",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,117 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/mediatek: dp: drm_err =&gt; dev_err en la ruta HPD para evitar un puntero nulo. La funci\u00f3n mtk_dp_wait_hpd_asserted() puede llamarse antes de asignar el puntero `mtk_dp-&gt;drm_dev` en mtk_dp_bridge_attach(). Espec\u00edficamente, se puede llamar a trav\u00e9s de esta ruta de llamada: - mtk_edp_wait_hpd_asserted - [panel probe] - dp_aux_ep_probe El uso de impresiones de nivel \"drm\" en cualquier parte de esta ruta de llamada provoca una desreferencia del puntero nulo. Cambie el mensaje de error directamente en mtk_dp_wait_hpd_asserted() a dev_err() para evitar esto. Cambie tambi\u00e9n los mensajes de error en mtk_dp_parse_capabilities(), que es llamado por mtk_dp_wait_hpd_asserted(). Al tocar estas impresiones, agregue tambi\u00e9n el c\u00f3digo de error para facilitar la depuraci\u00f3n futura."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.6",
"versionEndExcluding": "6.6.87",
"matchCriteriaId": "DF08B6FA-567C-416D-8919-C3B544FF0DFC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.12.23",
"matchCriteriaId": "26CAB76D-F00F-43CE-BEAD-7097F8FB1D6C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.13",
"versionEndExcluding": "6.13.11",
"matchCriteriaId": "E7E864B0-8C00-4679-BA55-659B4C9C3AD3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.14",
"versionEndExcluding": "6.14.2",
"matchCriteriaId": "FADAE5D8-4808-442C-B218-77B2CE8780A0"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/106a6de46cf4887d535018185ec528ce822d6d84",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/13ec849fd2eab808ee8eba2625df7ebea3b85edf",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/149a5c38436c229950cf1020992ce65c9549bc19",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2fda391ef7a701748abd7fa32232981b522c1e07",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/57a9fb47551b33cde7b76d17c0072c3b394f4620",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2025/CVE-2025-384xx/CVE-2025-38479.json
+87 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-38479",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-04-18T07:15:43.613",
"lastModified": "2025-04-21T14:23:45.950",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:22:25.180",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,103 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dmaengine: fsl-edma: libera irq correctamente en la ruta de eliminaci\u00f3n. Agrega la verificaci\u00f3n fsl_edma-&gt;txirq/errirq para evitar la siguiente advertencia porque no hay errirq en la plataforma i.MX9. De lo contrario, habr\u00e1 un volcado de kernel: ADVERTENCIA: CPU: 0 PID: 11 at kernel/irq/devres.c:144 devm_free_irq+0x74/0x80 Modules linked in: CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-rc7#18 Hardware name: NXP i.MX93 11X11 EVK board (DT) Workqueue: events_unbound deferred_probe_work_func pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : devm_free_irq+0x74/0x80 lr : devm_free_irq+0x48/0x80 Call trace: devm_free_irq+0x74/0x80 (P) devm_free_irq+0x48/0x80 (L) fsl_edma_remove+0xc4/0xc8 platform_remove+0x28/0x44 device_remove+0x4c/0x80 "
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.11",
"versionEndExcluding": "6.12.23",
"matchCriteriaId": "36AF5265-52FA-43B1-996B-D05FDF2FCCDF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.13",
"versionEndExcluding": "6.13.11",
"matchCriteriaId": "E7E864B0-8C00-4679-BA55-659B4C9C3AD3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.14",
"versionEndExcluding": "6.14.2",
"matchCriteriaId": "FADAE5D8-4808-442C-B218-77B2CE8780A0"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/38ff8769074db27387cb2323aaa751e59d168e6a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/55e2dbe2ba787d4fc2306f6bb2f43fb32176e184",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f3834d2d68749e4760c27325149765930ad876fd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fa70c4c3c580c239a0f9e83a14770ab026e8d820",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2025/CVE-2025-394xx/CVE-2025-39463.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-39463",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:50.447",
"lastModified": "2025-11-06T16:15:50.447",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Dessau dessau allows PHP Local File Inclusion.This issue affects Dessau: from n/a through < 1.9."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-98"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/dessau/vulnerability/wordpress-dessau-theme-1-9-local-file-inclusion-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-394xx/CVE-2025-39465.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-39465",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:50.700",
"lastModified": "2025-11-06T16:15:50.700",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Google Maps: from n/a through <= 5.8.4."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wp-google-map-gold/vulnerability/wordpress-advanced-google-maps-plugin-5-8-4-broken-access-control-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-394xx/CVE-2025-39466.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-39466",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:50.903",
"lastModified": "2025-11-06T16:15:50.903",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes D\u00f8r dor allows PHP Local File Inclusion.This issue affects D\u00f8r: from n/a through <= 2.4."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-98"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/dor/vulnerability/wordpress-doer-2-4-local-file-inclusion-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-394xx/CVE-2025-39467.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-39467",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:51.053",
"lastModified": "2025-11-06T16:15:51.053",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a through <= 1.7.1."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-35"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/wanderland/vulnerability/wordpress-wanderland-1-7-1-local-file-inclusion-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-394xx/CVE-2025-39468.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-39468",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:51.210",
"lastModified": "2025-11-06T16:15:51.210",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in pantherius Modal Survey modal-survey.This issue affects Modal Survey: from n/a through <= 2.0.2.0.1."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-98"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/modal-survey/vulnerability/wordpress-modal-survey-plugin-2-0-2-0-1-local-file-inclusion-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-405xx/CVE-2025-40599.json
+92 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-40599",
"sourceIdentifier": "[email protected]",
"published": "2025-07-23T14:15:33.090",
"lastModified": "2025-07-25T15:29:44.523",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:41:11.763",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,99 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.2.2.1-90sv",
"matchCriteriaId": "786BB26D-B943-4564-B8CC-3260EF2AACED"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*",
"matchCriteriaId": "51587338-4A5F-41FC-9497-743F061947C2"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.2.2.1-90sv",
"matchCriteriaId": "057D8219-D4F0-49FB-8EE4-6BBBDAED49DB"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.2.2.1-90sv",
"matchCriteriaId": "3418E737-CB38-4736-9725-AD05A1AB29CF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"
}
]
}
]
}
],
"references": [
{
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0014",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-406xx/CVE-2025-40603.json
+92 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-40603",
"sourceIdentifier": "[email protected]",
"published": "2025-10-31T11:15:34.757",
"lastModified": "2025-11-04T15:41:31.450",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:26:50.913",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,99 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.2.2.3",
"matchCriteriaId": "3CED8FE0-D00D-4919-968F-A7F4FDD8C812"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*",
"matchCriteriaId": "51587338-4A5F-41FC-9497-743F061947C2"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.2.2.3",
"matchCriteriaId": "C395F5EF-2A49-4D59-9DF4-69F3CC364595"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.2.2.3",
"matchCriteriaId": "6FAB4D54-F7B6-422F-9D4F-A78A982A249E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"
}
]
}
]
}
],
"references": [
{
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0017",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-416xx/CVE-2025-41673.json
+40 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-41673",
"sourceIdentifier": "[email protected]",
"published": "2025-07-21T10:15:23.400",
"lastModified": "2025-11-03T20:18:48.620",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:45:33.930",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,50 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.3.3",
"matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF"
}
]
}
]
}
],
"references": [
{
"url": "https://certvde.com/de/advisories/VDE-2025-058",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://seclists.org/fulldisclosure/2025/Jul/38",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
}
]
}
CVE-2025/CVE-2025-416xx/CVE-2025-41674.json
+40 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-41674",
"sourceIdentifier": "[email protected]",
"published": "2025-07-21T10:15:24.363",
"lastModified": "2025-11-03T20:18:48.720",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:45:25.293",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,50 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.3.3",
"matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF"
}
]
}
]
}
],
"references": [
{
"url": "https://certvde.com/de/advisories/VDE-2025-058",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://seclists.org/fulldisclosure/2025/Jul/38",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
}
]
}
CVE-2025/CVE-2025-416xx/CVE-2025-41675.json
+40 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-41675",
"sourceIdentifier": "[email protected]",
"published": "2025-07-21T10:15:24.530",
"lastModified": "2025-11-03T20:18:48.820",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:45:17.543",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,50 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.3.3",
"matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF"
}
]
}
]
}
],
"references": [
{
"url": "https://certvde.com/de/advisories/VDE-2025-058",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://seclists.org/fulldisclosure/2025/Jul/38",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
}
]
}
CVE-2025/CVE-2025-416xx/CVE-2025-41676.json
+40 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-41676",
"sourceIdentifier": "[email protected]",
"published": "2025-07-21T10:15:24.680",
"lastModified": "2025-11-03T20:18:48.913",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:45:10.670",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,50 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.3.3",
"matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF"
}
]
}
]
}
],
"references": [
{
"url": "https://certvde.com/de/advisories/VDE-2025-058",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://seclists.org/fulldisclosure/2025/Jul/38",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
}
]
}
CVE-2025/CVE-2025-416xx/CVE-2025-41677.json
+40 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-41677",
"sourceIdentifier": "[email protected]",
"published": "2025-07-21T10:15:24.840",
"lastModified": "2025-11-03T20:18:49.010",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:45:01.420",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,50 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.3.3",
"matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF"
}
]
}
]
}
],
"references": [
{
"url": "https://certvde.com/de/advisories/VDE-2025-058",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://seclists.org/fulldisclosure/2025/Jul/38",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
}
]
}
CVE-2025/CVE-2025-416xx/CVE-2025-41678.json
+60 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-41678",
"sourceIdentifier": "[email protected]",
"published": "2025-07-21T10:15:24.980",
"lastModified": "2025-11-03T20:18:49.107",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:44:52.220",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.2,
"impactScore": 5.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
}
]
},
@@ -51,14 +71,50 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.3.3",
"matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF"
}
]
}
]
}
],
"references": [
{
"url": "https://certvde.com/de/advisories/VDE-2025-058",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://seclists.org/fulldisclosure/2025/Jul/38",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
}
]
}
CVE-2025/CVE-2025-416xx/CVE-2025-41679.json
+60 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-41679",
"sourceIdentifier": "[email protected]",
"published": "2025-07-21T10:15:25.133",
"lastModified": "2025-11-03T20:18:49.190",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:44:44.590",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -51,14 +71,50 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.3.3",
"matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF"
}
]
}
]
}
],
"references": [
{
"url": "https://certvde.com/de/advisories/VDE-2025-058",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://seclists.org/fulldisclosure/2025/Jul/38",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
}
]
}
CVE-2025/CVE-2025-416xx/CVE-2025-41681.json
+40 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-41681",
"sourceIdentifier": "[email protected]",
"published": "2025-07-21T10:15:25.293",
"lastModified": "2025-11-03T20:18:49.293",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:44:36.567",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,50 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.3.3",
"matchCriteriaId": "73596D99-CA79-4FF6-AEF1-62C751C7FD23"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF"
}
]
}
]
}
],
"references": [
{
"url": "https://certvde.com/de/advisories/VDE-2025-058",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://seclists.org/fulldisclosure/2025/Jul/38",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
}
]
}
CVE-2025/CVE-2025-448xx/CVE-2025-44823.json
+89 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-44823",
"sourceIdentifier": "[email protected]",
"published": "2025-10-07T20:15:35.070",
"lastModified": "2025-10-08T19:38:09.863",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:41:01.823",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.1,
"impactScore": 6.0
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
@@ -47,18 +67,82 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*",
"matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*",
"matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C"
}
]
}
]
}
],
"references": [
{
"url": "https://www.exploit-db.com/exploits/52177",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"VDB Entry"
]
},
{
"url": "https://www.nagios.com/changelog/#log-server",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://www.exploit-db.com/exploits/52177",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-448xx/CVE-2025-44824.json
+89 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-44824",
"sourceIdentifier": "[email protected]",
"published": "2025-10-07T20:15:35.277",
"lastModified": "2025-10-08T19:38:09.863",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T16:40:35.863",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.1,
"impactScore": 4.7
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
@@ -47,18 +67,82 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2024",
"matchCriteriaId": "87E74637-713C-4DD7-B97E-2F247B7B12B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1:*:*:*:*:*:*",
"matchCriteriaId": "B93D415C-B2C0-42CE-B9B3-29C29A3DCC16"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.1:*:*:*:*:*:*",
"matchCriteriaId": "997B64B5-A3F2-4D0E-B05E-CCA76D598C18"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.0.2:*:*:*:*:*:*",
"matchCriteriaId": "D20F6746-83DD-49AE-8C3D-AF2FFB47A89E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.1:*:*:*:*:*:*",
"matchCriteriaId": "5EF32AF5-19EA-495A-AB28-F78F33DDEC3F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.2:*:*:*:*:*:*",
"matchCriteriaId": "4C26DE7A-37AA-4570-81C1-2E0C1A9026F7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3:*:*:*:*:*:*",
"matchCriteriaId": "52C22468-A773-49C8-81AD-9B76C26BFFD1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:nagios:log_server:2024:r1.3.1:*:*:*:*:*:*",
"matchCriteriaId": "7CEC223A-A3EE-4C51-8B71-E19C73B9215C"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/skraft9/nagios-log-server-dos",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.nagios.com/changelog/#log-server",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://github.com/skraft9/nagios-log-server-dos",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-475xx/CVE-2025-47588.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-47588",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:51.363",
"lastModified": "2025-11-06T16:15:51.363",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Control of Generation of Code ('Code Injection') vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Code Injection.This issue affects Dynamic Pricing With Discount Rules for WooCommerce: from n/a through <= 4.5.9."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/aco-woo-dynamic-pricing/vulnerability/wordpress-dynamic-pricing-with-discount-rules-for-woocommerce-plugin-4-5-9-arbitrary-code-execution-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-480xx/CVE-2025-48077.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-48077",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:51.513",
"lastModified": "2025-11-06T16:15:51.513",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in nitinmaurya12 Block Country block-country allows Stored XSS.This issue affects Block Country: from n/a through <= 1.0."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/block-country/vulnerability/wordpress-block-country-plugin-1-0-cross-site-request-forgery-csrf-to-stored-xss-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-480xx/CVE-2025-48078.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-48078",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:51.670",
"lastModified": "2025-11-06T16:15:51.670",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in Norbert Slick Google Map slick-google-map allows Stored XSS.This issue affects Slick Google Map: from n/a through <= 0.3."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/slick-google-map/vulnerability/wordpress-slick-google-map-plugin-0-3-cross-site-request-forgery-csrf-to-stored-xss-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-480xx/CVE-2025-48083.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-48083",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:51.810",
"lastModified": "2025-11-06T16:15:51.810",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in andriassundskard wpNamedUsers wpnamedusers allows Stored XSS.This issue affects wpNamedUsers: from n/a through <= 0.5."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/wpnamedusers/vulnerability/wordpress-wpnamedusers-plugin-0-5-cross-site-request-forgery-csrf-to-stored-xss-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-480xx/CVE-2025-48085.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-48085",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:51.970",
"lastModified": "2025-11-06T16:15:51.970",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-Site Request Forgery (CSRF) vulnerability in ZIPANG Simple Stripe simple-stripe allows Stored XSS.This issue affects Simple Stripe: from n/a through <= 0.9.17."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/simple-stripe/vulnerability/wordpress-simple-stripe-plugin-0-9-17-cross-site-request-forgery-csrf-to-stored-xss-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-480xx/CVE-2025-48086.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-48086",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:52.120",
"lastModified": "2025-11-06T16:15:52.120",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Deserialization of Untrusted Data vulnerability in wpdreams Ajax Search Lite ajax-search-lite allows Object Injection.This issue affects Ajax Search Lite: from n/a through <= 4.13.3."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-502"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/ajax-search-lite/vulnerability/wordpress-ajax-search-lite-plugin-4-13-3-php-object-injection-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-480xx/CVE-2025-48089.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-48089",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:52.270",
"lastModified": "2025-11-06T16:15:52.270",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL Injection.This issue affects Education WordPress Theme | HiStudy: from n/a through < 3.1.0."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/histudy/vulnerability/wordpress-education-wordpress-theme-histudy-theme-3-1-0-sql-injection-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-480xx/CVE-2025-48090.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-48090",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:52.423",
"lastModified": "2025-11-06T16:15:52.423",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp allows PHP Local File Inclusion.This issue affects Blanka - One Page WordPress Theme: from n/a through < 1.5."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 4.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-35"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/blanka-wp/vulnerability/wordpress-blanka-one-page-wordpress-theme-theme-1-5-local-file-inclusion-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-482xx/CVE-2025-48290.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-48290",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:52.627",
"lastModified": "2025-11-06T16:15:52.627",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in bslthemes Kinsley kinsley allows PHP Local File Inclusion.This issue affects Kinsley: from n/a through <= 3.4.4."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-98"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/kinsley/vulnerability/wordpress-kinsley-theme-3-4-4-local-file-inclusion-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-483xx/CVE-2025-48330.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-48330",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:52.780",
"lastModified": "2025-11-06T16:15:52.780",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows PHP Local File Inclusion.This issue affects Real Time Validation for Gravity Forms: from n/a through <= 1.7.0."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-98"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/real-time-validation-for-gravity-forms/vulnerability/wordpress-real-time-validation-for-gravity-forms-1-7-0-local-file-inclusion-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-493xx/CVE-2025-49372.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-49372",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:52.940",
"lastModified": "2025-11-06T16:15:52.940",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Remote Code Inclusion.This issue affects HAPPY: from n/a through <= 1.0.7."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/happy-helpdesk-support-ticket-system/vulnerability/wordpress-happy-plugin-1-0-7-remote-code-execution-rce-vulnerability",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-493xx/CVE-2025-49386.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-49386",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:53.103",
"lastModified": "2025-11-06T16:15:53.103",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Deserialization of Untrusted Data vulnerability in Scott Reilly Preserve Code Formatting preserve-code-formatting allows Object Injection.This issue affects Preserve Code Formatting: from n/a through <= 4.0.1."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-502"
}
]
}
],
"references": [
{
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/preserve-code-formatting/vulnerability/wordpress-preserve-code-formatting-plugin-4-0-1-php-object-injection-vulnerability",
"source": "[email protected]"
}
]
}
Loaded 100 of 237 files, more files were not shown because too many files have changed in this diff. Show more